Questions tagged [samba4]
Samba4 is version 4 of Samba, the Linux implementation of the SMB/CIFS protocols. It is the first version of Samba with full Active Directory support, allowing a Linux server to become an Active Directory Domain Controller.
374
questions
29
votes
5
answers
93k
views
Samba configuration for public shares
yesterday I upgraded my fedora box to the latest version, and with that, I also upgraded samba, now using samba 4. I used to access those share from any computer at home without user/password, but now ...
- 393
24
votes
5
answers
24k
views
How do I change my default shell on a domain account
I use a samba4 domain account to log in on my laptop. I wanted to try zsh out, but since my user doesn't reside in /etc/passwd I found that chsh can't find my user. Can anyone advise how I can change ...
- 1,014
22
votes
4
answers
99k
views
How to configure Samba to work with Windows 10 1709?
A few PCs that have Windows 10 1709 installed (instead of upgraded from 1703) are having trouble connecting to network shares running on Samba (Ubuntu 17.10). Entries in event logs indicate that the ...
- 661
16
votes
2
answers
66k
views
Encrypting SMB traffic with Samba
We use Samba on Ubuntu 14.04 LTS as a PDC (primary domain controller) with roaming profiles. Everything works fine, except for if we try to enforce encryption via setting:
server signing = ...
- 438
14
votes
3
answers
44k
views
Windows 10: AD Domain Admin with missing rights?
Maybe my title is not correct but I wouldn't know how else to name it at this point.
If I log into a Windows 10 machine with the main AD Domain Admin Account, I get an error message when entering ...
- 973
12
votes
1
answer
3k
views
How many FSMO roles are there?
I've always understood that there are five FSMO roles, but sometimes I see something that says there are seven. How many are there, really?
- 12.9k
11
votes
4
answers
64k
views
Resolving samba testparm message: rlimit_max: rlimit_max (8192) below minimum Windows limit (16384)
testparm in samba may produce this message:
rlimit_max: rlimit_max (8192) below minimum Windows limit (16384)
This appears be be resolved by increasing the max open file limit using this Linux ...
- 351
11
votes
2
answers
56k
views
keytab auth against samba 4 DC: Client not found in Kerberos database while getting initial credentials
I set up a samba 4 active directory on ubuntu 14.04 following Samba AD DC HOWTO. In principle everything works well but I'm stuck in getting kerberos authentication running using SPNs for web ...
- 331
9
votes
2
answers
2k
views
Win7 clients failing with cached credentials on samba4 RODC
I'm setting up a test environment for a customer about to deploy samba4 into 1400 remote sites and I'm running into a problem. It's my job, after all, to run into problems and then solve them.
Active ...
- 39.7k
8
votes
3
answers
60k
views
Use NTLMv2 Authentication with Samba
Trying to connect to Samba shares on a Linux host with a Windows 10 client, even after setting the client Security Policy to allow non-NTLMv2 authentication, the client still gives errors like "The ...
- 452
8
votes
3
answers
12k
views
Difference between durable file handles, resilient file handles and persistent file handles
In CIFS/SMB protocol, I see that there are 3 types of file handles: durable, resilient and persistent. What is the difference between them?
- 574
7
votes
1
answer
24k
views
GPO with SAMBA as DC
I am working on a network of 500 Windows workstations with Linux servers. SAMBA 4 is in use as the domain controller.
Users can move between workstations, and as a results the contents of their ...
- 1,852
7
votes
3
answers
3k
views
Samba4 advice for production use
I have an old Samba 3 + LDAP server installed that needs to be rebuilt. I'm weighting my options, and Windows Server seems too expensive at the moment, and Samba 4 appeared to be a nice option, ...
- 455
7
votes
3
answers
14k
views
Windows 10 PE Unable to map network drive anonymously
I'm trying to set up a imaging environment. The idea is to use DISM to apply WIM images (Windows 10 Pro) over the network.
I am able to boot into Windows 10 PE. I have network connectivity via DHCP. ...
7
votes
1
answer
36k
views
How can Samba be configured to use LDAP for authentication only?
I'm looking to set up a new Samba file share that uses LDAP for back-end authentication. The LDAP server is already set up, and the machine the Samba server will be on is already set up to allow SSH ...
- 266
7
votes
4
answers
3k
views
Windows 7 Client flooding network with DHCP requests. Not setting IP
I have a small network, with 15 workstations, SAMBA AD, and a bunch of Virtualized linux servers. All the workstations, and servers are on the same subnet.
All workstations are running Windows 7 Pro
...
- 71
6
votes
2
answers
11k
views
Samba4 [homes] share
I am having issues with the [homes] share.
OS is Ubuntu 12.04.
