samba - Apr 2014 - Samba 4 Domain Member fileserver permission denied error

Hi there,

I have a working Samba 4 domain (4.1.5) with several DC's spread over a
global network. They are all based on Ubuntu 12.04. At present the domain
member fileservers for this network are all running Samba 3.4.7 and using
NSLCD and *nix permissions to allow access. This is working nicely.

I am now trying to create a new Samba 4 (4.1.7 Ubuntu 12.04) domain member
fileserver and have been following these guides:

https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server
https://wiki.samba.org/index.php/Setup_and_configure_file_shares

wbinfo and getent all work as described.

All looks good until I get to the section on setting permissions on the
share at which point I get "An error occurred while applying the security
information to: \\SERVER\share  Access is denied"

Has anyone reached this point with similar results? Any help appreciated.

Thanks,
Chris.

-- 
ACS (Alavoine Computer Services Ltd)
Chris Alavoine
mob +44 (0)7724 710 730
www.alavoinecs.co.uk
http://twitter.com/#!/alavoinecs
http://www.linkedin.com/pub/chris-alavoine/39/606/192

I had same issue.

the ugly chmod 777 fixed the issue, but that was not a fix, was a crap, 
so ended out in

assigning GID to group "Domain Users"
assigning UID to all users in my domain

then on the member server
(wich idmap was set as the same used on the samba4 DC 30000000-40000000 
to have consistent mappings throughout the domain servers)
I set the shares mountpoint with the following ownerships and permissions

chown -R "DOMAIN\Administrator":"DOMAIN\Domain Users"
/path/to/shares
chmod -R 660 /path/to/shares

let me know if works for you


Lorenzo Faleschini
IT Manager @ Nord Est Systems srl
----------------------------------------
m: +39 335 6055225 | skype: falegalizeit

Il 29/04/2014 12:34, Chris Alavoine ha scritto:
> Hi there,
>
> I have a working Samba 4 domain (4.1.5) with several DC's spread over a
> global network. They are all based on Ubuntu 12.04. At present the domain
> member fileservers for this network are all running Samba 3.4.7 and using
> NSLCD and *nix permissions to allow access. This is working nicely.
>
> I am now trying to create a new Samba 4 (4.1.7 Ubuntu 12.04) domain member
> fileserver and have been following these guides:
>
> https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server
> https://wiki.samba.org/index.php/Setup_and_configure_file_shares
>
> wbinfo and getent all work as described.
>
> All looks good until I get to the section on setting permissions on the
> share at which point I get "An error occurred while applying the
security
> information to: \\SERVER\share  Access is denied"
>
> Has anyone reached this point with similar results? Any help appreciated.
>
> Thanks,
> Chris.
>