[Samba] Acls

Philip Offermans
Fri, 04 Sep 2020 16:28:54 -0000

Hi I have some problems with setting permissions on my share. I think it has to
do that I didn?t configure this

If you use the winbind 'ad' backend on Unix domain members and you add a
gidNumber attribute to the Domain Admins group in AD, you will break the mapping
in idmap.ldb. Domain Admins is mapped as ID_TYPE_BOTH in  idmap.ldb, this is to
allow the group to own files in Sysvol on a Samba AD DC. It is suggested you
create a new AD group (Unix Admins for instance), give this group a gidNumber
attribute and add it to the Administrators group and then, on Unix, use the
group wherever you would normally use Domain Admins.

I am using a raspberry pi. And don?t know how to set this up.

Philip

p.s. can an admin block Emma the hooker?. She is sending spam. It?s anoying