samba - Feb 2024 - Samba omitting the user group setting, might be a bug

Hello Marco,

On 05.02.2024 16:44, Marco Gaiarin wrote:
> Mandi! Fyodor Kravchenko via samba
>    In chel di` si favelave...
>
>> Have to add about the environment - this is an unprivileged TurnKey
>> Fileserver Linux container run under Proxmox. The extensive googling
for
>> the problem suggests Samba will not work in such environment because of
>> ACL and such, but I need a fileserver as an unprivileged container,
>> mapping the same directories the FileServer would serve to other
>> containers, and if not for this little bug I'd be quite happy.
> What PVE version?
It's 8.1.4
> Try adding:
>
> 	features: nesting=1
>
> that is the default for new container for PVE7 onward, but not added
> automatically for PVE6 containers.
Thank you, nesting is set to 1. Is there anything else we could check? 
Really wary to make it privileged though.

Regards,

fedd

Op 06-02-2024 om 13:12 schreef Fyodor Kravchenko via
samba:
> Hello Marco,
>
> On 05.02.2024 16:44, Marco Gaiarin wrote:
>> Mandi! Fyodor Kravchenko via samba
>> ?? In chel di` si favelave...
>>
>>> Have to add about the environment - this is an unprivileged TurnKey
>>> Fileserver Linux container run under Proxmox. The extensive
googling
>>> for
>>> the problem suggests Samba will not work in such environment
because of
>>> ACL and such, but I need a fileserver as an unprivileged container,
>>> mapping the same directories the FileServer would serve to other
>>> containers, and if not for this little bug I'd be quite happy.
>> What PVE version?
>
> It's 8.1.4
>
>> Try adding:
>>
>> ????features: nesting=1
>>
>> that is the default for new container for PVE7 onward, but not added
>> automatically for PVE6 containers.
>
> Thank you, nesting is set to 1. Is there anything else we could check? 
> Really wary to make it privileged though.
>
> Regards,
>
> fedd
>
I have not used Proxmox, but I am using LXC containers.

As far as I know Samba-AD and Samba Fileserver will only work properly 
when deployed in a privileged container. So that is what I did and I can 
confirm that works.

- Kees.

Op 06-02-2024 om 13:12 schreef Fyodor Kravchenko via
samba:
> Hello Marco,
>
> On 05.02.2024 16:44, Marco Gaiarin wrote:
>> Mandi! Fyodor Kravchenko via samba
>> ?? In chel di` si favelave...
>>
>>> Have to add about the environment - this is an unprivileged TurnKey
>>> Fileserver Linux container run under Proxmox. The extensive
googling
>>> for
>>> the problem suggests Samba will not work in such environment
because of
>>> ACL and such, but I need a fileserver as an unprivileged container,
>>> mapping the same directories the FileServer would serve to other
>>> containers, and if not for this little bug I'd be quite happy.
>> What PVE version?
>
> It's 8.1.4
>
>> Try adding:
>>
>> ????features: nesting=1
>>
>> that is the default for new container for PVE7 onward, but not added
>> automatically for PVE6 containers.
>
> Thank you, nesting is set to 1. Is there anything else we could check? 
> Really wary to make it privileged though.
>
> Regards,
>
> fedd
>
Here is an old thread on the mailinglist about this topic:

https://lists.samba.org/archive/samba/2019-July/224201.html

Mandi! Fyodor Kravchenko via samba
  In chel di` si favelave...
> Thank you, nesting is set to 1. Is there anything else we could check? 
AFAIK, no. Next step is use a privileged container, but really in this vase
better using a VM.

-- 
  Berlusconi: "Da oggi sono a dieta"
  Il Paese lo ? gi? da 4 anni			(Il Ruggito del Coniglio)