similar to: explorer.exe crashes on security tab access

I've noticed myself similiar issue. Windows 10 (v 1803) - window with security tab open crashes on certain files (yes, just the window, not whole OS). Just before crash i see unresolved SID which looks like nothing I know (doesn't look like domain SID - maybe local user SID from samba member server?). All files that cause this issue are from any of the samba servers. Same files I can

On 29 May 2017 12:32 >When running 'winbindd -SFd5', I see a little more of the problem after I run my two ntlm_auth commands > one after the other. I believe the 'crap' part is an acronym for 'Challenge Response > Authentication Protocol', so why would it be failing? Edit2: wbinfo -a tim.odriscoll%<mypass> works perfectly, with the winbindd debug logs

Hi, I have a problem with GPO editing. I have some GPO first created with RSAT and GPO editor on Win 7 x64. I have modified recently this object with RSAT and GPO editor on Win 10 x64 . If I try to edit the GPO back to Win7 I got the following error (in french): La ressource ? $(string.SiteDiscoveryEnableWMI) ? r?f?renc?e dans l?attribut displayName est introuvable. Fichier

On Mon, 15 Jan 2018 14:55:55 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! L.P.H. van Belle via samba > In chel di` si favelave... > > > > It is not the SYSTEM user (that is a local user to the > > > workstation, so clearly does not exist on the domain). > > Yes it does. Look at "Builtin\system" which is also "NT

what is the output of "kvno dc.domain.net.pl"? There seems to be mismatch kvno of the secrets keytab, and what is client expecting (kvno 2). Kvno increments by 1 for every password change. Was there by any chance password change for the dc$ account and keytab was not recreated? If You made some upgrades, maybe during process You for example rejoined the domain (that would set new

Hi, I suggest you post this to samba at list.samba.org that more for these questions. Try this setting in resolv.conf search domain.net.pl nameserver 10.1.10.11 # IP of DC itself. #nameserver # and extra nameserver that has access to the DC dns info. (a second dc maybe) nameserver 8.8.8.8 # IP of forwarder in SMB.conf as backup for internet access. # and max 3 nameservers in

As I said, I haven't got time to look at what's really happening, just that sometimes windows 10 + some file = security tab just closes/crashes instantly and clearly there is a long SID that's not like anything I recognize, might be well known SID (not well known enough though I'd say, as it's unresolved ;) ). I'm not sure if my experiences are related to those of OP,

The OS is Windows 7 Enterprise (build 7601, SP1). Samba version 4.8.3, compiled on Centos 7.4. smb.conf: # Global parameters [global] dns forwarder = none log level = 1 netbios name = DC1 realm = SAMDOM.TEST server role = active directory domain controller workgroup = SAMDOM idmap_ldb:use rfc2307 = yes [netlogon] path =

On Thu, 16 Aug 2018 16:59:22 +0200 Kacper <kacper at kacper.se> wrote: > By primary group I mean the group that is set by chgrp. that is the > group returned after the pound key (#) from getfacl. In other words > the Unix group and not the one managed by ACLs. > That is not necessarily the users primary group, the users primary group is the one displayed by 'getent passwd

The same thing happen if the group on a file is wheel or any other unix group. I also now observed that this also happens to unix users that are not mapped in idmap.ldb. For example: # useradd myunixuser # touch myfile # chown myunixuser myfile # chgrp SAMDOM\sambauser myfile alos crashes explorer. / Kacper On Thu, Aug 16, 2018 at 8:55 PM, Rowland Penny via samba < samba at

Clearly this is some kind of bug. Can you submit a bug report or should I? Also can you elaborate why it's bad practice to create files/folders as a local Unix user/group on a Samba DC? On Thu, Aug 16, 2018 at 9:50 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 16 Aug 2018 21:20:29 +0200 > Kacper <kacper at kacper.se> wrote: > > > The

Hey, In samba 4.5.0 update notes it states: /NTLMv1 authentication disabled by default ----------------------------------------- In order to improve security we have changed the default value for the "ntlm auth" option from "yes" to "no". This may have impact on very old clients which doesn't support NTLMv2 yet. The primary user of NTLMv1 is MSCHAPv2 for

Hello, Thank You for fast response. I'm glad that it's a mistake somewhere on my side, it means it will work when I fix it :) Ok, first of all: Everything is on centos 7.4 All config files will be below, but to start off: behaviour is stranger than I thought, but there is a pattern: when doing [DOMAIN\kacper_wirski at vs-files ~]$ kinit -V Using default cache: /tmp/krb5cc_101003

Hello, I understand the OP, I was asking some time ago similar question, but it was in relation to samba domain member. I couldn't get backend: ad to work for machine accounts, so i switched to idmap: rid and it solved everything. I tried manually adding UID and GID to Domain Computer group and to machine accounts, but it didn't seem to work properly, so I gave up especially that RID

Hi, you're right about kvno. kvno dc gives me: dc at DOMAIN.NET.PL: kvno = 1 I'm pretty sure I didn't change dc$ password nor keytab wasn't recreated (the file is from 2015). I've checked other DCs. It looks like two of them with CentOS 7 have kvno = 2, and one with CentOS 6 has also v 1. DCs on CentOS 7 are pretty new, with samba version 4.7.4 from the scratch. Main DC

On Thu, Aug 16, 2018 at 07:35:46PM +0100, Rowland Penny via samba wrote: > > > > The crash only happens when a local unix group (in this case root) is > > set as the group for the shared file. > > There is one very big problem with that theory, Administrator is > mapped (in idmap.ldb) to root, so when you read 'root' on a DC, you > can also read

I'm going to start with clean centos install, so I might as well use some additional guidelines, thank You. When You run kinit, does Your user have ticket already? What I noticed is that when user has a ticket already, kinit works fine, uses as default principal the one from ticket. Can you do kdestroy - then kinit? Also, on Fedora, did You install samba from source or from repo's RPM?

Hello, I've seem to have found what looks like a bug in Samba 4.8.3. It's the same problem as described in https://lists.samba.org/archive/samba/2018-March/214589.html. When accessing the Security tab on files and folder from a share explorer.exe crashes. I've been able to track down that it only happens when the primary group of a file or folder is a Unix group. Using an AD group as

Am 01.10.18 um 12:39 schrieb Kacper via samba: > Ok, we identified that this is a Windows bug. Is there any way to know > if and when a Windows fix will be available from Microsoft? in case an application *crahes* it's *always* the fault of that application

Hi, My guess is this: RSAT reads policy definitions either from central store (first) or from local (if first not found). It might be the case, that one of the policies templates was changed between windows 7 and windows 10 and now windows 7 runs into errors. Your error shows that it's trying to look for policy definition in the local store (c:\windows\PolicyDefinitions). You can google