samba - May 2021 - Some questions about sharing and permission.

Thanks.
Can you tell me how can I use "chmod" for it?

I have a "login1" group with below members:

# samba-tool group listmembers login1
user3
user2

I used "setfacl" as below:

# setfacl -R -m g:login1:r share/

And "getfacl" show me:

# getfacl share/
# file: share/
# owner: root
# group: MYDOMAIN\\login2
user::rwx
group::rwx
group:MYDOMAIN\\login1:r--
mask::rwx
other::---


I reloaded the Samba configuration and Logged off and Login Windows client
again, but I can't open that share file. Samba logs tell me:

# cat /var/log/samba/192.168.56.8.log?
[2021/05/14 18:38:11.875709,? 0]
../../source3/smbd/service.c:167(chdir_current_service)
? chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied.
Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014
3000015 3000003 3000016 3000009 3000017
[2021/05/14 18:38:12.093263,? 0]
../../source3/smbd/service.c:167(chdir_current_service)
? chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied.
Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014
3000015 3000003 3000016 3000009 3000017
[2021/05/14 18:38:12.095973,? 0]
../../source3/smbd/service.c:167(chdir_current_service)
? chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied.
Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014
3000015 3000003 3000016 3000009 3000017
[2021/05/14 18:38:12.096731,? 0]
../../source3/smbd/service.c:167(chdir_current_service)
? chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied.
Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014
3000015 3000003 3000016 3000009 3000017
[2021/05/14 18:38:12.097405,? 0]
../../source3/smbd/service.c:167(chdir_current_service)
? chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied.
Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014
3000015 3000003 3000016 3000009 3000017
[2021/05/14 18:38:12.099042,? 0]
../../source3/smbd/service.c:167(chdir_current_service)
? chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied.
Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014
3000015 3000003 3000016 3000009 3000017
[2021/05/14 18:38:12.099692,? 0]
../../source3/smbd/service.c:167(chdir_current_service)
? chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied.
Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014
3000015 3000003 3000016 3000009 3000017
[2021/05/14 18:38:13.430913,? 0]
../../source3/smbd/service.c:167(chdir_current_service)
? chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied.
Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014
3000015 3000003 3000016 3000009 3000017

Why?






On Friday, May 14, 2021, 05:34:24 PM GMT+4:30, Rowland penny via samba <samba
at lists.samba.org> wrote:





On 14/05/2021 13:57, Jason Long wrote:
> Thank you.
> I can't use "chown"?

Yes and no, for a start I think you mean 'chmod' (chown changes 
ownership) and? 'acl_xattr:ignore system acl = yes' means exactly that, 
ignore the normal (ugo) acl's set by chmod.

I am fairly sure that I have said this at least once, forget the old way 
of doing things, you need to learn the AD way of doing things, 
especially if you are using a DC as a fileserver (which is not recommended).


Rowland


-- 
To unsubscribe from this list go to the following URL and read the
instructions:? https://lists.samba.org/mailman/options/samba

On 14/05/2021 15:21, Jason Long wrote:
> Thanks.
> Can you tell me how can I use "chmod" for it?
>
No, what part of 'set the permissions from Windows' do you not
understand ?

If you set 'acl_xattr:ignore system acl = yes' in a share, you cannot 
use chmod, you may be able to set the permissions on a Unix domain 
member using setfacl, but setting permissions from Windows is better and 
on a DC is the only way.

Rowland