Displaying 20 results from an estimated 10000 matches similar to: "automatic home dirs"
2018 Apr 27
2
Homes, folder redirection and hide files...
Samba 4.5 in AD mode, domain in ''beta'' stage. ;-)
I've created homes for users following:
https://wiki.samba.org/index.php/User_Home_Folders
using 'POSIX' mode, eg using:
[users]
comment = Home Directories
path = /home
browseable = No
veto files = /.mail/.inbox/.ssh/
root preexec = /etc/samba/createhome "%U"
force create mode = 0600
force
2018 Jul 20
4
Samba 4.5 and glusterfs...
Reding the thread in list about gluster, i've found that in your samba
packages 4.5.12+dfsg-2+deb9u2~bpo8+1 there's no vfs_glusterfs module, only
the manpage.
root at vdmsv1:~# grep glusterfs /var/lib/dpkg/info/samba*.list
/var/lib/dpkg/info/samba-vfs-modules.list:/usr/share/man/man8/vfs_glusterfs.8.gz
root at vdmsv1:~# grep /vfs/ /var/lib/dpkg/info/samba*.list
2019 Jan 09
3
[Oddity] SAMAccountName and 20+ chars logins...
Reading here i've understod that for LDAP query it is better to use
SAMAccountName as 'login', but today i've found:
https://docs.microsoft.com/it-it/windows/desktop/ADSchema/a-samaccountname
so, 'SAMAccountName' is a compatibility field with NT mode, limited to
20 chars.
Someone here use 21 chars logins? ;-)
--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
2017 Dec 18
3
DM and ''offline'' PAM (and NSS?)...
On Mon, 18 Dec 2017 15:51:47 +0100
Marco Gaiarin via samba <samba at lists.samba.org> wrote:
>
> > I've seen:
> > https://wiki.samba.org/index.php/PAM_Offline_Authentication
>
> I've tried to enable offline logon, and seems to work as expected.
>
> I've only found a little strange thing, i think related to the fact
> that in my DM i've set
2018 Jan 15
2
Home folder: a simple mapping or something more?
Probably this email is connected with my previous one, about folder
redirection.
Looking at:
https://wiki.samba.org/index.php/User_Home_Folders
for AD there's three method to set home folder. ADUC and ldbedit is the
same, simply using different interfaces.
But setting a folder mapping via GPO, AFAI've understood, it is not exactly
the same as setting home folder.
Or better, setting a
2018 May 14
2
Samba, AD and devices compatibility...
Mandi! Andrew Bartlett via samba
In chel di` si favelave...
> I hope this clarifies things,
Super-clear! Thanks!
--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/
Polo FVG - Via della Bontà , 7 - 33078 - San Vito al Tagliamento (PN)
marco.gaiarin(at)lanostrafamiglia.it t
2020 Apr 30
1
steps to get automatic home folder created at user logon windows 10 with samba 4.9.5-Debian
On 30/04/2020 08:32, Marco Gaiarin via samba wrote:
> I don't know if this is a fix, but for home folder/drive, i use a 'root
> preexec' script, that create the folder and set some other things (eg,
> mostly quota).
>
> For me:
> root preexec = /etc/samba/createhome "%U"
>
How does your script know where to create the users homedir ?
Rowland
2018 Nov 26
3
Different LDAP query in different DC...
I need to do a simple query, against some LDAP data in 'laster draft
schema' format i've added to te samba/AD schema.
All LDAP query return the same result on all (6) of the DC:
root at vdcsv1:~# ldapsearch -H ldap://vdcsv2.ad.fvg.lnf.it -W -D CN=mta,OU=Restricted,DC=ad,DC=fvg,DC=lnf,DC=it -b DC=ad,DC=fvg,DC=lnf,DC=it "(cn=prova123)" rfc822MailMember
Enter LDAP Password:
2018 Sep 04
4
Upgraded a member server to 4.8, rfc2307 data?
I'm starting to upgrade my domain members to debian stretch/samba 4.8,
using louis packages.
Domain controllers still on jessie/samba45.
Upgrade went smooth, but after upgrade seems that the DM was not able
anymore to retrieve rfc2307 data, eg:
root at vdmsv2:~# getent passwd gaio
gaio:*:10000:10513:Marco Gaiarin:/home/LNFFVG/gaio:/bin/false
root at vdmsv2:~# ldbsearch -H
2017 Dec 14
5
[Curiosity] 'netbios aliases' works in AD mode?
