samba - Nov 2019 - security = ads parameter not working in samba 4.9.5

On 28/11/2019 20:01, S?rgio Basto wrote:
> This recommendation , why ? wiki say to add it [1]
> [1]
>
https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Enable_Extended_ACL_Support_in_the_smb.conf_File
Yes, but under it, in a bright orange warning box, it says this:

On a Samba Active Directory (AD) domain controller (DC), extended ACL 
support is automatically enabled globally. You must not enable the 
support manually.
> I tried these fixed , but noting change getent passwd and getent group
> stops to work soon as I change change /etc/samba/smb.conf with
> WORKGROUP
>
Did you make all the changes on the DCs that I suggested ?

Rowland

On Thu, 2019-11-28 at 20:09 +0000, Rowland penny via samba
wrote:
> On 28/11/2019 20:01, S?rgio Basto wrote:
> > This recommendation , why ? wiki say to add it [1]
> > [1]
> >
https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Enable_Extended_ACL_Support_in_the_smb.conf_File
> 
> Yes, but under it, in a bright orange warning box, it says this:
> 
> On a Samba Active Directory (AD) domain controller (DC), extended
> ACL 
> support is automatically enabled globally. You must not enable the 
> support manually.
> 
> > I tried these fixed , but noting change getent passwd and getent
> > group
> > stops to work soon as I change change /etc/samba/smb.conf with
> > WORKGROUP
> > 
> Did you make all the changes on the DCs that I suggested ?
yes
> Rowland
> 
> 
> 
-- 
S?rgio M. B.

On 28/11/2019 20:26, S?rgio Basto wrote:
> On Thu, 2019-11-28 at 20:09 +0000, Rowland penny via samba wrote:
>> On 28/11/2019 20:01, S?rgio Basto wrote:
>>> This recommendation , why ? wiki say to add it [1]
>>> [1]
>>>
https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Enable_Extended_ACL_Support_in_the_smb.conf_File
>> Yes, but under it, in a bright orange warning box, it says this:
>>
>> On a Samba Active Directory (AD) domain controller (DC), extended
>> ACL
>> support is automatically enabled globally. You must not enable the
>> support manually.
>>
>>> I tried these fixed , but noting change getent passwd and getent
>>> group
>>> stops to work soon as I change change /etc/samba/smb.conf with
>>> WORKGROUP
>>>
>> Did you make all the changes on the DCs that I suggested ?
> yes
OK, then run the script you downloaded, on the Unix domain member and 
paste the output in to a post here.

Rowland