similar to: Fixing sysvol permissions (SOLVED)

On Tue, 19 Jun 2018 12:52:46 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > Given no responses on this question for a few days, I'm concluding > that we're out of ideas on this problem. Let me propose a couple of > ideas. Apparently, the basic Windows FOLDER and SHARE permissions > are correct according to Louis' recommendations (see message below).

Given no responses on this question for a few days, I'm concluding that we're out of ideas on this problem. Let me propose a couple of ideas. Apparently, the basic Windows FOLDER and SHARE permissions are correct according to Louis' recommendations (see message below). One thing I've noticed that is a bit puzzling is the group ownership of these policy files: -rwxrwxr-x+ 1

on Fri Jul 28 14:30:33 2023 Rowland Penny via samba <samba at lists.samba.org> wrote: > On 28/07/2023 19:04, Mark Foley via samba wrote: > > > > After checking with the previous run, these sysvolreset errors are the same as > > before, so syncing the sysvol didn't make any different. > > > > You wrote: "It looks to me that you have more GPO's

On Thu, 14 Jun 2018 10:50:15 +0100 Rowland Penny wrote: > > On Thu, 14 Jun 2018 09:39:46 +0200 > "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > > > And i did read the Comment to for Rowland below, > > On debian you need : > > libnss-winbind libpam-winbind to be installed. > > I think you miss one of these. > > They are

On Fri, 15 Jun 2018 12:32:52 +0200 L.P.H. van Belle wrote: > > > OK, Everyone is currently set to FULL CONTROL. I'll set that to READ. > > Ai, now... Nobody can write over the share, pc's wil complain. > Some GPO setting will stop working. But, when I ran your samba-check-set-sysvol.sh script it told me to set EVERYONE: READ. See below: > > $

Mark, See below. > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Mark > Foley via samba > Verzonden: donderdag 14 juni 2018 22:04 > Aan: samba at lists.samba.org >....... I see funny things here. For example, > drwxrwxr-x+ 34 10001 10000 4096 2018-06-10 22:51 mark/ > drwxrwx---+ 5 3000038 10000 4096 2015-09-03

Ok, next, >From a windows pc connect to the server with computer manager, and now setup the share and folder rights. As in shown in the link posted ( https://lists.samba.org/archive/samba/2018-February/213690.html ) m leaving the office. So a reply wil probley tomorrow. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org]

hello > One question : who is owner and whats rights for dir > /home drwxr-xr-x.   5 root root   49  6 nov 16.21 home > /home/samba drwxr-xr-x. 3 root root  20  6 nov 16.21 samba > /home/samba/sysvol drwxrwx---+ 4 root root 52  8 nov 12.47 sysvol > > because, from windows client, user into domain admins, when i change > in security tab, explorer always crash > > bye

Dear all, after migrating from Samba 4.6.15 to 4.8.3 (two fresh DCs) I see that computers are no longer applying GPOs while it still works for Users. GPResult states that GPOs are not applied due to missing access rights. My smb.conf: # Global parameters [global] netbios name = DC realm = MY.DOMAIN.TLD server role = active directory domain controller server

Finaly, i was waiting for this one. ;-) Now after all changes Rowland suggested. Run this : getfacl /home/users Show the output. There are 5 things you need to think in. 1) The folder rights 2) The share rights 3) Posix or windows ACL's? ( use Windows ACL's my advice. ) 4) Dont forget the "Primary Group". 5) If you use chmod, you must re-apply the windows ACL again on

Hi Mark, See below. ;-) > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Mark > Foley via samba > Verzonden: woensdag 13 juni 2018 22:50 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Admin UID changed with upgrade to 4.8.2 > > On Wed, 13 Jun 2018 08:50:00 +0200 "L.P.H. van Belle wrote: > > >

Hello, samba team. I provisioned Samba 4.8 wich compiled from sources as DC with --use-rfc2307 parameters. It is fresh installation of Domain controller. All functions are working, but i can not enable (apply group policies = yes) parameter,to provide Default Domain Password policies from GPO. That I did wrong? Thank you. root at dc4samba:~# cat /usr/local/samba/etc/smb.conf # Global parameters

Hai, Ok, i expected a bit different outputs. On my DC, i use /home/samba/sysvol and /home/samba/netlogon. This is what i expected. getfacl /home/samba/ getfacl: Removing leading '/' from absolute path names # file: home/samba/ # owner: root # group: BUILTIN\134administrators user::rwx user:root:rwx group::rwx group:BUILTIN\134administrators:rwx

On Thu, 14 Jun 2018 21:37:58 +0100 Rowland Penny wrote: > > On Thu, 14 Jun 2018 16:03:35 -0400 > Mark Foley via samba <samba at lists.samba.org> wrote: > > > Nevertheless, 'ls' does give names though I don't seem to have either > > libnss-winbind or libpam-winbind files on my AD/DC. > > I keep forgetting that you use slackware, I suppose it uses

Hello Luis tomorrow i'm not in office, reply to you thursday One question : who is owner and whats rights for dir     /home     /home/samba     /home/samba/sysvol because, from windows client, user into domain admins, when i change in security tab, explorer always crash bye Il 06/11/2018 17:16, L.P.H. van Belle via samba ha scritto: > Ok, next, > > From a windows pc connect to

On Thu, 14 Jun 2018 09:39:46 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > And i did read the Comment to for Rowland below, > On debian you need : > libnss-winbind libpam-winbind to be installed. > I think you miss one of these. They are the glue that connects Samba to nsswitch and allows 'getent passwd username' to work. Without

On Thu, 14 Jun 2018 16:03:35 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > Nevertheless, 'ls' does give names though I don't seem to have either > libnss-winbind or libpam-winbind files on my AD/DC. I keep forgetting that you use slackware, I suppose it uses something different, but do you have any file like: libnss_winbind.so.2 > > Circling back

Imo, this is a left over of an old bug, just remove the file Registry.po imo, i'll bet its never used. The computer looks for Registry.pol not Registry.po. > -rwxrwx--- 1 root users 958 2014-09-13 04:01 Registry.po* > -rwxrwx--- 1 3000000 users 958 2014-09-13 04:01 Registry.pol* Look at the date 2014, and i do remember something about this. But... What does getfacl say about

Hi Achim, list, On 21-6-2016 11:26, Achim Gottinger wrote: > Exactly, rsync should map user and group names if the demon on the > destination runs as root. But this does not work. I tested it with an > group named test with gid 1000 on server #1 and gid 1001 on server #2. > It works if rsync is used via ssh like this > rsync -vv -XAavz -e ssh root at

On Fri, 29 Sep 2017 13:19:44 +0200 Klaus Hartnegg via samba <samba at lists.samba.org> wrote: > > > On 29.09.2017 11:44 Rowland Penny wrote: > > Have you set up the libnss_winbind links, PAM > > and /etc/nsswitch.conf ? > > Yes, I had modified two lines in /etc/nsswitch.conf: > passwd: files winbind > group: files winbind > > No,