samba - Sep 2011 - Unable to set Windows permissions on share

Good evening guys,

I?m being unable to set a certain Samba share?s permissions through Windows
properties dialogue box, using the Security tab.

My smb.conf is as follows:
[global]
        workgroup = GALILEU-F
        realm = GALILEU-F.GALILEU.PT
        server string = SPUTNIK
        security = ADS
        auth methods = winbind
        password server = 192.168.0.2
        username map = /etc/samba/smbusers
        log file = /var/log/samba/log.%m
        max log size = 50
        printcap name = cups
        local master = No
        dns proxy = No
        ldap ssl = no
        idmap uid = 100000-200000
        idmap gid = 300000-400000
        winbind enum users = Yes
        winbind enum groups = Yes
        guest ok = Yes
        hosts allow = 127., 192.168.0.
        cups options = raw
        nt acl support = true

[dropbox]
        inherit owner = Yes
        inherit permissions = Yes
        map acl inherit = Yes
        writable = Yes
        path = /home/joe/Dropbox
        acl group control = Yes
        comment = Partilha das Galileus
        inherit acls = Yes
        write list = "@domain users"
        browseable = Yes

I?m trying to perform this action as a member of ?Domain Users? Active Directory
group.

Can you guys please give me a hint on this?

Thanks a lot,

Bruno Martins

From: Bruno Martins <bmartins at galileu.pt>
Date: Sun, 25 Sep 2011 13:23:07 +0000
> Good evening guys,
> 
> I'm being unable to set a certain Samba share's permissions through
> Windows properties dialogue box, using the Security tab.
You really mean **share**'s permission or files's permission in the
share?

> I'm trying to perform this action as a member of "Domain
Users"
> Active Directory group.
If former, simply to grant full control to "Domain Users" by
Administartor from Windows or using sharesec command.

If latter, "dos filemode = yes" may help you.

Other comments...
> [dropbox]
>         inherit owner = Yes
>         inherit permissions = Yes
>         map acl inherit = Yes
>         writable = Yes
>         path = /home/joe/Dropbox
>         acl group control = Yes
>         comment = Partilha das Galileus
>         inherit acls = Yes
>         write list = "@domain users"
>         browseable = Yes
"inherit permissions" takes precedence over "inherit acls"
so
in your conf, "inherit acls" is ignored.

I think that "map acl inherit" is too buggy to use in production.
See https://bugzilla.samba.org/show_bug.cgi?id=6841

---
TAKAHASHI Motonobu <monyo at samba.gr.jp>