Questions tagged [samba4]
Samba4 is version 4 of Samba, the Linux implementation of the SMB/CIFS protocols. It is the first version of Samba with full Active Directory support, allowing a Linux server to become an Active Directory Domain Controller.
382 questions
1 vote
2 answers
334 views
AD DNS update for Samba client works for initial registration, fails renewal refresh of record
We have a large AD domain with three Windows Server 2022 DCs. DNS registration and renewal works with Windows domain members. I do not have control over the DCs (although I can access them for ...
0 votes
1 answer
141 views
How to stop Samba4 internal DNS from automatically adding eth0 IP to the domain zone?
I have a Samba4 server domain controller, using samba_internal as the DNS back end. After manually removing the eth0 IP address from the DNS zone, it is automatically re-added after a few minutes. ...
0 votes
1 answer
177 views
missing dirs & file [PolicyDirectory]\Microsoft\Windows NT\SecEdit\GptTmpl.inf on samba-dc
I'm new to this and I don't know where to google for this issue anymore. I created a lab environment using VMs and created my own self-compiled, clean samba-dc 4.22 according to the manuals on samba-...
1 vote
0 answers
370 views
BIND Server not Starting
I have been creating an email server with Samba AD and today it did not want to restart the DNS server with which I provisioned the domain. I have not been able to find any answers on the internet. ...
1 vote
1 answer
164 views
Managing files/folders permissions inside a shared folder on Samba AD-DC server using Windows Explorer
I installed Samba 4 as a domain controller + fileserver. I provided access to folders via Samba. Now when I try to change permissions on folders and files from Windows Explorer, I need to find a user ...
1 vote
2 answers
2k views
Upgrade Samba Active Directory Functional Levels - Lowest Level Error
I am trying to upgrade my multi-node samba active directory domain from functional level 2008 R2 to 2016. I have 10 domain controllers all running the latest patch of samba 4.10 all with identical ...
2 votes
1 answer
712 views
how to configure server aliases using samba-tool
My home domain is named cn.lan. I have a server called wsubu.cn.lan which is recognized within my local active directory domain which uses samba. There is this tool: samba-tool that can be used to ...
-1 votes
2 answers
2k views
Unable to join a new Samba Active Directory from Windows 11 and Linux
I have a network with Windows Server 2003 Active Directory server and Windows 11 computers. My plan is to replace Windows Server 2003 with Fedora Linux Server Edition - fedora 40. I could test it with ...
1 vote
1 answer
174 views
Samba AD-DC and sudo with password
Upgraded to latest on Ubuntu 24.04.1:samba-ad-dc/noble,noble,now 2:4.19.5+dfsg-4ubuntu9. Now I am not able to password auth a sudo group member if it is also a domain user while nsswitch.conf is ...
1 vote
0 answers
74 views
Accessing a fifo from windows via samba doesn't work, no obvious reason why
I tried reading from a fifo on Windows via samba to see if it worked or not (I might have something interesting to do with it if it did), and found that it does not. ReadFile() returns 0 bytes ...
0 votes
1 answer
192 views
Newly provisioned samba PDC allows joining but no connection
I have provisioned a fresh new PDC on my new Raspberry Pi/ubuntu for the domain MYOFFICE.MYBUSINESS.CO.UK. This is the most cost-effective solution for my purposes as a freelance developer. I can ...
1 vote
1 answer
206 views
Linux Samba share is logging a lot of failed logins because it's using the VPN creds instead of Active Directory
I have a Linux device (QNAP NAS) that is serving a Samba share and uses Active Directory for authentication. It works seamlessly locally, but when users are working from home over a VPN, the VPN ...
0 votes
1 answer
1k views
How to chown a directory on a mounted samba share?
I have a linux client mounting a samba share with the following fstab entry: //<serverip>/<nameofshare> /home/user -o nofail,x-systemd.device-timeout=15s,vers=3.11,user=<sambauser>,...
0 votes
1 answer
440 views
Active Directory for linux servers
I have 7 ubuntu servers and a Storage server on freebsd. I am considering deploying OpenLDAP on one of these 7 servers so that these servers can have a centralized user database and authentication ...
0 votes
0 answers
561 views
Use Samba AD DC as Password Backend for Samba PDC
I've got the following situation: Old Samba-server data.company.com Version 4.6.7 Configured as a PDC with workgroup = COMPANY for a population of Windows hosts with the following configuration: [...
0 votes
1 answer
669 views
Active Directory Win2k19 DNS record refused
I am migrating a Samba domain to AD on Windows 2k19. The domain successfully replicated, and I transferred 5 of the 7 Samba FSMOs (there are 2 additional FSMOs that Samba claimed that Active ...
