[Samba] Windows ACLs : problems

Rowland penny
Tue, 25 Feb 2020 14:04:17 -0000

On 25/02/2020 13:59, Stefan G. Weichinger via samba
wrote:
> Am 25.02.20 um 14:51 schrieb Rowland penny via samba:
>> On 25/02/2020 13:37, Stefan G. Weichinger via samba wrote:
>>> right now, will retest.
>>>> OK, I give in, I will alter the wiki page, if you use the
'rid' or
>>>> 'autorid'? backend, you can use Domain Admins, just do
not give Domain
>>>> Admins a gidNumber.
>>> 1) why and how could I have done that?
>> Sorry, but I cannot remember just what backend everybody uses, in your
>> case you would have no reason too ;-)
>>> 2) this leads to another issue with locales and umlauts:
>>>
>>> I can't "chgrp dom?nen-admins", in german it's
"dom?nen-admins", on bash
>>> shell it looks like
>> Have you considered moving to the UK, we don't have those funny
marks
>> here ;-)
>>> ->
>>>
>>>
>>> # wbinfo -g
>>> dom?nencomputer
>>> dom?nencontroller
>>> dom?nen-admins
>>> dom?nen-benutzer
>>> dom?nen-g?ste
>>>
>>>
>>> # wbinfo --group-info="dom?nen-admins"
>>> failed to call wbcGetgrnam: WBC_ERR_DOMAIN_NOT_FOUND
>>> Could not get info for group dom?nen-admins
>>>
>>> Do I have to log in with US locale?
>> No and if you did, I don't think it would fix this problem, is
locales
>> setup correctly ?
> I think so.
>
> Tested with US locale, no change.
>
> I now figured out to do:
>
> # chown -R 10500:10512 *
>
> But access from windows still is problematic with the DOM\Administrator :-(
Hmm, what is the German for Administrator ?
>
>> Having said that, you should be using 'getent group Domain
Admins'
>> (where 'Domain Admins' is replaced with your version (sorry,
but as I
>> said, we don't have those funny marks))
> Not my idea. AD DC delivers the names like that.
Never said it was ;-)

Rowland