similar to: "missing security tab" and related ACL issues

Am 07.09.18 um 12:45 schrieb Rowland Penny via samba: > On Fri, 7 Sep 2018 11:22:36 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> >> At a customer server (gentoo linux, so far only Samba version 4.7.7) >> we tried to use Windows ACLs and failed: >> >> no security tab in Windows ... for local C: yes, not on

Am 07.09.18 um 20:07 schrieb Rowland Penny via samba: > On Fri, 7 Sep 2018 19:09:37 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: >> But >> >> # net rpc rights grant "Domänen-Admins" SeDiskOperatorPrivilege -U >> "mydomain\administrator" >> >> fails >> >> also for

On Fri, 7 Sep 2018 14:02:01 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 07.09.18 um 12:45 schrieb Rowland Penny via samba: > > On Fri, 7 Sep 2018 11:22:36 +0200 > > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > > >> > >> At a customer server (gentoo linux, so far only

On Fri, 7 Sep 2018 11:22:36 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > At a customer server (gentoo linux, so far only Samba version 4.7.7) > we tried to use Windows ACLs and failed: > > no security tab in Windows ... for local C: yes, not on samba shares > > Yes, I followed > >

Am 07.09.18 um 16:20 schrieb Rowland Penny via samba: > On Fri, 7 Sep 2018 15:36:15 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> Am 07.09.18 um 15:25 schrieb Rowland Penny via samba: >> >>> From what you have posted it doesn't, but when you do get then >>> working, you need to understand that EA's

Am 03.01.19 um 16:19 schrieb Rowland Penny via samba: > On Thu, 3 Jan 2019 15:46:24 +0100 "Stefan G. Weichinger via samba" > <samba at lists.samba.org> wrote: >> observation, maybe important: > > Oh, it's more than important, guess where the Windows ACLs are stored > ;-) hmm ... ? ;) >> (share "projekte" works fine, share "QM"

I fail to set SeDiskOperatorPrivilege on a samba DM and I suspect the german umlauts: # wbinfo -g dom�nencomputer dom�nen-benutzer dom�nen-g�ste dom�nen-admins (bad locale, umlauts displayed as special ugly chars) but the group "domänen-admins" = "Domain Admins" is there. now: # net rpc rights grant "CUSTOMER\domänen-admins" SeDiskOperatorPrivilege -U

Am 25.07.2018 um 09:03 schrieb Stefan G. Weichinger via samba: > Am 2018-07-24 um 09:48 schrieb Stefan G. Weichinger via samba: >> >> I fail to set SeDiskOperatorPrivilege on a samba DM and I suspect the >> german umlauts: >> >> # wbinfo -g >> dom�nencomputer >> dom�nen-benutzer >> dom�nen-g�ste >> dom�nen-admins >> >> (bad

Am 03.01.19 um 15:29 schrieb Rowland Penny via samba: > On Thu, 3 Jan 2019 15:08:46 +0100 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> >> We are in the process of switching over shares from the old way of >> doing this to Windows ACLs: >> >> disable "valid users" "write list" etc >>

On Tue, 11 Sep 2018 09:54:32 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 07.09.18 um 20:07 schrieb Rowland Penny via samba: > > On Fri, 7 Sep 2018 19:09:37 +0200 > > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > >> But > >> > >> # net rpc rights grant

Am 2018-07-26 um 18:14 schrieb Rowland Penny via samba: > On Thu, 26 Jul 2018 17:46:26 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: >> I also don't know how to use that group "domänen-benutzer" in "valid >> users" or "read list" ... > Stefan, you know all that knowledge you learnt about

Hey, I refer to https://wiki.samba.org/index.php/Operating_system_requirements/File_system_support#ext4 Wiki suggests: Ensure that your kernel has the following options enabled: CONFIG_EXT4_FS_XATTR=y CONFIG_EXT4_FS_SECURITY=y CONFIG_EXT4_FS_POSIX_ACL=y My debian 8.2 installation was installed from netinstall CD, all updates applied. All my filesystems are ext4 and xattr and acl are not set,

Am 11.09.18 um 10:06 schrieb Rowland Penny via samba: > On Tue, 11 Sep 2018 09:54:32 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> Am 07.09.18 um 20:07 schrieb Rowland Penny via samba: >>> On Fri, 7 Sep 2018 19:09:37 +0200 >>> "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:

Observation: 2 sambas, ADS-member servers one is Debian, samba-4.2.14 2nd is Gentoo, samba-4.5.10 1) winbind enum users = Yes winbind enum groups = Yes winbind use default domain = Yes winbind refresh tickets = Yes idmap config mydomain:schema_mode = rfc2307 idmap config mydomain:range = 10000-99999 idmap config mydomain:backend = rid idmap config *:range = 2000-9999 idmap config * :

Hi Rowland, >From the top down, I'm going to try and cover every step involved in the wiki and give you as much info as I can in the hope that we can get this issue resolved, or at least determine that there is nothing wrong with my config and that the underlying array has to be the weak point, even if none of us know why. *Step 1: Filesystem support* We need the filesystem to support

Does mdecker exist in AD ? => Yes root at solaris1:~# getent passwd "MYDOM.ADS\\mdecker" mdecker:*:13767:613::/home/mdecker:/bin/bash winbind log: getpwnam MYDOM.ADS\mdecker wb_request_done[24254:GETPWNAM]: NT_STATUS_OK Does 'getent passwd mdecker' work ? => No getent passwd mdecker getpwnam mdecker winbindd_getpwnam: My domain -- rejecting getpwnam() for

Thank you for your response! Here comes the smb.conf… André — smb.conf — # Global parameters [global] workgroup = LOPRODUCTS realm = LOPRODUCTS.LOCAL server role = member server security = ads server string = %h server (Samba, Ubuntu) netbios name = fireball disable netbios = yes wins support = no domain master = no local master = no preferred master = no os level = 0 dns forwarder

Hey, I want to use a debian stretch with samba 4 as a fileserver, but I have problems with the access. Here is what I did: apt-get install samba winbind libpam-heimdal libnss-winbind /etc/init.d/winbind stop /etc/init.d/samba stop nano /etc/krb5.conf https://pastebin.com/rkBPJ2Wz nano /etc/samba/smb.conf https://pastebin.com/h1cJZ6sM nano /etc/nsswitch.conf https://pastebin.com/gxK2rJLU

Am 07.09.18 um 15:25 schrieb Rowland Penny via samba: > From what you have posted it doesn't, but when you do get then working, > you need to understand that EA's and ACL's can work together or > independently. > If 'acl_xattr:ignore system acls = yes' is set, they work > independently, if it isn't, they work together, see 'man > vfs_acl_xattr'

nobody any suggestions for me ? :-(( im running kernel 3.2. from backports. Greetz, Louis >-----Oorspronkelijk bericht----- >Van: belle at bazuin.nl [mailto:samba-bounces at lists.samba.org] >Namens L.P.H. van Belle >Verzonden: 2012-06-18 15:02 >Aan: samba at lists.samba.org >Onderwerp: [Samba] samba4 on debian squeeze > >hai, >? >Im trying to install