similar to: Roaming profiles

I fail to set SeDiskOperatorPrivilege on a samba DM and I suspect the german umlauts: # wbinfo -g dom�nencomputer dom�nen-benutzer dom�nen-g�ste dom�nen-admins (bad locale, umlauts displayed as special ugly chars) but the group "domänen-admins" = "Domain Admins" is there. now: # net rpc rights grant "CUSTOMER\domänen-admins" SeDiskOperatorPrivilege -U

Am 07.09.18 um 16:20 schrieb Rowland Penny via samba: > On Fri, 7 Sep 2018 15:36:15 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> Am 07.09.18 um 15:25 schrieb Rowland Penny via samba: >> >>> From what you have posted it doesn't, but when you do get then >>> working, you need to understand that EA's

Am 07.09.18 um 20:07 schrieb Rowland Penny via samba: > On Fri, 7 Sep 2018 19:09:37 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: >> But >> >> # net rpc rights grant "Domänen-Admins" SeDiskOperatorPrivilege -U >> "mydomain\administrator" >> >> fails >> >> also for

Am 25.07.2018 um 09:03 schrieb Stefan G. Weichinger via samba: > Am 2018-07-24 um 09:48 schrieb Stefan G. Weichinger via samba: >> >> I fail to set SeDiskOperatorPrivilege on a samba DM and I suspect the >> german umlauts: >> >> # wbinfo -g >> dom�nencomputer >> dom�nen-benutzer >> dom�nen-g�ste >> dom�nen-admins >> >> (bad

Am 07.09.18 um 12:45 schrieb Rowland Penny via samba: > On Fri, 7 Sep 2018 11:22:36 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> >> At a customer server (gentoo linux, so far only Samba version 4.7.7) >> we tried to use Windows ACLs and failed: >> >> no security tab in Windows ... for local C: yes, not on

Thank you for your response! Here comes the smb.conf… André — smb.conf — # Global parameters [global] workgroup = LOPRODUCTS realm = LOPRODUCTS.LOCAL server role = member server security = ads server string = %h server (Samba, Ubuntu) netbios name = fireball disable netbios = yes wins support = no domain master = no local master = no preferred master = no os level = 0 dns forwarder

Observation: 2 sambas, ADS-member servers one is Debian, samba-4.2.14 2nd is Gentoo, samba-4.5.10 1) winbind enum users = Yes winbind enum groups = Yes winbind use default domain = Yes winbind refresh tickets = Yes idmap config mydomain:schema_mode = rfc2307 idmap config mydomain:range = 10000-99999 idmap config mydomain:backend = rid idmap config *:range = 2000-9999 idmap config * :

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hmm why, the guy at https://raymii.org/s/tutorials/SAMBA_Share_with_Active_Directory_Login_o n_Ubuntu_12.04.html does exactly this. Also the manpage e.g. for smb.conf describes the config for a connection to an AD. And after granting file rights to the share via setfacl -m g:domänen-admins:rwx /var/samba/test I can mkdir and granting rights to

Am 07.09.18 um 15:25 schrieb Rowland Penny via samba: > From what you have posted it doesn't, but when you do get then working, > you need to understand that EA's and ACL's can work together or > independently. > If 'acl_xattr:ignore system acls = yes' is set, they work > independently, if it isn't, they work together, see 'man > vfs_acl_xattr'

Does mdecker exist in AD ? => Yes root at solaris1:~# getent passwd "MYDOM.ADS\\mdecker" mdecker:*:13767:613::/home/mdecker:/bin/bash winbind log: getpwnam MYDOM.ADS\mdecker wb_request_done[24254:GETPWNAM]: NT_STATUS_OK Does 'getent passwd mdecker' work ? => No getent passwd mdecker getpwnam mdecker winbindd_getpwnam: My domain -- rejecting getpwnam() for

Am 2018-07-26 um 18:14 schrieb Rowland Penny via samba: > On Thu, 26 Jul 2018 17:46:26 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: >> I also don't know how to use that group "domänen-benutzer" in "valid >> users" or "read list" ... > Stefan, you know all that knowledge you learnt about

Am 2018-07-24 um 09:48 schrieb Stefan G. Weichinger via samba: > > I fail to set SeDiskOperatorPrivilege on a samba DM and I suspect the > german umlauts: > > # wbinfo -g > dom�nencomputer > dom�nen-benutzer > dom�nen-g�ste > dom�nen-admins > > (bad locale, umlauts displayed as special ugly chars) > > but the group "domänen-admins" =

Hello I'm running Samba 4.3.9 on Ubuntu 14 as domain member. Both Windows DCs are Win 2012 R2 in 2008 R2 mode. This is the smb.conf: [global] workgroup = MYDOM server string = Fileserver netbios name = myhostname winbind separator = + security = ADS admin users = %D+administrator, %D+backupmaster realm = MYDOM.WHEREVER kerberos method = secrets and keytab

Hey, I have a Windows Server 2016 as a DC and a Debian (Stretch) Server joined the domain. I only want to use this server as a fileserver, but domain-users cannot access the share. Here is what I did: smb.conf: https://paste.ubuntu.com/p/2fKDYFrZ6h/ nsswitch.conf: https://paste.ubuntu.com/p/qjKnKMtZ42/ mkdir /home/EXAMPLE/profile chmod 1770 /home/example/profile chgrp domänen-benutzer

Am 03.01.19 um 16:51 schrieb Rowland Penny via samba: > Hmm, 'Projekte' works and is writeable by 'root', members of the 'qm' > and anybody else. Whilst 'QM' is only writeable by 'root'. Does this > give you any hints ? sure. changed this already in all directions before. and you also said you were following this wiki > page: > >

On Fri, 7 Sep 2018 19:09:37 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 07.09.18 um 16:20 schrieb Rowland Penny via samba: > > On Fri, 7 Sep 2018 15:36:15 +0200 > > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > > >> Am 07.09.18 um 15:25 schrieb Rowland Penny via samba: >

> Von: Rowland Penny via samba <samba at lists.samba.org> > An: samba at lists.samba.org > Datum: 22.09.2016 13:18 > Betreff: Re: [Samba] permissions of new files and directories > Gesendet von: "samba" <samba-bounces at lists.samba.org> > > On Thu, 22 Sep 2016 11:53:36 +0200 > Philipp Snizek via samba <samba at lists.samba.org> wrote: > >

On Tue, 11 Sep 2018 09:54:32 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 07.09.18 um 20:07 schrieb Rowland Penny via samba: > > On Fri, 7 Sep 2018 19:09:37 +0200 > > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > >> But > >> > >> # net rpc rights grant

> Von: Rowland Penny via samba <samba at lists.samba.org> > An: samba at lists.samba.org > Datum: 22.09.2016 15:14 > Betreff: Re: [Samba] Antwort: Re: permissions of new files and directories > Gesendet von: "samba" <samba-bounces at lists.samba.org> > > On Thu, 22 Sep 2016 14:36:34 +0200 > Philipp Snizek via samba <samba at lists.samba.org>

Am 03.01.19 um 17:30 schrieb Rowland Penny via samba: >> As mentioned some months ago, the german umlauts make it a problem to >> chose "domänen-admins" ... I reattack this one now. (fiddling with locales etc ...) > OK, then do as I do, create another group (I use one called Unix > Admins), add this group to the Domain Admins group, now use the new > group instead