0 votes
0 answers
1k views
How to synchronize OpenLDAP and Samba4?
I have a samba 4 domain with internal LDAP. Now the need arose to copy OpenLDAP users and passwords to this domain. This copy must be made synchronously every time there is a change in OpenLDAP. ...
1 vote
0 answers
6k views
How do I use Group Policy to sync client time in an Active Directory domain with an external NTP server and not the domain controller?
I have an Active Directory domain, with a domain controller running on Samba on Linux. I noticed that my Windows clients are having clock drift. I think this is because they really want the domain ...
0 votes
0 answers
2k views
Samba Windows ACL not working
I want to configure Samba to manage Windows ACL and manage them from Windows via the security tab. The Samba server is standalone and not part of an AD tree; i already followed various offical and ...
0 votes
1 answer
4k views
Understanding Samba VFS Operations for Full Audit
We have a TrueNAS System running TrueNAS-12.0-U8 for which we are required to log all successful and all failed file access attempts for a specific SMB share. The Samba version is 4.13. Per guidance ...
0 votes
1 answer
1k views
Failed to join a computer to samba domain (Zentyal) - Couldn't join realm: Insufficient permissions to join the domain
I'm relatively new Zentyal user (few months), and I love it! But I've ran into a problem I hope someone can help me with. In my deployment I have two Zentyal servers (zentyal-1.mydomain.com and ...
0 votes
0 answers
1k views
How to login as different users in samba?
I am able to setup a samba shares shared among 400 users on ubuntu 20 as file server. As a part of policy after any user have completed his/her work they disconnect from share. The problem arises for ...
1 vote
0 answers
202 views
2 Samba Configs: "config file" Parameter Fails
I am attempting to create 2 separate shares using 2 very different configs. I can get both going individually from the same system, but not together. Regretfully, I still have some legacy systems ...
-2 votes
2 answers
585 views
Samba server showing user still logged on despite shutdown/restart of the Windows 10 client
I have since years an issue with Samba 4.3.11 and Windows 10 in a Domain with Samba Active Directory: The Users on Windows 10 will be shown as further logged on on the samba server (smbstatus -b) even ...
1 vote
0 answers
606 views
Samba AD sysvol sync unison permissions issue
I'm having an issue with syncing the unix permissions and ownership on the sysvol between two Ubuntu Samba AD DCs using unison. I have copied the idmap.ldb file from DC1 to DC2 and the Windows ...
0 votes
1 answer
3k views
Windows 10 Doesn't connect with Samba4 server
I'm facing a problem with my samba server. I had a Samba server but it was a very old configuration so I have reinstalled the OS (Debian 5.10.140-1) and the Samba (Samba version 4.13.13). But now all ...
1 vote
1 answer
1k views
Samba 4.16 integration with openldap 2.6 on Centos8 for 2FA
I want to setup 2factor authentication for both Linux and windows machine and want to manage the password via LDAP server. For this, I am using LDAP(which provides TOTP functionality) to authenticate ...
0 votes
0 answers
160 views
wrong count of files samba windows/linux
i have a problem, i have a shared folder via samba, it works perfectly except if it has allot of files/folders, for example: one subfolder has 885 pdf's and browsing with linux i can see all of them, ...
2 votes
3 answers
971 views
Restrict Samba4 authentication by user + VPN IP address pair
We're working towards a zero trust security model in our office, with servers secured behind a WireGuard VPN. We already use WireGuard for remote access, so this is the simplest way to ensure ...
0 votes
1 answer
3k views
Windows client connecting to Samba 4.1.12 failing to join DC, latest Windows 11 Update?
I'm writing this here just in case someone can help me out a little bit here, since I'm kind of lost. I'm managing a domain controller through Samba version 4.1.12 (installed in a Debian 7), a little ...
0 votes
2 answers
2k views
access based share enum not working as expected
On a long-term (2years) Arch Linux server, I am running a small samba configuration with several shares. I would like users to only see the shares which they have access to - which is why I am using ...
2 votes
1 answer
2k views
disable samba usershare feature
Is there a way to completely disable usershare in Samba? Don't be confused with the users home share: man smb.conf Starting with Samba version 3.0.23 the capability for non-root users to add, modify, ...
0 votes
2 answers
785 views
is There ANY WAY To acess a NAS server over the internet without using any VPN or any ip router config
I'm trying to acess my samba server over the internet but I don't know how to do it without setting up a VPN or something which I don't want to do. I can't do anything with VPN's or router configs ...
