Displaying 20 results from an estimated 1000 matches similar to: "Samba and UFW"
2018 Oct 08
3
vfs_ceph quota support?
Hi Folks,
is the vfs_ceph supporting quota set on a directory inside cephfs?
Regards Felix
--
Forschungszentrum Jülich GmbH
52425 Jülich
Sitz der Gesellschaft: Jülich
Eingetragen im Handelsregister des Amtsgerichts Düren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir. Dr. Karl Eugen Huthmacher
Geschäftsführung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender),
Karsten Beneke (stellv.
2018 Dec 05
2
Best Books for Samba4 & Active Directory Deployment?
Is there a recommendation for good books covering
the setup/deployment of Samba 4 using an Active
Directory structure? Something on the order of
"The Official Samba-3 HOWTO and Reference Guide"?
I've setup a Samba4 server and I've gotten a Win10
machine to join the domain, but i can't seem to
move past that to get a user to login or to
create a share.
Sort of blindly
2018 Nov 21
3
Testparm CUPS warning
Hello,
today i upgrade my printserver from samba 4.8.6 to 4.9.2 (ubuntu 18.04).
First, all is working correctly. But whe im typing "testparm" now the
following warnings are shown:
##############
Loaded services file OK.
Warning: Service printers defines a print command, but parameter is
ignored when using CUPS libraries.
Warning: Service print$ defines a print command, but
2019 Feb 07
3
Samba and ufw
Rowland,
OK. Should I delete these lines?
diff yours mine
63d62
yours# -A ufw-after-logging-output -m limit --limit 3/min --limit-burst 10
-j LOG --log-prefix "[UFW ALLOW] "
85,87d83
yours# -A ufw-before-logging-forward -m conntrack --ctstate NEW -m limit
--limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW AUDIT] "
yours# -A ufw-before-logging-input -m conntrack
2018 Dec 04
3
Samba and firewalling
Hai,
Just a questions, this might be a bug, might not, but for this one i need some help.
Setup, debian 9.
Member server samba 4.9.3
AD DC servers samba 4.8.7
Im setting up the member with a very tight firewall, so nothing in/our/routed unless its defined.
Im using UFW firewall for it.
I notice the following in my member its firewall logs, and this only happend when i run : id or
2019 Jan 29
3
Samba and UFW
Here is the ufw.log after enabling logging medium and trying to connect to
the windows net. Unfortunately the web Microsoft page is in German. I think
it says window uses smb1 syntax.
Jan 27 15:11:09 martin-RB042AV-ABA-a1410y kernel: [ 887.241685] [UFW BLOCK]
IN=enp2s5 OUT= MAC=00:19:21:a2:11:5e:74:27:ea:ab:1e:e0:08:00
SRC=192.168.254.15 DST=192.168.254.39 LEN=90 TOS=0x00 PREC=0x00 TTL=128
2019 Feb 06
2
Samba and ufw
Rowland,
Did some editing in smb.conf that I had to reverse. Now I'm back to
being able to connect with the firewall disabled. When I enable the
firewall I get as far as windows network -> workgroup but no connection.
I have only the rules you recommended in your last email.
Louis,
The information you requested is below:
martin at radio:~$ dpkg -l|egrep "iptables|ufw"
ii
2018 Jan 26
3
Adding Share Windows ACL
My File Server is a Unix Domain Member.
And yes i ve done all this settings. First i got this Error:
Enter SAMDOM\administrator's password:
Could not connect to server 127.0.0.1
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE
But the troubleshooting guide (https://wiki.samba.org/index.php/Samba_Member_Server_Troubleshooting) helped me to fix this
2018 Jan 28
2
Adding Share Windows ACL
I found out, when im creating a complete new share, access via computer management - per default there is a share permission set with full controll to "everyone".
When im trying now to set ACLs it is working. But when im deleting "everyone" and set Domain Admins and/or Unix Admins and give them full controll, im no more able to set ACLs!
