Ubuntu Installation :: Samba - Failed To Grant Privleges For StudentdomainjpiihsDomain Admins (NT_STATUS_ACCESS_DENIED)
Mar 4, 2011
I'm a student building a Domain Controller for my school as a small project. Using Ubuntu 10.04 with Samba.
The problem I am having is that when I input: net rpc rights grant "studentdomainjpiihsDomain Admins" SeMachineAccountPrivilege SePrintOperatorPrivilege SeAddUsersPrivilege SeDiskOperatorPrivilege SeRemoteShutdownPrivilege
It says: Failed to grant privleges for studentdomainjpiihsDomain Admins (NT_STATUS_ACCESS_DENIED) I'm using the documentation from here: [URL]
View 1 Replies
ADVERTISEMENT
Jun 4, 2010
I had set up a Samba server on SuSE linux a few years ago with a single shared directory. It has been running fine ever since, surviving various system upgrades and hardware migrations without ever needing to change the configuration (well, maybe once or twice). However, since a few weeks ago, it refuses write access to the share. It just returns NT_STATUS_ACCESS_DENIED when I try to create or write to a file. That's also what /var/log/samba/log.smbd says (nothing more AFAICT). It's the same for all clients, i.e. remote Win XP PCs or local smbclient.
The funny thing is that it allows write access immediately after rebooting the server, but after a while (the next day or so) it refuses again. Restarting smbd or nmbd doesn't change anything here. I suspect that this started after installing the latest security updates for OpenSuSE 11.2 on May 17th. The new packages were (according to /var/log/zypper.log):
xorg-x11-libXext-2379.noarch
libmysqlclient-devel-2315.noarch
openSUSE-build-key-2398.noarch
libpython2_6-1_0-2213.noarch
libpng-devel-2159.noarch
Somehow I can't see which of these might have an influence on samba. But I am absolutely and positively sure that I didn't change anything else. I logged into the server only once in months, and all I did was doing the updates using the updater applet.
View 3 Replies
View Related
Aug 30, 2011
Our server is a x86_64 centos 5.5 computer. we installed samba3x-3.5.4-0.70.el5_6.1.x86_64.Samba seems work fine, we don't notice any problem in using it. But in the workstation log file, there are a lot of error messages like:
[2011/08/26 14:37:57.682260, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2011/08/26 14:37:58.194394, 1] smbd/service.c:678(make_connection_snum)
[code]....
View 2 Replies
View Related
Aug 27, 2011
I have a Natty headless server that I would like to set up shared directories and grant specific users write permissions. I use a Windows 2008 R2 machine with Active Directory for authentication and have created a group GroupWithWriteAccess which I want to have write access to the shared directory. I want all other users to have read only access. I have edited my smb.conf file with the following
Code:
[TV]
path = /media/share/Media/TV
writeable = yes
write list = primaryuser @GroupWithWriteAccess
create mode = 0660
directory mode = 0770
The machine is fully setup to work with Windows authentication and I can access shares from the ubuntu machine, it's just sharing local directories with the correct permissions that I can't work out. So far I can access the files from my other machine, but I do not have write access even though I am logged on as a user who is a member of GroupWithWriteAccess.
View 1 Replies
View Related
Sep 27, 2010
Installing file sharing using eBox and get the following error:
[Code]///
View 1 Replies
View Related
Sep 2, 2010
I have install samba server.Now i am trying to shift data from linux machine to windows machine.it gives following error. NT_STATUS_ACCESS_DENIED opening remote file history.txt firewall and iptables are also disabled.
View 1 Replies
View Related
Dec 3, 2010
Ive been trying to set up an irc server for the past couple of days. It works, but I havent been able to work out how to configure hybserv as well as server admins and ops, etc. Does anybody know of a good tutorial on how to configure ircd-hybrid with services? The endlessly long config file is just too confusing for me.
View 1 Replies
View Related
Jul 2, 2010
remove the thread after some one tells me.
View 2 Replies
View Related
Nov 29, 2010
Once you add a user(s) to be an administrator on the group you've created using gpasswd command (for example, i've added joe (username) as administrator for payroll (groupname) group using gpasswd); is there any way for me to view the list of users that I've assigned as administrators for a particular group? if so, what is the command line that i need to run?
