samba - Jan 2012 - Set primary group of file on samba share from windows

Hi all!

I want to use 'acl group control' setting to delegate privileges to
specific
administrators.

Unfortunately, I'm unable to set the primary group using windows file 
permissions dialog, I can only add and remove ACL groups.

I tried to do this by removing all groups but one from Windows. This doesn't
work: the primary group has all privs removed and the extra group is still in 
ACLs only.

Then I tried to set the file/directory owner to group from Windows, but this 
was met with a permission denied and a following log message:

[2012/01/05 21:13:03.349734,  3] smbd/nttrans.c:1899
(call_nt_transact_set_security_desc)
  call_nt_transact_set_security_desc: file = projects/project A/New folder, 
sent 0x1
[2012/01/05 21:13:03.349774,  3] smbd/posix_acls.c:1208(unpack_nt_owners)
  unpack_nt_owners: unable to validate owner sid for 
S-1-5-21-1526631811-284521863-152487935-11025
[2012/01/05 21:13:03.349804,  3] smbd/error.c:80(error_packet_set)
  error packet at smbd/nttrans.c(1909) cmd=160 (SMBnttrans) 
NT_STATUS_INVALID_OWNER

Is setting the primary group possible, or do I have to do it from shell?

Regards,
-- 
Hubert Kario
QBS - Quality Business Software
02-656 Warszawa, ul. Ksawer?w 30/85
tel. +48 (22) 646-61-51, 646-74-24
www.qbs.com.pl

From: Hubert Kario <hka at qbs.com.pl>
Date: Thu, 5 Jan 2012 23:36:58 +0100
> Unfortunately, I'm unable to set the primary group using windows file 
> permissions dialog, I can only add and remove ACL groups.
Have your groups manupulated from Windows already added correctly
using "net groupmap list" or other method?

Have you correctly set "set primary group script"?

And your Samba joined AD and run Winbind?

As far as I examined we can change primary group via Samba under
certain environment.

---
TAKAHASHI Motonobu <monyo at samba.gr.jp>