samba - Nov 2012 - Trouble with file shares on Samba 4

Hello all,

I have a Samba 4 system setup with 4.0.0-rc5 working as an Active 
Directory controller for a set of seven Win7 computers, and most things 
are working.  However, file shares are not.

In all cases, if I add users to Domain Admins, they can access the 
shares.  In all cases, if users are not in Domain Admins, they cannot 
access the shares.

I've added users to groups that (according to Windows) are allowed to 
read and write the shares.  However, the users themselves get zero 
permissions unless they're in Domain Admins.

I've even tried adding users *directly* to the ACLs for the shares, 
thinking that surely if they appear in the list directly, they will be 
able to access the shares.  This is not, however, the case.

Any assistance or advice on what to look for would be awesome.

	Thanks,
	Mike

On 11/26/2012 11:07 AM, Michael B. Trausch wrote:
> Any assistance or advice on what to look for would be awesome.
One additional note that I've been able to put together.

Windows reports that the permissions that I've set on the server match
my expectations of what Windows thinks the permissions should be.  That
is, I added ACLs to allow user X to access the share with "Full
Control", and Windows see this.  Windows attempts to access the share,
but then says that access is denied.  Windows won't even show space
utilization on the share, though Windows *can* see the ACLs and, again,
they match what we think they should be.

I am _not_ an expert on Samba 4.  I do know that this functionality
worked in a beta release, though I don't recall which one.  I'm actually
in the process of setting up a test network to replicate the problem, as
I cannot officially submit a bug report based on the network I'm
discussing at present.  I fully expect to be able to have enough
information within 24 hours to create a bug report.  I also plan on
testing with git master to see if anything changed since rc5 that might
fix the problem, but it essentially seems that while the permissions are
correct, they're not being correctly interpreted or honored.

	--- MIke

-- 
Michael B. Trausch
President, Naunet Corporation

Web:   https://www.naunetcorp.com
Telephone: +1-678-287-0693

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 897 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20121126/771cda85/attachment.pgp>