similar to: Missing features in RSAT Group Policy Manager (Debian as Samba PDC)

On 3/10/23 8:56 AM, Rowland Penny via samba wrote: > > > On 10/03/2023 15:46, David Mulder via samba wrote: >> On 3/10/23 8:35 AM, Dennis Binkhorst via samba wrote: >>> I have been testing a Debian 11 (i386) server with samba >>> 2:4.13.13+dfsg-1~deb11u5 running as an Active Directory Controller. >>> This is >>> a stand-alone DC, meant for user

On 10/03/2023 15:58, David Mulder via samba wrote: > > On 3/10/23 8:56 AM, Rowland Penny via samba wrote: >> >> >> On 10/03/2023 15:46, David Mulder via samba wrote: >>> On 3/10/23 8:35 AM, Dennis Binkhorst via samba wrote: >>>> I have been testing a Debian 11 (i386) server with samba >>>> 2:4.13.13+dfsg-1~deb11u5 running as an Active

On 1/6/23 8:11 AM, Dawson Greeley via samba wrote: > Hi, Im attempting to apply a few group policy settings but they dont seem to be applying on the machine in question, or some settings I cannot see in the GPME. > > > 1. Settings applied to openssh dont seem to create the required config files in /etc/ssh/sshd_config.d/ for ssh to actually pick up on these changes. Is there a

Hi, Im attempting to apply a few group policy settings but they dont seem to be applying on the machine in question, or some settings I cannot see in the GPME. 1. Settings applied to openssh dont seem to create the required config files in /etc/ssh/sshd_config.d/ for ssh to actually pick up on these changes. Is there a different location its applying these to that I can verify with? Below is

Hi! I had a samba 4.10.8 (DC1) AD DC which was holding all the FSMO roles and a samba 4.18.9 (DC2) AD DC with one way sysvol replication using rsync from DC1 to DC2. Since I'm trying to get the admx files for group policy editor into de DC I succesfully transfered the FSMO roles from DC1 to DC2 with "samba-tool fsmo transfer role=all -U SAMDOM\\Administrator" which I can confirm

Hi again, Looking at setting group policy for Linux desktops's chrome installs. Reading through the group policy book (https://dmulder.github.io/group-policy-book/chrome.html#server-side-extension-10) it says I should have some RSOP's for chrome when I've set a policy except Im not seeing these set. I have a policy that is supposed to be setting the home url under

Hello Samba Team, how are you? I'm joining linux clients in the company's environment and I would like to apply GPOs to linux clients, I'm in the testing phase. I'm testing with ubuntu clients version 22.04 and the software I used to join the samba AD was sssd. The 22.04 ubuntu client has joined and everything is working fine except for the GPOs for linux clients. I compiled

I've made some minor changes to the join document for Azure AD. Specifically, there was a major mistake in the TransportKey definition. If you're working on a join implementation, make sure you pay close attention to the changes. Azure accepts just about any blob in the TransportKey field, and doesn't perform any validation on it. This only becomes obvious when future responses

Hello. Is there a way to start Gpo startup scripts using logged user? i can see that startup scripts working from root, yes there is option run_as (which somehow dont work) but this is not what i need, i dont want to create GPO for every user. i need gpo that will start script from user that just logged it, not root.

On 13/03/2023 15:11, Dr. Nicola Mingotti via samba wrote: > Hi all, > > Peter, i think i have a problem similar to yours. > > I am running on Debian stable, package, bullseye backports > --- > $> /usr/sbin/samba --version > Version 4.17.5-Debian > --- > > I just moved my "dc" from another machine, using the join/demote > procedure. Everything

On 4/14/23 2:23 AM, Anderson Sampaio Mello via samba wrote: > Hello Samba Team, how are you? > > I'm joining linux clients in the company's environment and I would like to > apply GPOs to linux clients, I'm in the testing phase. > > I'm testing with ubuntu clients version 22.04 and the software I used to > join the samba AD was sssd. > > The 22.04 ubuntu

On 14/04/2023 15:51, Anderson Sampaio Mello via samba wrote: > Thanks everyone for the reply. > > But actually the samba documentation: > > https://wiki.samba.org/index.php/Group_Policy#SSSD > > and from David Mulder(dmulder): > > https://dmulder.github.io/group-policy-book/policy-refresh.html#sssd-refresh > > It makes it clear that sssd does support samba AD

On 18/04/2023 18:15, David Mulder via samba wrote: > I was able to get it to work by setting up a simple smb.conf, and doing > a `net ads join`. SSSD is still the auth provider. > > My simple smb.conf looks like this: > > dmulder at dmm-tw:~> cat /etc/samba/smb.conf > [global] > ?? ?idmap config * : backend = tdb > ?? ?idmap config * : range = 10000-20000 >

On 13/03/2023 17:05, David Mulder via samba wrote: > > On 3/13/23 10:54 AM, Rowland Penny via samba wrote: >> Glad it isn't just myself having problems understanding that code, it >> is horrible :-D >> >> If it is a machine, why is it trying to look up a uid ? I traced where >> the error message is coming from, but couldn't understand what was

On 13/03/2023 17:19, David Mulder via samba wrote: > > On 3/13/23 11:14 AM, Rowland Penny via samba wrote: >> I was referring to: >> add_local_groups: SID S-1-5-21-2112549936-2540803609-4198596461-1600 >> -> getpwuid(3000148) failed, is nsswitch configured? >> >> Which is coming from source3/auth/token_util.c >> > That's not part of the

Greetings samba team. There is a problem for file policy type GPOs for Linux clients. to copy files to linux clients with winbind. The problem is that when a file already exists in the linux client with winbind and joined to the domain, the GPO does not copy the file from the samba server to the destination linux client, that is, it does not replace the file in the destination if it already

Hi all, I run cmd: samba-tool gpo manage scripts startup add \ {31B2F340-016D-11D2-945F-00C04FB984F9} \ /var/lib/samba/sysvol/fartest.local/scripts/startup.bat with result: [cut] ERROR: The authenticated user does not have sufficient privileges ? File "/usr/lib/python3/dist-packages/samba/netcmd/gpo.py", line 3230, in run ??? create_directory_hier(conn, vgp_dir) ? File

On 17/04/2023 15:47, David Mulder via samba wrote: > On 4/14/23 2:23 AM, Anderson Sampaio Mello via samba wrote: >> Hello Samba Team, how are you? >> >> I'm joining linux clients in the company's environment and I would >> like to >> apply GPOs to linux clients, I'm in the testing phase. >> >> I'm testing with ubuntu clients version

On Thu, 18 Apr 2024 10:05:39 -0600 David Mulder via samba <samba at lists.samba.org> wrote: > > On 4/18/24 8:07 AM, Rowland Penny via samba wrote: > > OK, After reading the commands help, I created a simple script and > > ran the command like this: > > > > adminuser at tmpdc1:~ $ sudo samba-tool gpo manage scripts startup add > >

On Thu, 18 Apr 2024 12:14:20 +0200 Jaros?aw K?opotek - INTERDUO via samba <samba at lists.samba.org> wrote: > W dniu 18.04.2024 o?12:01, Jaros?aw K?opotek - INTERDUO via samba > pisze: > > > > W dniu 18.04.2024 o?09:56, Rowland Penny via samba pisze: > >> On Thu, 18 Apr 2024 09:03:10 +0200 > >> Jaros?aw K?opotek - INTERDUO via samba<samba at