Howdy! Got a wierd one here.... on 2.2.1a with "nt acl support = yes" I do not seem to have any problems... however, when I do 2.2.2, I get issues with deleting roaming cache in Windows 2000/SP2 on logoff...but, when I set "nt acl support no" everything is way cool. now on 2.2.3a it does the same thing and on 2.2.4-pre also does the same thing. The issue with this is it appears that even the Administrator cannot remove locally cached profiles from the PC without jumping through a large series of hoops (by way of permissions). For example rt-click/properties/security/advanced/take ownership/allow inheritable....blah blah blah.... but, like I said set "nt acl support = no" and it's happy as a clam (the previously unremovable will remain, the new profiles are removed as expected) So I guess my questions are: 1) Is this normal behaviour for "nt acl support = yes"? 2) Should I be setting it to no? 3) Is it a bug introduced at 2.2.2? I can get a dump together if someone would like me to... Bill
This has to do with SP2 applied to W2K. You have to have your profile server be a part of the domain vs running in security=server or security=user modes if you want to use nt acls. William Jojo wrote:> > Howdy! > > Got a wierd one here.... > > on 2.2.1a with "nt acl support = yes" I do not seem to have any > problems... > > however, when I do 2.2.2, I get issues with deleting roaming cache in > Windows 2000/SP2 on logoff...but, when I set "nt acl support > no" everything is way cool. > > now on 2.2.3a it does the same thing and on 2.2.4-pre also does the same > thing. > > The issue with this is it appears that even the Administrator cannot > remove locally cached profiles from the PC without jumping through a large > series of hoops (by way of permissions). For example > rt-click/properties/security/advanced/take ownership/allow > inheritable....blah blah blah.... > > but, like I said set "nt acl support = no" and it's happy as a clam (the > previously unremovable will remain, the new profiles are removed as > expected) > > So I guess my questions are: > > 1) Is this normal behaviour for "nt acl support = yes"? > 2) Should I be setting it to no? > 3) Is it a bug introduced at 2.2.2? > > > I can get a dump together if someone would like me to... > > > Bill > > > >
On Tue, 12 Mar 2002, William Jojo wrote:> So I guess my questions are: > > 1) Is this normal behaviour for "nt acl support = yes"? > 2) Should I be setting it to no? > 3) Is it a bug introduced at 2.2.2? > > > I can get a dump together if someone would like me to...It's an issue in Win2kSP2. Jeremy believes it to be a client issue. Setting "nt acl support = no" for the profile share is the recommended confiuration. The environment in which we have seen these is storing profiles on a Samba member server that is not running winbind. Does this match your environment? cheers, jerry --------------------------------------------------------------------- Hewlett-Packard http://www.hp.com SAMBA Team http://www.samba.org -- http://www.plainjoe.org "Sam's Teach Yourself Samba in 24 Hours" 2ed. ISBN 0-672-32269-2 --"I never saved anything for the swim back." Ethan Hawk in Gattaca--