View 2 Replies
View Related
Aug 30, 2010
It states there could be changes in role of system adminstrators. If this is going to happen, Being a system admin what are the skill sets do I have to develop ?
View 1 Replies
View Related
Jul 16, 2010
how to include my command results in a script? Basically what the script does is it checks the status of a service within the linux server, then sends an email when done. I want to include the results of my status check to my mail when sent.
i.e.
service dhcp3-server status Status of DHCP server: dhcpd3 is running. <---this I want to include in the mail that is sent out via script.
View 6 Replies
View Related
Mar 28, 2010
I have two computers at home both on Ubuntu 9.10.
Iam trying to get samba to work without password authentication. The smb.conf is the same on both machines beside netbios name and shares.
testparm gives
Code:
Load smb config files from /etc/samba/smb.conf
rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
Processing section "[printers]"
Processing section "[print$]"
Processing section "[Home]"
[Code]....
View 2 Replies
View Related
Mar 16, 2010
I've just installed an ubuntu 9.10 server at my office and configure apache, php and mysql without problems.
Now i need to share some directories in order to wed developers access to the websites files.But when I try to share, ubuntu tries to install samba services, and I keep to get those errors:
"W: Failed to fetch url Size mismatch
W: Failed to fetch url
Size mismatch"
View 6 Replies
View Related
Jun 20, 2010
I am trying to set up my Ubuntu 10.04 netbook to see my WinXP desktop's files and vice a versa. I followed the steps in this tutorial thread: HOWTO: Setup Samba peer-to-peer with Windows. I got as far as "Time to add yourself as an samba user." at this point I keep getting the following error:
Code:
sudo smbpasswd -L -a WinXP_User_Name
New SMB password:
Retype new SMB password:
Failed to add entry for user WinXP_User_Name.
My WinXP machine has no password.
My conf file is here:
[global]
; General server settings
; netbios name = WinXP_Computer_Name
server string =
; workgroup = WinXP_WorkStation_Name
announce version = 5.0
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE SO_RCVBUF=8192 SO_SNDBUF=8192
passdb backend = tdbsam
security = user .....
View 9 Replies
View Related
Apr 15, 2010
I have been using Ubuntu sense about 6.10 and never had to network with a Windows computer before. I have a decent understanding of Linux itself but I am having issues with this samba client. I have a clean install of Ubuntu 9.10 and am trying to use samba to access my shares on a Windows XP(SP3) computer. I am on the network just fine, and all the computers on the network have static IP addresses. When I go to Places->Network->Windows Network I see the "TITANNET" workgroup, (Even before I changed my workgroup to "TITANNET" in the smb.conf file.), but when I try to access it I get this error:
Code:
Unable to mount location
Failed to retrieve share list from server.
P.S.[0] I tried using /etc/init.d/samba restart but it did not work, I am not sure I am even running the samba server. (Well, it is obvious I am not, what I really mean is what am I running to (not =D)access the shares on my Windows PC.)
P.S.[1] I know that this has probably been posted before. I have searched and searched, I am about 1.5 pots of coffee and 4 hours into this.
View 2 Replies
View Related
Feb 25, 2009
net ads join -U admin_name admin passwordgives the following error: Failed to join domain: failed to lookup DC info for domain 'domain_name' over rpc: Logon failureIn the log, is the error messagewinbindd/winbindd_ads.c:ads_cached_connection(127) ads_connect for domain SPCRANE failed: Cannot read passwordkinit admin@domain_name works correctly, so kerberos is working. The ticket is generated, and I can see it with klist. the smb.conf file has the matching realm. It is configured identically like a redhat 5 box that does work
View 2 Replies
View Related
Jul 28, 2010
I just tried to build my own samba/ldap server on opensuse 11.3 and i am continuously getting an invalid credentials error when doing the smbpasswd -a command. Below are my smb and ldap files.
