samba - Jan 2006 - Share Admin

I've got a share that I'm trying to get so I can set permissions 
through the normal windows way (right click on 
folder/file->properties->security).

The share definition is:

[test]
    comment = Test share on magellan
    path = /var/test
    browseable = yes
    writable = yes
    hide unreadable = yes
    admin users = @"Domain Admins"

The server is a member server in an AD domain.  The winbind configuration is:

  idmap backend = idmap_rid:CSC=15000-20000
   idmap uid = 15000-20000
   idmap gid = 15000-20000
   template shell = /bin/bash
   template homedir = /home/%D/%U
   winbind separator = +
   winbind enum users = yes
   winbind enum groups = yes
   winbind use default domain = yes
   winbind cache time = 10
   realm = GOCSC.COM
   allow trusted domains = no


In /var/log/messages I am seeing:

Jan 26 17:38:01 magellan winbindd[11151]: [2006/01/26 17:38:01, 0] 
lib/util_sid.c:string_to_sid(285)
Jan 26 17:38:01 magellan winbindd[11151]:   string_to_sid: Sid S-0-0 is 
not in a valid format.

When I try to save the permssions I get an "Access Denied" message.

[root@magellan samba]# ls -l /var/test
total 4
drwxr-xr-x  2 root Domain Users 4096 Jan 26 17:41 test

getfacl: Removing leading '/' from absolute path names
# file: var/test
# owner: root
# group: root
user::rwx
group::r-x
other::r-x

The user I am trying this as is a member of Domain Admin in Active Directory.

I did some quick searching on the net and in the archives and didn't 
find anything that helped me.

samba version is 3.0.21a-1, OS is FC4 fully updated via yum.

Any ideas?

Thanks,

--Dennis

Dennis B. Hopp wrote:
> I've got a share that I'm trying to get so I can set permissions 
> through the normal windows way (right click on 
> folder/file->properties->security).
>
> The share definition is:
>
> [test]
>    comment = Test share on magellan
>    path = /var/test
>    browseable = yes
>    writable = yes
>    hide unreadable = yes
>    admin users = @"Domain Admins"
>
> The server is a member server in an AD domain.  The winbind 
> configuration is:
>
>  idmap backend = idmap_rid:CSC=15000-20000
>   idmap uid = 15000-20000
>   idmap gid = 15000-20000
>   template shell = /bin/bash
>   template homedir = /home/%D/%U
>   winbind separator = +
>   winbind enum users = yes
>   winbind enum groups = yes
>   winbind use default domain = yes
>   winbind cache time = 10
>   realm = GOCSC.COM
>   allow trusted domains = no
>
>
> In /var/log/messages I am seeing:
>
> Jan 26 17:38:01 magellan winbindd[11151]: [2006/01/26 17:38:01, 0] 
> lib/util_sid.c:string_to_sid(285)
> Jan 26 17:38:01 magellan winbindd[11151]:   string_to_sid: Sid S-0-0 
> is not in a valid format.
>
> When I try to save the permssions I get an "Access Denied"
message.
Nevermind...

I had checked that everything was compiled to support ACLs, but I never 
checked to see that the filesystem had been mounted with the acl and 
user_xattr flags

--Dennis