Hi all,
I'm working with samba 3.0.20a on Suse9.2, with followings files setted:
[global]
netbios name = NAME
wins server = XXX.XXX.XXX.XXX
workgroup = DOMAIN
realm = DOMAIN.COM
security = ADS
password server = *
encrypt passwords = yes
allow trusted domains = Yes
winbind use default domain = Yes
winbind separator = /
winbind enum users = Yes
winbind enum groups = Yes
winbind nested groups = Yes
idmap uid = 10000-100000
idmap gid = 10000-100000
admin users = ***
log file = /var/log/samba/log.%m
log level = 10 acls:10
max log size = 50
nt acl support = Yes
map acl inherit = Yes
hide unreadable = Yes
ldap ssl = No
[data]
comment = DATA repository
path = /data
read only = No
------------------------------------------------------------------------
I have followings permissions folders setted:
/data read permissions to domain
users and evryone
/user read permissions to domain
users
/user_one owned by user_one excluded
permissions by everyone
/user_two owned by user_one excluded
permissions by everyone
/user_three owned by user_one excluded
permissions by everyone
Why with Parameter "hide unreadable = Yes" and I'm logged in as
user_one I
can't see my personal folder since I have full permissions on it?
This behaviour isn't what I'm expected and it happened only by my samba
file
server was joined to ADS while when joined to NT4 it worked.
Using Etheral I can only see that in the case Kerberos authentication
failes, NTLMSSP perform authentication task and in this case ACL settings
behaviour works as I'm expected as in NT4 style.
Thanks.
Marco.
