Questions tagged [samba4]
Samba4 is version 4 of Samba, the Linux implementation of the SMB/CIFS protocols. It is the first version of Samba with full Active Directory support, allowing a Linux server to become an Active Directory Domain Controller.
371
questions
0
votes
0
answers
8
views
Removing First Samba AD Server from the forest
we have 3 Samba AD servers, the oldest one (v4.1.12) is running on Centos 6.10; although we have add 2 more servers with current v4.15.13-Ubuntu and All the Roles switched over to one of them however ...
0
votes
0
answers
9
views
Capitalize home directories and append string
In the [homes] section of my smba.conf file, %S is a variable holding the name of the current service. If %S is username, the folder /mnt/data/%S is displayed to user username as "username". ...
- 101
0
votes
0
answers
173
views
Understanding Samba VFS Operations for Full Audit
We have a TrueNAS System running TrueNAS-12.0-U8 for which we are required to log all successful and all failed file access attempts for a specific SMB share. The Samba version is 4.13.
Per guidance ...
- 833
0
votes
1
answer
105
views
Failed to join a computer to samba domain (Zentyal) - Couldn't join realm: Insufficient permissions to join the domain
I'm relatively new Zentyal user (few months), and I love it! But I've ran into a problem I hope someone can help me with.
In my deployment I have two Zentyal servers (zentyal-1.mydomain.com and ...
- 261
0
votes
0
answers
21
views
Ubuntu server 18.04 samba pdc
The problem I have is that when I want to connect a windows 10 client with a samba pdc server I get these errors:
[client][1]
error trying to join domain, specified domain does not exist or cannot be ...
0
votes
0
answers
59
views
How to configure FreeRadius on a different server than Samba4?
I want to set up a FreeRadius server that uses a Samba4 DC base.
I wanted FreeRadius to be on a different server that wasn't a DC Samba4. Is it possible?
Consulted links:
https://wiki.samba.org/index....
- 17
0
votes
0
answers
279
views
How to login as different users in samba?
I am able to setup a samba shares shared among 400 users on ubuntu 20 as file server. As a part of policy after any user have completed his/her work they disconnect from share. The problem arises for ...
- 101
1
vote
0
answers
60
views
2 Samba Configs: "config file" Parameter Fails
I am attempting to create 2 separate shares using 2 very different configs. I can get both going individually from the same system, but not together. Regretfully, I still have some legacy systems ...
- 23
0
votes
0
answers
33
views
Bind does not start on a DC Samba 4. What to do?
I'm migrating a Samba DC that uses Bind9, but when I try to start Bind on the new DC, a permission error is displayed. Reading some links I saw that the apparmor can be a problem, however it is not ...
- 17
-2
votes
2
answers
162
views
Samba server showing user still logged on despite shutdown/restart of the Windows 10 client
I have since years an issue with Samba 4.3.11 and Windows 10 in a Domain with Samba Active Directory:
The Users on Windows 10 will be shown as further logged on on the samba server (smbstatus -b) even ...
- 97
0
votes
0
answers
16
views
How to set the path of folders in the compilation of samba?
I'm compiling Samba 4. By default the folders are stored in /usr/local/samba.
With the command below I made some changes:
./configure --bindir=/bin/ --sbindir=/sbin/ --sysconfdir=/etc/samba/ --mandir=/...
- 17
1
vote
0
answers
141
views
Samba AD sysvol sync unison permissions issue
I'm having an issue with syncing the unix permissions and ownership on the sysvol between two Ubuntu Samba AD DCs using unison. I have copied the idmap.ldb file from DC1 to DC2 and the Windows ...
0
votes
1
answer
718
views
Windows 10 Doesn't connect with Samba4 server
I'm facing a problem with my samba server.
I had a Samba server but it was a very old configuration so I have reinstalled the OS (Debian 5.10.140-1) and the Samba (Samba version 4.13.13). But now all ...
0
votes
0
answers
55
views
samba Doesnt work gpo scripts startup
im trying to create and use gpo startup scripts for linux
when creating gpo scripts startup using
Code:
samba-tool gpo manage scripts startup add {32147013-5DD6-4BFA-BAF5-D25B0F05A0C9} /usr/local/...
0
votes
1
answer
368
views
Samba 4.16 integration with openldap 2.6 on Centos8 for 2FA
I want to setup 2factor authentication for both Linux and windows machine and want to manage the password via LDAP server.
For this, I am using LDAP(which provides TOTP functionality) to authenticate ...
0
votes
0
answers
42
views
wrong count of files samba windows/linux
i have a problem, i have a shared folder via samba, it works perfectly except if it has allot of files/folders, for example: one subfolder has 885 pdf's and browsing with linux i can see all of them, ...
