Stefan G. Weichinger
2022-Oct-19 16:25 UTC
[Samba] editing samba-share ACLs etc from Windows
Am 19.10.22 um 14:39 schrieb Rowland Penny via samba:> > > On 17/10/2022 16:52, Stefan G. Weichinger via samba wrote: >> >> Trying to edit the permissions of samba-4.5.x from a Windows server >> management console. > > Samba 4.5.x ??? > >> >> Getting "no access" as domain admin. >> >> Does that relate to that security policy issue back then (accessing >> the shares also doesn't work)? >> >> I need to deny a specific AD user group access to samba-shares and as >> far as I know editing the ACLs and/or share permissions from Windows >> is the recommended way. >> >> Any recommendations here? > > If it is 4.5.x , I think you know what is coming, upgrade Samba, your > version is ancient.Oh, I am sorry, no .. I don't know how that could happen. I thought 4.16.5, wanted to write 4.16.x to avoid the minor release and failed completely. 4.16.4 it is ...
On 19/10/2022 17:25, Stefan G. Weichinger via samba wrote:> Am 19.10.22 um 14:39 schrieb Rowland Penny via samba: >> >> >> On 17/10/2022 16:52, Stefan G. Weichinger via samba wrote: >>> >>> Trying to edit the permissions of samba-4.5.x from a Windows server >>> management console. >> >> Samba 4.5.x ??? >> >>> >>> Getting "no access" as domain admin. >>> >>> Does that relate to that security policy issue back then (accessing >>> the shares also doesn't work)? >>> >>> I need to deny a specific AD user group access to samba-shares and as >>> far as I know editing the ACLs and/or share permissions from Windows >>> is the recommended way. >>> >>> Any recommendations here? >> >> If it is 4.5.x , I think you know what is coming, upgrade Samba, your >> version is ancient. > > Oh, I am sorry, no .. I don't know how that could happen. > > I thought 4.16.5, wanted to write 4.16.x to avoid the minor release and > failed completely.Don't worry, I do similar things all the time, I know what I want to type, but it doesn't always get through to my fingers, I think it is called old age ;-)> > 4.16.4 it is ...In which case it should work, so lets start with the smb.conf and the permissions set on the shares path. Rowland