similar to: Samba 4 AD share: Access denied

I have been using Samba4 for ages and love it as a DC and a print-server. I just setup my first member-server designed solely to host file shares, and have hit an issue. Group policy is mapping it correctly for the users in the group, but those users are getting an access denied message from their Windows 7 Pro 64bit clients when accessing the share. I have configured ACLs and the box

I believe I have found either a bug or something I do not understand. I recently had a file-share issue and the resolution was to set the "others" permissions to 5, read and execute. The problem with this is that once I am in Windows on a workstation, this appears to allow "Everyone", "CREATOR OWNER", and "CREATOR GROUP" access. We normally setup our

Hello, A few weeks ago we started joining some remote servers to our AD domain as member servers. Several times now we have come back to them and found ownership settings missing like the following. [root at franks-dc1 opt]# ll total 72 drwxrws---+ 3 14505 10013 4096 Nov 28 2006 appinstalls drwxrws---+ 2 14505 10010 4096 Aug 3 2004 bldgshrs drwxrwsr-x+ 2 14505 10011 4096 Aug 3 2004

They left a PC on, so I got the info. The info pissed me off, but not because of the issue. This time it worked flawlessly, but I got the error from the event log from prior attempts. First, today's results. C:\Users\reachfp.KIGM>gpupdate Updating Policy... User Policy update has completed successfully. Computer Policy update has completed successfully. C:\Users\reachfp.KIGM>gpupdate

You and Louis confirmed my fear. MS recommended we use ".local" back in the day. This is an OLD domain. I now use ".lan" for my domains. Avahi is there, but I configured it to listen for ".avahi". If you want, I can post my avahi configuration. At least, this is what my memory says. Lead IT/IS Specialist Reach Technology FP, Inc On 07/03/2015 11:20 AM, Rowland Penny

On 03/07/15 15:58, Ryan Ashley wrote: > They left a PC on, so I got the info. The info pissed me off, but not > because of the issue. This time it worked flawlessly, but I got the > error from the event log from prior attempts. First, today's results. > > C:\Users\reachfp.KIGM>gpupdate > Updating Policy... > > User Policy update has completed successfully. >

If this is about problems on a member server, read on. If its on a ADDC, then i dont know, but good info below. ;-) ( Rowland, maybe a thing to put on the wiki also, read on.. ) If you only use the share from windows machines, make your life easy. Add : acl_xattr:ignore system acls = yes to the share. And set the correct rights from within windows. If you do use the shares /folders also

Everyone, I have finally resolved the new heartburn 3.0.24 on Ubuntu Feisty was giving me and have stumbled upon some information that might help others out there. I was seeing problems with ACL entries getting mangled and disappearing, Excel making files read only and extended attributes doing bizarre things. The solution revolved around what appears to be a change in how ACLs are managed.

Hi, You should post your smb.conf of that file server. You should also tell us what kind of domain it is, in case of domain. That should help people to help you. Cheers, mathias 2015-11-25 0:00 GMT+01:00 Henry McLaughlin <henry at incred.com.au>: > I have created a [home] share: > > user at jupiter:~$ sudo ls -l /srv/samba/ > total 24 > drwxrwxr-x 2 root domain admins

On 25 November 2015 at 20:27, mathias dufresne <infractory at gmail.com> wrote: > Hi, > > You should post your smb.conf of that file server. You should also tell us > what kind of domain it is, in case of domain. That should help people to > help you. > > Cheers, > > mathias > > Hi and thank you for the help. I think I have solved this however my solution

Hi all - I'm setting up my first Samba server on an NT domain running winbindd, samba version 3.3.3-14.3e on Red Hat Linux. Here's my smb.conf: [global] workgroup = CADDOCK server string = samba server security = DOMAIN log level = 3 log file = /var/log/samba/%m.log max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192

> Rowland Penny <rpenny at samba.org> hat am 30. März 2017 um 17:40 geschrieben: > OK, try this, change the ownership of both dirs to root:Domain Admins > > Then go and follow this wikipage: > > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs Ok, just did that. i have been always trying to follow this manual, to the point "Select the

I am getting a permission denied when trying to ls as a domain user a samba mount with windows ACLs (sigh I thought I had this figured out).? I tried to include self descriptive server names and include them in the info below (fs1: file server, nc: addc, u2gui: ubuntu desktop) CARLSON\peter at u2gui:~$ ls -l /mnt ls: cannot access '/mnt/test': Permission denied total 0

I have created a [home] share: user at jupiter:~$ sudo ls -l /srv/samba/ total 24 drwxrwxr-x 2 root domain admins 4096 Nov 22 21:38 Demo drwxrwxr-x 2 root domain admins 4096 Nov 15 11:51 Finance drwxrwxr-x+ 2 root domain admins 4096 Nov 25 08:08 home drwxrwxr-x+ 9 root domain admins 4096 Nov 24 21:06 Printer_drivers When i try to set the ACLs in Windows I get "Permission Denied" In

On Thu, 13 Apr 2017 17:10:16 -0400 Rommel Rodriguez Toirac via samba <samba at lists.samba.org> wrote: > > [root at gtmpve nagios]# net rpc rights list accounts > ATGTM00\Domain Admins > SeDiskOperatorPrivilege > > It look like the Domain admins yes have the > 'SeDiskOperatorPrivilege' privilege. I change the group of the share > with chgrp and try from

>-----Oorspronkelijk bericht----- >Van: rowlandpenny at googlemail.com >[mailto:samba-bounces at lists.samba.org] Namens Rowland Penny >Verzonden: woensdag 17 juni 2015 10:54 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] samba tool and sysvol/gpo checks >error/bugged? ( but it all works ok) > >On 17/06/15 08:15, L.P.H. van Belle wrote: >> Hai, >>

Hi, > Follow this wiki page: > > https://wiki.samba.org/index.php/Setup_a_Samba_print_server#Setup_the_.5Bprinters.5D_share > Then the page you referred and use windows ACLs not posix ACLs done > > I also take it you have given your users & groups uidNumber or > gidNumber attributes. yes, this is a test-environment and i have given the unix-id to administrator,

hi i have two domain controllers and a domain member setup to serve home directories, the file system on the server is btrfs and the home directory is a subvolume, i have rsat installed on a windows 10 pro laptop with which i use to administer  my domain as administrator, following the web page https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs i get to Setting ACLs on

> >> Run this : getfacl /home/users > > getfacl: Removing leading '/' from absolute path names > > # file: home/users > > # owner: root > > # group: A\\domain\040admins > > user::rwx > > user:root:rwx > > user:10512:rwx > > group::rwx > > group:A\\domain\040admins:rwx > > mask::rwx > > other::--- > >

[global] netbios name = aphrodite security = ADS workgroup = SAMDOM realm = AD.SAMDOM.COM.AU log file = /var/log/samba/%m.log log level = 1 dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind refresh tickets = yes winbind trusted domains only = no winbind use default domain = yes