smb.conf
# Primary Domain Controller smb.conf
# Global parameters
[global]
unix charset = utf8
workgroup = MERCDOMAIN
netbios name = mercserver
passdb backend =ldapsam:"ldap://mercserver.mercdomain.com"
username map = /etc/samba/smbusers
log level = 1
syslog = 0
log file = /var/log/samba/%m
max log size = 0
#name resolve order = wins bcast hosts
time server = Yes
printcap name = CUPS
add user script = /usr/sbin/smbldap-useradd -m '%u'
delete user script = /usr/sbin/smbldap-userdel '%u'
add group script = /usr/sbin/smbldap-groupadd -p '%g'
delete group script = /usr/sbin/smbldap-groupdel '%g'
add user to group script = /usr/sbin/smbldap-groupmod -m '%g' '%u'
delete user from group script = /usr/sbin/smbldap-groupmod -x '%g' '%u'
set primary group script = /usr/sbin/smbldap-usermod -g '%g' '%u'
add machine script = /usr/sbin/smbldap-useradd -w '%u'
logon script = logon.bat
logon path = \mercserverprofiles\%u
logon drive = H:
domain logons = Yes
domain master = Yes
wins support = Yes
# peformance optimization all users stored in ldap
ldapsam:trusted = yes
ldap suffix = dc=mercdomain,dc=com
ldap machine suffix = ou=Computers,ou=Users
ldap user suffix = ou=People,ou=Users
ldap group suffix = ou=Groups
ldap idmap suffix = ou=Idmap
ldap admin dn = cn=Manager,dc=mercserver,dc=com
ldap ssl = off
idmap backend = ldap://127.0.0.1
idmap uid = 10000-20000
idmap gid = 10000-20000
printer admin = root
printing = cups
# = Share Definitions =
[homes]
comment = Home Directories
valid users = %S
browseable = yes
writable = yes
create mask = 0600
directory mask = 0700
[sysvol]
path = /home/data/samba/sysvol
read only = no
[netlogon]
comment = Network Logon Service
path = /home/data/samba/sysvol/vavai.net/scripts
writeable = yes
browseable = yes
read only = no
[profiles]
path = /home/data/samba/profiles
writeable = yes
browseable = no
read only = no
create mode = 0777
directory mode = 0777
[Documents]
comment = share to test samba
path = /home/data/documents
writeable = yes
browseable = yes
read only = no
valid users = "@Domain Users"
slapd.conf
UW PICO 5.04 File: /etc/openldap/slapd.conf
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/samba3.schema
modulepath /usr/lib/openldap/modules/
# moduleload back_bdb.la
pidfile /var/run/slapd/slapd.pid
argsfile /var/run/slapd/slapd.args
# Samba Primary Database mercdomain.com
database bdb
suffix "dc=mercdomain,dc=com"
directory /var/lib/ldap
rootdn "cn=Manager,dc=mercdomain,dc=com"
rootpw merc84
index entryCSN eq
index entryUUID eq
#access to attrs=userPassword,sambaLMPassword,sambaNTPassword
# by self write
# by dn="cn=Manager,dc=mercdomain,dc=com" write
# by * auth
#access to *
# by dn="cn=Manager,dc=mercdomain,dc=com" write
# by * read
# Indices to maintain
index objectClass eq
index cn pres,sub,eq
index sn pres,sub,eq
index uid pres,sub,eq
index displayName pres,sub,eq
index uidNumber eq
index gidNumber eq
index memberUID eq
index sambaSID eq
index sambaPrimaryGroupSID eq
index sambaDomainName eq
index default sub
ldap.conf
UW PICO 5.04 File: ldap.conf # LDAP Master
host mercserver.mercdomain.com
base dc=mercdomain,dc=com
binddn cn=Manager,dc=mercdomain,dc=com
bindpw merc84
bind_policy soft
pam_password exop
nss_base_passwd ou=People,ou=Users,dc=mercdomain,dc=com?one
nss_base_shadow ou=People,ou=Users,dc=mercdomain,dc=com?one
nss_base_passwd ou=Computers,ou=Users,dc=mercdomain,dc=com?one
nss_base_shadow ou=Computers,ou=Users,dc=mercdomain,dc=com?one
nss_base_group ou=Groups,dc=mercdomain,dc=com?one
ssl no
View 1 Replies
View Related
Jan 2, 2010
Is there a way to grant 'root' privileges to my user account? My account name ... I'll call it 'masterskop' as it is my forum name here, but not on my computer.Would it look like this in the sudoers' file?My purpose is to get access to all the folders and files in the 'File System'. The root and lost+found folders have 'Xs' on them...No access! And for example, under properties of the 'var' folder it states that 'you are not the owner, so you cannot change these permissions.' How can I get access to all of it everytime I login as the main user of my computer? I do not have anyone else using this computer.I did edit this file and used my real user name ... logged out and logged back in and still I do not have access/edit these folders and files.
