I am setting up W7 profiles following the "Samba & Windows Profiles" on the Sambawiki. If it matters, I have two functional DC's and one member server. When I run '# chmod 1770 /srv/samba/profiles' (on the member server) the permissions changed to: root at mbr01:~# ls -alh /srv/samba/profiles total 12K drwxrwx--T+ 2 root root 4.0K Mar 1 10:21 . drwxr-xr-t 5 root root 4.0K Mar 1 10:21 .. The first line changed from 'drwxr-xr-t' to 'drwxrwx--T+' and the second did not change. Under "Profile share with using POSIX ACLs" it is indicated that we should change the '# chgrp ?Domain Users" /srv/samba/profiles' I am getting "chgrp: invalid group: `Domain Users' " When I run "wbinfo -g" there listed is "domain users". I have tried lower case "# chgrp ?domain users" /srv/samba/profiles" with the same result "chgrp: invalid group: `domain users' ". Suggestions? -- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" Links: ------ [1] http://www.donelsontrophy.com
On 05/03/15 13:25, Bob of Donelson Trophy wrote:> > > I am setting up W7 profiles following the "Samba & Windows Profiles" on > the Sambawiki. > > If it matters, I have two functional DC's and one member server. > > When I run '# chmod 1770 /srv/samba/profiles' (on the member server) the > permissions changed to: > > root at mbr01:~# ls -alh /srv/samba/profiles > total 12K > drwxrwx--T+ 2 root root 4.0K Mar 1 10:21 . > drwxr-xr-t 5 root root 4.0K Mar 1 10:21 .. > > The first line changed from 'drwxr-xr-t' to 'drwxrwx--T+' and the second > did not change. > > Under "Profile share with using POSIX ACLs" it is indicated that we > should change the '# chgrp ?Domain Users" /srv/samba/profiles' I am > getting "chgrp: invalid group: `Domain Users' " > > When I run "wbinfo -g" there listed is "domain users". > > I have tried lower case "# chgrp ?domain users" /srv/samba/profiles" > with the same result "chgrp: invalid group: `domain users' ". > > Suggestions? >Hi Bob, 'wbinfo -g' does indeed show 'domain users' but this is not what is used when you try to use chgrp. What does 'getent group Domain\ Users' show ? If it doesn't return anything, then we need to find out why not Rowland
Bob, what is the result of ; If the group domain users does not have any GID, than chgrp does not work. chown / chgrp / chmod . only work if you have a UID /GID. and if you change the rights from within linux, "After" you did set them from windows.. then you can do it again from windows. therefore i do also set "acl_xattr:ignore system acl = yes" on the profiles shares. and one set, DONT touch it from within linux.. It wil messup your rights if you do.. Greetz, Louis>-----Oorspronkelijk bericht----- >Van: bob at donelsontrophy.net >[mailto:samba-bounces at lists.samba.org] Namens Bob of Donelson Trophy >Verzonden: donderdag 5 maart 2015 14:26 >Aan: SAMBA MailList >Onderwerp: [Samba] setting up W7 profiles > > > >I am setting up W7 profiles following the "Samba & Windows Profiles" on >the Sambawiki. > >If it matters, I have two functional DC's and one member server. > >When I run '# chmod 1770 /srv/samba/profiles' (on the member >server) the >permissions changed to: > >root at mbr01:~# ls -alh /srv/samba/profiles >total 12K >drwxrwx--T+ 2 root root 4.0K Mar 1 10:21 . >drwxr-xr-t 5 root root 4.0K Mar 1 10:21 .. > >The first line changed from 'drwxr-xr-t' to 'drwxrwx--T+' and >the second >did not change. > >Under "Profile share with using POSIX ACLs" it is indicated that we >should change the '# chgrp ?Domain Users" /srv/samba/profiles' I am >getting "chgrp: invalid group: `Domain Users' " > >When I run "wbinfo -g" there listed is "domain users". > >I have tried lower case "# chgrp ?domain users" /srv/samba/profiles" >with the same result "chgrp: invalid group: `domain users' ". > >Suggestions? > >-- > >------------------------- > >Bob Wooden of Donelson Trophy > >615.885.2846 (main) >www.donelsontrophy.com [1] > >"Everyone deserves an award!!" > > >Links: >------ >[1] http://www.donelsontrophy.com >-- >To unsubscribe from this list go to the following URL and read the >instructions: https://lists.samba.org/mailman/options/samba >