I've installed samba 4.0.3, bind9 dlz, ntp, winbind, everything but pam modules, and did all the tests from https://wiki.samba.org/index....
6
votes
2
answers
8k
views
How to log if a user removes a file from samba share
I am working over the default Samba that comes with RHEL 6.x version. I am successful in sharing a samba share to my client users.
I have given each of them a set of credentials using which they have ...
6
votes
1
answer
536
views
CentOS cifs client sees Windows 2012 deduplicated files as symlinks
I have CentOS 7.0 VM with a volume mounted on a Windows 2012-R2 file server.
The volume contains some big files related to an internal Wordpress site.
About a week ago the site became 'broken' and ...
- 2,196
5
votes
5
answers
3k
views
Active Directory with public unix dns (no MS DNS)
I'm setting up a new Active Directory instance for my department at a university. I have some experience managing domains at previous jobs (NT4/2k/2003), but there are two unique things about our ...
- 3,525
5
votes
2
answers
34k
views
Share folder with realmd / sssd and AD integration
I've setup a CentOS 7 machine, and joined it to our AD via realmd through:
yum install realmd samba-common oddjob oddjob-mkhomedir sssd
realm join [email protected] mydomain.local
After ...
5
votes
3
answers
151
views
Workstations in remote site don't know about new AD realm
I've recently migrated a classical Windows Domain (samba3) to an Active Directory domain (samba4).
Workstations in remote sites do not have a local DC so they are not aware of the transition, hence ...
- 39.7k
5
votes
1
answer
6k
views
SAMBA 4 Forest Functional Level
What is the highest AD Forest functional level I can use and still have SAMBA 4 function as a domain controller. Can SAMBA 4 act as a domain controller in a Server 2012 functional level forest? Does ...
- 1,041
5
votes
2
answers
9k
views
How to rename a user in samba4 domain?
How can I change a login of a user in samba4 based domain?
I've tried reading the samba-tool man page, but it does not seem to show anything that i could use.
- 30.2k
5
votes
3
answers
5k
views
Samba not working on LAN without internet connection
I've got a Samba 4 share on a CentOS 7.2 server in my LAN that I access from some Windows 10 clients.
The clients use the server IP to access the share and Samba is configured to be a stand-alone ...
- 53
5
votes
2
answers
4k
views
Mount unix samba 4 share to osx client without mangled file names
I have a unix server (arch linux) with samba 4.1.12. The share has files inside it with utf-8 nfc encoding (standard utf-8).
When I mount this samba share into an osx client (10.9.5), files with ...
- 151
5
votes
1
answer
2k
views
BYOD (accessing files) on a domain without joining?
I run a Samba 4 instance at a small private school. This makes a regular Linux server appear as a directory controller. There are two relevant benefits to this:
I have a Samba share for people's ...
- 809
5
votes
1
answer
178
views
Override template homedir on FreeNAS 11.3 joined in Active Directory
I've joined a FreeNAS 11.3 in an Active Directory and everything works as expected. But one feature that I'm really missing is some kind of override on mapped home directories for users.
By default ...
- 5,620
5
votes
0
answers
2k
views
Samba and AD - "net ads changetrustpw" fails
I've got a Samba member of a Windows AD. I'm using a combination of sssd and winbind. Samba manages machine password changes, and it's configured also to update the passwords used by sssd. (The ...
- 1,720
5
votes
0
answers
1k
views
`smbstatus` not showing NetBIOS name
I'm upgrading a Samba server from 3.0.37 to 4.4.3, and it seems that on 4.4.3, the smbstatus utility no longer displays the NetBIOS name of connected clients.
On 3.0.37, smbstatus -p looks like this:
...
- 209
5
votes
0
answers
972
views
Samba authentication and LDAP
I have an OpenLDAP server that I use for authentication and authorization for various services.
All users are of object type inetOrgPerson and my groups are groupOfNames.
Now I want to configure ...
- 193
5
votes
1
answer
391
views
Samba4 locked pst files
i have a samba4 server that holds my clients outlook pst files, if the outlook client or the machine crashes i must go to the server to kill the PID manually.
i saw there was "reset on zero vc =yes" ...
- 308
4
votes
3
answers
10k
views
Samba 4.9.0 ./configure lmdb error
I'm very new to Linux and installing Samba and I'm trying to make my Centos 7 into a ADDC.
However, whenever I want to configure I get the following message:
Checking for lmdb >= 0.9.16 via header ...
- 221
4
votes
2
answers
5k
views
Samba, Windows ACLs and unwanted executable bit
I setup Samba with ACL support on an Ubuntu 18.04 LTS server and I'm facing the following situation.
Here's the smb.conf content:
[global]
# naming
workgroup = WORKGROUP
server string = %h ...