View 4 Replies
View Related
May 5, 2010
I'm using Kubuntu 10.04 at the moment. Every time I log in, KDE Wallet asks me to give a password so that Kopete can access my login password to login. Is there any way you can 'grant permission' to access the wallet for certain applications so that I don't have to fill in my password every time?
View 9 Replies
View Related
Jul 14, 2010
I'm having troubles with a download and I need permissions for the conig files and to have write-access to your ~/.loki/ directory and all sub directories. Does anyone know how to do this?
View 4 Replies
View Related
Dec 8, 2009
I've setup my samba pdc with ldap, and I can see my shared files (public), which i think is an indication that my samba is working. But I can't seems to get my win2k8 machine to join my domain.
My domain admin is : root system admin: root password for both domain admin and system admin are the same The message that I get from Win2k8 when I try to join a domain is "The specified computer account could not be found. Contact an administrator to verify the account is in the domain. If the account has been deleted unjoin, reboot, and rejoin the domain"
[Code]...
View 2 Replies
View Related
Nov 19, 2010
I have a JavaCL program trying to open a port on 41xxx and it is getting permission denied unless I run it as root. I would like to grant a single user this permission for opening this port. This program runs fine on a vanilla ubuntu install but not on server. Where does Ubuntu handle user permissions for opening ports?I understand this is typically a no-no on a server but this is an unusual circumstance.
View 1 Replies
View Related
Jul 20, 2009
I have a FC11 box, with an HP prineter attached. I trying to print from my laptops after I have setup samba and shared the printer , It was working fine when I was installing FC4 and FC5. I am not sure what is missing. when I tried to print from the XP box I got "Test pge failed to print" error.
View 9 Replies
View Related
Jun 27, 2010
I have configured the remote installation of Fedora 13 with kickstart with nfs installation method. All work ok until I boot the Fedora 13 client system.
Fed13 client system receives the IP address from dhcp, receives the loader, loads vmlinuz and initrd.img from tftp, load anaconda, configures the network and dev eth0, mounts nfs server to load kickstart file, loads kickstart file (language...) but when it tries to mount nfs server to install from Fedora 13 installation tree it fails.
First, I thought that I had an error on my NFS configuration but I was wrong. I opened tty with ALT+F4 on the Fedora 13 client and I sew this error:
Code:
Is this a bug or can I modify anything to correct this error? How?
View 3 Replies
View Related
Sep 24, 2010
I have been having off and on issues with my samba file shares. I am sharing a NTFS formated hard drive where the mount point is in my home directory, as well as a printer connected via USB. I am to the point where printing works (using it as an ipp print share, samba is configured for it, but I don't know if it works or not), and I can access the shared folder from Windows, but I can't access the shared folder from any Ubuntu machine. I get the error:
[Code]....
View 5 Replies
View Related
Feb 15, 2011
i want /mydata to be read/write by the web server. What group and user showld i use?
View 2 Replies
View Related
Nov 9, 2010
Currently, I must sudo tcpflow -i lo as root user, I want to grant the lo interface and TCP port range 3000-3999 of all interfaces to user1, how to do that?
View 1 Replies
View Related
May 30, 2010
On RedHat 5 64-bit.I have a group that requires read-only access to the /var directory.I believe someone mentioned SGID and ACL stuff, and I've been researching this solution, but I wanted to check with you all first to ensure there wasn't an easier way to do this. Basically, I just need folks that belong in this certain group to read the contains of any file/directory contained within /var.
View 5 Replies
View Related
May 2, 2011
I am trying to setup a Rsync backup method.I have multiple files and folders all OWNED by different users.Now I can read the files as root.But I want to make a user for RSYNC that can ONLY read all these files for copying them across.It requires to create a non password login and I dont want to do that with the root user ! I have tried to create a new user and use 'setfacl':setfacl -m u:someuser:r /var/test.But when I su to 'someuser' I cannot copy the files to my homedir. So I think it wont work for rsync also.
View 8 Replies
View Related
Sep 22, 2010
I am trying to set up an ampache server using apache as the webserver. The instructions have the following line as one of the requirments: Your webserver has read access to the /sql/ampache.sql file and the /config/ampache.cfg.php.dist file..I have essentially zero experience with apache, and I'm not sure how to grant read access to a file.
View 1 Replies
View Related
