similar to: LXC, ADDC and xattr_tdb...

On Fri, 2020-02-28 at 17:12 +0000, Rowland penny via samba wrote: > On 28/02/2020 17:02, Marco Gaiarin via samba wrote: > > I came back on this topic. > > > > As just depicted on: > > > > https://lists.samba.org/archive/samba/2019-December/227626.html > > > > there's no way to run samba AD DC on a unprivileged LXC container, > > because

>On a DC both the standard vfs objects will definitely be turned off if you set 'vfs objects = full_audit' anywhere. If you set that option in a share on a Unix domain member, it will >override any 'vfs objects' set in global. > >Rowland Is this documented anywhere on the wiki? If not, what would be an appropriate location and title? There are already pages with

On Tue, 2016-12-06 at 21:23 +0000, Rowland Penny via samba wrote: > On Tue, 6 Dec 2016 20:56:23 +0000 > Brian Candler via samba <samba at lists.samba.org> wrote: > > > Under ubuntu 16.04, compiling samba 4.5.1 from source, I've created > > an initial DC and a replica DC by following: > > > >

Hi, My Samba 3.6.6 file server isn't setting the security.NTACL extended attribute. It can set the user.DOSATTRIB without any issue. This appears to be an LXC container issue, as outside the container I can set this using the setfattr command without issue, whereas I can't do this inside. Despite this not being a Samba issue, I was wondering whether anybody has any encountered

Hi Rowland, Thanks for your response . I will check on this. Even i have tried with commenting xattr_tdb:file = /var/opt/samba/locks/xattr.tdb in smb.conf and am getting same issue . To be more specific whether you're referring ACL as Windows ACL or POSIX ACL or Extended ACL In the below command "-U%" refers to nouser and no group ? . smbclient -L localhost -U% I am able to get

Under ubuntu 16.04, compiling samba 4.5.1 from source, I've created an initial DC and a replica DC by following: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory For the second one I had to add the extra DNS records as per:

Hi , FQDN of the DC is Hostname.DomainName . In smb.conf: netbios name = <HostName> realm = <DomainName> eg: (ww.xx.yy.zz) workgroup = ww In resolve.conf domain <DomainName> nameserver <IP Address of the DC i.e host IP> # host -t SRV _ldap._tcp.<DomainName>. _ldap._tcp.<DomainName> has SRV record 0 100 389 <HostName>.<DomainName>. # host

Hi Ralph Thanks a lot. With xattr_tdb I could at least list the files getting rid of access denied error. I still do not see the exactly mapped ACEs in the Security Descriptor of a file in Windows Explorer but I will debug that little further and then come back with questions. I see only 1 entry of Everyone on Windows client side if there are added ACEs using nfs4_setfacl. Let me know if that

Mandi! Rowland penny via samba In chel di` si favelave... > Do you have ANY Windows clients ? Sure! Most of my clients are windows. > If the answer is yes, then you need to follow the 'Setting up a share using > windows ACLs' page and make your Linux clients work with this. > If the answer is no, then you can follow the POSIX ACLs page. > Do not try to mix the two.

On Mon, 21 Aug 2023 22:18:22 +0200 Joachim Lindenberg via samba <samba at lists.samba.org> wrote: > Hello Rowland, > If someone wants full_audit, will adding 'vfs objects = full_audit' > on a DC also have dfs_samba4 and acl_xattr enabled just because > running on a DC, or would this cause both defaults to be turned off? > Thanks, Joachim > > On a DC both the

Op 22-08-2023 om 08:48 schreef Joachim Lindenberg via samba: >> On a DC both the standard vfs objects will definitely be turned off if you set 'vfs objects = full_audit' anywhere. If you set that option in a share on a Unix domain member, it will >> override any 'vfs objects' set in global. If you set vfs objects on a share is overrides the global setting. It is

Mandi! Paul Littlefield via samba In chel di` si favelave... > >Does 'timesync' know about signed support ? > >e.g. /var/lib/samba/ntp_signd > No, it doesn't... so I will changing my routine, and RTFM. > https://wiki.samba.org/index.php/Time_Synchronisation Absolutely true for DCs, where ntpd with --enable-ntp-signd is needed, to provide NTP service to windows

Hi, i converted LXC conf to xml by: lxcuser@blade1:~/.local/share/lxc/test_deb$ virsh -c lxc:/// domxml-from- native lxc-tools /home/lxcuser/.local/share/lxc/test_deb/config <domain type='lxc'> <name>test_deb</name> <uuid>cce77799-89fd-41fd-99c1-101e00844e23</uuid> <memory unit='KiB'>65536</memory> <currentMemory

Hi, I noticed that libvirt-lxc will be deprecated for RedHat: "Future development on the Linux containers framework is now based on the docker command-line interface. libvirt-lxc tooling may be removed in a future release of Red Hat Enterprise Linux (including Red Hat Enterprise Linux 7) and should not be relied upon for developing custom container management applications." -

Hi there! Can libvirtd (lxc driver) run as a non-root user, but with the right CAPs? Thanks, Jan

Hello I recently deployed a Samba 4.0.21 running as classic pdc on freebsd 10 version RELEASE-p9, most of shares are in a ZFS volume with vfs_zfsacl module, some smbd processes stays constantly with around 70% cpu usage sometimes 90% and dies with signal 11 according the log message , i also tried enable debug level 10 but didn't show anything helpful or maybe i wasn't able to

Hi , We are facing below issue with below AD DC config - Samba 4.5.3 on HP UX IA64 , # ./smbclient -L localhost -U% Domain=[IN] OS=[Windows 6.1] Server=[Samba 4.5.3-HPE CIFS SERVER 4.5.3.0] tree connect failed: NT_STATUS_CONNECTION_DISCONNECTED # # cat /etc/opt/samba/smb.conf # Global parameters [global] netbios name = machinename realm = <MachineName>

Yesterday we have done our first trunk of migration from our Samba4-NT4 domains to our new Samba 4 (2:4.5.12+dfsg-2+deb9u2~bpo8+1) AD domain. Main shares are kept on old server, so we have migrated computers and users (homes and roaming profiles). We have done in the past some tests, without many troubles, so we are confident. Alla computer are Win7 Pro, alla configured in the same way via

Hello, I've encountered the following error, trying to start a domain: error: internal error Child process (PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/X11R6/bin LIBVIRT_DEBUG=2 LIBVIRT_LOG_OUTPUTS=2:syslog:libvirtd /usr/libexec/libvirt_lxc --name vm_14 --console 18 --handshake 21 --background --veth veth1) status unexpected: exit status 1 I see nothing relevant

Hi Rowland, Thanks for your response. In the below command , Could you please tell let us what is the functionality of *"-U%" *, since when i am using the below command only i am facing issue smbclient -L localhost *-U% * I have tested with other local users(created using pdbedit) as well and getting expected result with below smb.conf # Global parameters [global] netbios