Tag Info

New answers tagged

0

IRL it does not matter what group owns the files in user's personal folder: no one should have a way to mount it except for user the owner. Here's my config for "homes" share: [homes] comment = %S: personal folder valid users = @MYDOMAIN\my-subdomain-users read only = No browseable = No browsable = No # root preexec = ...


0

In order to have anonymous access the creation of fake IPC$ share may help: [IPC$] guest ok = yes read only = yes path = /etc/samba/fakeIPC valid users = @group-of-home-users, nobody #or # valid users = nobody This solved some problems for me. Can't remember where I've read about that.


1

Ports 137 and 138 should be opened for UDP traffic instead of TCP: -A RH-Firewall-1-INPUT -s 192.168.168.0/24 -m state --state NEW -p udp --dport 137 -j ACCEPT -A RH-Firewall-1-INPUT -s 192.168.168.0/24 -m state --state NEW -p udp --dport 138 -j ACCEPT -A RH-Firewall-1-INPUT -s 192.168.168.0/24 -m state --state NEW -p tcp --dport 139 -j ACCEPT -A ...


0

Just before reject rule in RH-Firewall-1-INPUT chain, add a rule that logs all traffic. It could help identify what packages are being blocked: -A RH-firewall-1-INPUT -j LOG


1

This is a new feature introduced with Samba 3.2 and above. It is an extension to the SMB/CIFS protocol negotiated as part of the UNIX extensions. SMB encryption uses the GSSAPI (SSPI on Windows) ability to encrypt and sign every request/response in a SMB protocol stream. When enabled it provides a secure method of SMB/CIFS communication, similar to an ssh ...


1

This is because this d-w-rwx---+ 2 AD\applicationpoolidentity group 2 Sep 8 17:28 __testFolder__ represents ONLY the owner. You see the "+" at the end of the bitmask? This means, that there is a (windows) acl controlling the access. So if you have access to a file because you are in the acl with r/w, the bitmask of the owner is not applicable to you ...


0

Thanks to the help of people on samba@lists.samba.org, this is the solution to the problem: For anyone having the same problem and reading this in the future, I will summarize the solution here. Summary: If you want to install a new server, completely replacing the current one, keeping the same domain name, especially if you have roaming profiles and ...



Top 50 recent answers are included