Re: [Samba] VFS ACL with SMB2

2012-11-05 Thread Adrian Berlin
Hi! The problem was described some time ago: https://lists.samba.org/archive/samba/2012-October/169455.html But no one replied :/ So I want to use VFS ACL against POSIX ACL. I have Linux Debian + SAMBA 3.6.7 + XFS And my question is does VFS ACLs working properly with SMB2? Best regards /Ad

Re: [Samba] [PATCH] Re: SYSVOL ACLs and GPOs

2012-11-05 Thread Jelmer Vernooij
On Tue, Nov 06, 2012 at 08:04:44AM +1100, Andrew Bartlett wrote: > On Mon, 2012-11-05 at 22:02 +0100, Jelmer Vernooij wrote: > > On Mon, Nov 05, 2012 at 01:10:13PM +1100, Andrew Bartlett wrote: > > > diff --git a/source4/selftest/tests.py b/source4/selftest/tests.py > > > index ca5bdd3..61540d0 100

Re: [Samba] [PATCH] Re: SYSVOL ACLs and GPOs

2012-11-05 Thread Jelmer Vernooij
On Mon, Nov 05, 2012 at 01:10:13PM +1100, Andrew Bartlett wrote: > On Thu, 2012-11-01 at 14:54 +, Alex Matthews wrote: > > On 30/10/2012 00:08, Jeremy Allison wrote: > > > On Tue, Oct 30, 2012 at 11:00:31AM +1100, Andrew Bartlett wrote: [...] > > It is certainly very helpful to have this happe

Re: [Samba] access my created share in smb.conf Only by Ip

2012-11-05 Thread Ricky Nance
With that provision line, you will default to the internal_dns dns server, if you want to use bind9_dlz you will need to specify --dns-backend=BIND9_DLZ ,this is the excerpt if you run samba-tool domain provision --help -dns-backend=NAMESERVER-BACKEND The DNS server bac

[Samba] libkdc-policy.so: cannot open shared object file: No such file or directory?

2012-11-05 Thread samba . to . anomalyst
The following NEW packages will be installed: libbsd-dev libpopt-dev git pull, make, make install provision still fails bin/samba-tools still complains about acl /usr/local/bin is empty do you have the embedded heimdal selected or deselected? > Hi, I have downloaded all the RC's and compiled

Re: [Samba] Samba & Active Directory w/ Kerberos Trust

2012-11-05 Thread Andrew Bartlett
On Mon, 2012-11-05 at 21:39 +, Rafferty, Joseph wrote: > For the user "continuum\jrafferty" (continuum is the AD realm): > > http://pastebin.com/DJ3xShTr OK, now I see the issue. Your setup is deliberately incompatible with NTLM authentication (as you only have random passwords recorde

Re: [Samba] Provision Samba4 on Macosx snow leopard

2012-11-05 Thread Andrew Bartlett
As the command said: On Sat, 2012-11-03 at 15:02 +, gof wrote: > Please remove the smb.conf file and let > provision generate it -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe

Re: [Samba] Samba & Active Directory w/ Kerberos Trust

2012-11-05 Thread Rafferty, Joseph
For the user "continuum\jrafferty" (continuum is the AD realm): http://pastebin.com/DJ3xShTr Using the user principal name, "jraffe...@tamu.edu" http://pastebin.com/34VXJuAc Using just "jrafferty" http://pastebin.com/ZF7EE2n7 Interestingly, I emailed our AD admins on t

Re: [Samba] [PATCH] Re: SYSVOL ACLs and GPOs

2012-11-05 Thread Andrew Bartlett
On Mon, 2012-11-05 at 22:02 +0100, Jelmer Vernooij wrote: > On Mon, Nov 05, 2012 at 01:10:13PM +1100, Andrew Bartlett wrote: > > On Thu, 2012-11-01 at 14:54 +, Alex Matthews wrote: > > > On 30/10/2012 00:08, Jeremy Allison wrote: > > > > On Tue, Oct 30, 2012 at 11:00:31AM +1100, Andrew Bartlett

Re: [Samba] Samba & Active Directory w/ Kerberos Trust

2012-11-05 Thread Andrew Bartlett
On Mon, 2012-11-05 at 19:58 +, Rafferty, Joseph wrote: > Hi Andrew, thanks for the reply. > > Presently, my configuration (as shown) works great for user accounts with > known passwords within the active directory domain (very few of these - > mostly admin, service, & test accounts). The iss

Re: [Samba] Samba & Active Directory w/ Kerberos Trust

2012-11-05 Thread Rafferty, Joseph
Hi Andrew, thanks for the reply. Presently, my configuration (as shown) works great for user accounts with known passwords within the active directory domain (very few of these - mostly admin, service, & test accounts). The issue lies when trying to use upn-mapped user accounts. Active director

