On Thu, 25 Apr 2024 14:07:20 +0000
Philippe Maladjian via samba <samba at lists.samba.org> wrote:
> >
> >
> > -----Message d'origine-----
> > De : samba <samba-bounces at lists.samba.org> De la part de
Rowland
> > Penny via samba Envoy? : jeudi 25 avril 2024 15:11 ? :
> > samba at lists.samba.org Cc : Rowland Penny <rpenny at
samba.org> Objet :
> > Re: [Samba] Error accessing the share_info.tdb file
> >
> > On Thu, 25 Apr 2024 12:42:16 +0000
> > Philippe Maladjian <pmaladjian at hilaire.fr> wrote:
> >
> > > On Thu, 25 Apr 2024 11:44:42 +0000
> > > Philippe Maladjian via samba <samba at lists.samba.org>
wrote:
> > >
>
> > #samba-tool testparm
> > INFO 2024-04-25 15:17:44,189 pid:3021
> > /usr/lib/python3/dist-packages/samba/netcmd/testparm.py #96: Loaded
> > smb config files from /etc/samba/smb.conf INFO 2024-04-25
> > 15:17:44,189 pid:3021
> > /usr/lib/python3/dist-packages/samba/netcmd/testparm.py #97: Loaded
> > services file OK. Press enter to see a dump of your service
> > definitions
> >
> > # Global parameters
> > [global]
> > disable netbios = Yes
> > disable spoolss = Yes
> > netbios name = svad01
> > printcap name = /dev/null
> > realm = MYDOM.LAN
> > restrict anonymous = 2
> > server role = active directory domain controller
> > server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,
> > drepl, winbindd, ntp_signd, kcc, dnsupdate
>
> > 'nbt' is the AD DC name for 'nmbd', so you could turn
that off as
> > well.
> Ok
>
> > smb ports = 445
> > workgroup = MYDOM
> > idmap_ldb:use rfc2307 = yes
> > map acl inherit = Yes
>
> > I would remove the 'map acl inherit' line
>
> Why ?
For two reasons, the first is that it creates another EA, the second
is, I do not have it and the wiki works for myself.
You really only need to check/alter the 'Security' tab (for which a
better name would be 'NTFS permissions')
>
> >
> > [sysvol]
> > path = /var/lib/samba/sysvol
> > read only = No
> >
> > [netlogon]
> > path = /var/lib/samba/sysvol/mydom.lan/scripts
> > read only = No
> >
>
> > As I have said, it all works for myself, just where on the wiki
> > page that you linked to did it stop working. Also, are you working
> > as Administrator, a member of Domain Admins, or a normal user ?
>
> I get the message when I edit a share and check the tab : "Share
> Permissions". To make this modification, I log in with a user account
> that is a member of the Domain Admins group.
I will alter the wiki age (yet again), to say that checking/altering
the 'Share' tab is (very) optional.
>
> > Rowland
> Philippe.
>
> > PS, please do not 'CC' me, just reply to the list.
>
> Sorry, Outlook is really not convenient for communicating on mailing
> lists :(
From my experience of this list, no email client is convenient. ;-(
Rowland