Re: [Samba] Samba 4 not honoring setgid

On Wed, 2013-07-24 at 22:34 -0400, Ryan Bair wrote: I'm running Samba 4.0.7 on CentOS 6.4 as a AD DC with s3fs. I have a shared directory with the setgid bit set. From the shell on the server, new files and directories inherit the group as expected. However, new items created through samba

[Samba] Win dcpromo and SysVol Replication

When I DCPROMO a Win2003 server into an existing Samba4.1RC1 domain with two Samba DCs, all appears to be working correctly from the Samba side but the WinDC never starts sharing SysVol as it should. Sites and Services shows all DCs as expected and forcing repl with the Samba PDC works

Re: [Samba] Samba 4 not honoring setgid

Thank you for confirming. I do have g+s on the directory. I'll file a bug about this issue today. On Thu, Jul 25, 2013 at 3:30 AM, steve st...@steve-ss.com wrote: On Wed, 2013-07-24 at 22:34 -0400, Ryan Bair wrote: I'm running Samba 4.0.7 on CentOS 6.4 as a AD DC with s3fs. I have a

Re: [Samba] Samba 4 not honoring setgid

On Thu, 2013-07-25 at 08:17 -0400, Ryan Bair wrote: Thank you for confirming. I do have g+s on the directory. I'll file a bug about this issue today. No problem. If you go with the bugzilla, could you post the link here? Thanks. -- To unsubscribe from this list go to the following URL and

[Samba] Shared [home] shows up as printer

I just installed Fedora 19 and I'm trying to get everything back up and running. I have managed to get samba up and running through some brute force measures of disabling(for now) the firewalld. That being said, my shares for a data folder are working fine, but when I try to pull up my home

Re: [Samba] Samba/Winbind GID/IDs not the same using AD RID

Typo? idmap config THRACE : backed = rid should be idmap config THRACE : backend = rid I also suggest that you remove these lines password server = livia bkdc Socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 ldap ssl = no Rowland On 24

[Samba] DsGetDomainControllerInfoW fails with level 2008+, works with 2003

Hello, I stumbled on this problem while troubleshooting a time synchronization problem. The Windows commands w32tm /monitor and nltest /dclist:domain appear to both use the same call to query the domain for a list of domain controllers. When the DC is Samba4 (2003 domain forest level) these

[Samba] RODC between samba v4 servers

I'm preparing a lab to test the scenario in which a remote office uses a RODC to cache all users/computers/GPOs from a DC. I've set up a environment with all requirements (two subnets, one with a DC and the other with a RODC). I've joined the domain with a windows machine to the RODC subnet with

[Samba] ./configure LDAP checks failing on AIX

Samba version 4.0.7 Aix 6.1 Compiler: IBM xlc Last lines of ./configure output: Checking for ldap_init : not found Checking for ldap_init_fd : not found Checking for ldap_initialize : not found Checking for ldap_set_rebind_proc : not found Checking for ldap_add_result_entry : ok Checking

[Samba] Cleanup CN=Deleted Objects, DC=DomainDnsZones, DC=domain, DC=local

Hi, Due to an not so well coded dns update script my /var/lib/samba/private/sam.ldb.d/DC=DOMAINDNSZONES,DC=DOMAIN,DC=LOCAL.ldb db consumes now ~500MB. So i decided to delete all the Outdated records. I prepared an list of all the DN's with Base DC=DomainDnsZones,DC=domain,DC=local and

[Samba] AD DC and the Guest account

I'm using samba4.0.1 and it works very well in general. Unfortunately I'm missing something like map to guest = bad user and I can't get the Guest account to work. Is there any way to set up some public shares on an AD DC ? [global] workgroup = DOMAIN realm = DOMAIN.LOCAL

Re: [Samba] Cleanup CN=Deleted Objects, DC=DomainDnsZones, DC=domain, DC=local

Am 25.07.2013 16:57, schrieb Achim Gottinger: Hi, Due to an not so well coded dns update script my /var/lib/samba/private/sam.ldb.d/DC=DOMAINDNSZONES,DC=DOMAIN,DC=LOCAL.ldb db consumes now ~500MB. So i decided to delete all the Outdated records. I prepared an list of all the DN's with Base

