Hi, i have a new Samba Fileserver. The problem is with a folder permissions the folder permissions are 1596981296 4 drwxr-x--- 6 oliver.werner it_secuirity 4096 Jan 3 2014 Security In this folder are some other folders and files I can open this folder but looks empty in explorer on windows or finder on macOS. when i change the permission to drwxr-xr-x i can see all folders and files. My user is in group it_security uid=10150(oliver.werner) gid=10009(domain users) Gruppen=10009(domain users),1396(it_security),1393(bdsg) bingo show all users and groups anyone have an idea? I'm using Samba 4.4.5 Best wishes OLIVER WERNER System-Administrator
On Mon, 9 Jan 2017 10:36:10 +0100 Oliver Werner via samba <samba at lists.samba.org> wrote:> Hi, > > > i have a new Samba Fileserver. > > The problem is with a folder permissions > > the folder permissions are > > 1596981296 4 drwxr-x--- 6 oliver.werner > it_secuirity 4096 Jan 3 2014 > Security > > In this folder are some other folders and files > > I can open this folder but looks empty in explorer on windows or > finder on macOS. > > when i change the permission to drwxr-xr-x i can see all folders and > files. > > My user is in group it_security > > uid=10150(oliver.werner) gid=10009(domain users) Gruppen=10009(domain > users),1396(it_security),1393(bdsg) > > bingo show all users and groups > > anyone have an idea? > > I'm using Samba 4.4.5 > > Best wishes > > OLIVER WERNER > System-AdministratorCan you post your smb.conf, I think I know what the problem is, but need to see your smb.conf to confirm it one way or the other. Rowland
Hi Rowland here is it:
[global]
netbios name = ID-175
security = ADS
workgroup = HQKONTRAST
realm = HQ.KONTRAST
dedicated keytab file = /etc/krb5.keytab
kerberos method = secrets and keytab
winbind trusted domains only = no
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
winbind cache time = 300
winbind refresh tickets = yes
# Default idmap config used for BUILTIN and local accounts/groups
idmap config *:backend = tdb
idmap config *:range = 500-1023
# idmap config for domain HQKONTRAST
idmap config HQKONTRAST:backend = ad
idmap config HQKONTRAST:schema_mode = rfc2307
idmap config HQKONTRAST:range = 1024-99999
# Use settings from AD for login shell and home directory
winbind nss info = rfc2307
[IT-Security]
path = /data/security
browseable = yes
writeable = yes
force group = it_security
valid users = @it_security
create mask = 0660
directory mask = 0770
#oplocks = 0
vfs objects = full_audit recycle
full_audit:prefix = %u
full_audit:success = mkdir rename rmdir unlink pwrite
full_audit:failure = none
full_audit:facility = LOCAL5
full_audit:priority = NOTICE
recycle:versions = yes
recycle:exclude = .*, ~*
Thanks :)
OLIVER WERNER
System-Administrator