samba - Jun 2016 - vfs_recycle on samba 4.3.9 as DC reset permissions

Hi,

I set up an Ubuntu 16.04 machine with samba 4.3.9 as DC.
Everything works fine. I created users and groups with the Windows RSAT 
tools.
I also set different group permissions on some shares over Windows.

My Problem is now that I tried to enable the samba recycle bin:
[mytest]
         path = /data/samba/mytest
         read only = No
         vfs objects = recycle
         recycle:repository = .recycle
         recycle:touch = yes
         recycle:keeptree = yes

After enabling the module all permissions for this share where reset to 
the defaults (everyone can enter).
If I now try to change the permissions for the share or an subfolder the 
permissions will reset in the moment I press apply.
So after enabling the vfs_recycle module the permission system (Windows 
acl) does not work anymore for the particular share.

Is this a known problem?
Is there maybe an workaround available?

Regards
Frank Treichl

Hi,
Am Dienstag, 14. Juni 2016, 12:04:21 CEST schrieb Frank
Treichl:
> Hi,
> 
> I set up an Ubuntu 16.04 machine with samba 4.3.9 as DC.
> Everything works fine. I created users and groups with the Windows RSAT
> tools.
> I also set different group permissions on some shares over Windows.
> 
> My Problem is now that I tried to enable the samba recycle bin:
> [mytest]
>          path = /data/samba/mytest
>          read only = No
>          vfs objects = recycle
>          recycle:repository = .recycle
>          recycle:touch = yes
>          recycle:keeptree = yes
> 
> After enabling the module all permissions for this share where reset to
> the defaults (everyone can enter).
> If I now try to change the permissions for the share or an subfolder the
> permissions will reset in the moment I press apply.
> So after enabling the vfs_recycle module the permission system (Windows
> acl) does not work anymore for the particular share.
> 
> Is this a known problem?
> Is there maybe an workaround available?
> 
> Regards
> Frank Treichl
Do you have "vfs objects = acl_xattr" in your global section?
Please add it to your share and try again.
Im not sure, but i mean by adding vfs_objects to a share reset the global ones 
for this share.

Markus

Hello,

thank you.

In my "global" section there is no "vfs objects" line (in de
smb.conf file).
But "testparm" shows me this line in the "global" section (I
think this
are the defaults):
vfs objects = dfs_samba4 acl_xattr

I changed my share to this:
[mytest]
          path = /data/samba/mytest
          read only = No
          vfs objects = recycle dfs_samba4 acl_xattr
          recycle:repository = .recycle
          recycle:touch = yes
          recycle:keeptree = yes


Everything works fine now.

Frank


Am 2016-06-14 um 14:05 schrieb Markus Dellermann:
> recycle:keeptree = yes