- 148
4
votes
2
answers
2k
views
possible to make samba4's internal dns server listen on non-standard port?
Is it possible to make samba4's internal dns server listen on a port other than 53?
I need to run two dns server's on this host -- my desire was to use dnsmasq on the standard port for client's and ...
- 391
4
votes
1
answer
976
views
Samba name mangling too mangled to be practical
Switched recently from W2K3 to Samba4.0.9/CentOS6.4 for our fileshare for WinXP clients.
Have an ancient (1995!) piece of software that uses 8.3 filename format. After the switch, long filenames ...
- 984
4
votes
1
answer
8k
views
Migrate from MS Active Directory to Samba4
The target is to replicate a MS AD DC (Windows server 2012) to a new Samba4 AD DC, then migrate users to the new Samba domain. This is our first time, and the various documents on the Internet are not ...
- 5,616
4
votes
1
answer
6k
views
FreeRADIUS using Active Directory integration broken without any traces
I've a FreeBSD 10.0 server running FreeRADIUS 3 and things got broken without any apparent reason.
I'm using Winbind from Samba4 to authenticate with ntlm_auth. I've done some debug to solve the ...
- 5,620
4
votes
1
answer
4k
views
Enable NIS extensions (rfc2307) on Samba 4 AD after installation
I'm testing out our samba 4 migration process and when the initial forest/domain was created, it was created without using --use-rfc2307:
sudo samba-tool domain provision \
--domain ...
- 39.7k
4
votes
2
answers
4k
views
Forwarding Active Directory Queries through DNSMASQ
I've set up an AD domain controller through Samba 4. I'm using Samba 4's internal DNS Server for handling the SRV queries.
However, due to project requirements, my clients need to have a DNSMASQ as ...
- 199
4
votes
1
answer
431
views
Samba capabilities & functionality
The company that I work for wishes to replace its windows servers with new linux servers but wants to keep Windows on employee desktops. The requirements are:
The employee desktops should be able to ...
4
votes
1
answer
1k
views
Synchronise Samba 4.4 passwords with the Unix password database
I run a small Samba 4.4 server, and I would like to keep the Samba password database in sync with the Unix password database. I would like the Samba password to be updated when a user changes their ...
- 322
4
votes
2
answers
3k
views
How can I change the localSID for a SAMBA Server?
I am trying to change the localSID for a SAMBA server, however I am unable to. I have tried the command "net setlocalsid" to no avail. To troubleshoot I have also stopped the smbd and nmbd services, ...
- 111
4
votes
2
answers
863
views
Mac (Yosemite) Samba 4.1.6 under Ubuntu
I'm finding that accessing a Samba share (4.1.6) from a Mac running Yosemite can be extremely slow. It can take several minutes (no exaggeration) to display a folder containing four or five files.
I'...
- 113
4
votes
1
answer
5k
views
Samba 4: group members not shown in "getent group"
I am running Samba 4 as an AD Server. Everything works fine, beside the members of a group is not listed by getent group:
# getent group
...snip...
LOCAL\Enterprise Read-Only Domain Controllers:*:...
- 59
4
votes
1
answer
8k
views
Samba4 Internal DNS with DHCP Server
On FreeBSD we run Samba4 as a DC and until recently had our IP addresses handed out by the routers DHCP server. We switched to running a DHCP server on the FreeBSD machine with the following ...
- 41
4
votes
1
answer
6k
views
Cannot access SMB share from Windows 10 with guest access via OpenVPN Connect
Windows 10 client, using file explorer, OpenVPN Connect client 3.3.4, cannot access an SMB share with guest access on the OpenVPN server (2.4.11 arm-openwrt-linux-gnu) is running.
Works:
Can connect ...
- 41
4
votes
0
answers
3k
views
Strange STATUS_ACCESS_DENIED issue with SMB2 client and Freenas CIFS SHARE
I've recently started seeing some strange SMB2 Errors on Windows 10 PCs (all of them version 1903).
The Fileserver is running FreeNAS-11.1-U7 (with ZFS Volumes) and CIFS Shares with Active Directory ...
- 41
4
votes
0
answers
798
views
Any possibility to use ZFS for Samba4 AD DC share on Ubuntu 16.04?
For a few (~ 5) PCs running Windows 8.1 I have to setup a domain controller using Samba4 on Ubuntu 16.04 Server.
Additionally the DC should provide a few shared folders with user-specific access and ...
- 41
4
votes
0
answers
235
views
Authentication issues when clients access domain-joined server from non Samba4 subdomain DNS name
We have an issue we’ve been struggling with for quite some time since we rolled out 10 Samba4 domain controllers at our main office and all remote sites about 3 years ago.
Simplified Current ...
- 41