I am trying to grant or denied access to a user for changing his passwd, it's the option: User cannot change passwd. For this, I am trying to use samba-tool dsacl set [option], but I am not sure of its syntax. Could you help me with that? I need to denied this permission without use ADUC or any private tool. My Regards!
On 19/02/15 23:33, Felipe_G0NZ4LEZ_S4NTI4G0(); wrote:> I am trying to grant or denied access to a user for changing his passwd, it's the option: User cannot change passwd. For this, I am trying to use samba-tool dsacl set [option], but I am not sure of its syntax. Could you help me with that? I need to denied this permission without use ADUC or any private tool. My Regards!Hi, the syntax is (OD;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;PS) *AND* (OD;;CR;ab721a53-1e2f-11d0-9819-00aa0040529b;;WD) These ACE's will be found in the users 'nTSecurityDescriptor' attribute and it is a bit more involved than just adding them with 'samba-tool', the originals must be replaced, or to be more precise, the entire ACL must be replaced. Rowland
Mgr. Peter Tuharsky
2015-Mar-09 09:21 UTC
[Samba] Linux fs ACL ignored for Samba4 share in Windows?
Hallo, we have Samba 3 domain w/LDAP backend. Recently we have set up Samba 4.1.7 fileserver, a member of the domain, as a first step of full migration to Samba 4. Now, we have problem with file ACL on the Samba4 fileserver. Linux ext4 fs has 777 ACLs for the file. Why does it look like in Windows (both XP and 2k8r2) that "Everyone" has not write permission? Sincerely Peter