Rowland, 'getent group DomainUsers' indeed returns nothing. Now, I know, you know this like the "back of your hand" but, am I wrong, are the permissions for **profiles** somewhat (not alot) different from permissions for file shares? Because I see that instructions (on the wiki) for file sharing reads differently. Thanks, again. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-03-05 07:38, Rowland Penny wrote:> On 05/03/15 13:25, Bob of Donelson Trophy wrote: > >> I am setting up W7 profiles following the "Samba & Windows Profiles" on the Sambawiki. If it matters, I have two functional DC's and one member server. When I run '# chmod 1770 /srv/samba/profiles' (on the member server) the permissions changed to: root at mbr01:~# ls -alh /srv/samba/profiles total 12K drwxrwx--T+ 2 root root 4.0K Mar 1 10:21 . drwxr-xr-t 5 root root 4.0K Mar 1 10:21 .. The first line changed from 'drwxr-xr-t' to 'drwxrwx--T+' and the second did not change. Under "Profile share with using POSIX ACLs" it is indicated that we should change the '# chgrp ?Domain Users" /srv/samba/profiles' I am getting "chgrp: invalid group: `Domain Users' " When I run "wbinfo -g" there listed is "domain users". I have tried lower case "# chgrp ?domain users" /srv/samba/profiles" with the same result "chgrp: invalid group: `domain users' ". Suggestions? > > Hi Bob, 'wbinfo -g' does indeed show 'domain users' but this is not what is used when you try to use chgrp. What does 'getent group Domain Users' show ? > > If it doesn't return anything, then we need to find out why not > > RowlandLinks: ------ [1] http://www.donelsontrophy.com
Hi, What is the output of the "id <domain user>" ? please share that. On 5 Mar 2015 18:56, "Bob of Donelson Trophy" <bob at donelsontrophy.net> wrote:> > > I am setting up W7 profiles following the "Samba & Windows Profiles" on > the Sambawiki. > > If it matters, I have two functional DC's and one member server. > > When I run '# chmod 1770 /srv/samba/profiles' (on the member server) the > permissions changed to: > > root at mbr01:~# ls -alh /srv/samba/profiles > total 12K > drwxrwx--T+ 2 root root 4.0K Mar 1 10:21 . > drwxr-xr-t 5 root root 4.0K Mar 1 10:21 .. > > The first line changed from 'drwxr-xr-t' to 'drwxrwx--T+' and the second > did not change. > > Under "Profile share with using POSIX ACLs" it is indicated that we > should change the '# chgrp ?Domain Users" /srv/samba/profiles' I am > getting "chgrp: invalid group: `Domain Users' " > > When I run "wbinfo -g" there listed is "domain users". > > I have tried lower case "# chgrp ?domain users" /srv/samba/profiles" > with the same result "chgrp: invalid group: `domain users' ". > > Suggestions? > > -- > > ------------------------- > > Bob Wooden of Donelson Trophy > > 615.885.2846 (main) > www.donelsontrophy.com [1] > > "Everyone deserves an award!!" > > > Links: > ------ > [1] http://www.donelsontrophy.com > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
Hi. You can get the GID using wbinfo command, like this: # wbinfo --group-info=Domain\ Users And the answer could be: YOUR-DOMAIN\Domain Users:*:100: 100 is the Group ID of Domain Users. Finally you can run chgrp command: # chgrp 100 /srv/samba/profiles/ # ls -ldh /srv/samba/profiles/ drwxrwx--T. 2 root users 4.0K Jun 9 10:31 /srv/samba/profiles/ I hope this helps... fraterneo.blogspot.com
Bob of Donelson Trophy <bob <at> donelsontrophy.net> writes:> > > I am setting up W7 profiles following the "Samba & Windows Profiles" on > the Sambawiki. > > If it matters, I have two functional DC's and one member server. > > When I run '# chmod 1770 /srv/samba/profiles' (on the member server) the > permissions changed to: > > root <at> mbr01:~# ls -alh /srv/samba/profiles > total 12K > drwxrwx--T+ 2 root root 4.0K Mar 1 10:21 . > drwxr-xr-t 5 root root 4.0K Mar 1 10:21 .. > > The first line changed from 'drwxr-xr-t' to 'drwxrwx--T+' and the second > did not change. > > Under "Profile share with using POSIX ACLs" it is indicated that we > should change the '# chgrp ?Domain Users" /srv/samba/profiles' I am > getting "chgrp: invalid group: `Domain Users' " > > When I run "wbinfo -g" there listed is "domain users". > > I have tried lower case "# chgrp ?domain users" /srv/samba/profiles" > with the same result "chgrp: invalid group: `domain users' ". > > Suggestions? >By the way, you can add winbind to the nsswitch.conf file in order to chgrp command work. [root at sambapdc01 ~]# nano /etc/nsswitch.conf ... ... passwd: files winbind shadow: files group: files winbind ... Just restart the system and chgrp "Domain Users" /srv/samba/profiles should work like a charm!