Re: [Samba] VFS ACL with SMB2

2012-11-05 Thread Jeremy Allison
On Mon, Nov 05, 2012 at 04:50:30PM +0100, Adrian Berlin wrote: > Hello, > I have a question because POSIX ACL with SMB2 max protocol does not work > properly.Did you test VFS xattr acls with SMB2 max protocol? Is it > working corectly? Samba version number and exact explaination of the problem ple

[Samba] VFS ACL with SMB2

2012-11-05 Thread Adrian Berlin
Hello, I have a question because POSIX ACL with SMB2 max protocol does not work properly.Did you test VFS xattr acls with SMB2 max protocol? Is it working corectly? Best regards/Adrian Berlin -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.s

Re: [Samba] [Announce] CTDB release 2.0 is ready for download

2012-11-05 Thread Michael Adam
Hi Amitay, On 2012-10-31 at 19:59 +1100, Amitay Isaacs wrote: > On Wed, Oct 31, 2012 at 7:12 PM, Michael Adam wrote: > > On 2012-10-31 at 16:14 +1100, Amitay Isaacs wrote: > >> This is long overdue CTDB release. There have been numerous code > >> enhancements and bug fixes since the last release

Re: [Samba] sambar4: user creation with ldap and initial password

2012-11-05 Thread Thomas Mueller
Am 05.11.2012 04:31, schrieb Andrew Bartlett: On Thu, 2012-11-01 at 12:44 +, Thomas Mueller wrote: hi trying to create a user with ldap from a remote server. The user is created successfully. I'm failing setting the initial password. Setting the unicodePwd with kerberos administrator crede

[Samba] Provision Samba4 on Macosx snow leopard

2012-11-05 Thread gof
I've installed samba 4 fine but get error msg when do a /usr/local/samba/bin/samba-tool domain provision \ Unknown parameter encountered: "idmap domains" Ignoring unknown parameter "idmap domains" Unknown parameter encountered: "idmap alloc backend" Ignoring unknown parameter "idmap alloc backend"

[Samba] help netlogin and sysvol missing in samba4 on snow leopard OS

2012-11-05 Thread gof
All I've installed samba 4 fine and when I run /usr/local/samba/sbin/samba I get a warning Unknown parameter encountered: "idmap domains" Ignoring unknown parameter "idmap domains" Unknown parameter encountered: "idmap alloc backend" Ignoring unknown parameter "idmap alloc backend" Unknown parame

Re: [Samba] access my created share in smb.conf Only by Ip

2012-11-05 Thread L . P . H . van Belle
Hai, This is in your DNS. dit you try removing the forwarders. forwarders { >4.2.2.4 >}; Now it forwarding first and i bet you dont have internal ipnummers in your external dns server. Im doing about the same here. In bind, remove the forwarders. ( not needed ) set resolve.conf up

Re: [Samba] sambar4: user creation with ldap and initial password

2012-11-05 Thread Michael Wood
On 5 November 2012 09:28, Andrew Bartlett wrote: > On Mon, 2012-11-05 at 08:18 +0100, Thomas Mueller wrote: >> Am 05.11.2012 04:31, schrieb Andrew Bartlett: >> > On Thu, 2012-11-01 at 12:44 +, Thomas Mueller wrote: >> >> hi >> >> >> >> trying to create a user with ldap from a remote server. Th

Re: [Samba] libkdc-policy.so: cannot open shared object file: No (samba: message 1 of 20) (samba: message 2 of 20) such file or directory?

2012-11-05 Thread Rowland Penny
On 05/11/12 06:00, samba.to.anomal...@xoxy.net wrote: from bin/samba-tools, different error: set_sys_acl_no_snum: SMB_VFS_SYS_ACL_SET_FILE returned zero. ERROR(): Provision failed - ProvisioningError: Samba was compiled without the posix ACL support that s3fs requires. Try installing libacl1-de

[Samba] [Announce] Samba 3.5.19 Available for Download

2012-11-05 Thread Karolin Seeger
== "That’s the thing about needs. Sometimes when you get them met, you don’t need them anymore." Carrie

Re: [Samba] access my created share in smb.conf Only by Ip

2012-11-05 Thread Rowland Penny
On 05/11/12 04:54, Mohammad Ebrahim Abravi wrote: *samba4 provision line : * provision --realm=hum-office.xxx.xx.xx --domain=HUM-Office --adminpass='p4$$word' --server-role=dc *smb.conf :* # Global param

Re: [Samba] sambar4: user creation with ldap and initial password

2012-11-05 Thread Thomas Mueller
Am 05.11.2012 08:28, schrieb Andrew Bartlett: On Mon, 2012-11-05 at 08:18 +0100, Thomas Mueller wrote: Am 05.11.2012 04:31, schrieb Andrew Bartlett: On Thu, 2012-11-01 at 12:44 +, Thomas Mueller wrote: hi trying to create a user with ldap from a remote server. The user is created successf

Re: [Samba] Domain DFS on samba 4

2012-11-05 Thread Daniel Müller
For data replication just use glusterd/glusterfs. This would do the job . Running for me without trouble. Greetings Daniel --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463,