Ahem no one reply me.
A little fast-rewind: i need to have some 'aliases' to my servers (DM);
seems i need to add in smb.conf:
netbios aliases = FILESV
but also add a 'SPN'; trying to look around for an examples, lead me to
''nothing'', or to examples that seems to me unrelated.
Supposing the domain is 'ad.fvg.lnf.it' and the FQDN of the real host
is
2019 Jan 25
3
Removing sites and DC...
I need to close a site. No, no people fired, i've defined sites and DC
because i hope that get (re)opened, but...
There's some care i need to have to remove a DC (clearly, without FSMO
roles)?
I've looked on wiki to 'remove a DC' but i was not able to find
something...
Thanks.
--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra
2019 Feb 15
6
Demoted/removed a DC, and the NS records?
Following:
https://wiki.samba.org/index.php/Demoting_a_Samba_AD_DC
i've demoted and removed a DC. Seems all went as expected:
root at vdcud1:~# samba-tool domain demote --server=vdcsv1.ad.fvg.lnf.it -U gaio
Using vdcsv1.ad.fvg.lnf.it as partner server for the demotion
Password for [LNFFVG\gaio]:
Deactivating inbound replication
Asking partner server vdcsv1.ad.fvg.lnf.it to synchronize
2017 Nov 08
5
Best practice for creating an RO LDAP User in AD...
Mandi! Rowland Penny via samba
In chel di` si favelave...
> Not sure what you are proposing is going to work, AD expects every user
> to be a member of Domain Users, even though there is nothing in AD to
> show membership.
Ah.
> Do you require this user to visible on all domain machines ?
[...]
> It might help if you could explain how you are going to use your new
> user
2018 Apr 11
3
Map share based on site?
In Samba/NT i was used to share mapping done in netlogon script, so
users move around between sites, get home and profile from remote
location but still have share mapped from local servers.
In Samba/AD, using GPO, share mapping is in ''user policy'', and so
user roam between sites and get different policies?
I'm googling around but i'm a bit confused... i can still use
2018 May 11
3
Moving roaming profiles between domains, risky?
OK, now i've to start to move the big part of my users from my old
NT-like domains to my new AD domain.
I've setup roaming profile in the new domain following the wiki
(https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles, 'using
windows ACL') and for new profiles works like a charm.
But i've tried to move/copy old profile to the new domain, and seems
work, with
2017 Nov 21
3
Time synchronization and Password Policies
You guys mix to things.
> AFAIK is the 'privileges' that are host-specific.
Is correct.
>the policies are on the domain (in the LDAP data,
> the root DN, look at them!).
Yes, but only the GPO policies and these are not applied to the samba server.
And because of that, samba-tools password settings needs to be set on every DC.
Greetz,
Louis
> -----Oorspronkelijk
2017 Nov 30
1
Troubles on folder redirection...
I've setup home drive in my AD domain, using POSIX ACL because i've a
script that create home and do other things (set email folder, set
quota, ...).
[users]
comment = Home Directories
path = /home
browseable = No
veto files = /.mail/.inbox/.ssh/
root preexec = /etc/samba/createhome "%u"
force create mode = 0600
force directory mode = 0700
read only = No
I've also
2017 Dec 06
4
DM and ''offline'' PAM (and NSS?)...
I'm using samba 4.5 on a debian jessie (Louis packages).
Rarely it happen that a power outgage tear down all the stuff, here.
I've noticed that if the DM start before the DC, clearly all account
data are inaccessible.
To prevent or minimize that, the ''offline mode'' of winbind can be
safely used also on DM servers? Or is tailoread against roaming client
(portables,
2018 Jun 21
3
Password complexity checks and local users...
Mandi! Rowland Penny via samba
In chel di` si favelave...
> > But my question really is: why this policy apply, if i've not enabled
> > in GPO?
> Probably because GPOs have no effect on a Samba AD DC, they will only
> effect Windows clients.
Rowland, i'm speaking about windows clients, not samba servers!
I've enabled 'complexity checks' in samba servers,
2018 Mar 26
3
[OT?] winbind e quota...
As was used to (in Samba NT/LDAP), i've enabled quota on /homes, and
homes are exported (as homedrive) for users.
Editing quotas (with edquota) works as expected, and in windows explorer
users get quota correctly reported, but a simple:
repquota -a
return nothing:
root at vdmsv1:~# repquota -a
*** Report for user quotas on device /dev/sdb1
Block grace time: 28days; Inode grace time: