similar to: LXC, ADDC and xattr_tdb...

On Fri, 2020-02-28 at 17:12 +0000, Rowland penny via samba wrote: > On 28/02/2020 17:02, Marco Gaiarin via samba wrote: > > I came back on this topic. > > > > As just depicted on: > > > > https://lists.samba.org/archive/samba/2019-December/227626.html > > > > there's no way to run samba AD DC on a unprivileged LXC container, > > because

On Tue, 2016-12-06 at 21:23 +0000, Rowland Penny via samba wrote: > On Tue, 6 Dec 2016 20:56:23 +0000 > Brian Candler via samba <samba at lists.samba.org> wrote: > > > Under ubuntu 16.04, compiling samba 4.5.1 from source, I've created > > an initial DC and a replica DC by following: > > > >

Hi Rowland, Thanks for your response . I will check on this. Even i have tried with commenting xattr_tdb:file = /var/opt/samba/locks/xattr.tdb in smb.conf and am getting same issue . To be more specific whether you're referring ACL as Windows ACL or POSIX ACL or Extended ACL In the below command "-U%" refers to nouser and no group ? . smbclient -L localhost -U% I am able to get

>On a DC both the standard vfs objects will definitely be turned off if you set 'vfs objects = full_audit' anywhere. If you set that option in a share on a Unix domain member, it will >override any 'vfs objects' set in global. > >Rowland Is this documented anywhere on the wiki? If not, what would be an appropriate location and title? There are already pages with

Under ubuntu 16.04, compiling samba 4.5.1 from source, I've created an initial DC and a replica DC by following: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory For the second one I had to add the extra DNS records as per:

Hi, My Samba 3.6.6 file server isn't setting the security.NTACL extended attribute. It can set the user.DOSATTRIB without any issue. This appears to be an LXC container issue, as outside the container I can set this using the setfattr command without issue, whereas I can't do this inside. Despite this not being a Samba issue, I was wondering whether anybody has any encountered

Hi , FQDN of the DC is Hostname.DomainName . In smb.conf: netbios name = <HostName> realm = <DomainName> eg: (ww.xx.yy.zz) workgroup = ww In resolve.conf domain <DomainName> nameserver <IP Address of the DC i.e host IP> # host -t SRV _ldap._tcp.<DomainName>. _ldap._tcp.<DomainName> has SRV record 0 100 389 <HostName>.<DomainName>. # host

Hi Ralph Thanks a lot. With xattr_tdb I could at least list the files getting rid of access denied error. I still do not see the exactly mapped ACEs in the Security Descriptor of a file in Windows Explorer but I will debug that little further and then come back with questions. I see only 1 entry of Everyone on Windows client side if there are added ACEs using nfs4_setfacl. Let me know if that

Mandi! Rowland penny via samba In chel di` si favelave... > Do you have ANY Windows clients ? Sure! Most of my clients are windows. > If the answer is yes, then you need to follow the 'Setting up a share using > windows ACLs' page and make your Linux clients work with this. > If the answer is no, then you can follow the POSIX ACLs page. > Do not try to mix the two.

Hi , We are facing below issue with below AD DC config - Samba 4.5.3 on HP UX IA64 , # ./smbclient -L localhost -U% Domain=[IN] OS=[Windows 6.1] Server=[Samba 4.5.3-HPE CIFS SERVER 4.5.3.0] tree connect failed: NT_STATUS_CONNECTION_DISCONNECTED # # cat /etc/opt/samba/smb.conf # Global parameters [global] netbios name = machinename realm = <MachineName>

Hi all! Anyone know how to tell samba4 to use "--use-xattrs=yes" after domain provision, i have a lot of users so i cannot recreate the domain from scratch ;( Any ide? Thanks!

On Mon, 21 Aug 2023 22:18:22 +0200 Joachim Lindenberg via samba <samba at lists.samba.org> wrote: > Hello Rowland, > If someone wants full_audit, will adding 'vfs objects = full_audit' > on a DC also have dfs_samba4 and acl_xattr enabled just because > running on a DC, or would this cause both defaults to be turned off? > Thanks, Joachim > > On a DC both the

Op 22-08-2023 om 08:48 schreef Joachim Lindenberg via samba: >> On a DC both the standard vfs objects will definitely be turned off if you set 'vfs objects = full_audit' anywhere. If you set that option in a share on a Unix domain member, it will >> override any 'vfs objects' set in global. If you set vfs objects on a share is overrides the global setting. It is

Mandi! Paul Littlefield via samba In chel di` si favelave... > >Does 'timesync' know about signed support ? > >e.g. /var/lib/samba/ntp_signd > No, it doesn't... so I will changing my routine, and RTFM. > https://wiki.samba.org/index.php/Time_Synchronisation Absolutely true for DCs, where ntpd with --enable-ntp-signd is needed, to provide NTP service to windows

Hi All I found there is one bug in the plugin. The name of the attribute for ACL as per strace output of nfs4_setfacl is *system.nfs4_acl.* The source code has defined it as #define NFS4ACL_XATTR_NAME ( "system.nfs4acl" ) Note there is missing underscore. After this, the EOPNOTSUPP error is not observed. Hope this helps Akash On Thu, Apr 5, 2018 at 11:43 PM, Jeremy Allison

Hello I recently deployed a Samba 4.0.21 running as classic pdc on freebsd 10 version RELEASE-p9, most of shares are in a ZFS volume with vfs_zfsacl module, some smbd processes stays constantly with around 70% cpu usage sometimes 90% and dies with signal 11 according the log message , i also tried enable debug level 10 but didn't show anything helpful or maybe i wasn't able to

Yesterday we have done our first trunk of migration from our Samba4-NT4 domains to our new Samba 4 (2:4.5.12+dfsg-2+deb9u2~bpo8+1) AD domain. Main shares are kept on old server, so we have migrated computers and users (homes and roaming profiles). We have done in the past some tests, without many troubles, so we are confident. Alla computer are Win7 Pro, alla configured in the same way via

Hi Rowland, Thanks for your response. In the below command , Could you please tell let us what is the functionality of *"-U%" *, since when i am using the below command only i am facing issue smbclient -L localhost *-U% * I have tested with other local users(created using pdbedit) as well and getting expected result with below smb.conf # Global parameters [global] netbios

Hi, I have rebuilt samba3x SRPM in Centos 5.5. The resultings RPM's are nearly in triple size of the original RPMs. I have installed and checked the binary files are stripped. What can result in such difference in RPM sizes? I have not changed anything on built and install sections of spec file. Regards, Some files and sizes in original samba3x rpm: -rwxr-xr-x 1 root root 17904 Mar 31

Hi Ralph I do not think using xattr_tdb is the right thing to do for my purpose. We do not wish to store/retrieve extended attributes to/from TDB file. *<Ralph>* *Iirc parsing NFSv4 ACLs would require extensions to the module to support the string identifiers and mapping to ids.* *</Ralph>* Can you please elaborate more on which extensions you referred to? What all basic things do