similar to: file sharing using native NFS4 ACLs on Linux

Le mer. 15 mai 2024 ? 12:32, Rowland Penny via samba <samba at lists.samba.org> a ?crit : > On Wed, 15 May 2024 10:36:03 +0200 > mathias dufresne via samba <samba at lists.samba.org> wrote: > > > Hi everyone, > > > > Is it possible on Linux systems to share through SMB managed by Samba > > some NFS4 mounted FS and that Samba is using NFS4 ACLs only?

On Wed, 15 May 2024 13:02:24 +0200 mathias dufresne via samba <samba at lists.samba.org> wrote: > Le mer. 15 mai 2024 ? 12:32, Rowland Penny via samba > <samba at lists.samba.org> a ?crit : > > > On Wed, 15 May 2024 10:36:03 +0200 > > mathias dufresne via samba <samba at lists.samba.org> wrote: > > > > > Hi everyone, > > > > >

On Wed, 15 May 2024 10:36:03 +0200 mathias dufresne via samba <samba at lists.samba.org> wrote: > Hi everyone, > > Is it possible on Linux systems to share through SMB managed by Samba > some NFS4 mounted FS and that Samba is using NFS4 ACLs only? Re sharing an NFS filesystem by Samba isn't a good idea. > > The point would be to not store anything on Samba

Hi everyone We're really struggling with nfs4 <--> windows acls. Scenario Samba4 share --> cifs --> win7. No problem Samba4 share --> nfs4 --> Linux. acls not inherited Neither is there inheritance vica versa. e.g. It is not possible to create files with group rw on a umask 0022 nfs4 share. nfs4_setfacl cannot override umask. Using POSIX or windows acls this works

2017-08-30 16:15 GMT+02:00 mathias dufresne <infractory at gmail.com>: > > > 2017-08-30 16:05 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org> > : > >> On Wed, 30 Aug 2017 15:01:05 +0200 >> "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: >> >> > Small addition. >> > >> > > have in

Hi, After more investigations I'm now believing that we have some issue on our AD site declaration. I'll be back once I would have get more information. Best regards, M. Le jeu. 8 nov. 2018 à 11:22, mathias dufresne <infractory at gmail.com> a écrit : > Hi all, > > AD version is MS 2008R2. > > smb.conf is : > [global] > workgroup = AD > security = ADS

On Wed, 5 Oct 2016 12:04:53 +0200 mathias dufresne via samba <samba at lists.samba.org> wrote: > I just tested on some DC running also 4.4.5 and "getent group > my_group" does not show groups content. > > I read here > http://serverfault.com/questions/625416/samba-4-group-members-not-shown-in-getent-group > a proposal to use samba-tool as a replacement but

On 16/11/15 14:33, mathias dufresne wrote: > Another error coming often: > [2015/11/16 15:11:07.592598, 0] > ../source4/librpc/rpc/dcerpc_util.c:745(dcerpc_pipe_auth_recv) > Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 for >

All DC are running same Samba version : 4.4.2. All DC are hosted on same Centos 7. On broken server(s): wbinfo -i mdufresne failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND Could not get info for user mdufresne On working servers: wbinfo -i mdufresne AD.DOMAIN\mdufresne:*:12104:100:Mathias Dufresne (TEMP):/home/AD.DGFIP/mdufresne:/bin/false The smb.conf is:

On Thu, 31 Aug 2017 16:27:12 +0200 mathias dufresne <infractory at gmail.com> wrote: > PS: the short way to explain %u is adding domain/workgroup to > username is the fact we are using trust relationship? > Probably, what you have to get your head around is this: The users 'fred', 'DOMAINA\fred' and 'DOMAINB\fred' are all different users. Winbind will

On 16/11/15 15:09, mathias dufresne wrote: > That did not work. I've added DNS entries mentioned in that wiki page. I > also forced creation of all entries mentioned by samba_dnsupdate > --all-names --verbose. > So I expect all needed DNS entries are present. If some are still missing > they are not mentioned by samba_dnsupdate. And as samba_dnsupdate job is to > create

Read wasn't the question. Question was about removing children but not the parent. parent-folder -> not removable |_ Children1 -> |_ Children2 -> both removable I don't know how Samba deal with that, but that's not the point for now. For now you have to understand NTFS permissions a little bit (I have not the knowledge to write something like a lesson about NTFS

Hi Rowland, Thank you for your reply. I'll provide these information but for now I'm suspecting Samba and others things could be installed in a strange manner. I have to check that first... Best regards, mathias Le mar. 6 nov. 2018 à 10:36, Rowland Penny via samba <samba at lists.samba.org> a écrit : > On Tue, 6 Nov 2018 10:16:26 +0100 > mathias dufresne via samba

If my messages seems somehow unreadable - I sent it from Gmail Web UI. mathias dufresne, read my 2 or 3 last messages. I wrote about mounting \\server\share as disk and risky fo viruses crypting files. Also read messages other, who does not work in AirBus. And more over, it' s your oppinion. But I see useless of more discussion at atll. If you want to combine your efforts to help with

On 27 January 2016 at 17:40, mathias dufresne <infractory at gmail.com> wrote: > Hi, > > Samba DC generates a krb5.conf into private directory, where the database > is hold. > > Its content should be that: > [libdefaults] > default_realm = SAMBA.DOMAIN.TLD > dns_lookup_realm = false > dns_lookup_kdc = true > > Should only as I get

Once more, my bad : ) I'm using Ext4 file system, so no limitation from there (or missed something) 2015-06-01 15:12 GMT+02:00 S?bastien Le Ray <sebastien-samba at orniz.org>: > Hi, > > Is there any possibility that you're using a filesystem which such > limitations? > > Regards > > > Le 01/06/2015 15:11, mathias dufresne a ?crit : > >> Hi,

2016-10-19 8:56 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Wed, 19 Oct 2016 08:47:25 +0200 > mathias dufresne <infractory at gmail.com> wrote: > > > > > > > > > The domain member will ask its nameserver (which should be an AD > > > DC), > > > > > > > The client send request to its resolver, which

You do what you want! The point is the clients must resolve everything. You have two options: A - client resolver is non-DC DNS server: here the non-DC DNS server must be configured to forward DNS requests about AD to AD DNS servers (to DCs) B - client resolver is AD DNS server: here AD DNS server(s) used as resolver(s) must be configured to forward any non-AD DNS request to non-DC DNS server.

PS: I could share information about what should be modified to modify the very same GPO, I didn't yet as I'm not sure anyone there would be interested and because that would work only for that kind of GPO. 2016-07-06 17:08 GMT+02:00 mathias dufresne <infractory at gmail.com>: > Context: several teams have to manage only a a bunch of the company's > computers, so these

I try to set up a Samba4-based Fileserver in an Samba3-DC enviroment. Filesystem is ext4, CIFS + NFS4 should be provided. The same ACLs should be used over both protocols. With Samba 3 this was possible (using POSIX 1003.1e DRAFT 17 ACLs only) . How can I do the same with Samba 4 ? Posix-ACLs set on the server with setfacl are recogniced on a windows-client. But every change I do on a