similar to: GPO fail and sysvol perm errors

On Sun, Oct 25, 2020 at 2:38 PM Rowland penny via samba <samba at lists.samba.org> wrote: > So '5035' is a computer, but what is '3000011' ? > You can find out by running this on the DC: > ldbsearch -H /path/to/idmap.ldb '(&(objectClass=sidMap)(xidNumber=3000011))' =================================== # ldbsearch -H /usr/local/samba/private/idmap.ldb

I'm seeing a lot of these errors from a Samba 4.13.0 DC running on Debian Buster, the smb.conf is untouched from that which was created via a classic upgrade. =============================== Oct 24 10:25:43 srvr01 samba[26688]: [2020/10/24 10:25:43.886363, 0] ../../lib/util/util_runcmd.c:352(samba_runcmd_io_handler) Oct 24 10:25:43 srvr01 samba[26688]: /usr/local/samba/sbin/samba_dnsupdate:

On 24/10/2020 15:44, Sonic via samba wrote: > I'm seeing a lot of these errors from a Samba 4.13.0 DC running on > Debian Buster, the smb.conf is untouched from that which was created > via a classic upgrade. > =============================== > Oct 24 10:25:43 srvr01 samba[26688]: [2020/10/24 10:25:43.886363, 0] > ../../lib/util/util_runcmd.c:352(samba_runcmd_io_handler)

On Sun, Oct 25, 2020 at 3:31 PM Rowland penny via samba <samba at lists.samba.org> wrote: > OK, if you look at the end of the permissions, there is a '+' sign, this > shows that extended acls set, to see these: > > getfacl /usr/local/samba/var/locks/sysvol The difference in acls is that the non-working domain includes: user:3000001:r-x user:3000002:rwx user:3000003:r-x

On 25/10/2020 19:21, Sonic wrote: > On Sun, Oct 25, 2020 at 2:38 PM Rowland penny via samba > <samba at lists.samba.org> wrote: >> So '5035' is a computer, but what is '3000011' ? >> You can find out by running this on the DC: >> ldbsearch -H /path/to/idmap.ldb '(&(objectClass=sidMap)(xidNumber=3000011))' >

Hello $list, i can't access the netlogon share on the second dc. I got this error: Mai 04 22:13:53 dc02 smbd[3321]: [2020/05/04 22:13:53.035964, 0] ../../source3/smbd/uid.c:448(change_to_user_internal) Mai 04 22:13:53 dc02 smbd[3321]: change_to_user_internal: chdir_current_service() failed! Mai 04 22:13:53 dc02 smbd[3321]: [2020/05/04 22:13:53.037230, 0]

Hello at all after a classicupgrade from samba 3.6 to samba 4.9.1 at first tests i found many error in log.smbd like these : [2018/10/31 15:26:51.317398,  0] ../source3/smbd/uid.c:386(change_to_user_internal)   change_to_user_internal: chdir_current_service() failed! [2018/10/31 15:26:51.317567,  0] ../source3/smbd/process.c:1627(switch_message)   Error: Could not change to user. Removing

On 25/10/2020 19:44, Sonic wrote: > On Sun, Oct 25, 2020 at 3:31 PM Rowland penny via samba > <samba at lists.samba.org> wrote: >> OK, if you look at the end of the permissions, there is a '+' sign, this >> shows that extended acls set, to see these: >> >> getfacl /usr/local/samba/var/locks/sysvol > The difference in acls is that the non-working

On 1/26/24 09:34, Peter Carlson via samba wrote: > > On 1/26/24 02:35, Rowland Penny via samba wrote: >> On Thu, 25 Jan 2024 18:45:52 -0800 Peter Carlson via samba >> <samba at lists.samba.org> wrote: >>> The share mounts and I am a member of the correct groups >>> CARLSON\peter at u2gui:~$ cat /etc/fstab //fs.carlson.lab/test >>> /mnt/test

