similar to: print samba-tool dsacl

Sorry - I have just seen i did the "diff -u" in wrong order and used my test files. Here once again the correct diff. Am Sa., 10. Nov. 2018 um 08:54 Uhr schrieb Martin Krämer < mk.maddin at gmail.com>: > Hello everyone, > > since I was not able to find any tool like requested previously I did a > "quick and dirty" for samba-tool. > I copied the

Hi, i was not able to find anything about my issue in the bug-tracker, the mailinglist or the release notes. We see the following issue using samba-tool dsacl: samba-tool dsacl set --objectdn "cn=srv-client-99,cn=CoreBizClients,cn=Netzwerk,ou=muc,DC=coreboso,DC=de" --sddl='(A;CI;GA;;;DD)' new descriptor for

I am trying to grant or denied access to a user for changing his passwd, it's the option: User cannot change passwd. For this, I am trying to use samba-tool dsacl set [option], but I am not sure of its syntax. Could you help me with that? I need to denied this permission without use ADUC or any private tool. My Regards!

Hello All, I am currently changing my samba linux clients (Debian) from sssd binding to winbind. With sssd I had all sudo rules within the samba active directory. The configuration was based on: https://lists.samba.org/archive/samba/2016-April/199402.html Is there some guideline like the one mentioned available/has someone already experience with this for winbind based clients? Within the

Hi,

Are there any deny tools with samba4? Like the below example? To set the permission to deny read access of the homePhone attribute on a single user object, you can use this command: dsacls <DN of object> /D <security principal>:RP;homePhone For our example, the command would look like this: dsacls "CN=Doe\, John,OU=newOU,DC=root,DC=net" /D root\ non-HR-users:RP;homePhone

Hai guys, I've updated the Debian Stretch package for Samba 4.10.2, 4.9.6 and 4.8.11. Repo info : https://apt.van-belle.nl Build logs: http://downloads.van-belle.nl/samba4/Buildlogs/stretch/ Quick repo setup: Optional: apt-get install apt-transport-https Import my public key: wget -O - http://apt.van-belle.nl/louis-van-belle.gpg-key.asc | apt-key add - # Example repo stretch samba

On Fri, 19 Apr 2019 11:58:23 +0200 Martin Krämer <mk.maddin at gmail.com> wrote: > Hi Rowland, > > thanks for your reply. > > > I personally would have used 'cache directory =' , see 'man > > smb.conf' for the difference. > From description based on man smb.conf I would absolutely agree. > I have tried and set the "cache directory"

Hi, thanks for reply. Having the information that this is no situation considered yet is already helpfull - telling me that I have not missed / missconfigured something. :) I think the better solution for me is to not even create the unwanted entries. Filtering for "automatic" dhcp created hostnames (matching '^dhcp-.*$') to not be added into DNS should to the trick for me

Release Announcements ===================== This is the second release candidate of Samba 4.18.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.18 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Release Announcements ===================== This is the second release candidate of Samba 4.18.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.18 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Hello Rowland, thanks for your help. Below my comments Am Sa., 6. Apr. 2019 um 14:32 Uhr schrieb Rowland Penny via samba < samba at lists.samba.org>: > On Sat, 6 Apr 2019 10:58:15 +0200 > Martin Krämer via samba <samba at lists.samba.org> wrote: > > > Hello everyone, > > > > I have setup two Samba AD DC's running Debian 9 with BIND9_DLZ dns > >

Release Announcements ===================== This is the fourth release candidate of Samba 4.18.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.18 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Release Announcements ===================== This is the fourth release candidate of Samba 4.18.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.18 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Hai,   As extra on Rowland comment..  Your config looks ok as said, i did see..   smb.conf  map to guest = bad user         < remove it.   Bad User - Means user logins with an invalid password are rejected, unless the username does not exist, in                       which case it is treated as a guest login and mapped into the guest account. and you want that for a AD DC setup?  you might

Am Sa., 6. Apr. 2019 um 18:01 Uhr schrieb Rowland Penny via samba < samba at lists.samba.org>: > On Sat, 6 Apr 2019 17:21:26 +0200 > Martin Krämer <mk.maddin at gmail.com> wrote: > > > Hello Rowland, > > > > thanks for your help. > > Below my comments > > > > See here: > > > > > > http://apt.van-belle.nl/ > > >

I need to have an AD user that need to *write* in an users LDAP field. The user case is a MFP (a set of MFP, indeed) that have RFID auth, and so need to 'register' the RFID cards. Seems to me that i have to use dsacl/samba-tool acl ds, but i don't found a way to set the property for every user. EG, assign write permission to user 'mfp' to field 'pager' for every

On Fri, 19 Apr 2019 07:50:28 +0200 Martin Krämer via samba <samba at lists.samba.org> wrote: > Hi All, > > I tried multiple topics and did some further analyzing regarding this. > I found that described error below only appears if I restart the > device when connecting from "online" to "offline". > If I keep my device running winbind caches the users

Ok, some more resolving things to fix.   On both DC's few things to edit. In resolv.conf, the order is important here and dont point to nameserver 127.0.0.1 for the DC's.   DC1. file: /etc/resolv.conf  search example.corp nameserver IP_DC1 nameserver IP_DC2 nameserver 8.8.4.4 /etc/hosts IP_DC1 hostname.internal.example.com hostname IP_DC2 hostname.internal.example.com hostname     

Hello everyone, I have setup two Samba AD DC's with BIND9_DLZ dns backend. faiserver.example.corp is one of them hosting all FSMO Roles. location-000001.example.corp is the second one. Both are in different subnets but can reach each other. Unfortunately replication only works from faiserver.example.corp -> location-000001.example.corp. In the other direction location-000001.example.corp