Sorry Rowland. It was an oversight from my side.
Samba server is an AD domain member.
When I try to open
https://urldefense.com/v3/__https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs__;!!NpxR!lbCYa_MuxvKlSohkrFNAmkkQrBUjqgJbTD0zOH_Trn1ovek036fbKt_PBTK66zMO-LqAwh9vWkh6VBPOU1xudhOUfDej$
I am getting ?Upgrade required?. Not sure what is happening.
Regards,
Srikanth NS
From: Rowland Penny <rpenny at samba.org>
Date: Monday, 15 September 2025 at 2:59?PM
To: samba at lists.samba.org <samba at lists.samba.org>
Cc: ., Srikanth N S <srikanth.nagasubbaraoseetharaman at hpe.com>
Subject: Re: [Samba] Regarding User/Group ACLs
On Mon, 15 Sep 2025 08:57:27 +0000
"., Srikanth N S via samba" <samba at lists.samba.org> wrote:
> Hi,
>
>
> 1. I created a user group with user1 and user2 on Active directory.
> 2. Mounted SMB share with RW access to Client1 (logged into as
> user1). 3.
> Added user group group1(user1 and user2 belong to group1) in write
> list. 4.
> Add user1 in read list.
> 5.
> Now when I tried to write SMB share with User1, I was allowed to
> write.
>
> Could you please let us know shouldn't user access control list
> override the user group? in terms of granularity?
>
> Thanks & Regards,
> Srikanth NS
First, you seem to send your posts to 'Kees van Vloten' via the samba
mailing list instead of directly to the list, is there a reason for
this ?
You mention 'active directory' in your question, so I assume that the
SMB server in question is a Samba Unix domain member and if so, you are
doing it wrong, see here:
https://urldefense.com/v3/__https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs__;!!NpxR!lbCYa_MuxvKlSohkrFNAmkkQrBUjqgJbTD0zOH_Trn1ovek036fbKt_PBTK66zMO-LqAwh9vWkh6VBPOU1xudhOUfDej$
and here:
https://urldefense.com/v3/__https://wiki.samba.org/index.php/Setting_up_a_Share_Using_POSIX_ACLs__;!!NpxR!lbCYa_MuxvKlSohkrFNAmkkQrBUjqgJbTD0zOH_Trn1ovek036fbKt_PBTK66zMO-LqAwh9vWkh6VBPOU1xudrZCG0eZ$
Rowland