similar to: Service Winbind stopped, what could be the reason ?

Dear Rowland, Please find a dump of smb.conf and resolv.conf of my centos 7 server : # testparm Load smb config files from /etc/samba/smb.conf Loaded services file OK. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions # Global parameters [global] client min protocol = SMB2 client signing = required disable spoolss = Yes domain

On 28/04/2020 15:35, Edouard Guign? via samba wrote: > Hello dear Samba users, > > I recently faced an issue with samba (4.10.4) and winbind. > The winbind service was stopped, so no user can acces to my samba share. > I restart the winbind service, and all users can access to the share as usually... > But I would like to understand why this issue occured. > > My samba

Hello Rowland, Yes, this is an Unix Domain member. Below, my smb.conf : [global]     security = ads     realm = IPGAD.MYDOMAIN.FR     workgroup = IPGAD     kerberos method = secrets and keytab     server signing = mandatory     client signing = mandatory     client use spnego = yes     hosts allow = 127. 10.9.X. 10.9.X. 10.9.X. 10.9.4. 10.9.X.     hosts deny = 10.9.X. 10.9.X.    

Dear Samba Users, I am preparing a Samba box as standalone server (only files server, centos 7). This Samba box is a domain member server, and is dedicaded to serve files to about 80 domain users. I am wondering if there are some special requirements for this purpose in terms of CPUs, Memory ? The Samba box is a Vmware virtual machine, so I can easely configure this. I noticed also in some

Hello, I set a share on a samba 4.7.1 as domain member with an Active Directory controler, this share is used by all domain users. All users from the AD domain have a primary group "Domain Users", and secondary groups to filter access on the folders of the share. I noticed that when a user create a sub-folder/file inside a "Top folder", the default permissions from the

Edouard, These are the 4 available parameters containing the word "inherit". inherit acls (S) inherit owner (S) inherit permissions (S) map acl inherit (S) Would "inherit acls" work for you? Dale On 12/10/18 10:56 AM, Edouard Guigné via samba wrote: > Hello, > > I add to my previous mail, the only way i found to disable acl

Hello Dale, Set inherit acls = yes locally to my share groups, and remove map acl inherit = yes from global parameters of smb.conf does not solve my issue. I still have acl "Domain Users" added to new folders/files. As i write in my previous email, the only way i found to disable acl "Domain Users" to be added was with : inherit owner = yes With some disavantages for users

Log level to 10 was for debug reasons, I can now surely set to 1 now. Concerning idmap config IPGAD, I don't see why is the reason to start at 1... I will set to 10000 as according to the documentation, thank you. What do you mean by " You are also using the winbind 'ad' backend, so have you added anything to AD ? " ? Le 10/04/2019 à 12:38, Rowland Penny via samba a

Dear All, I have been using centos 5.1 for quite some time as out DNS and mail server and been workin fine i use sendmail as my mail server i did setup a backup mail server as per docs and ran th dns test from http://www.checkdns.net and it says both the mail servers are fine but i would like to know the following how would i really know if my main primary server is down all my mails r goin

good morning all, i have a fc2 server running samba 3.0.10-1. from my daily logwatch i get these type of entries: smbd/service.c:make_connection_snum(648) workstation1 (10.19.1.2) connect to service share1 initially as user user1 (uid=802, gid=512) (pid 28851) : 5 Time(s) on all shares that user1 connects to, i get the same message identifying the share (share2, share3, etc...) with same pid

Hello all, System background first: -Server = Mandrake-Linux 7.2, Kernel 2.2.17 (Distro Kernel), SAMBA 2.0.7 -Workstation1 = Win95 -Workstation2 = Win2000 Pro -Users and passwords entered in smbpasswd, workstation logins = Unix user/password pair, IP/NetBios entered in lmhosts, users placed in smbusers, working smb.conf -Each workstation uses identical drive/share mappings and each can

Hello, Thank you Rowland, Yes, I wanted to anonymize smb.conf and missed to change IPGAD in MYAD on some lines, sorry Does "winbind nss info = rfc2307" is not used anymore, because of "idmap config ipgad : schema_mode = rfc2307" ? Best Regards, Ed ----- Mail original ----- De: "sambalist" <samba at lists.samba.org> ?: "sambalist" <samba at

hello, My 2nd issue is about acls which are added by "Domain users". May you help me to solve it again ? Concerning this issue, on my samba share, I set permissions for the share "groups" located on /var/datashared for "domain admins" (rwx) and "domain users" (r-x) /var]# getfacl datashared/ # file: datashared/ # owner: root # group: root user::rwx

On Wed, 10 Apr 2019 12:08:55 -0300 Edouard Guigné via samba <samba at lists.samba.org> wrote: > Hello Rowland, > > Yes, this is an Unix Domain member. > > Below, my smb.conf : > > [global] >     security = ads >     realm = IPGAD.MYDOMAIN.FR >     workgroup = IPGAD >     kerberos method = secrets and keytab >     server signing = mandatory >

Hello, I add to my previous mail, the only way i found to disable acl "Domain Users" to be added is with : */inherit owner = yes/* This has the advantage to recopy exactly the default acl defined on the parent folder. But this has the disavantage to not show which user has created a folder/file and the ownership. Does something like "inherit group owner = yes" exist ?

Hello, My samba share is on a Linux Centos 7, samba version 4.8.3. Please find here is my smb.cnf : [global] ??? security = ads ??? realm = MYDOMAIN.MYDOMAIN.LOCAL ??? workgroup = MYDOMAIN ??? kerberos method = secrets and keytab ??? server signing = mandatory ??? client signing = mandatory ??? hosts allow = 127. 10.x.x. 10.x.x. ??? hosts deny = 10.x.x. 10.x.x. ??? log file =

Hello Dale, I set map acl inherit = yes in global parameters of smb.conf and set inherit owner = yes locally to my share "groups" of smb.conf I have followed the wiki https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs It is indicated : "To configure shares using extended access control lists (ACL), you must enable the support in the |smb.conf| file. To enable

Edouard, No, that won't work for you.  "inherit acls" is intended for posix ACL's. Since you are using Windows ACL's, try setting the permissions/inheritance you want from a Windows system. Dale On 12/10/18 12:40 PM, Edouard Guigné wrote: > > Hello Dale, > > Set inherit acls = yes locally to my share groups, and remove map acl > inherit = yes from global

On Mon, Apr 11, 2016 at 05:22:43PM +0200, Leon Fauster wrote: > Am 11.04.2016 um 15:44 schrieb Marcin Trendota <moonwolf.rh at gmail.com>: > > > > Any ideas? > > > DNS? Is LDAP listed in the /etc/nsswitch.conf? -- Scott Robbins PGP keyID EB3467D6 ( 1B48 077D 66F6 9DB0 FDC2 A409 FA54 EB34 67D6 ) gpg --keyserver pgp.mit.edu --recv-keys EB3467D6

This way is so easier... Thank you Rowland Le 20/06/2019 ? 14:01, Rowland penny via samba a ?crit?: > On 20/06/2019 17:54, Edouard Guign? via samba wrote: >> My idea is to replace default "cifs_idmap_sss.so" plugin by >> "idmapwb.so" winbind plugin, in order to SSSD becomes a client of >> winbind. >> To avoid to change nsswitch.conf : >>