Hi Rowland,>> Hi all, >> >> >> I followed the installation instructions >> on https://imanudin.net/2014/11/16/how-to-install-samba4-active-directory-on-centos-7-part-1/#comment-16611 >> to install Samba 4.1.13. One difference is that I used the Internal >> DNS server as opposed to the external one.>I suppose you totally missed the fact that the 4.1.x series went EOL >quite some time ago, in fact 4.6.0 should be out this month.>Why follow that particular howto ?Well, I googled for a fair amount of them and this one had a fair amount of comments to it, which proved useful as I encountered some of the errors and was able to learn from them. Also, I was able to add my own solutions to other people's problems, which I like. In that way it becomes a community driven How To. In my experience those work out better often.>> >> >> I was able to add a Windows 7 Pro workstation to the domain and I see >> the shares I added in smb.conf (with only the path and the read only >> setting to "no"), but on those shares I miss the Security tab. I >> added the correct privilege to the administrators group.The default >> shares like netlogon and sysvol do show the Security tab. >> >> I did see a difference when I do a getfacl for those folders as >> opposed to the ones I created. For the latter I do not get any ACL >> configuration. >> >> >> Am I supposed to do a manual setfacl for my own shares?>YesOK - I did not find that on https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs . I suppose it should be added to that howto. Can I simply copy the ACLs of "netlogon" or "sysvol"?>> >> One other thing is that the administration of the shares behaves >> unstable when I have IPv6 enabled, so that is disabled now.>Could be down to not having the reverse zone set up.Good point, I don't have that. I suppose I miss a pointer record for the server then.>> I have been browsing the web for hours, but it doesn not seem to be a >> typical problem.>Did you think to go to the source ????>https://wiki.samba.org/index.php/Main_Page>Specifically this page:>https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLsHa, you are now referencing to the page I just mentioned. It does not mention setting ACLs, which should be added I suppose.>RowlandCheers Rowland -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
On Sat, 4 Mar 2017 23:52:54 +0100 Bart Coninckx <info at bitsandtricks.com> wrote:> Hi Rowland, > > >Why follow that particular howto ? > > > Well, I googled for a fair amount of them and this one had a fair > amount of comments to it, which proved useful as I encountered some > of the errors and was able to learn from them. Also, I was able to > add my own solutions to other people's problems, which I like. In > that way it becomes a community driven How To. In my experience those > work out better often.What do you think the Samba wiki is ? If you want to add to a community driven howto, register for an account and then contribute to the Samba wiki.> Can I simply copy the ACLs of "netlogon" or "sysvol"? >Probably not, you need to decide who has what access to where and set the ACLs accordingly.> Good point, I don't have that. I suppose I miss a pointer record for > the server then.Unless you have created the reverse zone, you will not have any pointer records. Just for the record, the howto you used doesn't mention that> > Ha, you are now referencing to the page I just mentioned. It does not > mention setting ACLs, which should be added I suppose.Did you miss: https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Setting_Share_Permissions_and_ACLs Can I suggest upgrading to the latest Samba version 4.5.5 and following the Samba wiki, not some random webpage, that way, you are sure to get the full and correct info. If there is something on the Samba wiki you do not understand, ask here. Rowland
>> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs > > Ha, you are now referencing to the page I just mentioned. It does not mention setting ACLs, which should be added I suppose. >Well, I am looking at the wiki page right now and it surely mentions setting ACLs... I am seeing the followinf sections: -- Setting Share Permissions and ACLs -- Setting ACLs on a Folder -- File System ACLs in the Back End
Hi,>Well, I am looking at the wiki page right now and it surely mentions >setting ACLs...>I am seeing the followinf sections: >- Setting Share Permissions and ACLs >-- Setting ACLs on a Folder >- File System ACLs in the Back EndThe first two refer to doing that by means of the security tab, which I don't have. The last one does not refer to using setfacl. So needing to have to set ACLs in order to get a Security tab is not mentioned in the How to, I'm sorry, BC
>Did you miss:>https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Setting_Share_Permissions_and_ACLsNo, this part of the wiki made me realize I have a problem. It talks about changes via the security tab. I don't have that tab. That is the whole problem. I gather from your previous answer setfacl needs to be used to sort that out. But I miss that part in the wiki. So either something is off with my install or the instructions to set the initial permissions with setfacl to get the security tab going are missing in the wiki. BC