[Samba] Member Server SeDiskOperatorPrivilege

[James]

Hello,

     Did you remember to start smbd,nmbd and winbindd?

On 1/9/2015 10:10 AM, Tim wrote:
> Sorry, I have to correct:
> libnss_winbind.so.2 is located in /lib64
>
> Thanks
>
> Am 9. Januar 2015 15:21:32 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>:
>> On 09/01/15 13:47, Tim wrote:
>>> Hello all,
>>>
>>> I have a AD DC based on CentOS7 with sernet samba 4.1.14 with rfc2307
>> and function level 2008_R2. This one works so far and I can manage the
>> AD from a windows client.
>>> Now I setup a member server based on CentOS7 with sernet samba 4.1.14
>> just like the wiki advises with the same smb.conf (realm etc is
>> configured to my needs. I joined the AD and configured nsswitch.
>>> wbinfo works so far but getent passwd or getent group doesn't list
>> domain objects. getent group testgroup1 works, but getent passwd
>> testuser1 does not.
>>> I created a share in smb.conf. Now I want to set the
>> SeDiskOperatorPrivilege like the wiki advises.
>>> But it doesn't work. It says that it can't connect to server
>> 127.0.0.1. I tried it with
>>> net rpc rights grant 'DOM\Domain Admins' SeDiskOperatorPrivilege
>> -U'DOM\administrator'
>>> Now I can not access the server from windows to set share
>> permissions.
>>> What to do? The wiki told nothing about kerberos so I did not do
>> anything to it.
>>> Thanks in advance
>> Hi, you appear to be the second person in two days having a similar, if
>>
>> not the same problem with the sernet packages. I don't think it is a
>> kerberos problem, can you check if you have 'libnss_winbind.so.2'
>> anywhere.
>>
>> Rowland
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba

-- 
-James