Hello all, I have a Samba 4 system setup with 4.0.0-rc5 working as an Active Directory controller for a set of seven Win7 computers, and most things are working. However, file shares are not. In all cases, if I add users to Domain Admins, they can access the shares. In all cases, if users are not in Domain Admins, they cannot access the shares. I've added users to groups that (according to Windows) are allowed to read and write the shares. However, the users themselves get zero permissions unless they're in Domain Admins. I've even tried adding users *directly* to the ACLs for the shares, thinking that surely if they appear in the list directly, they will be able to access the shares. This is not, however, the case. Any assistance or advice on what to look for would be awesome. Thanks, Mike
On 11/26/2012 11:07 AM, Michael B. Trausch wrote:> Any assistance or advice on what to look for would be awesome.One additional note that I've been able to put together. Windows reports that the permissions that I've set on the server match my expectations of what Windows thinks the permissions should be. That is, I added ACLs to allow user X to access the share with "Full Control", and Windows see this. Windows attempts to access the share, but then says that access is denied. Windows won't even show space utilization on the share, though Windows *can* see the ACLs and, again, they match what we think they should be. I am _not_ an expert on Samba 4. I do know that this functionality worked in a beta release, though I don't recall which one. I'm actually in the process of setting up a test network to replicate the problem, as I cannot officially submit a bug report based on the network I'm discussing at present. I fully expect to be able to have enough information within 24 hours to create a bug report. I also plan on testing with git master to see if anything changed since rc5 that might fix the problem, but it essentially seems that while the permissions are correct, they're not being correctly interpreted or honored. --- MIke -- Michael B. Trausch President, Naunet Corporation Web: https://www.naunetcorp.com Telephone: +1-678-287-0693 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 897 bytes Desc: OpenPGP digital signature URL: <http://lists.samba.org/pipermail/samba/attachments/20121126/771cda85/attachment.pgp>