Am 25.07.2018 um 09:03 schrieb Stefan G. Weichinger via samba:> Am 2018-07-24 um 09:48 schrieb Stefan G. Weichinger via samba: >> >> I fail to set SeDiskOperatorPrivilege on a samba DM and I suspect the >> german umlauts: >> >> # wbinfo -g >> dom�nencomputer >> dom�nen-benutzer >> dom�nen-g�ste >> dom�nen-admins >> >> (bad locale, umlauts displayed as special ugly chars)follow up issue: I also don't know how to use that group "domänen-benutzer" in "valid users" or "read list" ... Is it allowed to use the gid as well there, like in read list = @10513 or so?
On Thu, 26 Jul 2018 17:46:26 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:> Am 25.07.2018 um 09:03 schrieb Stefan G. Weichinger via samba: > > Am 2018-07-24 um 09:48 schrieb Stefan G. Weichinger via samba: > >> > >> I fail to set SeDiskOperatorPrivilege on a samba DM and I suspect > >> the german umlauts: > >> > >> # wbinfo -g > >> dom�nencomputer > >> dom�nen-benutzer > >> dom�nen-g�ste > >> dom�nen-admins > >> > >> (bad locale, umlauts displayed as special ugly chars) > > follow up issue: > > I also don't know how to use that group "domänen-benutzer" in "valid > users" or "read list" ... > > Is it allowed to use the gid as well there, like in > > read list = @10513 > > or so? >Stefan, you know all that knowledge you learnt about NT4-style domains, well, forget most of it ;-) You will better setting the permissions from Windows, see here: https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs However, are you sure it is 'domanen-benutzer' ? As far as I know 'benutzer' is German for 'users' and 'domanen' is 'domain'. If I run: getent group Domain\ Users I get back: domain users:x:10000:(list of users) So, should 'domanen-benutzer' be 'domanen benutzer' Rowland
Am 2018-07-26 um 18:14 schrieb Rowland Penny via samba:> On Thu, 26 Jul 2018 17:46:26 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: >> I also don't know how to use that group "domänen-benutzer" in "valid >> users" or "read list" ...> Stefan, you know all that knowledge you learnt about NT4-style domains, > well, forget most of it ;-) > > You will better setting the permissions from Windows, see here: > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLsSo you suggest getting rid of the parameters in the share-definition and only doing it via Windows ACLs?> However, are you sure it is 'domanen-benutzer' ? > As far as I know 'benutzer' is German for 'users' and 'domanen' is > 'domain'. > > If I run: getent group Domain\ Users > I get back: domain users:x:10000:(list of users) > > So, should 'domanen-benutzer' be 'domanen benutzer'"getent group" doesn't even return the domain groups here ... oh my # wbinfo -g dom�nencomputer dom�nencontroller dom�nen-admins dom�nen-benutzer dom�nen-g�ste [..etc]