samba - Feb 2003 - updated: managing acl's via windows in samba 3.0 alpha 21

Update:

Just for my personal assurance, I decided to recompile samba again
making sure to use the parameters I thought I had used the first time
(./configure --with-winbind --with-acl-support --with-ads
--with-smbmount).  Without changing any of my configs, I restarted samba
and winbind.

One trick: to change rights on a file, you must own it or be root.  This
is where the "force user = root" comes in handy, but obviously you
need
to be very careful who can use that share.

Problem solved.

 
Rick Segeberg
Provo Site Manager, IT Department
The Waterford Institute
rick.segeberg@waterford.org


-----Original Message-----
From: Rick Segeberg 
Sent: Thursday, February 20, 2003 9:57 AM
To: samba@lists.samba.org
Subject: RE: [Samba] managing acl's via windows in samba 3.0 alpha 21


I tried your suggestion, but that didn't work either.  Yes the account
I've been using has sufficient rights to make the changes.  Just to make
sure, I performed the same operation on the ads server itself with no
problems.

Also, I tried using the force user = root option which theoretically
would allow me to do anything on the linux box - also didn't work.  

 
Rick Segeberg
Provo Site Manager, IT Department
The Waterford Institute
rick.segeberg@waterford.org


-----Original Message-----
From: Adam Smith [mailto:adam.smith@sageautomation.com] 
Sent: Thursday, February 20, 2003 5:02 AM
Cc: samba@lists.samba.org
Subject: Re: [Samba] managing acl's via windows in samba 3.0 alpha 21


On Wed, Feb 19, 2003 at 05:29:43PM -0700, Rick Segeberg
said:
> 
> I've successfully joined the ads domain and can access files etc. with
> no problems from my windows workstation logged into the domain.  I've
> got acl's working on the linux side (meaning I can successfully add
> multiple user and group permissions to a file or directory using
> setfacl.  However, when I try to add a user to a file or directory
from
> windows, I get the following error:
> 
> "Unable to save permission changes on file <name>.  Access
denied."
Does the account you are trying to change the ACLs from have sufficient
permission to do so?  Log in as root on the desktop and see what error
you
get, if any.


-- 
Adam Smith
Information Technology Officer
SAGE Automation Ltd.

adam.smith@sageautomation.com
http://www.sageautomation.com
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


*************************************

This email may contain privileged or confidential material intended for
the named recipient only.
If you are not the named recipient, delete this message and all
attachments.  
Any review, copying, printing, disclosure or other use is prohibited.
We reserve the right to monitor email sent through our network.

*************************************

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


*************************************

This email may contain privileged or confidential material intended for the
named recipient only.
If you are not the named recipient, delete this message and all attachments.  
Any review, copying, printing, disclosure or other use is prohibited.
We reserve the right to monitor email sent through our network.

*************************************

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 20 Feb 2003, Rick Segeberg wrote:
> One trick: to change rights on a file, you must own it or be root.  
> This is where the "force user = root" comes in handy, but
obviously you
> need to be very careful who can use that share.
"admin users" might help here.




cheers, jerry
 ----------------------------------------------------------------------
 Hewlett-Packard            ------------------------- http://www.hp.com
 SAMBA Team                 ---------------------- http://www.samba.org
 GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop
there."
                            --John Cusack - "Grosse Point Blank"
(1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+ZL9KIR7qMdg1EfYRAiMxAJwOhgUX99W3VIQ005/5jqlyOzgJUQCg1p0k
6matLpZHrI2HnypaNpzSrIk=c2K3
-----END PGP SIGNATURE-----