samba - Apr 2006 - How do I apply active directory group policies to samba shares

Hi,

We would like to aggregate departmental servers on to a single samba 
share called "departments" and under departments would be a set of 
folders corresponding to the departments.  Permissions need to be 
controlled by group memberships in active directory.  When I go into 
folder properties on an XP with the departments share mounted, under the 
security tab I see Administrators, Everyone and Users.  I can click add 
and add a domain group (e.g., "its staff"), and it gets added to the 
list of groups at the top.  I can set permissions, etc.  But when I 
click apply, the added group goes away.

What do I need to do to enable that functionality?

Thanks,
Rob

-- 

Rob Tanner
UNIX Services Manager
Linfield College, McMinnville OR

On Tue, Apr 11, 2006 at 11:35:02AM -0700, Rob Tanner
wrote:
> Hi,
> 
> We would like to aggregate departmental servers on to a single samba 
> share called "departments" and under departments would be a set
of
> folders corresponding to the departments.  Permissions need to be 
> controlled by group memberships in active directory.  When I go into 
> folder properties on an XP with the departments share mounted, under the 
> security tab I see Administrators, Everyone and Users.  I can click add 
> and add a domain group (e.g., "its staff"), and it gets added to
the
> list of groups at the top.  I can set permissions, etc.  But when I 
> click apply, the added group goes away.
> 
> What do I need to do to enable that functionality?
You need to have POSIX ACLs enabled on the filesystem plus
a Samba compiled with POSIX ACL support. Mount the filesystem
(on SUSE) with the options "rw,acl,user_xattr"

Jeremy.