similar to: samba-tool dsacl set fails with "Unknown flag"

Hi, i was not able to find anything about my issue in the bug-tracker, the mailinglist or the release notes. We see the following issue using samba-tool dsacl: samba-tool dsacl set --objectdn "cn=srv-client-99,cn=CoreBizClients,cn=Netzwerk,ou=muc,DC=coreboso,DC=de" --sddl='(A;CI;GA;;;DD)' new descriptor for

Hello everyone, we are in the process of changing from a Windows Domain to a Samba Domain and tried to implement some restrictions for OU-Admins. In the Windows Domain those restrictions can be implemented with Security ID: S-1-3-4 (Owner Rights). In our old Windows Domain everything works fine and as expected. In our Samba Domain, it doesnt work. We tried to implement the same rights as in

Sorry - I have just seen i did the "diff -u" in wrong order and used my test files. Here once again the correct diff. Am Sa., 10. Nov. 2018 um 08:54 Uhr schrieb Martin Krämer < mk.maddin at gmail.com>: > Hello everyone, > > since I was not able to find any tool like requested previously I did a > "quick and dirty" for samba-tool. > I copied the

Hey, when running "samba-tool dsacl set" it prints the new acl of the applied object after command has finished. Is there a (bash) command to only print (not set/change) the current acl of an object? Thanks for any help & hints

I am trying to grant or denied access to a user for changing his passwd, it's the option: User cannot change passwd. For this, I am trying to use samba-tool dsacl set [option], but I am not sure of its syntax. Could you help me with that? I need to denied this permission without use ADUC or any private tool. My Regards!

Mandi! Rowland Penny via samba In chel di` si favelave... > S-1-5-21-160080369-3601385002-3131615632-1314 Bingo! Exactly the 'Restricted' group that own the users i use for generico LDAP access! I really think that we have found the trouble! Now... how can i fix it? ;-) And... why that vaule get not propagated?! Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66

Are there any deny tools with samba4? Like the below example? To set the permission to deny read access of the homePhone attribute on a single user object, you can use this command: dsacls <DN of object> /D <security principal>:RP;homePhone For our example, the command would look like this: dsacls "CN=Doe\, John,OU=newOU,DC=root,DC=net" /D root\ non-HR-users:RP;homePhone

Release Announcements ===================== This is the third release candidate of Samba 4.18.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.18 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Release Announcements ===================== This is the third release candidate of Samba 4.18.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.18 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Release Announcements --------------------- This is the first stable release of the Samba 4.18 release series. Please read the release notes carefully before upgrading. NEW FEATURES/CHANGES ==================== SMB Server performance improvements ----------------------------------- The security improvements in recent releases (4.13, 4.14, 4.15, 4.16), mainly as protection against symlink

Release Announcements --------------------- This is the first stable release of the Samba 4.18 release series. Please read the release notes carefully before upgrading. NEW FEATURES/CHANGES ==================== SMB Server performance improvements ----------------------------------- The security improvements in recent releases (4.13, 4.14, 4.15, 4.16), mainly as protection against symlink

Release Announcements ===================== This is the second release candidate of Samba 4.18.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.18 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Release Announcements ===================== This is the second release candidate of Samba 4.18.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.18 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Release Announcements ===================== This is the fourth release candidate of Samba 4.18.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.18 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Release Announcements ===================== This is the fourth release candidate of Samba 4.18.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.18 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

I need to have an AD user that need to *write* in an users LDAP field. The user case is a MFP (a set of MFP, indeed) that have RFID auth, and so need to 'register' the RFID cards. Seems to me that i have to use dsacl/samba-tool acl ds, but i don't found a way to set the property for every user. EG, assign write permission to user 'mfp' to field 'pager' for every

On Mon, 18 Sep 2017 10:03:52 +0200 Marco Gemignani <marko.gem at inwind.it> wrote: > Because i'm using this it now, and i not know how to use built in > LDAP in samba, and olso use it for linux users > > You use it much the same way that you use Openldap, it is just that some of the syntax is different. A Samba AD DC comes with 'samba-tool', you can add users and

On Thu, 29 Nov 2018 15:42:04 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > S-1-5-21-160080369-3601385002-3131615632-1314 > > Bingo! Exactly the 'Restricted' group that own the users i use for > generico LDAP access! > I really think that we have found the trouble!

No one reply, so i try to clarify better. > I need to have an AD user that need to *write* in an users LDAP field. > The user case is a MFP (a set of MFP, indeed) that have RFID auth, and > so need to 'register' the RFID cards ID. The system works with direct LDAP access via some credential; if i temporary put the credential of an administrator, the MFPs write correctly in LDAP

On Wed, 2020-08-26 at 11:29 +0200, Marco Gaiarin via samba wrote: > No one reply, so i try to clarify better. > > > I need to have an AD user that need to *write* in an users LDAP > > field. > > The user case is a MFP (a set of MFP, indeed) that have RFID auth, > > and > > so need to 'register' the RFID cards ID. > > The system works with direct