On 01.07.2020 13:35, Rowland penny via samba wrote:> On 01/07/2020 12:15, Robi. T. Wagner via samba wrote: >>> root at localhost:~# getfacl /home/samba/users/ >>> getfacl: Removing leading '/' from absolute path names >>> # file: home/samba/users/ >>> # owner: root >>> # group: root >>> user::rwx >>> group::rwx >>> other::rwx >>> root at localhost:~# samba-tool ntacl get /home/samba/users --as-sddl >>> O:LAG:S-1-22-2-0D:(A;;0x001f01ff;;;LA)(A;;0x001f01ff;;;S-1-22-2-0)(A;;0x001f01ff;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD) >>> >> -------------------------------------------------------------------------------------------------------------------- >> >> Sorry for the bad format....I am fighting to get lists.samba.org into >> a newsreader without success (bloody Austrian A1 doesn't have a news >> server anymore and I couldn't find a nntp server with samba lists) >> ?? If you change the file/directory owner to a unix user, windows >> explorer is crashing immediately in the security tab. The only >> exception is the user root, because it mapped to Administrator. >> >> >> Mani > > Now I think about it, we have had this before and it is a Windows bug, > if I remember correctly, someone at Windows was supposed to be looking > into it. > > Rowland >Yes, this was a short discussion a year ago with no outcome, till I found by accident the post from Julia with the patch a few months ago. Lets put it this way: Explorer shouldn't crash, when Samba is sending nonsense, when a user is mis-using an AD-DC as member server ;-)
On 01/07/2020 12:47, Robert T. Wagner via samba wrote:> > On 01.07.2020 13:35, Rowland penny via samba wrote: >> On 01/07/2020 12:15, Robi. T. Wagner via samba wrote: >>>> root at localhost:~# getfacl /home/samba/users/ >>>> getfacl: Removing leading '/' from absolute path names >>>> # file: home/samba/users/ >>>> # owner: root >>>> # group: root >>>> user::rwx >>>> group::rwx >>>> other::rwx >>>> root at localhost:~# samba-tool ntacl get /home/samba/users --as-sddl >>>> O:LAG:S-1-22-2-0D:(A;;0x001f01ff;;;LA)(A;;0x001f01ff;;;S-1-22-2-0)(A;;0x001f01ff;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD) >>>> >>> -------------------------------------------------------------------------------------------------------------------- >>> >>> Sorry for the bad format....I am fighting to get lists.samba.org >>> into a newsreader without success (bloody Austrian A1 doesn't have a >>> news server anymore and I couldn't find a nntp server with samba lists) >>> ?? If you change the file/directory owner to a unix user, windows >>> explorer is crashing immediately in the security tab. The only >>> exception is the user root, because it mapped to Administrator. >>> >>> >>> Mani >> >> Now I think about it, we have had this before and it is a Windows >> bug, if I remember correctly, someone at Windows was supposed to be >> looking into it. >> >> Rowland >> > Yes, this was a short discussion a year ago with no outcome, till I > found by accident the post from Julia with the patch a few months ago. > > Lets put it this way: Explorer shouldn't crash, when Samba is sending > nonsense, when a user is mis-using an AD-DC as member server ;-)The problem from my point of view is, I cannot recreate the crash. My feelings are that the OP hasn't set up the share correctly, or hasn't mapped root to Administrator. I am testing using a share on a raspberrypi and even if I change the directory owner to 'pi', it does not crash Windows explorer. Rowland
