samba - Feb 2005 - ACL Access Denied from Windows XP workstation-2nd try

I am reposting since I didn't get any responses the fist time.
I am running samba-3.0.10-1 on Fedora core 3 compiled with ACL support.  I
can connect to shares as expected, users in the correct Active Directory
groups have access, and the converse.  However when I manage the samba
server through Windows XP MMC and attempt to change permissions on the
security tab of the finance share I get "Access is Denied".  Anyone
know
what I am doing wrong?  I removed my level 3 debug attachment due to it's
length.
TIA,
Steve O'Brien

My smb.conf looks like:

[global]
workgroup = DOMAIN
netbios name = FC3
realm = DOMAIN.COM
security = ADS
auth methods = winbind
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
password server = dc.domain.com
use spnego = yes
wins server = 192.168.19.35
winbind separator = \\
encrypt passwords = yes
printcap name = cups
disable spoolss = Yes
show add printer wizard = No
idmap uid = 15000-20000
idmap gid = 15000-20000
winbind use default domain = yes
use sendfile = Yes
printing = cups
winbind enum users = yes
winbind enum groups = yes
log level = 3
admin users = @"Domain Admins"

[finance]
comment = finance dept
path = /home/finance
valid users = @Finance
browseable = yes
nt acl support = yes
force group = Finance
admin users = @"Domain Admins"

My fstab for my /home slice looks like:

/dev/VolGroup00/LogVol04 /home                   ext3    acl        1 2

ldd smbd yields:

        libldap-2.2.so.7 => /usr/lib/libldap-2.2.so.7 (0x00df5000)
        liblber-2.2.so.7 => /usr/lib/liblber-2.2.so.7 (0x00111000)
        libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x0011d000)
        libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x004ff000)
        libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x00d37000)
        libcom_err.so.2 => /lib/libcom_err.so.2 (0x00131000)
        libresolv.so.2 => /lib/libresolv.so.2 (0x00ab2000)
        libcups.so.2 => /usr/lib/libcups.so.2 (0x00e57000)
        libssl.so.4 => /lib/libssl.so.4 (0x00f9a000)
        libcrypto.so.4 => /lib/libcrypto.so.4 (0x0034c000)
        libnsl.so.1 => /lib/libnsl.so.1 (0x00317000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0x00973000)
        libpam.so.0 => /lib/libpam.so.0 (0x00134000)
        libattr.so.1 => /lib/libattr.so.1 (0x0020a000)
        libacl.so.1 => /lib/libacl.so.1 (0x0013c000)
        libdl.so.2 => /lib/libdl.so.2 (0x00b7b000)
        libpopt.so.0 => /usr/lib/libpopt.so.0 (0x00142000)
        libc.so.6 => /lib/tls/libc.so.6 (0x00b7f000)
        libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x00149000)
        libz.so.1 => /usr/lib/libz.so.1 (0x0015d000)
        /lib/ld-linux.so.2 (0x00b38000)--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

On Saturday 19 February 2005 17:20, Steve OBrien wrote:
> However when I manage the samba
> server through Windows XP MMC and attempt to change permissions on the
> security tab of the finance share I get "Access is Denied".
What is the acl on the directory? (you can get it with 
`getfacl /path/to/dir`), and who is the owner?. I seem to remember getting 
this when changing permission on something the user does not own. By "XP
MMC"
I guess you mean the file/directory properties dialog? Not sure if you can do 
it with the computer management MMC (shares).
Hope that helps,
H
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20050219/705437cc/attachment.bin