similar to: Errors for shares since 4.12.0

Hi Am 09.03.20 um 16:32 schrieb Rowland penny via samba: > On 09/03/2020 14:25, Andreas Hauffe via samba wrote: >> [global] >> ??????? dedicated keytab file = /etc/krb5.keytab >> ??????? kerberos method = secrets and keytab > Why the dedicated keytab ? We have a kerberized NFS4 running on that machine, too. > >> workgroup = ILRW >> ??????? idmap config dom :

Thanks, I will give that a try. But I need the 'winbind separator = +'. We use some expensive commercial software (e.g. ANSYS, ABAQUS, ...), which uses shell scripts to start their software under linux. These scripts are not able to handle a backslash in the user name. The only solution was to switch to a "+" character. We reported these issues two years ago. Regards,

On 10/03/2020 08:03, Andreas Hauffe via samba wrote: > We have a kerberized NFS4 running on that machine, too. I do hope that you are not resharing the NFS share(s) via Samba, that way lies madness ;-) Try this smb.conf: [global] ??????? workgroup = SUBDOM ??????? realm = SUBDOM.DOM.EXAMPLE.COM ??????? security = ADS ??????? bind interfaces only = Yes ??????? interfaces = lo enp1s0f0

Hi, we have a stange problem here since samba 4.12. Users on specific clients are not allowed to access a share after reboot of the client and in very rare cases suddenly during use. When we restart the smb service after the access denied message on the client for a share, the user is allowed to access the share. So there seems no problem with permissions. Are there any known reasons for

On 09/03/2020 14:25, Andreas Hauffe via samba wrote: > [global] > ??????? dedicated keytab file = /etc/krb5.keytab > ??????? kerberos method = secrets and keytab Why the dedicated keytab ? > workgroup = ILRW > ??????? idmap config dom : range = 10000-9999999 > ??????? idmap config dom : backend = rid > ??????? idmap config subdom : range = 3000-9999 > ??????? idmap config

Hi, I have two member server and both with Samba 4.6.7. I'm using winbind for NSS and PAM. One of the member server is exporting an NFS4 mount which the other member server is mounting. For users with an rid-mapped uid below some value everything works fine. If the uid is above this value the group permissions are not evaluated and I'm getting a permission denied if a folder or file is

Hi, what do I have to do, to define a recycle folder outside a share e.g. the users home for each share? As far as I understand the default values, it's not allowed to leave the share folder. recycle:repository = /home/user/.recycle -- Viele Gr??e Andreas Hauffe

I've been working on setting up the Sernet 4.1x series samba builds for Centos 6. Provisioned via sudo /usr/bin/samba-tool domain provision --use-rfc2307 -interactive With the goal of providing authentication, user and group management with file and print services to Widows 7/8 clients, & authentication user and group management for Linux system users. The question is around my confusion

Hello, I'm using rsync 3.0.9 to backup several NFS shares from a fileserver, mounted over NFSv3, to a local RAID on a backup server. Both servers are running Ubuntu 12.04 server LTS. The fileserver's filesystem is ext4. The NFS shares are mounted on the backup server as follows: fileserver:/mnt/storage/share1 /mnt/share1 type nfs (ro,tcp,bg,soft,intr,addr=192.168.1.1)

I am having dns issues on both DC's. root at dc1:~# ./samba-setup-checkup.sh Check hostnames : Ok ./samba-setup-checkup.sh: line 91: [: too many arguments Checking detected host ipnumbers from resolv.conf and default gateway Ping gateway ip : 192.168.0.106 : Ok Warning, no ping to gateway, this might be firewalled. check you internet connection, subdom DNS might need it. ping nameserver1:

Yesterday I had an issue with Samba v 4.13.0. Went to backup and discovered backup computer has a drive failure and backup is gone. Only resort is to rebuild the DC. I cannot figure out why bind9 will not "host -t SRV _ldap._ tcp.ad.dtntwk.work." or "host -t SRV _kerberos._udp.ad.dtntwk.work." root at dc1:~# host -t SRV _ldap._tcp.subdom.example.com. >

I am trying to add a (CentOS4.4) Samba-3.0.23d server to a AD Win2K3 domain and the following error occurs # /usr/kerberos/bin/kinit administrator@SUBDOM.DOMAIN # net join Using short domain name -- SUBDOM Failed to set servicePrincipalNames. Please ensure that the DNS domain of this server matches the AD domain, Or rejoin with using Domain Admin credentials. Disabled account for

I have been working on creating users with samba-tool create. samba-tool user create tuser70 --surname="Test" --given-name="User" --initials=70 --uid-number=10070 --gid -number=10000 --description='70 user' --gecos='Test 70. User' --uid='Test 70. User' --login-shell=/bin/sh --unix-home=/h ome/SAMDOM/tuser70

On 8/17/20 4:36 AM, Rowland penny via samba wrote: > On 17/08/2020 10:20, L.P.H. van Belle via samba wrote: >> >> But have you tried this : >> getent passwd "SAMDOM\username" > > Unless you have in smb.conf (which are not recommended): > > winbind enum users = yes > > winbind enum groups = yes > > Running 'getent passwd' and

Hi all, Is this something I should report in bugzilla? In my smb3.conf I have vfs object = recycle full_audit crossrename and when doing a classicupgrade, I'm getting a segmentation fault. It doesn't finish. (tried 4.1.2, 4.1.3, 4.1.4) When removing the line, the classicupgrade finishes successfully. It's easy to get around, but wouldn't it be nicer not to crash..?

Hai Bob, Try this. First flush cache. net cache flush getent passwd username id username And run this one again for me: https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-info.sh Reply might be bit later on, im running around here. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Bob

Dear all, Following [1] from a year ago, I'd like to know what is the state of the crossrename VFS module, and whether it's expected to be supported at least together with the recycle module? To be honest I'm quite sympathetic with the reasoning in [1] and I don't see a general use of crossrename. However, it remains relevant in the context of recycle, and currently I

Dear list, After (almost) successfully removing a dead DC from my domain I am left with only one visible symptom: samba-tool drs showrepl shows two stale outbound link for one of the remaining 2 DCs: DC=DomainDnsZones,DC=subdom,DC=mydom,DC=com NTDS DN: CN=NTDS

If I run Louis' "samba-check-db-repl.sh" script and it does not send an email then this is a "no news is good news" situation, I am assuming. DC1 sends no email. DC2 sends this: ERROR: Compare failed: -1 * Comparing [DOMAIN] context... * Objects to be compared: 287 * Result for [DOMAIN]: SUCCESS * Comparing [CONFIGURATION] context... * Objects to be compared: 1619 *

Hi James, thanks a lot for your hint. However, I seem to be unable to find it there. Can you please be a little more specific? I tried to check the replication topology, but no success. Thanks a lot! Best regards Johannes lingpanda101 via samba <samba at lists.samba.org> schrieb am Mo., 26. Juni 2017 um 20:52 Uhr: > On 6/26/2017 2:43 PM, Johannes Engel via samba wrote: > > Dear