samba - Mar 2022 - Samba as Domain Member: user get permission denied accessing share...

On Wed, 2022-03-09 at 08:17 -0600, Patrick Goetz via samba
wrote:
> The UNIX permissions on the /srv/samba folder indicate that no one 
> outside the domain admins group will have access to anything inside 
> /srv/samba (no matter what POSIX ACLs are set or what the Windows 
> permissions show).
> 
>     # chmod 775 /srv/samba
> 
> and try again.
The idea is that you set the permissions to '0770' and then a member of
Domain Admins sets the required permissions from Windows.

Rowland

Many many many thanks to you all, Rowland and Patrick.
You save my day. After 8 hour of .........
Now it works as espected.
Thank you very much.

Mirko


Il 09/03/22 15:26, Rowland Penny via samba ha scritto:
> On Wed, 2022-03-09 at 08:17 -0600, Patrick Goetz via samba wrote:
>> The UNIX permissions on the /srv/samba folder indicate that no one
>> outside the domain admins group will have access to anything inside
>> /srv/samba (no matter what POSIX ACLs are set or what the Windows
>> permissions show).
>>
>>      # chmod 775 /srv/samba
>>
>> and try again.
> The idea is that you set the permissions to '0770' and then a
member of
> Domain Admins sets the required permissions from Windows.
>
> Rowland
>
>
>

On 3/9/22 08:26, Rowland Penny via samba wrote:
> On Wed, 2022-03-09 at 08:17 -0600, Patrick Goetz via samba wrote:
>> The UNIX permissions on the /srv/samba folder indicate that no one
>> outside the domain admins group will have access to anything inside
>> /srv/samba (no matter what POSIX ACLs are set or what the Windows
>> permissions show).
>>
>>      # chmod 775 /srv/samba
>>
>> and try again.
> 
> The idea is that you set the permissions to '0770' and then a
member of
> Domain Admins sets the required permissions from Windows.
> 
OK, but that presumably resets the "o" permissions on /srv/samba or 
linux will not let non-domain admins access the contents of that folder.


I was preparing to post about my frustrations with permissions issues, 
but let me ask separately: why is it necessary to set subsequent 
permissions from Windows?

> Rowland
> 
> 
>