similar to: access "claim types"

what do I miss here: wbinfo -u / -g -/ -pPt works [2019/09/05 17:15:25.963590, 1] ../source3/librpc/crypto/gse.c:658(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/SAMBA.noras.intra at NORAS.INTRA(kvno 54) in keytab MEMORY:cifs_srv_keytab (aes256-cts-hmac-sha1-96)] [2019/09/05 17:15:25.963681, 1]

Am 03.01.19 um 15:29 schrieb Rowland Penny via samba: > On Thu, 3 Jan 2019 15:08:46 +0100 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> >> We are in the process of switching over shares from the old way of >> doing this to Windows ACLs: >> >> disable "valid users" "write list" etc >>

Am 07.09.18 um 20:07 schrieb Rowland Penny via samba: > On Fri, 7 Sep 2018 19:09:37 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: >> But >> >> # net rpc rights grant "Domänen-Admins" SeDiskOperatorPrivilege -U >> "mydomain\administrator" >> >> fails >> >> also for

On Wed, 30 May 2018 16:03:30 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > We see that it is old ("SWAT", date) and ugly ... > > > # cat /etc/samba/smb.conf > # Samba config file created using SWAT > # from UNKNOWN (192.168.100.66) > # Date: 2012/07/23 14:38:02 It isn't that old;-) You wont be using swat again, it

Am 25.02.20 um 15:16 schrieb Rowland penny via samba: > On 25/02/2020 14:01, Stefan G. Weichinger via samba wrote: >> Am 25.02.20 um 14:54 schrieb Rowland penny via samba: >>> You do not need it, it is only required if using the winbind 'ad' >>> backend and only then if you don't want possible problems with sysvol. >> What? Now I *don't* need it?

Hai Stefan, Yes, its always better to ask the list, that way everybody can learn from it. ;-) > Do you think I will have to rejoin it to the domain? No i dont think so. Please note, o dont know anything about gentoo except that they have a good wiki/info pages. If this was debian, then in this case, what i would extra do here, run : samba -b and backup all folders of samba and any thing

I?ve got a situation with my Macs connecting to a Linux server via SMB where files/folders are randomly getting deleted from the server. The server logs are showing that a Mac is deleting them, but I know for a fact that it?s not human error, as my users are very vigilant in that regard, and the files/folders have no correlation to each other.Is there anyway of finding out how/why my Macs are

Hi Samba engineer, We use an Ubuntu 20.04.6 systems as Samba server. The Samba version is 4.15.13-Ubuntu. The SMC-Client is a Windows Server 2022 Standard 21H2. The hostname of the Ubuntu Samba server is "samba-srv" On the Windows system, Samba disk is shared with the command: C:>net use Y: \\samba-srv\customers /u:hans Enter the password for 'hans' to connect to

On Fri, 25 Oct 2024 08:35:08 +0000 Hans van Leeuwen via samba <samba at lists.samba.org> wrote: > Hi Samba engineer, > > We use an Ubuntu 20.04.6 systems as Samba server. > The Samba version is 4.15.13-Ubuntu. > The SMC-Client is a Windows Server 2022 Standard 21H2. > > The hostname of the Ubuntu Samba server is "samba-srv" > On the Windows system, Samba

We are in the process of switching over shares from the old way of doing this to Windows ACLs: disable "valid users" "write list" etc and set ACLs via Windows Explorer ... And I struggle. I am asking for a way to "start ACLs from scratch". I ran "setfacl -b -R" on the dir on the samba server and did a "chown -R root:10513" to hand it to

*Mike Soliven* *IT Manager* Winnipeg, Manitoba, Canada R2X 2Y1 204.697.3338 Ext.1235 www.embassygraphics.com CONFIDENTIALITY NOTICE: This electronic transmission and any attachment are the confidential property of the sender, and the materials are privileged communications intended solely for the receipt, use, benefit, and information of the intended recipient indicated above. If you are not the

Am 26.11.19 um 17:37 schrieb Rowland penny via samba: > How about 'getent group Domain\ Users' ? no result = empty reply The "admin" there is able to access stuff and reset his ACLs already. So ... things work so far. thanks. I will consider the config Louis suggested ... but not now (my reply was rejected by some samba-ml-SMTP-server ... another problem)

Am 05.09.19 um 17:37 schrieb Stefan G. Weichinger via samba: > Am 05.09.19 um 17:19 schrieb Stefan G. Weichinger via samba: >> >> what do I miss here: > > update: maybe the reboot of the clients helped ... looks better now > > > Access works, but I still get [2019/09/05 17:49:41.888422, 1] ../source3/librpc/crypto/gse.c:658(gse_get_server_auth_token)

On Wed, 30 May 2018 09:48:04 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 2018-05-30 um 09:21 schrieb L.P.H. van Belle: > > Hai Stefan, > > > > Yes, its always better to ask the list, that way everybody can > > learn from it. ;-) > > > >> Do you think I will have to rejoin it to the domain? > > No

Status: domain member server, Samba version 4.10.11-Debian [global] dedicated keytab file = /etc/krb5.keytab domain master = No kerberos method = secrets and keytab load printers = No local master = No preferred master = No printcap name = /dev/null realm = customer.INTRA security = ADS template homedir = /mnt/MSA2040/smb/Homes/%D/%U unix charset = iso8859-15 unix extensions = No

On 13/02/2023 13:04, Stefan G. Weichinger via samba wrote: > I am a bit confused right now (maybe always): you told me "Administrator > shouldn't own anything on Unix" From the Unix end, you should never find Administrator owning anything. This is because, as my example showed. as a Unix use, Administrator is just a normal, unprivileged user e.g. my example Unix

Am 13.02.23 um 12:14 schrieb Rowland Penny via samba: >> # ls -n >> insgesamt 24 >> drwxrwxr-x+ 4 0 10512 4096? 9. Dez 20:43 Test1 >> drwxrwxr-x+ 2 0 10512 4096? 9. Dez 20:41 test2 >> drwxrwxr-x+ 2 0 10512 4096? 9. Dez 20:41 test3 >> >> gid 10512 should be "domain admins" or in this case german >> "dom?nen-admins" with an ugly

On Wed, 30 May 2018 15:26:37 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 2018-05-30 um 15:01 schrieb Rowland Penny via samba: > > > There are three main winbind backends, but only two are really used > > on Unix domain members, the 'ad' and the 'rid' backends. Which you > > use is really down to a simple

That domain member server worked fine for about 2 weeks until today. Somehow the DNS-record didn't work anymore, I did a rejoin and added some kerberos-related lines to smb.conf # 2 lines old winbind cache time = 10 winbind use default domain = yes # new lines dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind refresh tickets = Yes created keytab,

Hi, With smb.conf having full_audit and recycle, today I saw: Sep 17 10:48:49 kantoor smbd_audit[2317861]: hannah|192.168.1.26|ashare|unlinkat|ok|/home/ashare/Documents/20240917Workflow.ods However, there's no /home/.recycle/hannah/Documents/ or any other hint of 20240917Workflow.ods in her recycle directory. As there is a copy of the last version of this file (in another users