search for: 040domaine

...e, on my samba share, I set permissions for the share "groups" located on /var/datashared for "domain admins" (rwx) and "domain users" (r-x) /var]# getfacl datashared/ # file: datashared/ # owner: root # group: root user::rwx group::r-x group:MYDOMAIN\134admins\040du\040domaine:rwx group://MYDOMAIN\134utilisateurs\040du\040domaine:r-x mask::rwx other::--- default:user::rwx default:group::r-x default:group://MYDOMAIN\134admins\040du\040domaine:rwx default:mask::rwx default:other::---/ /+ # chmod 0770 /var/datashared/ As you can see acls for "Domain users" are n...

...he > share "groups" located on /var/datashared for "domain admins" (rwx) > and "domain users" (r-x) > /var]# getfacl datashared/ > # file: datashared/ > # owner: root > # group: root > user::rwx > group::r-x > group:MYDOMAIN\134admins\040du\040domaine:rwx > group://MYDOMAIN\134utilisateurs\040du\040domaine:r-x > mask::rwx > other::--- > default:user::rwx > default:group::r-x > default:group://MYDOMAIN\134admins\040du\040domaine:rwx > default:mask::rwx > default:other::---/ > > /+ # chmod 0770 /var/datashared/ > &...

...ning the samba share : I set permissions for the share "groups" located on /var/datashared for "domain admins" (rwx) and "domain users" (r-x) /var]# getfacl datashared/ # file: datashared/ # owner: root # group: root user::rwx group::r-x group:MYDOMAIN\134admins\040du\040domaine:rwx group://MYDOMAIN\134utilisateurs\040du\040domaine:r-x mask::rwx other::--- default:user::rwx default:group::r-x default:group://MYDOMAIN\134admins\040du\040domaine:rwx default:mask::rwx default:other::---/ /+ # chmod 0770 /var/datashared/ As you can see acls for "Domain users" are n...

This way is so easier... Thank you Rowland Le 20/06/2019 ? 14:01, Rowland penny via samba a ?crit?: > On 20/06/2019 17:54, Edouard Guign? via samba wrote: >> My idea is to replace default "cifs_idmap_sss.so" plugin by >> "idmapwb.so" winbind plugin, in order to SSSD becomes a client of >> winbind. >> To avoid to change nsswitch.conf : >>

...all seem to be linked to the ACL. All my users are members of 'Utilisa. du domaine', and it is their main group (as displayed by winbind) If I have this ACL, opening fails miserably (except for user marc) # file: my_file.xls # owner: GROUPESIGMA+marc # group: GROUPESIGMA+Utilisa.\040du\040domaine user::rwx group::r-x group:GROUPESIGMA+Admins\040du\040domaine:rw group:GROUPESIGMA+SIG_DAF_ACHATS:rwx group:GROUPESIGMA+DSI:rwx group:ORION+Utilisa.\040du\040domaine:r-x mask::rwx other::r-x If I change the mask, it works (but of course members of the additional groups are screwed) : the...

...et both as user and group too. Under windows, if the user ciril ( member of the group "sa-si" and "utilisa. du domaine" as default group) create a new file, a getfacl command on it return : # file: Fichiers/SA/Nouveau document texte.txt # owner: ciril # group: utilisa.\040du\040domaine user::rwx user:utilisa.\040du\040domaine:r-x _user:sa-si:rwx_ group::r-x group:utilisa.\040du\040domaine:r-x _group:ciril:rwx_ group:sa-si:rwx mask::rwx other::--- ( wrong entries underlined ) if the user ciril add *karine* and the group *sa-cp* to this file, the getfacl command show that : #...

...In the Windows side all seems ok : but not the result of getfacl ... root at Samba4:/Fichiers# getfacl /Fichiers/SA/Nouveau\ document\ texte.txt getfacl : suppression du premier « / » des noms de chemins absolus # file: Fichiers/SA/Nouveau document texte.txt # owner: ciril # group: utilisa.\040du\040domaine user::rwx user:utilisa.\040du\040domaine:r-x user:karine.hasani:r-x user:sa-si:rwx user:sa-cp:r-x user:john.doe:r-x user:essai:r-x group::r-x group:utilisa.\040du\040domaine:r-x group:karine.hasani:r-x group:ciril:rwx group:sa-si:rwx group:sa-cp:r-x group:john.doe:r-x group:essai:r-x mask::rwx othe...

Hello, If I try to set acl under windows, something very strange appears. For instance, if I set something for the user samuel I get this with the command getfacl : default:_*group*_:samuel.ruet:r-x And if I set something for the group sa-si I get this : default:_*use*_r:sa-si:r-x Under windows all seems good... I recently change idmap config... ( add rid backend ) Here is my smb.conf :

...dy browseable = yes create mode = 666 writable = yes nt acl support = yes I put some basic acls ont his share : srvpdf:/var/smbspool/pdf# getfacl ./nobody # file: nobody # owner: nobody # group: nogroup user::rwx user:ICSB2K+administrateur:rwx group::rwx group:ICSB2K+utilisa.\040du\040domaine:r-x group:ICSB2K+technique:rwx mask::rwx other::rwx So ACLs on this share reports some members should get all privileges on this directory. Now let's go on a Win2k workstation an logon at Administrator... If I browse the share and open properties/security options : - users are well listed,...