similar to: Linux client joined to domain

The "short" version on why multiple groups here. For all my member servers apply the following. This line : > > AllowGroups servers-ssh sshgroup There are 2, linux only Admin accounts, ( local accounts ) And, only if these are member of the "local group" sshgroup then your allowed to login. Only users that are allowed to login with ssh on these servers

The sshgroup exists on the client/workstation: > root at lws4:~# cat /etc/groups > ..................... > sshgroup:x:998:adminlinux > ..................... > But, on my member server that acts as a fileserver for domain users (redirected) files there is no "sshgroup" at this time. The AD has server-ssh group: > root at dc1:~# samba-tool group listmembers

Okay, now so I don't get confused. Yes, /home/WKDOM/tuser16 does exist on the client/workstation. root at lws4:~# getent group > root:x:0: > *..snipped for brevity..* > winbindd_priv:x:129: > sshgroup:x:998:adminlinux > postfix:x:130: > ..snipped for brevity.. > There is no servers-ssh group on the C/W. (I have a server-ssh group somewhere per Louis' instructions,

My Samba4 computers (DC's & member server) are not shown within W10 File Explorer Network. Only the other workstations appear. I believe this is due to smb1 being depreciated. All the folder redirection still works, gpo, etc. Domain users can log in. What do I need to adjust so these machines appear in smb2? (I know this has been talked about before sorry.) -- Thank you. Bob Wooden

On 2016-11-07 03:06, Rowland Penny via samba wrote: > On Mon, 7 Nov 2016 09:51:50 +0100 > "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > > I thought the W clients (both W7 and W10) reverse dns PTR records > where added by the ADDC automatically. Yes, correct if your setup is correct then yes this works. With a default windows install and with a

I am having some issues that I believe might be related to folder redirection that has prompted me to review my folder redirection GPO settings. On the "Configuring Windows Profile Folder Redirections" page of the Samba WIKI I find an 'information box' that says, /"//Windows does not support dynamically-generated user home folders provided by the Samba [homes] section.

This topic may have been discussed many times, sorry to repeat here. I have been trying various combinations of adding test users via ADUC. The first three (3) added fine. Then the strange began. Many, many W10 client re-starts throughout these process to make client capture any changes from servers. In one case, create the user, give him/her a password. Login from W10 client. Logout of W10

Rowland, I remember now, you and I have been here before and I have lost the email. Due to the manner that linux handles backslashes "\" users need to backslash *around* the backslash you need for W10 like so, "\\\\FQDN" to get "\FQDN" on the W10 path? Therefore, the following is what I want: "--profile-path=\\dtmbr04.ad.dtntwk.work\profiles\sttest11

Hai Bob, Van: Robert Wooden [mailto:wdn2420systm at gmail.com] Verzonden: maandag 28 september 2020 23:37 Aan: L.P.H. van Belle CC: samba at lists.samba.org Onderwerp: Re: [Samba] Debian client/workstation pam_mount Louis, You said: For all my member servers apply the following.? This line : > > AllowGroups servers-ssh sshgroup? ? "apply the following" where???? There

Once again, reading here and there and I am confused. I thought the W clients (both W7 and W10) reverse dns PTR records where added by the ADDC automatically. This mornings testing (nslookup of client IP addresses) is not finding clients via their IP addresses. (Forward lookups via hostname work fine.) Do we (users of samba4) need to add each W client to our dns servers? (Grated this would

Somewhat Samba related, I ask this question (that might be over the line and into Windows territory) but, here I go . . . Of those user on this mailing list that manage Samba installs for various clients/customers, what are your most used GPO policies you have put into place for AD management? I ask because, when you venture over into Windows world and start reading posted articles about their

>> I thought the W clients (both W7 and W10) reverse dns PTR records >> where added by the ADDC automatically. >> Yes, correct if your setup is correct then yes this works. With a default windows install and with a few GPO changes. > Early samba4 versions does not support (or have a buggy support) for auto->register PTR recors, as far i remember. I use windows to let

Hai Bob, > I hope you remember me from a few years ago. And I apologize for the direct message. > I have a almost non-Samba question, I think. So, I do not want to post it to the forum, yet. Yes yes, i remember you :-) , and i have no problem with direct messages. How are you doing? I'll reply to the list with a CC for you. Because this involves samba also. And this might help

You can add windows server 2012 to samba 4 domain as a domain member (without AD DC role) without any issues. I myself have added multiple windows 2012, 2012r2 and 2016 member servers without any issues. And, what's important, You actually DON'T want to make them DC, because of what Rowland just wrote. Regards, Kacper. W dniu 04.05.2019 o 20:19, Rowland Penny via samba pisze: >

It has become necessary to have a W2012 server on my local lan. I have an existing Samba 4 (Ubuntu) domain with two controllers, a (Ubuntu) member server and a few W10 workstations. If I am reading the wiki correctly "Joining a Windows Client or Server to a Domain" page indicates Windows clients or "servers" and the "server" portion of the lists include W2012. Now,

On 2016-11-05 08:21, Rowland Penny via samba wrote: > On Sat, 05 Nov 2016 08:07:18 -0500 > Bob of Donelson Trophy via samba <samba at lists.samba.org> wrote: > > On 2016-11-05 07:46, Mike Lykov via samba wrote: > > 05.11.2016 16:09, Bob of Donelson Trophy via samba пишет: > > Once again, reading here and there and I am confused. > > I thought the W clients

On 2016-11-05 07:46, Mike Lykov via samba wrote: > 05.11.2016 16:09, Bob of Donelson Trophy via samba пишет: > >> Once again, reading here and there and I am confused. >> >> I thought the W clients (both W7 and W10) reverse dns PTR records where >> added by the ADDC automatically. >> >> This mornings testing (nslookup of client IP addresses) is not

When I run "gpresult /R" on one of my domain users the ". . . following security groups" listed at the bottom of the output includes "Denied RODC Password Replication Group". Did a little web search digging and found that RODC stands for Read Only Domain Controller. My domain consists of two DC's and one member server with three W10 workstations. I have never

Rowland, If I stop one of the DC's the other will run fine. The non-running DC when "samba -i" complains that it cannot communicate with the other DC. Running "systemctl start samba=ad=dc.service" has the same cannot connect to other DC. If I stop the running DC with "systemctl stop samba-ad-dc.service" and start the second DC with "systemctl start

I have been searching around samba-tool --help under various options and I am not locating any adjustments to passwords. Like "User cannot change password" or "Password never expires". Granted these are W10 settings in 'user properties' (as examples.) Where would I find password edits or changes, etc.?