Hi Samba Team! It's me again I'm having some issues with gpo's and sysvol access. I've installed samba 4.12.7. using idmap_ldb:use rfc2307 When I tried to create a gpo using the rsat tools I got a Permission Denied error. Among other things, I have run: samba-tool ntacl sysvolreset Also I added to smb.conf acl_xattr:ignore system acls = yes in sysvol and netlogon sections. I

On 13/10/2020 19:24, Franco Suarez via samba wrote: > Hi Samba Team! > > It's me again I'm having some issues with gpo's and sysvol access. Strange as it might seem, I do not remember you :-) > > I've installed samba 4.12.7. using idmap_ldb:use rfc2307 Yes, but what on and how ? > > When I tried to create a gpo using the rsat tools I got a Permission Denied

Hello, Issue Description After the upgrade of the Unraid server OS (unraid.net) from v6.9.2 to v6.12.6 (which upgrades the version of Samba from 4.12.14 to 4.17.12) access to shares stops working. Error Summary: [2024/01/07 21:52:43.357676, 0, pid=93992, effective(1278739538, 1278738945), real(1278739538, 0)] ../../source3/smbd/smb2_service.c:168(chdir_current_service) chdir_current_service:

Hi Rowland. I'm using CentOS 8.2.2004 The Samba is compiled from sources, it's the only DC and I'm not using it as a fileserver. # Global parameters [global] dns forwarder = 10.30.251.70 netbios name = SAMBA4-01 realm = LARRY.LAN server role = active directory domain controller workgroup = LARRY idmap_ldb:use rfc2307 = yes [sysvol]

On Thu, 11 Jan 2024 08:53:38 +0000 unraidster via samba <samba at lists.samba.org> wrote: > Hello, > > Issue Description > After the upgrade of the Unraid server OS (unraid.net) from v6.9.2 to > v6.12.6 (which upgrades the version of Samba from 4.12.14 to 4.17.12) > access to shares stops working. > > Error Summary: > [2024/01/07 21:52:43.357676, 0, pid=93992,

Just upgraded a file server to Samba 4.17.9-Debian and Bullseye (Debian 11). Noticed that am now getting a number of errors in the smbd log: 'chdir_current_service: vfs_Chfir (a-directory) failed. Permission Denied uid=................ The uid on all the entries seems to correspond to a computer/machine account if I look it up with 'wbinfo --uid-info'. Thoughts? Thank you

Sorry, did not send it to the list (damned Thunderbird)... On 31.01.2023 18:14, Michael Tokarev via samba wrote: > 31.01.2023 09:59, Peter Milesson via samba ?????: > >> The journal on a AD domain member server is cluttered with permission >> denied entries of this message pair: >> >> ??? Jan 31 07:02:26 konsrvfast smbd[436004]: [2023/01/31 >> ???

I just had something very strange happening, I'm curious if someone can understand what it was in spite of the limited available information. I'm running Samba 4.11.6 as an AD file server. Rowland checked my config recently and could not find any issue with it, it's really very standard, using the idmap backend. Only 2 users in the AD. Linux access is not a topic, the shares are only

On 31/01/2023 06:59, Peter Milesson via samba wrote: > Hi folks, > > The smb.conf and other information after specification of the problems. > > The journal on a AD domain member server is cluttered with permission > denied entries of this message pair: > > ?? Jan 31 07:02:26 konsrvfast smbd[436004]: [2023/01/31 > ?? 07:02:26.083500,? 0, effective(11025, 10515),

Hi folks, The smb.conf and other information after specification of the problems. The journal on a AD domain member server is cluttered with permission denied entries of this message pair: Jan 31 07:02:26 konsrvfast smbd[436004]: [2023/01/31 07:02:26.083500,? 0, effective(11025, 10515), real(11025, 0)] ../../source3/smbd/smb2_service.c:168(chdir_current_service) Jan 31

Hello, I am experiencing a strange behaviour that I think might be a bug. I was advised to consult the mailing list instead of trying to file a bug, so here it is. I have a user `kate` which is both a member of a `family` group and a `feddkate` group. There is a share called `FeddAndKate` which I what to be accessible to the `feddkate` group but not to a `family` group, and I've set up