sven sven
2002-Mar-04 18:35 UTC
[Samba] SGI XFS 1.0.2a, ACLs and samba 2.2.3a with win2k perms
Hi, I haven't been able to find any doco that explicity states whether it is supported, so I am hoping someone out there can answer the following questions: Is it possible for a folder/file in a samba share to have win2k security permissions assigned to it? For example, I want my samba server to participate in an existing Win2k domain. I want users to be able to set their own permissions for other domain users/groups for files/folders they own. Do I have to use smbcacls to facilitate this? Do I have to use winbindd to facilitate this? Some of my smb.conf settings are as follows: [global] workgroup=TESTZONE security = domain password server = test3 nt acl support = yes [downloads] path = /xfs/downloads public = yes only guest = no writable = yes printable = no write list = @quota_users The samba box is running RH7.2, samba 2.2.3a and is using the SGI XFS filesystem (1.0.2a). The downloads samba share is residing on an XFS file system that supports acl's. The pc is a member of the domain (smbpasswd -j ...). Domain users that have an account on this machine and are a member of quota_users can have access to the samba share. Whenever I try to assign permissions for a domain user TESTZONE\f_flintstone i get: create_canon_ace_lists: unable to map SID S-1-5-21-606747145-813497703-1202660629-1110 to uid or gid. I have tried both the rpm version and a compiled 2.2.3a version (with --acl-support). TIA _________________________________________________________________ MSN Photos is the easiest way to share and print your photos: photos.msn.com/support/worldwide.aspx
Kevin Pate
2002-Mar-04 20:06 UTC
[Samba] SGI XFS 1.0.2a, ACLs and samba 2.2.3a with win2k perms
I'm not sure if it will work with SGI's XFS, but I just installed a new 2.4.17 linux kernel with ACL support and it works with Windows 2000!!! I can set permissions on folders from a Windows 2000 computer. The link to the kernel patches (they may have some SGI stuff) is acl.bestbits.at. Samba must be compiled --with-acl-support. Good luck!! Kevin Pate RHCE Pate Consulting kevin@pateconsulting.com On Mon, 2002-03-04 at 20:28, sven sven wrote: Hi, I haven't been able to find any doco that explicity states whether it is supported, so I am hoping someone out there can answer the following questions: Is it possible for a folder/file in a samba share to have win2k security permissions assigned to it? For example, I want my samba server to participate in an existing Win2k domain. I want users to be able to set their own permissions for other domain users/groups for files/folders they own. Do I have to use smbcacls to facilitate this? Do I have to use winbindd to facilitate this? Some of my smb.conf settings are as follows: [global] workgroup=TESTZONE security = domain password server = test3 nt acl support = yes [downloads] path = /xfs/downloads public = yes only guest = no writable = yes printable = no write list = @quota_users The samba box is running RH7.2, samba 2.2.3a and is using the SGI XFS filesystem (1.0.2a). The downloads samba share is residing on an XFS file system that supports acl's. The pc is a member of the domain (smbpasswd -j ...). Domain users that have an account on this machine and are a member of quota_users can have access to the samba share. Whenever I try to assign permissions for a domain user TESTZONE\f_flintstone i get: create_canon_ace_lists: unable to map SID S-1-5-21-606747145-813497703-1202660629-1110 to uid or gid. I have tried both the rpm version and a compiled 2.2.3a version (with --acl-support). TIA _________________________________________________________________ MSN Photos is the easiest way to share and print your photos: photos.msn.com/support/worldwide.aspx -- To unsubscribe from this list go to the following URL and read the instructions: lists.samba.org/mailman/listinfo/samba -------------- next part -------------- HTML attachment scrubbed and removed
sven sven
2002-Mar-04 21:21 UTC
[Samba] SGI XFS 1.0.2a, ACLs and samba 2.2.3a with win2k perms
You can use win2k to set permissions on SGI's XFS too. But I haven't been able to assign permissions to other win2k domain users on a samba share. With: security = server My Win2k domain users can access the samba share, set permissions that affect the underlying unix permissions(UGO), but cannot assign another domain groups/users to the file/folder. Is this something you can do with the 2.4.17 kernel?>From: Kevin Pate <kevin@pateconsulting.com> >To: sven sven <svenv999@hotmail.com> >CC: samba@samba.org >Subject: Re: [Samba] SGI XFS 1.0.2a, ACLs and samba 2.2.3a with win2k perms >Date: 04 Mar 2002 22:02:50 -0600 > >I'm not sure if it will work with SGI's XFS, but I just installed a new >2.4.17 linux kernel with ACL support and it works with Windows 2000!!! >I can set permissions on folders from a Windows 2000 computer. The link >to the kernel patches (they may have some SGI stuff) is >acl.bestbits.at. Samba must be compiled --with-acl-support. Good >luck!! > >Kevin Pate >RHCE >Pate Consulting >kevin@pateconsulting.com > >On Mon, 2002-03-04 at 20:28, sven sven wrote: > > Hi, > > I haven't been able to find any doco that explicity states whether it >is > supported, so I am hoping someone out there can answer the following > questions: > > Is it possible for a folder/file in a samba share to have win2k >security > permissions assigned to it? For example, I want my samba server to > participate in an existing Win2k domain. I want users to be able to >set > their own permissions for other domain users/groups for files/folders >they > own. > Do I have to use smbcacls to facilitate this? > Do I have to use winbindd to facilitate this? > > Some of my smb.conf settings are as follows: > [global] > workgroup=TESTZONE > security = domain > password server = test3 > nt acl support = yes > > [downloads] > path = /xfs/downloads > public = yes > only guest = no > writable = yes > printable = no > write list = @quota_users > > The samba box is running RH7.2, samba 2.2.3a and is using the SGI XFS > filesystem (1.0.2a). > > The downloads samba share is residing on an XFS file system that >supports > acl's. The pc is a member of the domain (smbpasswd -j ...). Domain >users > that have an account on this machine and are a member of quota_users >can > have access to the samba share. > > Whenever I try to assign permissions for a domain user >TESTZONE\f_flintstone > i get: > > create_canon_ace_lists: unable to map SID > S-1-5-21-606747145-813497703-1202660629-1110 to uid or gid. > > I have tried both the rpm version and a compiled 2.2.3a version (with > --acl-support). > > TIA > > > _________________________________________________________________ > MSN Photos is the easiest way to share and print your photos: > photos.msn.com/support/worldwide.aspx > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: lists.samba.org/mailman/listinfo/samba > >_________________________________________________________________ Join the world’s largest e-mail service with MSN Hotmail. hotmail.com