similar to: Users' Home Folders - conflicting advice in WiKi

On 10.04.2020 20:22, Rowland penny via samba wrote: > On 10/04/2020 18:02, Roy Eastwood via samba wrote: >> Rowland, >> >> In the Wiki page "User Home Folders", Section 2.1 "Using Windows ACLs" >> correctly describes how to set permissions to allow the Windows program >> Active Directory Users and Computers to automatically create the >>

On 10/04/2020 19:22 Rowland penny wrote: > On 10/04/2020 18:02, Roy Eastwood via samba wrote: > > Rowland, > > > > In the Wiki page "User Home Folders", Section 2.1 "Using Windows ACLs" > > correctly describes how to set permissions to allow the Windows > > program Active Directory Users and Computers to automatically create the user's home

On 10/04/2020 21:25, Alex MacCuish via samba wrote: > The way I do it, I create the home folder share on the server and set > the required ACLs as in the wiki. Then I fill in the field in the ADUC > Pane, Profile Path. Then I click ok. At that point, ADUC should open a > connection to the share, create the new folder, set the acl correctly > and then change the ownership. Hang

On 11/04/2020 11:00, Rowland penny wrote: > > Just confirmed that pam_mkhomedir is not enabled, created a new user test2 using ADUC. Set the Home folder on the Profile tab > to > > connect H: to \\<server name>\users\test2 and the folder is created on the server. > > > > Regards, > > > > Roy > > > > > That is NOT the users home

The way I do it, I create the home folder share on the server and set the required ACLs as in the wiki. Then I fill in the field in the ADUC Pane, Profile Path. Then I click ok. At that point, ADUC should open a connection to the share, create the new folder, set the acl correctly and then change the ownership. pam_mkhomedir is for when you're logging in say via SSH and unix needs

On 11/04/2020 10:21, Roy Eastwood wrote: > On 10/04/2020 19:22 Rowland penny wrote: >> On 10/04/2020 18:02, Roy Eastwood via samba wrote: >>> Rowland, >>> >>> In the Wiki page "User Home Folders", Section 2.1 "Using Windows ACLs" >>> correctly describes how to set permissions to allow the Windows >>> program Active Directory

On 10/04/2020 18:02, Roy Eastwood via samba wrote: > Rowland, > > In the Wiki page "User Home Folders", Section 2.1 "Using Windows ACLs" > correctly describes how to set permissions to allow the Windows program > Active Directory Users and Computers to automatically create the user's home > folder. But in the next section "Creating the Home folder

On 10/04/2020 21:53, Rowland penny wrote: > On 10/04/2020 21:25, Alex MacCuish via samba wrote: > > The way I do it, I create the home folder share on the server and set > > the required ACLs as in the wiki. Then I fill in the field in the ADUC > > Pane, Profile Path. Then I click ok. At that point, ADUC should open a > > connection to the share, create the new folder,

Hi list, We have a script we are using to create new users, and drop them into the proper OUs on our Samba AD server, using samba-tool. We have a Samba member file server (fs1) joined to the domain for hosting our file shares. On there is also where we are putting the users' home folders. I saw in the Samba Docs, and in the mailing list, that I can use

On 10.04.2020 22:53, Rowland penny via samba wrote: > On 10/04/2020 21:25, Alex MacCuish via samba wrote: >> The way I do it, I create the home folder share on the server and set >> the required ACLs as in the wiki. Then I fill in the field in the >> ADUC Pane, Profile Path. Then I click ok. At that point, ADUC should >> open a connection to the share, create the new

Hello Rowland, Am 12.06.2017 um 19:32 schrieb Rowland Penny via samba: > On Mon, 12 Jun 2017 10:04:56 -0700 > Luke Barone via samba <samba at lists.samba.org> wrote: > >> Hi list, >> >> We have a script we are using to create new users, and drop them into >> the proper OUs on our Samba AD server, using samba-tool. We have a >> Samba member file server

On Thu, 14 Dec 2017 12:23:43 +0100 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > Hai Rowland, > > > Even that msNPAllowDialin is a standard attribute, its not in my AD > anymore, at least not within the users fields. I think in time this > disapert wil fixing things.. This setup is running and upgraded as of > samba 4.1. but thank for

Thanks Rowland. See inline comments. >On Thu, 9 Nov 2017 17:08:52 -0000 >Rowland Penny via samba<samba at lists.samba.org> wrote: > See inline Comments: > > On Thu, 9 Nov 2017 16:11:49 -0000 > Roy Eastwood via samba <samba at lists.samba.org> wrote: > > > Hi, > > I have a Debian Stretch machine with Louis' samba 4.7.1 package > > installed.

Hi, I have a Debian Stretch system running a self-compiled version 4.7.3 of Samba. Having followed the Samba WiKi to allow AD users to log onto the servers using PAM authentication, I now want to restrict access to specified group(s). So I created a linuxadmins group and made some test users members of the group. Initially I tried to restrict access by modifying /etc/security/access.conf

> -----Original Message----- > From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Rowland penny via samba > Sent: 10 October 2019 11:27 > To: samba at lists.samba.org > Subject: Re: [Samba] how to automatically create the home directory > > On 10/10/2019 11:14, Stefan G. Weichinger via samba wrote: > > Customer asks why [home] doesn't work for a new

> -----Original Message----- > From: Rowland Penny [mailto:rpenny at samba.org] > Sent: 01 December 2017 17:40 > To: samba at lists.samba.org > Cc: Roy Eastwood > Subject: Re: [Samba] Restricting AD group logging on to Servers > > On Fri, 1 Dec 2017 17:06:42 -0000 > Roy Eastwood via samba <samba at lists.samba.org> wrote: > > > Hi, > > I have a

Hello, I am trying to auto create and mount home directories using a GPO, as per https://wiki.samba.org/index.php/User_Home_Folders. I currently have home directories being created, through the use of pam_mkhomedir.so. with 'obey pam restrictions = yes' in my smb.conf file. I have also setup the share permissions and Windows ACLs as per the above link. Unfortunately, even though the

> > There's fourth way, which is what is normally used in a Windows-only > environment, but works just the same with home folders on a > > samba DM fileserver. The method relies on creating the user with RSAT > tools using ADUC. > > > > On the Profile tab, set a drive letter, eg H: to the path to the home > folder, specifying the user's name as %username%

> -----Original Message----- > From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Rowland penny via samba > Sent: 10 October 2019 13:33 > To: sambalist > Subject: Re: [Samba] how to automatically create the home directory > > On 10/10/2019 13:02, Mason Schmitt wrote: > > > > > There's fourth way, which is what is normally used in a >

Rowland, I must be missing something here. Why can't the OP set the UID in ADUC to match that required in the other system? The Samba Domain member can use the ad backend, (rather than the rid), and no doubt file permissions will have to be readjusted accordingly, but at least the UID's will match the other system. The Windows DC doesn't care about the RFC2307 attributes, so that