Greetings, For years I have been using my Samba server and authenticating users via winbind to my NT4.0. I am now in a situation where I want to provide shares to users who are not domain members. I have created the file shares and the UNIX users/groups that I want to use for this folder structure. I am using the 'setfacl' command to apply the user/groups access rights to the specific folders. When a Windows clients browses to these shares, I want them to enter UNIX usernames and passwords that I have supplied. Windows seems inisitent on predicating each username entered with either a Domain or simply their %computername%\username. It will not accept simply 'jdoe'. Any way around this? Cheers, Travis Bullock Systems Administrator Avmax Group Inc.
I build with ACL support and installed samba 2.0.23d on RedHat EL 2.6.9. It runs fine. But, I ran into an issue with ACL support. Here is the detail: I set up a cifs share (gfs_cifs) which is on Linux GFS (see the smb.conf below), and mount it on a XP box. Then I try to change the permission of the dir through Windows native security tab. When I apply the changes (click on OK/Apply button), "Unable to save permission changes ... Access is denied" error message is popped up. But, I was able to using "setfacl" command on linux to modify the acl of dir. In addition, I was able to do exactly same thing for a share (ext_cifs) on ext3 file system. At this point, it seems to me this problem has something to do with combination of samba and GFS. I tried all other options in smb.conf, and nothing is help. Any help on this would be really appreciated. Thanks, Dex ====================smb.conf===================================== [global] workgroup = lab01.local netbios name = CUB02 server string = cub01 Samba Server printcap name = /etc/printcap load printers = yes cups options = raw log file = /var/log/samba/%m.log max log size = 50 local master = no preferred master = no os level = 0 security = user socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = no template shell = /bin/false winbind use default domain = yes idmap uid = 50000-60000 idmap gid = 50000-60000 template homedir = /home/winnt/%d/%u template shell = /bin/bash encrypt passwords = yes acl compatibility = win2k [ext_cifs] comment = test cif shares from Ext3 path = /var/tmp/ext_cifs1 public = no writable = yes dos filemode = yes [gfs_cifs] comment = test cif shares from GFS path = /mnt/volume1/export/gfs_cifs1 public = no writable = yes dos filemode = yes
Skipped content of type multipart/mixed
Thanks for the response. I tested ACL support on Linux side with setfacl command. I was able to add/modify the ACLs through the command. Here is the example of getfacl output: # file: cdx_gfs_cifs1 # owner: dchen # group: users user::rwx user:cwsupport:rwx group::rwx mask::rwx other::rwx default:user::rwx default:user:dchen:rwx default:group::r-x default:group:users:rwx default:mask::rwx default:other::rwx Thanks, Dex -----Original Message----- From: samba-bounces+dex.chen=crosswalkinc.com@lists.samba.org [mailto:samba-bounces+dex.chen=crosswalkinc.com@lists.samba.org] On Behalf Of Dr.Peer-Joachim Koch Sent: Thursday, December 14, 2006 3:59 AM Cc: samba Subject: Re: [Samba] ACL issue with Samba 2.0.23d + GFS Hi, as far as I know GFS only supports posix acl. So only user:group:other. Everything else are extended acl which are not supported. Have you tested, if the acl rules are working on the unix side ? Bye, Peer Dex Chen schrieb:> I build with ACL support and installed samba 2.0.23d on RedHat EL 2.6.9. > It runs fine. But, I ran into an issue with ACL support. Here is the > detail: > I set up a cifs share (gfs_cifs) which is on Linux GFS (see the smb.conf > below), and mount it on a XP box. Then I try to change the permission of > the dir through Windows native security tab. When I apply the changes > (click on OK/Apply button), "Unable to save permission changes ... > Access is denied" error message is popped up. > > But, I was able to using "setfacl" command on linux to modify the acl of > dir. > > In addition, I was able to do exactly same thing for a share (ext_cifs) > on ext3 file system. > > At this point, it seems to me this problem has something to do with > combination of samba and GFS. > > I tried all other options in smb.conf, and nothing is help. > > Any help on this would be really appreciated. > > Thanks, > > Dex >-- Mit freundlichem Gruss Peer-Joachim Koch _________________________________________________________ Max-Planck-Institut fuer Biogeochemie Dr. Peer-Joachim Koch Hans-Kn?ll Str.10 Telefon: ++49 3641 57-6705 D-07745 Jena Telefax: ++49 3641 57-7705