[Samba] SMB4 ADDC possible attribute corruption

Hi All, I am having a problem with SMB4 ADDC. I cannot join the AD from Fedora. I have done a wireshark capture and found that it does 2 LDAP search requests when doing a discovery. The 1st query was a search for the defaultNamingContext and supportedCapabilities attributes. This got a

[Samba] Question on approach to authenticate Linux against Samba4

This is in a test environment: Also, it is wordy, but I'm hoping it explains my scenario. I am migrating from a custom LDAP+Samba3 authentication solution to Samba4. I have used the classicupgrade option to pull off the data from the existing ldap server to populate the samba4 database.

Re: [Samba] Question on approach to authenticate Linux against Samba4

On Thu, 2013-07-25 at 16:59 +, dahopk...@comcast.net wrote: I have read through the recent thread on winbind and honestly I am not sure that I want to pursue either winbind or sssd if it is possible to use nss_pam_ldap which seems closest to the current approach. Hi Ok, I can

Re: [Samba] Question on approach to authenticate Linux against Samba4

Thank you for the very quick response. But in trying to follow the suggested link, there are few steps are different. First, Step 3 is to install various packages. I already have auth-client-config installed which had installed libpam_ldap and libnss-ldap since I simply pulled this system

Re: [Samba] Samba 4 - smbd; can't parse the PAC: NT_STATUS_BUFFER_TOO_SMALL error but only for a single domain user (Server 2008 R2 domain, Server 2008 functional level forest).

Good day, one and all ... I just had to rebuild our main Samba server (OpenSlowlaris - Slowlaris 11.11), during which I put the latest (at the time; currently 4.2.0pre1-GIT-b505111) Samba4 on there. I thought that by now that Gunther's speculative changes to improve the PAC decode might have

Re: [Samba] Win dcpromo and SysVol Replication

Hello Garth, Am 25.07.2013 13:21, schrieb Garth Keesler: When I DCPROMO a Win2003 server into an existing Samba4.1RC1 domain with two Samba DCs, all appears to be working correctly from the Samba side but the WinDC never starts sharing SysVol as it should. Sites and Services shows all DCs as

Re: [Samba] Question on approach to authenticate Linux against Samba4

On 25/07/13 17:59, dahopk...@comcast.net wrote: 1) will the unixHomedirectory be honored? 2) will I be able to easily add users so that the unix settings will be properly configured? I currently use the IDEALX smbldap tools. Being able to script account creation is very important to me ..

Re: [Samba] Question on approach to authenticate Linux against Samba4

On 25/07/13 20:14, dahopk...@comcast.net wrote: [SNIP] Step 6: I already have samba-common, and samba-common-bin (latest for 10.04) installed. I'd assume I need to uninstall these and install samba4 instead (especially as step 8 is to join the domain). Not familiar with Ubuntu, but that is

Re: [Samba] Question on approach to authenticate Linux against Samba4

On Thu, 2013-07-25 at 19:14 +, dahopk...@comcast.net wrote: Thank you for the very quick response. But in trying to follow the suggested link, there are few steps are different. First, Step 3 is to install various packages. I already have auth-client-config installed which had

Re: [Samba] Question on approach to authenticate Linux against Samba4

On Thu, 2013-07-25 at 20:59 +0100, Jonathan Buzzard wrote: On 25/07/13 20:14, dahopk...@comcast.net wrote: [SNIP] Step 6: I already have samba-common, and samba-common-bin (latest for 10.04) installed. I'd assume I need to uninstall these and install samba4 instead (especially as

[SCM] Samba Shared Repository - branch master updated

The branch, master has been updated via a74c7d7 torture/drs: Expand an error message to aid debugging via 63c05e8 dsdb/samdb: use RECYCLED it implies DELETED... via 6016ba3 selftest: ensure samba4.nss.test.*using.*winbind is always tested via 93b8315 selftest: