similar to: GPO fail to apply for Computers

On Wed, 20 Jun 2018 12:05:13 +0200 L.P.H. van Belle wrote: > > As said very busy, but i can spare a few minutes now. > > -rwxrwxr-x+ 1 3000000 domusers 2240 2018-06-18 17:33:55 /var/lib/samba/sysvol/hprs.local/policies/{3C103F7B-7250-4610-BC45-8B06353CAA7C}/User/Documents & Settings/fdeploy1.ini > -rwxrwx---+ 1 3000000 users 64 2018-06-18 17:34:22

Mark, See below. > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Mark > Foley via samba > Verzonden: donderdag 14 juni 2018 22:04 > Aan: samba at lists.samba.org >....... I see funny things here. For example, > drwxrwxr-x+ 34 10001 10000 4096 2018-06-10 22:51 mark/ > drwxrwx---+ 5 3000038 10000 4096 2015-09-03

On Thu, 14 Jun 2018 10:50:15 +0100 Rowland Penny wrote: > > On Thu, 14 Jun 2018 09:39:46 +0200 > "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > > > And i did read the Comment to for Rowland below, > > On debian you need : > > libnss-winbind libpam-winbind to be installed. > > I think you miss one of these. > > They are

Ok, next, >From a windows pc connect to the server with computer manager, and now setup the share and folder rights. As in shown in the link posted ( https://lists.samba.org/archive/samba/2018-February/213690.html ) m leaving the office. So a reply wil probley tomorrow. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org]

hello > One question : who is owner and whats rights for dir > /home drwxr-xr-x.   5 root root   49  6 nov 16.21 home > /home/samba drwxr-xr-x. 3 root root  20  6 nov 16.21 samba > /home/samba/sysvol drwxrwx---+ 4 root root 52  8 nov 12.47 sysvol > > because, from windows client, user into domain admins, when i change > in security tab, explorer always crash > > bye

Finaly, i was waiting for this one. ;-) Now after all changes Rowland suggested. Run this : getfacl /home/users Show the output. There are 5 things you need to think in. 1) The folder rights 2) The share rights 3) Posix or windows ACL's? ( use Windows ACL's my advice. ) 4) Dont forget the "Primary Group". 5) If you use chmod, you must re-apply the windows ACL again on

Hello, samba team. I provisioned Samba 4.8 wich compiled from sources as DC with --use-rfc2307 parameters. It is fresh installation of Domain controller. All functions are working, but i can not enable (apply group policies = yes) parameter,to provide Default Domain Password policies from GPO. That I did wrong? Thank you. root at dc4samba:~# cat /usr/local/samba/etc/smb.conf # Global parameters

Hai, Ok, i expected a bit different outputs. On my DC, i use /home/samba/sysvol and /home/samba/netlogon. This is what i expected. getfacl /home/samba/ getfacl: Removing leading '/' from absolute path names # file: home/samba/ # owner: root # group: BUILTIN\134administrators user::rwx user:root:rwx group::rwx group:BUILTIN\134administrators:rwx

Hello Luis tomorrow i'm not in office, reply to you thursday One question : who is owner and whats rights for dir     /home     /home/samba     /home/samba/sysvol because, from windows client, user into domain admins, when i change in security tab, explorer always crash bye Il 06/11/2018 17:16, L.P.H. van Belle via samba ha scritto: > Ok, next, > > From a windows pc connect to

Am 27.06.2016 um 14:08 schrieb Rowland penny: > On 26/06/16 12:43, Achim Gottinger wrote: >> Created an feature request >> >> "add resolving for well known security principals" >> >> https://bugzilla.samba.org/show_bug.cgi?id=11997 >> >> Am 25.06.2016 um 12:35 schrieb Achim Gottinger: >>> >>> >>> Am 25.06.2016 um

On 27/06/16 13:30, Achim Gottinger wrote: > > > Am 27.06.2016 um 14:08 schrieb Rowland penny: >> On 26/06/16 12:43, Achim Gottinger wrote: >>> Created an feature request >>> >>> "add resolving for well known security principals" >>> >>> https://bugzilla.samba.org/show_bug.cgi?id=11997 >>> >>> Am 25.06.2016 um

On 27/06/16 13:26, L.P.H. van Belle wrote: > Hai, > > > After lots of testing and checking today im must concluded that achim and mathias are right. > There are "BUILDIN\" security groups which make some GPOs are going wrong. > > Also, im getting errors again with sysvolcheck. .. i was in the understanding this was resolved.. but im but off with all info, very buzy

On 26/06/16 12:43, Achim Gottinger wrote: > Created an feature request > > "add resolving for well known security principals" > > https://bugzilla.samba.org/show_bug.cgi?id=11997 > > Am 25.06.2016 um 12:35 schrieb Achim Gottinger: >> >> >> Am 25.06.2016 um 02:21 schrieb Achim Gottinger: >>> >>> >>> Am 24.06.2016 um 23:16

On 14/06/16 17:38, J. Echter wrote: > Hi, > > i provisioned a domain and all went well, until i added the second dc.... > > for example: > > the new DC2 tells me: > > getfacl /usr/local/samba/var/locks/sysvol > > # file: usr/local/samba/var/locks/sysvol > # owner: root > # group: BUILTIN\134administrators > user::rwx > user:root:rwx >

Am 14.06.2016 um 20:47 schrieb lingpanda101 at gmail.com: > On 6/14/2016 1:16 PM, Rowland penny wrote: >> On 14/06/16 17:38, J. Echter wrote: >>> Hi, >>> >>> i provisioned a domain and all went well, until i added the second >>> dc.... >>> >>> for example: >>> >>> the new DC2 tells me: >>> >>>

Hai, After lots of testing and checking today im must concluded that achim and mathias are right. There are "BUILDIN\" security groups which make some GPOs are going wrong. Also, im getting errors again with sysvolcheck. .. i was in the understanding this was resolved.. but im but off with all info, very buzy at the office atm. samba-tool ntacl sysvolcheck ERROR(<class

On 6/14/2016 2:50 PM, J. Echter wrote: > Am 14.06.2016 um 20:47 schrieb lingpanda101 at gmail.com: >> On 6/14/2016 1:16 PM, Rowland penny wrote: >>> On 14/06/16 17:38, J. Echter wrote: >>>> Hi, >>>> >>>> i provisioned a domain and all went well, until i added the second >>>> dc.... >>>> >>>> for example:

Hi, i provisioned a domain and all went well, until i added the second dc.... for example: the new DC2 tells me: getfacl /usr/local/samba/var/locks/sysvol # file: usr/local/samba/var/locks/sysvol # owner: root # group: BUILTIN\134administrators user::rwx user:root:rwx user:BUILTIN\134administrators:rwx user:BUILTIN\134users:r-x user:ELEMAY\134guest:rwx user:ELEMAY\134domain\040guests:r-x

On 6/14/2016 1:16 PM, Rowland penny wrote: > On 14/06/16 17:38, J. Echter wrote: >> Hi, >> >> i provisioned a domain and all went well, until i added the second >> dc.... >> >> for example: >> >> the new DC2 tells me: >> >> getfacl /usr/local/samba/var/locks/sysvol >> >> # file: usr/local/samba/var/locks/sysvol >> #

On Thu, 14 Jun 2018 09:39:46 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > And i did read the Comment to for Rowland below, > On debian you need : > libnss-winbind libpam-winbind to be installed. > I think you miss one of these. They are the glue that connects Samba to nsswitch and allows 'getent passwd username' to work. Without