similar to: explorer.exe crashes on security tab access

On Thu, 16 Aug 2018 16:59:22 +0200 Kacper <kacper at kacper.se> wrote: > By primary group I mean the group that is set by chgrp. that is the > group returned after the pound key (#) from getfacl. In other words > the Unix group and not the one managed by ACLs. > That is not necessarily the users primary group, the users primary group is the one displayed by 'getent passwd

I've noticed myself similiar issue. Windows 10 (v 1803) - window with security tab open crashes on certain files (yes, just the window, not whole OS). Just before crash i see unresolved SID which looks like nothing I know (doesn't look like domain SID - maybe local user SID from samba member server?). All files that cause this issue are from any of the samba servers. Same files I can

By primary group I mean the group that is set by chgrp. that is the group returned after the pound key (#) from getfacl. In other words the Unix group and not the one managed by ACLs. / Kacper > Hello, > > I've seem to have found what looks like a bug in Samba 4.8.3. It's > the same problem as described in > https://lists.samba.org/archive/samba/2018-March/214589.html.

On Thu, 16 Aug 2018 20:16:03 +0200 Kacper <kacper at kacper.se> wrote: > The OS is Windows 7 Enterprise (build 7601, SP1). Samba version 4.8.3, > compiled on Centos 7.4. > > smb.conf: > # Global parameters > [global] > dns forwarder = none Why have you not set a forwarder ? does this domain (and its clients) not connect to the internet ? > log

The same thing happen if the group on a file is wheel or any other unix group. I also now observed that this also happens to unix users that are not mapped in idmap.ldb. For example: # useradd myunixuser # touch myfile # chown myunixuser myfile # chgrp SAMDOM\sambauser myfile alos crashes explorer. / Kacper On Thu, Aug 16, 2018 at 8:55 PM, Rowland Penny via samba < samba at

Clearly this is some kind of bug. Can you submit a bug report or should I? Also can you elaborate why it's bad practice to create files/folders as a local Unix user/group on a Samba DC? On Thu, Aug 16, 2018 at 9:50 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 16 Aug 2018 21:20:29 +0200 > Kacper <kacper at kacper.se> wrote: > > > The

Ok, we identified that this is a Windows bug. Is there any way to know if and when a Windows fix will be available from Microsoft? On Fri, Aug 17, 2018 at 10:45 AM Kacper <kacper at kacper.se> wrote: > > Clearly this is some kind of bug. Can you submit a bug report or should I? > > Also can you elaborate why it's bad practice to create files/folders as a local Unix user/group

As I said, I haven't got time to look at what's really happening, just that sometimes windows 10 + some file = security tab just closes/crashes instantly and clearly there is a long SID that's not like anything I recognize, might be well known SID (not well known enough though I'd say, as it's unresolved ;) ). I'm not sure if my experiences are related to those of OP,

Hello, I've been setting up new file server using samba 4.8.3 (centos 7 RPM), as samba 4 AD member server using my earlier smb.conf when I realised that I was  previously somewhat circumventing the SeDiskOperatorPrivilege by using "admin users map" to SAMDOM\Domain admins" parameter in smb.conf. I decided to change my smb.conf and setup shares following samba wiki. All

On 01/06/2020 14:40, Alex via samba wrote: > 1. After connecting DNS Manager to the all DCs, I've found that the SOA record > for my domain and msdcs zones still point to the former PDC - vm-dc1. > Is that OK? Probably, all DC's are authoritative for the domain: adminuser at dc4:~$ dig soa samdom.example.com ; <<>> DiG 9.10.3-P4-Debian <<>> soa

This is a long-standing issue going back at least a year from what I can see in mailing list archives. Still not working as of Samba 4.8.3. I think MS broke something with one of the Windows 10 updates. In my situation, this is a brand-new 4.8.3 install. For me the crashes happen when I try to edit the share folder permissions right out of the box from whatever Samba set in there by default.

On Thu, Aug 16, 2018 at 07:35:46PM +0100, Rowland Penny via samba wrote: > > > > The crash only happens when a local unix group (in this case root) is > > set as the group for the shared file. > > There is one very big problem with that theory, Administrator is > mapped (in idmap.ldb) to root, so when you read 'root' on a DC, you > can also read

Hello, I've seem to have found what looks like a bug in Samba 4.8.3. It's the same problem as described in https://lists.samba.org/archive/samba/2018-March/214589.html. When accessing the Security tab on files and folder from a share explorer.exe crashes. I've been able to track down that it only happens when the primary group of a file or folder is a Unix group. Using an AD group as

Am 01.10.18 um 12:39 schrieb Kacper via samba: > Ok, we identified that this is a Windows bug. Is there any way to know > if and when a Windows fix will be available from Microsoft? in case an application *crahes* it's *always* the fault of that application

[global] netbios name = aphrodite security = ADS workgroup = SAMDOM realm = AD.SAMDOM.COM.AU log file = /var/log/samba/%m.log log level = 1 dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind refresh tickets = yes winbind trusted domains only = no winbind use default domain = yes

Hi, i have setup an ad dc with samba 4.8, and then rigorously followed wiki tutorial at : https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs However, when following the last part (File System ACLs in the Back End), I don't get the expected results : [root at mydc ~]# getfattr -d /srv/samba/Demo/ doesn't yield anything and getfacl /srv/samba/Demo/ getfacl : suppression

Hello, Since nobody picked this up I will try to answer myself (hopefully correctly). I think I just misread documentation on wiki, but I would really appreciate a clarification. In the wiki it states: "To enable other accounts than the domain administrator to set permissions on Windows, grant |Full control| (|rwx|) to the user or group you granted the |SeDiskOperatorPrivilege|

Hi the list, I have updated to 4.8.0 after using 4.7.3 root at samba:~# /usr/local/samba/sbin/samba -V Version 4.8.0 I compiled from source with the following options : ./configure --enable-debug --enable-selftest Samba run apparently normaly, but when i try to edit permission via windows, explorer.exe crashes I dont get anything relevant from samba's log. But I get an error from windows

On 18/05/2020 18:27, Alex wrote: >>>> 2. Why can't I query and/or delete it using standard means? >>> Probably because it is a wrong record ???? >>> Try running this on a DC: >>> ldbsearch --cross-ncs --show-binary -H /var/lib/samba/private/sam.ldb -b >>> 'DC=_msdcs.domain.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=domain,DC=com'

Hello, i also fired up a new vm :) and configured "rid" backend. I followed all step in https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs. Sett the Attributs in smb.conf: vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes Granting the SeDiskOperatorPrivilege: # net rpc rights grant "SAMDOM\Domain Admins" SeDiskOperatorPrivilege