1 vote
0 answers
1k views
Migrate from Zentyal to Samba4AD
I'm really new in Active Directory world and I plan to migrate from Zentyal 7 (a stack of multiple tools packaged in an Ubuntu OS) to a pure Samba4 Active Directory, and keep the same domain name. I ...
1 vote
1 answer
2k views
How do I import an smbpasswd file into a different samba server
I'm attempting to export my samba users and then import them (the ultimate goal is to do this between machines, but right now I just want to do the one test user on my newly installed server). I've ...
0 votes
1 answer
514 views
Samba AD GPO “Display information about previous logons during user logon” does not apply and makes it impossible to logon
We are performing tests to deploy a Univention UCS domain with samba Active Directory in our company and, to comply with a security normative, we need to activate the GPO "Display information ...
1 vote
2 answers
7k views
Can Samba close a single user session coming from a shared host?
If I want to close a user session on a Samba server, the smbcontrol close-share and smbcontrol kill-client-ip commands are available to achieve this. However when dealing with a shared client (a ...
0 votes
1 answer
364 views
Ubuntu 21.10 with Samba AD unable to create domain trust account
I am trying to add domain trust account for additional kerberos5 (MIT) domain in Samba AD DC with command: net rpc trustdom add <domain_name> -UAdministrator%<administrator_password> What ...
2 votes
1 answer
3k views
Samba AD: Create keytab for computer without net ads join?
Gist: I have set up a samba as AD DC. I'd like to export a keytab for SPNs for a computer account only without having the computer to run samba itself, or issue net ads join. Running samba-tool domain ...
5 votes
1 answer
7k views
Cannot access SMB share from Windows 10 with guest access via OpenVPN Connect
Windows 10 client, using file explorer, OpenVPN Connect client 3.3.4, cannot access an SMB share with guest access on the OpenVPN server (2.4.11 arm-openwrt-linux-gnu) is running. Works: Can connect ...
3 votes
2 answers
4k views
Windows 10 clients flooding Samba servers with phantom guest login attempts
I am currently running a Samba server for file sharing on a SOHO network. I have noticed that one of the recent patches to Windows 10 seems to have introduced some sort of nasty bug with SMB that ...
0 votes
0 answers
2k views
Windows 10 login fails at Samba NT domain member
I have the following setup: A Samba server PDC acting as the Primary Domain Controller of a NT domain MYDOMAIN (not Active Directory!) A Windows 10 pro PC Win10 which is also a member of that domain ...
2 votes
1 answer
2k views
Students can't install Extensions in Visual Studio Code
We are a school and would like to use Visual Studio Code together with the Omnisharp extension. The students' working environment has the following characteristics Server-stored home directories ...
0 votes
1 answer
762 views
Ubuntu login fails with a user of a trusted IDM domain (AD)
We have an IDM Server on a Rocky Linux distro configured with a Trust to a Samba AD DC (also installed on a Rocky Linux). So we created a user 'usupru2' on Samba AD DC under adtest.uy domain. Then we ...
0 votes
1 answer
2k views
Access denied when listing Samba shares
I've installed Samba to share files with Windows 10 machines. The setup works correctly to access individual shares using their path such as \\myhost\sejf, but listing shares on \\myhost fails with ...
0 votes
1 answer
4k views
Windows 2019 and truenas SMB share access problems
I'm having all sorts of trouble getting a FRESH Windows Server 2019 to connect to a samba share on Truenas 12. Originally, when I tried to log in, Windows kept saying You Can't Access This Shared ...
0 votes
0 answers
3k views
Unable to join a dc I just created with samba ad dc
I followed these instructions: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller These instructions didn't work exactly as they read. There was one step I ...
0 votes
1 answer
890 views
Where does Sendmail get authentication from?
For reasons I can't get into at the moment, I'm authenticating to an SMB domain (using Samba 4.9.5 on a Debian host as the DC, if it matters) with a Mint Linux server in the domain with Samba 4.11.6 ...
0 votes
1 answer
1k views
How to overcome the Weaker MD4 hash issue with samba
We are using samba configuration on our RedHat(RHEL7.9) systems, where SMB authentication is based on a NTLM password hash which basically a clear-text credential for a challenge-response ...
0 votes
2 answers
2k views
Samba AD Groups appear empty on Unix
Environment: fresh Debian 10 Samba 4.9.5-Debian as AD-DC, using internal LDAP, internal DNS, RFC2307 enabled, libnss-winbind enabled and configured, libpam-winbind enabled and configured fresh Debian ...