31
votes
Accepted
How do I change my default shell on a domain account
I asked about this in the #suse channel on Freenode, and Miuku suggested the same as Arul, however, he mentioned two things, if I were using a Windows domain I could set the loginShell attribute.
...
- 994
21
votes
Accepted
Windows 10: AD Domain Admin with missing rights?
Look like it's a problem between 'User Account Control' and the 'Built-in Administrator' account. I had the same issue and this worked for me:
Win + R and type 'secpol.msc' for open the Local ...
- 477
17
votes
Accepted
How to configure Samba to work with Windows 10 1709?
For security reasons Microsoft has disabled the SMB 2 guest access. You are right that you can change the Windows settings to allow the guest access to the samba share.
https://tech.nicolonsky.ch/...
- 6,169
14
votes
Accepted
How many FSMO roles are there?
The standard answer that Windows admins have given to this question is five:
Schema Master (One per forest)
Domain Naming Master (One per forest)
PDC Emulator (One per domain)
RID Master (One per ...
- 12.9k
14
votes
Accepted
Use NTLMv2 Authentication with Samba
Supposedly, Samba's defaults match the following values, but I had to set them explicitly:
lanman auth = no
ntlm auth = yes
client lanman auth = no
- 442
9
votes
Accepted
Difference between durable file handles, resilient file handles and persistent file handles
Durable handles are part of SMB 2.0
Resilient handles are part of SMB 2.1
Persistent handles are part of SMB 2.2 which is now called SMB3
My main references for the following are:
https://wiki.samba....
- 12.9k
8
votes
How do I change my default shell on a domain account
I had exactly the same issue. Since not all machines in my domain have zsh installed, and since I did not want to affect all users, I ended up putting in my .bashrc:
if [ -x /usr/bin/zsh ]; then
...
- 103
7
votes
Accepted
Samba 4: domain joined, but all users are mapped to nobody, and shares are inaccessible from Windows clients
I've found the core problem: a missing package. Unfortunately it's not easy to get right: here is the final, working configuration (thanks to Rowland Penny from samba.org):
get sure you installed all ...
- 6,918
7
votes
Accepted
How to rename a user in samba4 domain?
Assuming we use Ubuntu and Samba 4 is configured as a DC (Active Directory Domain Controller) and we want to change the user with name Old User and login olduser. To just rename a users login name, we ...
- 1,947
6
votes
Samba, Windows ACLs and unwanted executable bit
From the Samba manual:
Consequently, there is no use for any of the three Unix executable
bits that are present on a file in a Samba disk share. DOS files,
however, have their own attributes ...
- 48k
5
votes
How to log if a user removes a file from samba share
It seems like the vfs_full_audit feature should get you the required info:
Based on instructions found here I think you should get it to work like this,
Add the following to smb.conf and restart ...
- 316
5
votes
Accepted
Samba not working on LAN without internet connection
I get the exact same situation as yours -- Samba in LAN works well when WAN port is up, but is painfully slow if WAN port is down. I finally figured out why with tcpdump.
Samba tries to resolve its ...
- 380
5
votes
Accepted
Samba 4.9.0 ./configure lmdb error
The actual dependency to install (for Red Hat Enterprise Linux 7 / CentOS 7 / Scientific Linux 7) is lmdb-devel.
Rather than following some random tutorial for a now EOL version of Samba, you might ...
- 2,049
5
votes
Accepted
Why can users delete files on Samba share when they apparently don't have permission to do so?
Ok, I'll try to sum it up here and give you a quick explanation about how Linux permissions work (without including ACLs) and why they work like that:
First in short to give the answer: to delete a ...
- 1,999
5
votes
How can Samba be configured to use LDAP for authentication only?
I assume that you want to run Samba in simple WinNT-compatible domain controller mode, not the full Active Directory mode.
First you have to understand that SMB authentication is based on a NTLM ...
- 974
4
votes
Windows 10: AD Domain Admin with missing rights?
Just had this issue on a few computers I administer. In case it helps anyone:
PCs built from scratch with Windows 10 (education edition) using Lite Touch Installation from Windows server - the issue ...
4
votes
Allow self password change using LDAP(s) with Samba4
"unicodePwd" field or attribute can contains only password under unicode form and encoded with base64:
Password to set : MyNewPassw0rd
Encoding this password to push it into "unicodePwd&...
- 41
4
votes
Difference between durable file handles, resilient file handles and persistent file handles
More about persistent handles...Persistent handles are available across several servers of the same cluster. When one server goes down for any reason, the client machine can semi-transparently ...
- 176
4
votes
connect to smb share with root access
Arguments for the valid users parameter must be comma-separated. Also, notice that you typed "writable" instead of writeable. And, because writeable is the inverted synonym of read only, ...
- 341
4
votes
Use NTLMv2 Authentication with Samba
Check the Windows registry for the key:
HKLM\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel
If this is set to 0 then Windows will try to connect only using NTLMv1. I have seen this ...
- 301
4
votes
How to configure Samba to work with Windows 10 1709?
To work I needed to add in my smb.conf
server min protocol = SMB2_10
client min protocol = SMB2
client max protocol = SMB3
ntlm auth = yes
- 41
4
votes
Accepted
nmb won't announce samba shares
You have SMBv1 turned off (as it should be, it is very insecure) and SMBv1 is required for Network Browsing.
Try installing this:
https://github.com/christgau/wsdd
It will allow your Windows clients ...
- 171
3
votes
FreeRADIUS using Active Directory integration broken without any traces
Check the permissions of the winbind privileged pipe - the user that FreeRADIUS runs as needs to be able to access it. You probably need to add your FreeRADIUS user into the winbindd_priv group, and ...
- 137
3
votes
Samba4 & Active Directory Kerberos [Cannot contact any KDC for realm 'INTERNAL.CORP.COM' while getting initial credentials
Searching a little bit more I found a solution to my problem. As posted here, all I needed to do was changing my samba configuration:
/etc/samba/smb.conf
Where I added this line into the [global] ...
3
votes
Accepted
smbd processes in uninterruptable sleep
I have a similar configuration with an AD joined server sharing from zfs, and have experienced the 'sleep' issue in FreeBSD 10.1 and 11.0, and several versions of Samba 3 and 4. I began to notice the ...
- 46
3
votes
Samba configuration for public shares
I had to remember to do one other thing before I could get this to work... it was to make sure the permissions on my shared unix directory were read/write for the nobody user or the nogroup group. ...
- 151
3
votes
Accepted
wbinfo -u does not show AD users (is empty)
Try to add the following line to your smb.conf:
client ldap sasl wrapping = plain
It seems as this has caused some trouble lately.
- 190
3
votes
Accepted
Samba4 Bind9 client registration as A Host
Samba has the capability to automatically update the BIND zone files via Kerberos.
You have to configure bind with auto update.
Check this article for full configuration and integration between ...
- 1,688
3
votes
Accepted
How to know the service name of a samba server
From a Linux host, I would install the smbclient package and use /usr/bin/smbclient to list the shares
from man smbclient
-L|--list
This option allows you to look at what services are ...
- 303
Only top scored, non community-wiki answers of a minimum length are eligible