samba - Oct 2023 - Permissions issue on domain member server (samba as an appliance)

Hi,

  We have a rat's nest of windows servers all sharing little bits of
storage which I'm trying to consolidate on one biggish linux server.
I've
install a fresh Ubuntu 22.04 and samba 4.15 that comes standard. I've also
joined the domain using autorid as the backend and users are getting UID
and GIDs correctly as evidenced by wbinfo -i USER and id USER. I've also
mapped a domain admin user to root using username map and the connection
shows up as root in smbstatus. Created a share, changed the group of the
directory to "Domain Admins" and did a g+rwx on the share root dir.
Everything looks good.

But. When I connect to the share as that admin user and try a mkdir tt I
get access denied. robocopy from one of the windows servers give me "A
required privilege is not help by the client".

Level 10 logs are pretty verbose but I did not see a cause.

What am I missing? Where should I look next?

Thanks,
Greg

-- 


Greg Dickie
just a guy
514-983-5400

These are my notes. I?d rather use xattr and configure shares from windows.

http://samba.bigbird.es/doku.php?id=samba:configuring-shares

Also, have you assigned privileges ?

http://samba.bigbird.es/doku.php?id=samba:server-privileges

Using autorid as the idmap backend has some limitations. I recommend using rid.

Regards.
On 27 Oct 2023 at 20:08 +0100, Greg Dickie via samba <samba at
lists.samba.org>, wrote:
> Hi,
>
> We have a rat's nest of windows servers all sharing little bits of
> storage which I'm trying to consolidate on one biggish linux server.
I've
> install a fresh Ubuntu 22.04 and samba 4.15 that comes standard. I've
also
> joined the domain using autorid as the backend and users are getting UID
> and GIDs correctly as evidenced by wbinfo -i USER and id USER. I've
also
> mapped a domain admin user to root using username map and the connection
> shows up as root in smbstatus. Created a share, changed the group of the
> directory to "Domain Admins" and did a g+rwx on the share root
dir.
> Everything looks good.
>
> But. When I connect to the share as that admin user and try a mkdir tt I
> get access denied. robocopy from one of the windows servers give me "A
> required privilege is not help by the client".
>
> Level 10 logs are pretty verbose but I did not see a cause.
>
> What am I missing? Where should I look next?
>
> Thanks,
> Greg
>
> --
>
>
> Greg Dickie
> just a guy
> 514-983-5400
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba

On Fri, 27 Oct 2023 15:07:56 -0400
Greg Dickie via samba <samba at lists.samba.org> wrote:
> Hi,
> 
>   We have a rat's nest of windows servers all sharing little bits of
> storage which I'm trying to consolidate on one biggish linux server.
> I've install a fresh Ubuntu 22.04 and samba 4.15 that comes standard.
> I've also joined the domain using autorid as the backend and users
> are getting UID and GIDs correctly as evidenced by wbinfo -i USER and
> id USER. I've also mapped a domain admin user to root using username
> map and the connection shows up as root in smbstatus.
Could you please point out where it says to map a domain admin to root
instead of mapping Administrator to root ?

Rowland
 
> Created a
> share, changed the group of the directory to "Domain Admins" and
did
> a g+rwx on the share root dir. Everything looks good.
> 
> But. When I connect to the share as that admin user and try a mkdir
> tt I get access denied. robocopy from one of the windows servers give
> me "A required privilege is not help by the client".
> 
> Level 10 logs are pretty verbose but I did not see a cause.
> 
> What am I missing? Where should I look next?
> 
> Thanks,
> Greg
>