similar to: Share will Domain Users Full Control permissions, not accessible by domain user

On Thu, 21 Feb 2019 10:49:49 -0800 Mason Schmitt <mason at ftlcomputing.com> wrote: > Hi Rowland, > > > template homedir = /home/%U@%D > > > > Nothing to do with your problem, but is the above line a typo ? > > I would have expected the '@' to be a '/', in which case it is the > > default, so you can remove the line. > > > >

> > > I am trying to auto create and mount home directories using a GPO, as per > > https://wiki.samba.org/index.php/User_Home_Folders. > > > > I currently have home directories being created, through the use of > > pam_mkhomedir.so. with 'obey pam restrictions = yes' in my smb.conf file. > > I have also setup the share permissions and Windows ACLs as

> >>>> Run this : getfacl /home/users > >>> getfacl: Removing leading '/' from absolute path names > >>> # file: home/users > >>> # owner: root > >>> # group: A\\domain\040admins > >>> user::rwx > >>> user:root:rwx > >>> user:10512:rwx > >>> group::rwx > >>>

Hi the list, I have updated to 4.8.0 after using 4.7.3 root at samba:~# /usr/local/samba/sbin/samba -V Version 4.8.0 I compiled from source with the following options : ./configure --enable-debug --enable-selftest Samba run apparently normaly, but when i try to edit permission via windows, explorer.exe crashes I dont get anything relevant from samba's log. But I get an error from windows

On 28/03/2023 17:41, Peter Carlson via samba wrote: > > On 3/28/23 08:40, Rowland Penny via samba wrote: >> >> >> On 28/03/2023 15:50, Peter Carlson via samba wrote: >>> >>> On 3/28/23 07:36, Rowland Penny via samba wrote: >>>> >>>> >>>> On 28/03/2023 15:08, Peter Carlson via samba wrote: >>>>>

On 28/03/2023 15:08, Peter Carlson via samba wrote: > > On 3/28/23 01:33, Rowland Penny via samba wrote: >> >> >> On 28/03/2023 01:59, Peter Carlson via samba wrote: >>> I am having troubles with windows ACLs.? I have been following the >>> wiki >>> (https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs) and must have messed

Hello Louis, In fact, the shares mentioned in my original messages are used in Windows-only. The accounts, however, are used in both Windows and Unix-type environments (we have quite a zoo of OSes in active use); so we actually use the Posix part of accounts for attributes and Kerberos component to authenticate in all non-Windows use. So my primary intent is to make the homes/profiles shares

Hai, Now, i did not know you used the DC for the profiles here but yes it looks good. Small comment on point 3 and 4. 3) Its good, you might notice a few more rights there compaired to what i posted, thats because you have your profiles on the DC but the settings are good. 4) yes, the security is ok, i like the higher security setting and try to mimic the windows settings as much as

> > On the file serever: > > Collected config --- 2019-07-03-10:27 ----------- > > > > Hostname: srv > > DNS Domain: a.b.hu > > FQDN: srv.a.b.hu > > ipaddress: 10.0.3.15 192.168.0.8 > > ----------- > > Samba is running as a Unix domain member > > ----------- > > > > This computer is running Debian 10.0 x86_64 > >

Hi Samba 4.12 on Ubuntu 20.04 Windows 10 and 7 clients I have configured recycle on two shares, /Users and /Documents. vfs objects = recycle recycle:versions = yes recycle:keeptree = yes On the Users share I have recycle:repository = /share/data On the Documents share I have recycle:repository = .Papperskorg (recycle bin in Swedish) The Document share recycle works. Folder was created and the

> OK, the only real problem that I can see is that you have: > > ea support = no > > This turns off the required EA. > Hmmm.... I thought this had resolved the issue, because the group names did update in the ACLs. However, I changed another group name about 20 minutes ago and it still hasn't updated in its associated ACL. I thought perhaps there was some lazy update or

This mailing list seems to have magical powers... Twice now I have sent emails to this list asking for help, both times I have not received the correct answer to my question, but each response has inadvertently helped me to see my problem from a new angle and thus I have been able to resolve my own issue! As neither the wiki nor any past mailing list messages (that I could find) correctly answer

On Mon, Apr 11, 2016 at 6:10 PM, Jonathan Hunter <jmhunter1 at gmail.com> wrote: > It sounds as though there are files on your servers owned by a UID or GID > (most probably a GID) that is not in /etc/group, and is being looked up and > "reverse resolved" to 'NT AUTHORITY\Authenticated Users', but this somehow > doesn't map back the other way, i.e. from a

On 2019-02-19 3:47 pm, Rowland Penny via samba wrote: > On Tue, 19 Feb 2019 15:25:51 -0500 >> What exactly does "START AGAIN" imply? Just chmod? > > 'ls' shows the correct ownership and Unix permissions: > > drwxrwx---+ 4 root domain admins 4096 Feb 17 19:13 programs > > But 'getfacl' show something different: > > getfacl:

Hi all, I am referring to the official wiki here: https://wiki.samba.org/index.php/Setting_up_a_home_share#Setting_up_the_share_and_filesystem_permissions I was struggling around for many hours before I have found out what caused my issue. Well, I have created the [home] share exactly as epxlained on the How-To, in detail: I am creating on the linux prompt at the member server the directory with

On Sun, 23 Apr 2017 20:53:39 +1000 Henry via samba <samba at lists.samba.org> wrote: > root at aphrodite:~# getfacl -d /srv/samba/data/Testing > getfacl: Removing leading '/' from absolute path names > # file: srv/samba/data/Testing > # owner: root > # group: domain\040admins > > However in Windows I am still unable to edit the "Security" >

> >> Run this : getfacl /home/users > > getfacl: Removing leading '/' from absolute path names > > # file: home/users > > # owner: root > > # group: A\\domain\040admins > > user::rwx > > user:root:rwx > > user:10512:rwx > > group::rwx > > group:A\\domain\040admins:rwx > > mask::rwx > > other::--- > >

Hi, i have setup an ad dc with samba 4.8, and then rigorously followed wiki tutorial at : https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs However, when following the last part (File System ACLs in the Back End), I don't get the expected results : [root at mydc ~]# getfattr -d /srv/samba/Demo/ doesn't yield anything and getfacl /srv/samba/Demo/ getfacl : suppression

I'm having trouble with my new fileserver, I can't make the shares viewable by windows clients. I had the same problems with the first file server I built and cannot remember what I did to "fix" it. I have gone through the page "Setting up a share using Windows ACL's" on the Samba Wiki ( https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs) but

I have a Samba AD running Samba 4.7.5. Everything was working fine, when, seemingly out of the blue, the users started to be denied access to all shares. If I try from a Windows 7 or Windows 10 machine, logged in as a user in "Domain Uses", I get: "Windows cannot access \\server-name\share_name. You do not have permission to access \\server-name\share_name" If I use