similar to: cifsacl not working

On 9/24/20 11:51 AM, Aur?lien Aptel wrote: > The request-keys config looks right. > > You can check if winbind is properly configured trying to map with the > winbind CLI client called wbinfo. For example: > > # wbinfo -i NUC\\administrator > NUC\administrator:*:20501:20514::/home/NUC/administrator:/bin/bash > ^^^^^ ^^^^^ > uid

On 9/24/20 8:53 AM, Aur?lien Aptel wrote: > Ken Bass via samba <samba at lists.samba.org> writes: >> I installed a new Ubuntu 20.4 LTS system (smbd 4.11.6) . Initially I >> tried using the SSSD and 'realm' to join the domain. Everything worked >> similar to my Centos 7 install and I thought I was finished. >> >> The one thing not working is? cifs

On 9/25/20 5:14 AM, Aur?lien Aptel wrote: > Ken Bass via samba <samba at lists.samba.org> writes: >> Can you please expand on this, I am confused as to what you are >> suggesting.? If 'getent pass' works properly and shows no >> overlap/confusion, this seems to be related to cifsacl. > It's still hard to say at this point. > > cifs.idmap logs

On 9/24/20 1:06 PM, Rowland penny via samba wrote: > OK, you are using users & groups in the 1000-29999 range, why ? could > it be that you have the same users in /etc/passwd and AD ? On my Linux installs, I allow for a 'local' account with user id 1000. That is the only local account and is used for installing the OS (or in case AD is down). All other user/group accounts are

On 9/24/20 8:53 AM, Aur?lien Aptel wrote: > Ken Bass via samba <samba at lists.samba.org> writes: >> I installed a new Ubuntu 20.4 LTS system (smbd 4.11.6) . Initially I >> tried using the SSSD and 'realm' to join the domain. Everything worked >> similar to my Centos 7 install and I thought I was finished. >> >> The one thing not working is? cifs

On 9/24/20 12:10 PM, Rowland penny via samba wrote: > On 24/09/2020 16:58, Ken Bass via samba wrote: >> On 9/24/20 11:51 AM, Aur?lien Aptel wrote: >>> The request-keys config looks right. >>> >>> You can check if winbind is properly configured trying to map with the >>> winbind CLI client called wbinfo. For example: >>> >>> # wbinfo -i

On 25/09/2020 10:14, Aur?lien Aptel via samba wrote: > Ken Bass via samba <samba at lists.samba.org> writes: >> Can you please expand on this, I am confused as to what you are >> suggesting.? If 'getent pass' works properly and shows no >> overlap/confusion, this seems to be related to cifsacl. > It's still hard to say at this point. > > cifs.idmap

On 9/25/20 12:23 PM, Rowland penny via samba wrote: > On 25/09/2020 17:15, Ken Bass via samba wrote: >> On 9/25/20 5:14 AM, Aur?lien Aptel wrote: >>> Ken Bass via samba <samba at lists.samba.org> writes: >>>> Can you please expand on this, I am confused as to what you are >>>> suggesting.? If 'getent pass' works properly and shows no

On 25/09/2020 17:15, Ken Bass via samba wrote: > On 9/25/20 5:14 AM, Aur?lien Aptel wrote: >> Ken Bass via samba <samba at lists.samba.org> writes: >>> Can you please expand on this, I am confused as to what you are >>> suggesting.? If 'getent pass' works properly and shows no >>> overlap/confusion, this seems to be related to cifsacl. >>

On 24/09/2020 17:18, Ken Bass via samba wrote: > On 9/24/20 12:10 PM, Rowland penny via samba wrote: >> On 24/09/2020 16:58, Ken Bass via samba wrote: >>> On 9/24/20 11:51 AM, Aur?lien Aptel wrote: >>>> The request-keys config looks right. >>>> >>>> You can check if winbind is properly configured trying to map with the >>>> winbind

> Hello, > > I'm trying to resolve SID from a linux using a program written in c# > running under mono. > > I already know the Windows API LookupSID ( > https://docs.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-lookupaccountsida) > and its underlying raw RPC call ( >

Hi I recently started to look into Samba source code and SMB protocol . I saw that SMBv3 has an compression feature but I couldnt find any source code related to it. I tried sending compression_capabilities in negotiate request packet but there was no correspoding response. Isn't feature implemented yet? If not when are you planning to implement it? Thanks

Vincent Le Toux via samba <samba at lists.samba.org> writes: > Indeed, rpcclient is the program I looked for the first time. > > I cannot invoke it in a command line because I have at least 1000 SID to > resolve > (I discover them one by one so I'll have to run rpcclient at least 1000 > times) You can pass multiples SID at a time to these commands. But you would have

Rowland penny via samba <samba at lists.samba.org> writes: > I have no idea just what you are hoping to achieve, but it is seemingly > possible without authentication as 'wbinfo -n ACCOUNT_NAME' returns the > accounts SID. So try looking at the wbinfo code. wbinfo is talking to winbind which itself is talking to the AD. In this scenario the client previously joined

Rowland penny via samba <samba at lists.samba.org> writes: > 'S-1-5-18' is SYSTEM and from the looks of it, neither cifs.idmap or > winbind maps it on a Unix domain member (it does map on a Samba DC). It > is hard to understand from the manpages, does cifsacls use the same ID's > as Winbind, or does it calculate its own ? * cifsacl is the mount option. * When

Thanks Aur?lien Can you point to me how I can start LDAP connection using winbind ? I'm using ldap_simple_bind so far so there is no use of winbind in it. I'll be happy also if you can point me to the winbind API where you can input login / password br Vincent Le lun. 12 oct. 2020 ? 11:37, Aur?lien Aptel <aaptel at suse.com> a ?crit : > Hi Vincent, > > If you want to

Ken Bass via samba <samba at lists.samba.org> writes: > Can you please expand on this, I am confused as to what you are > suggesting.? If 'getent pass' works properly and shows no > overlap/confusion, this seems to be related to cifsacl. It's still hard to say at this point. cifs.idmap logs messages in the syslog. Can you try mounting with cifsacl, then look at logs

I need to add the ability to check permissions against ntfs acls that are set and maintained by a samba server, in our nfs stack. The nfs stack currently doesn't have anything to deal with this. I was wondering if Samba's code for creating and checking permissions against the security descriptor and related structs is something provided by third party libraries, or did Samba implement that

Hello, I was using both version of WTLib 2007 (French and Japanese) under Unbuntu7.10 and Wine 0.9.47 and it worked fine with just an installation of VCRedist and some japanese fonts in windows folder. But recently i moved my system to the new Ubuntu8.04 with the last version of wine : 1.0 RC1. I read that i don't need to install vcredist and font anymore. It's supposed to be a platinum

Hi, I post my message here because I can't debug my problem, I hope you have time to help me to find the problem. I'm trying to join my Samba machine to an ADS domain, but my "net ads join" don't work :( There is my logs, if you need more detail ask me. ~# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: administrateur@TEST.LAN Valid starting Expires