[Samba] W7 client cannot adjust file permissions via ADUC
Bob of Donelson Trophy
bob at donelsontrophy.net
Thu Jan 29 14:29:53 MST 2015
Let me resend the original message. It is a garbled mess being lost in
email land for so long (sent at 7:00a local time, appeared 7 hours
HOLD ON A BIT. CLARITY COMING.
Bob Wooden of Donelson Trophy
"Everyone deserves an award!!"
On 2015-01-29 15:25, Rowland Penny wrote:
> On 29/01/15 21:21, Bob of Donelson Trophy wrote:
> Rowland, I think you have confused my email with a different thread. Uhm . . what? --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com  [1 ] "Everyone deserves an award!!" On 2015-01-29 07:30, Rowland Penny wrote: On 29/01/15 12:54, Bob of Donelson Trophy wrote: Rowland, I have tried your various alteration suggestions and it is a "negative" result. Here is the output from wbinfo -u & wbinfo -g root at dtmbr01:~# wbinfo -u administrator dns-dtdc02 dns-dtdc01 krbtgt guest root at dtmbr01:~# wbinfo -g allowed rodc password replication group enterprise read-only domain controllers denied rodc password replication group read-only domain controllers group policy creator owners ras and ias servers domain controllers enterprise admins domain computers cert publishers dnsupdateproxy domain admins domain guests schema admins domain users dnsadmins root at dtmbr01:~# getent passwd Administrator
administrator:*:50001:50006::/home/samba/DT***RM/users/administratorSERNAME%:/bin/bash Say what, "administratorSERNAME%"? After running the 'generation one' script to create the member server, I have changed nothing except the suggestions that have been made on this mailing list. Attempting to gain access to the member server to re-adjust the file permissions on "profiles" per the instructions on the samba wiki. Please, thoughts? --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com  [1 ] [1 ] "Everyone deserves an award!!" On 2015-01-28 13:09, Rowland Penny wrote: On 28/01/15 18:55, Bob of Donelson Trophy wrote: No, I did not try the alterations but, Louis had me remove the "domain users" line earlier. Put the line back in and try alterations? (If so, I will not have time until you are asleep, tonight.) By all means try it, you have nothing to lose :-) I take it that 'wbinfo -u' shows all the domain users on the membe
and 'wbinfo -g' shows all the domain groups. Also 'getent passwd <domain user> shows the user. Rowland Links: ------  http://www.donelsontrophy.com  [1 ] What I should also have said, if what 'wbinfo -u' & 'wbinfo -g' is displaying is *all* your domain users, then *none* of your users need a 'uidNumber' and only 'Domain Users' & 'Domain Admins' need a 'gidNumber'. Try adding a new user and then give this user a 'uidNumber' Rowland Links: ------  http://www.donelsontrophy.com 
VERY BIG OOPS sorry :-[
More information about the samba