On 18/01/15 15:18, Dr. Harry Knitter wrote:> Rowland Penny <rowlandpenny at googlemail.com> schrieb am 18.01.2015: > > >> Lets deal with the obvious first, your workgroup name, you give it as >> 'mydomain.lan' , now is that the actual workgroup name ? If so, then it >> shouldn't have the dot '.' in it, but > Never had poblems with that. And what has that to do with permissions? > >> if it is a replacement for your >> domain, is your domain longer than 15 characters ? > No > >> Sort this problem and >> see if it works, the other thing to check, have you done the registry >> changes ? see here: >> https://wiki.samba.org/index.php/Registry_changes_for_NT4-style_domains >> > Registry entries are present. Otherwise the clients wouldn't have been able to > join the domain. > >> Rowland > HarryWho owns the share directory /home/ldap ? Does 'harry' exist in /etc/passwd ? Does the group 'users' exist in /etc/group and if so, does it have any members ? You do know that Unix acl's are not the same as Windows ACL's and to use windows ACL's you will have to use vfs_acl_xattr Rowland
Rowland Penny <rowlandpenny at googlemail.com> schrieb am 18.01.2015:> > Who owns the share directory /home/ldap ?harry> > Does 'harry' exist in /etc/passwd ?yes> > Does the group 'users' exist in /etc/group and if so, does it have any > members ?yes> > You do know that Unix acl's are not the same as Windows ACL's and to use > windows ACL's you will have to use vfs_acl_xattrI know, however, how do I have to use vfs_acl_xattr? Harry
On 19/01/15 06:53, Dr. Harry Knitter wrote:> Rowland Penny <rowlandpenny at googlemail.com> schrieb am 18.01.2015: >> Who owns the share directory /home/ldap ? > harry >> Does 'harry' exist in /etc/passwd ? > yes >> Does the group 'users' exist in /etc/group and if so, does it have any >> members ? > yes >> You do know that Unix acl's are not the same as Windows ACL's and to use >> windows ACL's you will have to use vfs_acl_xattr > I know, however, how do I have to use vfs_acl_xattr? > > HarryYou use it by adding a line to smb.conf 'vfs objects = vfs_acl_xattr' , if you add it to a share it will only affect that share, but if you add it to the 'global' part it will affect all shares. You should also install 'acl' if not already installed, then do some reading on using setfacl & getfacl if you want to set the ACL's from Unix. Rowland