Micha
Am 28. Januar 2018 12:00:07
2018 Jan 26
2
Adding Share Windows ACL
On Fri, 26 Jan 2018 14:18:53 +0000
Rowland Penny via samba <samba at lists.samba.org> wrote:
> On Fri, 26 Jan 2018 14:10:40 +0100
> Micha Ballmann <ballmann at uni-landau.de> wrote:
>
> > To set share windows permissions and windows acl i login on a
> > windows 7 computer with the administrator user.|Open ||Computer
> > Management and connect to the
2019 Feb 11
2
,Re: Samba and ufw
Louis,
Tried the rules you suggested:
These work. I think that rules out any Windows problems.
ufw insert 1 allow in on enp2s5 from 192.168.254.15 to 192.168.254.39
ufw insert 2 allow in on enp2s5 from 192.168.254.39 to 192.168.254.15
These do not work.
ufw insert 1 allow in on enp2s5 proto tcp from 192.168.254.0/24 to 192.168.254.39 port 139,445
ufw insert 2 allow in on enp2s5 proto udp from
2018 May 18
1
Samba 4.8.2
On Fri, 18 May 2018 15:24:50 +0200
Micha Ballmann <ballmann at uni-landau.de> wrote:
> Thx,
>
> all samba server were compiled from source.
>
In which case, download the Samba tarball and unpack it, cd into the
directory created by the unpacking, check if you require any extra
packages and install them. Run configure with exactly the same options
as you did previously. If
2019 Jan 30
6
Samba and UFW
Rowland,
The computer name 'martin-RB042AV-ABA-a1410y' was set by Linux Mint when it
was installed. I'm not sure I can change it. I check it on the Mint forum.
I'll turn off the smb... feature and see what happens. Yes the ports listed
below are open and set to pass through the firewall. Should I unset the
netbios name". Going to try the modification to the ufw rules file as
2019 Feb 11
4
Samba and ufw
Louis,
Followed your instructions so far. Take a look at the output of the
various steps. I'm down to removing items form /etc/ufw. I'm not sure
what I should delete. I know some of the files are backups generated
after some rules were deleted. Please tell me what is safe to delete
before I procede further.
martin at radio:~$ sudo apt-get remove --purge ufw gufw
Reading package
2018 May 18
2
Samba 4.8.2
On Fri, 18 May 2018 14:44:09 +0200
Micha Ballmann via samba <samba at lists.samba.org> wrote:
> Is it possible to Mix Samba 4.8.2 with Samba 4.7.7?
Yes
>
> I have three domain controller (up to 10000 users) running on Samba
> 4.7.7.
>
> I want to kill all samba processes of Dc1 and do all necessary steps
> for an upgrade to version 4.8.2. Dc2 and Dc2 still running
2019 Feb 12
1
Samba and ufw (Martin McGlensey)
Louis,
Made the changes. Still unable to mount office. Firewall also blocks
Thunderbird mail and maybe internet. Will check that more fully
later.Any thoughts ob Tony's response?
Outputs:
martin at radio:/etc$ sudo apt-get install ufw
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no
2018 Aug 07
2
id <username> - doesnt list all groups
Thank for your answer:
But i dont know understand why is following not working:
I want to restrict the ssh access for a special domain member:
In my "sshd_config" i added:
AllowGroups restrictaccess root
With user2 im able to login via ssh!
log: pam_krb5(sshd:auth): user user2 authenticated as user2 at ROOTRUDI.DE
With user1 im not!
log: User user1 from 192.168.0.100 not allowed
2017 Feb 14
2
Permissions Roaming Profile
Hello Community,
i would like to configure roaming profiles with my samba4 dc. Im using
this documenation:
https://wiki.samba.org/index.php/Implementing_roaming_profiles
Below the topic "Profile share using Windows ACLs", the first step ist
setup a share named "Profiles". What specific share permissions ( not
ACLs) must be applied for a the "Profiles" share?
2019 Jan 29
2
Samba and UFW
Reindl,
I will check that. Not sure how fix it. Will look on internet. Would you give some more information on the subject.
Thanks
Sent from my iPad
Marty (843)-546-4822
> On Jan 29, 2019, at 10:43 AM, Reindl Harald <h.reindl at thelounge.net> wrote:
>
>
>
>> Am 29.01.19 um 16:39 schrieb Marty via samba:
>> Here is the ufw.log after enabling logging medium and
2018 Mar 05
2
SAMBA4 Fileserver & Disk Quota
I tried this. When im creating a folder directly on server, the sticky
bit is working. But it does not work when im doing it from windows.
# ls -l
drwxrws---+ 7 root stickygroup 4096 Mär 5 14:44 00_stickygroup/
Best regards
Micha
Am 05.03.2018 um 14:15 schrieb Michael Wandel:
> IMHO you can use the posix sgid bit.