On 01.07.2020 14:03, Rowland penny via samba wrote:> On 01/07/2020 12:47, Robert T. Wagner via samba wrote: >> >> On 01.07.2020 13:35, Rowland penny via samba wrote: >>> On 01/07/2020 12:15, Robi. T. Wagner via samba wrote: >>>>> root at localhost:~# getfacl /home/samba/users/ >>>>> getfacl: Removing leading '/' from absolute path names >>>>> # file: home/samba/users/ >>>>> # owner: root >>>>> # group: root >>>>> user::rwx >>>>> group::rwx >>>>> other::rwx >>>>> root at localhost:~# samba-tool ntacl get /home/samba/users --as-sddl >>>>> O:LAG:S-1-22-2-0D:(A;;0x001f01ff;;;LA)(A;;0x001f01ff;;;S-1-22-2-0)(A;;0x001f01ff;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD) >>>>> >>>> -------------------------------------------------------------------------------------------------------------------- >>>> >>>> Sorry for the bad format....I am fighting to get lists.samba.org >>>> into a newsreader without success (bloody Austrian A1 doesn't have >>>> a news server anymore and I couldn't find a nntp server with samba >>>> lists) >>>> ?? If you change the file/directory owner to a unix user, windows >>>> explorer is crashing immediately in the security tab. The only >>>> exception is the user root, because it mapped to Administrator. >>>> >>>> >>>> Mani >>> >>> Now I think about it, we have had this before and it is a Windows >>> bug, if I remember correctly, someone at Windows was supposed to be >>> looking into it. >>> >>> Rowland >>> >> Yes, this was a short discussion a year ago with no outcome, till I >> found by accident the post from Julia with the patch a few months ago. >> >> Lets put it this way: Explorer shouldn't crash, when Samba is sending >> nonsense, when a user is mis-using an AD-DC as member server ;-) > > The problem from my point of view is, I cannot recreate the crash. My > feelings are that the OP hasn't set up the share correctly, or hasn't > mapped root to Administrator. I am testing using a share on a > raspberrypi and even if I change the directory owner to 'pi', it does > not crash Windows explorer. > > Rowland > > >a pi as Active directory domain controller with samba version 4.9.5+dfsg-5+deb10u1? Mani
On Wed, 1 Jul 2020 13:03:50 +0100 Rowland penny via samba <samba at lists.samba.org> wrote:> On 01/07/2020 12:47, Robert T. Wagner via samba wrote: > > > > On 01.07.2020 13:35, Rowland penny via samba wrote: > >> On 01/07/2020 12:15, Robi. T. Wagner via samba wrote: > >>>> root at localhost:~# getfacl /home/samba/users/ > >>>> getfacl: Removing leading '/' from absolute path names > >>>> # file: home/samba/users/ > >>>> # owner: root > >>>> # group: root > >>>> user::rwx > >>>> group::rwx > >>>> other::rwx > >>>> root at localhost:~# samba-tool ntacl get /home/samba/users > >>>> --as-sddl > >>>> O:LAG:S-1-22-2-0D:(A;;0x001f01ff;;;LA)(A;;0x001f01ff;;;S-1-22-2-0)(A;;0x001f01ff;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD) > >>> -------------------------------------------------------------------------------------------------------------------- > >>> > >>> Sorry for the bad format....I am fighting to get lists.samba.org > >>> into a newsreader without success (bloody Austrian A1 doesn't > >>> have a news server anymore and I couldn't find a nntp server with > >>> samba lists) If you change the file/directory owner to a unix > >>> user, windows explorer is crashing immediately in the security > >>> tab. The only exception is the user root, because it mapped to > >>> Administrator. > >>> > >>> > >>> Mani > >> > >> Now I think about it, we have had this before and it is a Windows > >> bug, if I remember correctly, someone at Windows was supposed to > >> be looking into it. > >> > >> Rowland > >> > > Yes, this was a short discussion a year ago with no outcome, till I > > found by accident the post from Julia with the patch a few months > > ago. > > > > Lets put it this way: Explorer shouldn't crash, when Samba is > > sending nonsense, when a user is mis-using an AD-DC as member > > server ;-) > > The problem from my point of view is, I cannot recreate the crash. My > feelings are that the OP hasn't set up the share correctly, or hasn't > mapped root to Administrator. I am testing using a share on a > raspberrypi and even if I change the directory owner to 'pi', it does > not crash Windows explorer. > > Rowland > > >I followed the Samba guide to setup everything but a lot of things doesn't works for me. Now I'm able to create the share and set permissions (using the patch) but I'm unable to enter to the Windows client with new users. -- ----------------------------------------------------------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY ------------------------------------------------------------