Hot answers tagged

3 votes
Accepted

Samba share not accessible to client in the same network

You've got two issues here You're trying to access \192.168.1.20\testshare instead of \\192.168.1.20\testshare. I'm going to assume that's a typo but it's important to be precise You have a hosts ...
roaima's user avatar
  • 1,646
2 votes

How do I query user attributes from a Samba AD DC in Linux with Kerberos auth?

You won't be able to retrieve Kerberos tickets for the shared ad.server.fqdn alias – only the individual DC FQDNs are known to the Kerberos KDC, and they are not interchangeable (each has its own ...
u1686_grawity's user avatar
2 votes

How to forward traffic through Linux box except requests to the box itself?

The FORWARD chain is only called for traffic that was forwarded, IE - the local machine is not its destination, so your rule doesn't have any effect on this kind of traffic, the place you should be ...
Gal Weiss's user avatar
  • 131
1 vote
Accepted

How to configure samba+winbind with AD redundancy?

In Active Directory, this is the responsibility of the consumer. You could do what every Windows endpoint host does. Query rootdse for a list of domain controllers, then perform a network connection ...
Greg Askew's user avatar
  • 35.9k
1 vote

How do I query user attributes from a Samba AD DC in Linux with Kerberos auth?

For completeness, aggregating solutions here. Thanks to Rowland Penny and user1686 for their help! Use ldbsearch. Example invocation: ldbsearch -H dap://ad.server.fqdn/ -b "CN=Caleb,CN=Users,DC=...
cqcallaw's user avatar
  • 163
1 vote

How to delete a domain user with associated folder rights?

No, there is nothing builtin to clean up orphaned entries in the ACLs. I suspect if you search you will find several third party scripts or tools that could do some cleanup. I don't have any direct ...
Zoredache's user avatar
  • 131k
1 vote

How do I enable WideLinks on samba's recent release?

You still enable it using the same wide links option. Samba will automatically load the VFS module when needed. (The Debian bullseye package contains the module; if MX Linux is missing it, that's ...
u1686_grawity's user avatar
1 vote

Adding SSL certs to Samba from CA

You seem to have misread the man page for the samba conf file. The following options need adjustment in your config: tls keyfile (G) This option can be set to a file (PEM format) containing the RSA ...
garethTheRed's user avatar
  • 4,584
1 vote
Accepted

Connecting from windows to debian Samba share

valid users = @samba-peter specifies that users belonging to the group samba-peter are allowed. Either drop the @ or make sure that peter belongs to the group samba-peter
Tschösi's user avatar
  • 126
1 vote

Samba Winbind - Windows Server AD - Users are able to see each other's home directories

I would suggest you alter your 'root preexec' script to check if the users home directory exists and create it if not. Remove the invalid users line and replace it with 'valid users = %S' This will ...
Rowland Penny's user avatar
1 vote

access based share enum not working as expected

There was a regression related to reading the share_info.tdb file. It was fixed a few weeks ago so it should show up in the 4.16.9 and 4.17.5 releases. https://bugzilla.samba.org/show_bug.cgi?id=15265 ...
Jeff Snider's user avatar
  • 3,282
1 vote

Why lock on a file shared over SMB taking only 3 microseconds?

It is happening because Windows is using oplocks for locking -> https://learn.microsoft.com/en-us/windows-hardware/drivers/ifs/oplock-overview
Przemek's user avatar
  • 11
1 vote

How to create shared folder with Linux Samba Cluster that is accessible by Windows? (Two PCs in cluster with one IP)

I have Windows Server cluster and it needs a witness. Two types are available – shared folder and shared disk. Having only one witness is pretty dangerous, so a high available witness is needed. You'...
RiGiD5's user avatar
  • 1,240
1 vote

Edit user's email field in Samba domain

Open the user config for editing (default is vi, but you can specify alternatives, such as nano with the --edit argument samba-tool user edit username Add the following line: mail: newemail@domain....
Kier's user avatar
  • 11
1 vote

Modern transparent folder compression in Ubuntu 18.04

If your data is read only (you're talking about ISO images, which are read only), you may use SquashFS. It is like mountable .tar.xz. There is an in-kernel driver which requires root permissions to ...
Nikita Kipriyanov's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible