samba - Mar 2017 - Problem mapping extended acls with sssd and samba

Thanks for the answer.

But even removing the write list parameter, the problem persists.

Excuse me. But the sssd service is working perfectly, and I see no reason
to ask for help on the sssd user list.

One important information is that when I apply the ACLs using the setfacl
command the mapping is done and the permissions are applied.

But when I use windows explorer the ACLs permissions are not applied.

If anyone knows why this is happening, and be able to help me.

I thank you.

2017-03-19 17:39 GMT-03:00 Rowland Penny <rpenny at samba.org>:
> On Sun, 19 Mar 2017 17:09:32 -0300
> edson via samba <samba at lists.samba.org> wrote:
>
> > Hello.
> >
> > I have a file server with samba and sssd. Is working perfectly.
>
> Is it ?
>
> >
> > The problem is when I define extended ACLs using windows explorer.
> > Acls are not applied in the file system to the groups and users of
> > the domain.
>
> There you go, it obviously isn't ;-)
>
> >
> > But when I work with winbind I can apply the extended acls in the file
> > system.
> >
>
> Then the obvious fix for your problem is to use the Samba supported
> winbind instead of, the unsupported by Samba, sssd
>
> sssd has nothing to do with Samba, so if you want to continue using
> sssd, I would suggest you contact the sssd-users mailing list.
>
> You should also note, if you are going to set the ACLs from windows,
> you should not use the 'write list' option.
>
> Rowland
>
>

-- 
Att,

Edson de Abreu Oliveira

On Sun, 19 Mar 2017 18:03:34 -0300
edson <edeaoinfor at gmail.com> wrote:
> Thanks for the answer.
> 
> But even removing the write list parameter, the problem persists.
> 
> Excuse me. But the sssd service is working perfectly, and I see no
> reason to ask for help on the sssd user list.
Are you 100% sure this has nothing to do sssd ?
> 
> One important information is that when I apply the ACLs using the
> setfacl command the mapping is done and the permissions are applied.
> 
> But when I use windows explorer the ACLs permissions are not applied.
This could still be down to sssd, but have you looked here:

https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs

If, after following that, it still doesn't work, then try the sssd
list, this may be something they have come across before.

Rowland

First of all, thank you.

Yes. I'm sure sssd is running 100%.

The documentation of the link that passed me served as a basis to implement.

I'll follow your advice and I'll ask you on the sssd user list.

Even so, I hope someone else who went through the same score answers here.

Thank you all.

2017-03-19 18:16 GMT-03:00 Rowland Penny via samba <samba at
lists.samba.org>:
> On Sun, 19 Mar 2017 18:03:34 -0300
> edson <edeaoinfor at gmail.com> wrote:
>
> > Thanks for the answer.
> >
> > But even removing the write list parameter, the problem persists.
> >
> > Excuse me. But the sssd service is working perfectly, and I see no
> > reason to ask for help on the sssd user list.
>
> Are you 100% sure this has nothing to do sssd ?
>
> >
> > One important information is that when I apply the ACLs using the
> > setfacl command the mapping is done and the permissions are applied.
> >
> > But when I use windows explorer the ACLs permissions are not applied.
>
> This could still be down to sssd, but have you looked here:
>
> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs
>
> If, after following that, it still doesn't work, then try the sssd
> list, this may be something they have come across before.
>
> Rowland
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


-- 
Att,

Edson de Abreu Oliveira