2
votes
3
answers
332
views
Restrict Samba4 authentication by user + VPN IP address pair
We're working towards a zero trust security model in our office, with servers secured behind a WireGuard VPN. We already use WireGuard for remote access, so this is the simplest way to ensure ...
- 121
0
votes
1
answer
1k
views
Windows client connecting to Samba 4.1.12 failing to join DC, latest Windows 11 Update?
I'm writing this here just in case someone can help me out a little bit here, since I'm kind of lost. I'm managing a domain controller through Samba version 4.1.12 (installed in a Debian 7), a little ...
0
votes
2
answers
600
views
access based share enum not working as expected
On a long-term (2years) Arch Linux server, I am running a small samba configuration with several shares.
I would like users to only see the shares which they have access to - which is why I am using ...
- 1
2
votes
1
answer
664
views
disable samba usershare feature
Is there a way to completely disable usershare in Samba?
Don't be confused with the users home share:
man smb.conf
Starting with Samba version 3.0.23 the capability for non-root users to add, modify, ...
- 228
0
votes
0
answers
201
views
Share folder on Linux to Windows clients with external ldap server authentication
Our main institute has a LDAP centralized based authentication for the entire university. It uses LDAP Directory Server with LDAPs on port 636 and it allows us to use it for centralized authentication ...
0
votes
2
answers
87
views
is There ANY WAY To acess a NAS server over the internet without using any VPN or any ip router config
I'm trying to acess my samba server over the internet but I don't know how to do it without setting up a VPN or something which I don't want to do. I can't do anything with VPN's or router configs ...
- 1
1
vote
0
answers
253
views
Migrate from Zentyal to Samba4AD
I'm really new in Active Directory world and I plan to migrate from Zentyal 7 (a stack of multiple tools packaged in an Ubuntu OS) to a pure Samba4 Active Directory, and keep the same domain name.
I ...
- 771
0
votes
1
answer
382
views
How do I import an smbpasswd file into a different samba server
I'm attempting to export my samba users and then import them (the ultimate goal is to do this between machines, but right now I just want to do the one test user on my newly installed server). I've ...
- 2,324
0
votes
1
answer
202
views
Samba AD GPO “Display information about previous logons during user logon” does not apply and makes it impossible to logon
We are performing tests to deploy a Univention UCS domain with samba Active Directory in our company and, to comply with a security normative, we need to activate the GPO "Display information ...
- 1
0
votes
2
answers
1k
views
Can Samba close a single user session coming from a shared host?
If I want to close a user session on a Samba server, the smbcontrol close-share and smbcontrol kill-client-ip commands are available to achieve this. However when dealing with a shared client (a ...
- 1,754
0
votes
1
answer
154
views
Ubuntu 21.10 with Samba AD unable to create domain trust account
I am trying to add domain trust account for additional kerberos5 (MIT) domain
in Samba AD DC with command:
net rpc trustdom add <domain_name>
-UAdministrator%<administrator_password>
What ...
1
vote
1
answer
993
views
Samba AD: Create keytab for computer without net ads join?
Gist: I have set up a samba as AD DC. I'd like to export a keytab for SPNs for a computer account only without having the computer to run samba itself, or issue net ads join. Running samba-tool domain ...
- 121
3
votes
1
answer
3k
views
Cannot access SMB share from Windows 10 via OpenVPN Connect
I'm sure this problem must have been solved a thousand times but nothing I do seems to work.
Summary:
On Windows 10 client, using file explorer, and OpenVPN Connect client 3.3.4, can't access a NAS ...
- 31
3
votes
2
answers
1k
views
Windows 10 clients flooding Samba servers with phantom guest login attempts
I am currently running a Samba server for file sharing on a SOHO network.
I have noticed that one of the recent patches to Windows 10 seems to have introduced some sort of nasty bug with SMB that ...
- 31
0
votes
0
answers
1k
views
Windows 10 login fails at Samba NT domain member
I have the following setup:
A Samba server PDC acting as the Primary Domain Controller of a NT domain MYDOMAIN (not Active Directory!)
A Windows 10 pro PC Win10 which is also a member of that domain
...
- 607
2
votes
1
answer
2k
views
Students can't install Extensions in Visual Studio Code
We are a school and would like to use Visual Studio Code together with the Omnisharp extension.
The students' working environment has the following characteristics
Server-stored home directories
...
- 121
0
votes
1
answer
527
views
Ubuntu login fails with a user of a trusted IDM domain (AD)
We have an IDM Server on a Rocky Linux distro configured with a Trust to a Samba AD DC (also installed on a Rocky Linux).
So we created a user 'usupru2' on Samba AD DC under adtest.uy domain.
Then we ...
