[Samba] Adding Share Windows ACL

Rowland Penny
Fri, 26 Jan 2018 12:14:33 -0000

On Fri, 26 Jan 2018 13:01:55 +0100
Micha Ballmann <ballmann at uni-landau.de> wrote:

> Hello,
>
> i followed your adivces. But when im login in ADUC with the
> Administrator and change to the security tab, there is a message, i
> have no permissions to the share. Therefore i can't set any ACL.
>
> Is it possible or correct to create an additional user and also gave
> them some admininstration (and an unix attribute) rights. Login with
> this account to ADUC and set the ACLs?
>
> For example:
>
> On Linux:
>
> # chown "xministrator:Unix Admins" SHAREFOLDER
>
> Login with xministrator and set ACL.
>
> Thy for help
>
> Micha

Is this on a DC or a Unix domain member ?

If it is a Unix domain member, do you have a line similar to this in
smb.conf:

username map = /etc/samba/user.map

and does '/etc/samba/user.map' contain something like this:

!root = SAMDOM\Administrator SAMDOM\administrator

Where 'SAMDOM' is replaced by your uppercase WORKGROUP name.

Rowland