- 11
0
votes
1
answer
768
views
Access denied when listing Samba shares
I've installed Samba to share files with Windows 10 machines. The setup works correctly to access individual shares using their path such as \\myhost\sejf, but listing shares on \\myhost fails with ...
- 581
0
votes
1
answer
2k
views
Windows 2019 and truenas SMB share access problems
I'm having all sorts of trouble getting a FRESH Windows Server 2019 to connect to a samba share on Truenas 12.
Originally, when I tried to log in, Windows kept saying You Can't Access This Shared ...
- 87
0
votes
0
answers
1k
views
Unable to join a dc I just created with samba ad dc
I followed these instructions: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller
These instructions didn't work exactly as they read. There was one step I ...
- 31
0
votes
1
answer
199
views
Where does Sendmail get authentication from?
For reasons I can't get into at the moment, I'm authenticating to an SMB domain (using Samba 4.9.5 on a Debian host as the DC, if it matters) with a Mint Linux server in the domain with Samba 4.11.6 ...
- 426
0
votes
1
answer
786
views
How to overcome the Weaker MD4 hash issue with samba
We are using samba configuration on our RedHat(RHEL7.9) systems, where SMB authentication is based on a NTLM password hash which basically a clear-text credential
for a challenge-response ...
- 105
0
votes
2
answers
882
views
Samba AD Groups appear empty on Unix
Environment:
fresh Debian 10 Samba 4.9.5-Debian as AD-DC, using internal LDAP, internal DNS, RFC2307 enabled, libnss-winbind enabled and configured, libpam-winbind enabled and configured
fresh Debian ...
- 401
0
votes
1
answer
532
views
Compiled samba from source upgrade - version mismatch
I'm testing Samba 4 AD (test environment) on CentOS 8. First attemp was with version 4.13.5 without cups support because I have installed packages listed in section "Manually maintained ...
- 23
0
votes
1
answer
810
views
how to export permissions/ACLs from Samba share to clients?
I have a Synology NAS running Samba that serves up shares in my network. I've set up autofs, LDAP and sssd and can mount Samba home directories on the fly when I log into Linux and MacOS machines.
My ...
- 165
1
vote
0
answers
299
views
Kerberos issues with Samba4 AD DC when resolv.conf not set to use localhost
I recently did a "classis conversion" of our small NT4 Samba domain to an AD one on my Debian 10 "Buster" system. I got everything working as far as I can tell, but I don't ...
- 111
0
votes
1
answer
51
views
Odd user display discrepancy in standalone Samba server ("Account Unknown" vs "Unix User")
I am using a standalone Samba server on Ubuntu 18.04 (Samba 4.7.6). When an employee leaves the company, their Unix account ist locked (but not deleted). Their Samba account, however, is deleted via ...
- 183
0
votes
1
answer
889
views
samba-tool tool missing on Centos8 after samba412 package install
Cant find samba-tool on Centos8 after samba412 package install...
dnf cant find it as well.
dnf provides samba-tool
Error: No Matches found
What's more, there is no
/usr/local/samba/bin
folder ...
...
- 151
0
votes
1
answer
214
views
Centos8: Selinux blocking Samba service from starting
My Samba4 service is being blocked from starting using systemctl. The audit log shows:
type=AVC msg=audit(1606428851.446:87): avc: denied { execute } for pid=1748 comm="(samba)"
name=&...
- 151
1
vote
1
answer
362
views
Joining samba server into windows AD domain, but in DNS subdomain
We have a windows AD domain, let's say EXAMPLE.COM.
With corresponding DNS domain example.com
I want to have just a normal domain member. Ubuntu 20.04, Samba 4.11.6.
Its DNS name is already ...
1
vote
0
answers
2k
views
Insufficient permissions to join the domain
I'm trying to join a linux computer to an existing SAMBA4 AD domain, but I cannot:
LANG=C realm -v join --user=ldap example.com
* Resolving: _ldap._tcp.example.com
* Performing LDAP DSE lookup on: ...
- 652
0
votes
1
answer
49
views
Several redundant automatic entries for all DHCP client machine host names in Samba 4 AD DC DNS
We have a Samba 4 AD DC installation wich is also the DNS in our network.
It collects entries of all DHCP client machines with their addresses automatically. I can remember to have activated this ...
- 111
1
vote
1
answer
353
views
Group Policy: existing Policy values deleted when running gpupdate
Domain Controllers (2): Samba 4
Client: Windows 10 1909 x64
After joining a computer to the domain, when I run gpupdate /force for the first time, the values under these keys are deleted:
HKLM\...
- 150
2
votes
2
answers
4k
views
How to create a working samba PUBLIC share on Linux (smbd) for LATEST windows 10 client?
As we know, latest windows 10 upgrade has made samba client refuse to sue guest account. Some organization even make it impossible to disable this bug. This make it impossible to create a public samba ...
- 81