search for: 040users

...t:rwx default:user:administrator:rwx default:group::r-x default:group:root:r-x default:group:domain\040admins:rwx default:group:5024:rwx default:mask::rwx default:other::--- ------------------ root at fileserver:/srv/samba/home# getfacl rs-01/ # file: rs-01/ # owner: administrator # group: domain\040users user::rwx user:rs-01:rwx user:administrator:rwx group::r-x group:domain\040users:r-x group:BUILTIN\134administrators:rwx group:domain\040admins:rwx group:5024:rwx mask::rwx other::--- default:user::rwx default:user:rs-01:rwx default:user:administrator:rwx default:group::r-x default:group:domain\040...

...ge permission problem with deleted folders. The newly created folders in the recycle folder have the wrong permission. The deleted file(s) itself has the correct group (rw) permissions. The shares correct permissions: getfacl Papierkorb/ # file: Papierkorb/ # owner: root # group: somedom\\domain\040users user::rwx user:root:rwx group::rwx group:somedom\\domain\040users:rwx mask::rwx other::--- default:user::rwx default:user:root:rwx default:group::--- default:group:somedom\\domain\040users:rwx default:mask::rwx default:other::--- The subfolder that 'vfs modules' created in the recycle shar...

...The first assign the UID/GID and then apply the home dir folders in RSAT. Only for user home dirs. This can help if you also use ssh to login and you cant enter your own home dir. Per example: Your ACL ( for the user ) > # File: rs-01 / > # Owner: administrator > # Group: domain \ 040users > user :: rwx > user: rs-01: rwx > user: administrator: rwx > group :: r-x > group: domain \ 040users: r-x > group: BUILTIN \ 134administrators: rwx > mask :: rwx > other :: --- > default: user :: rwx > default: user: rs-01: rwx > default: user: administrator: rwx &...

...orry hehehehe I mean, when access RSAT and add the "Home Folder" of the User, and give a Apply, the folder is automatically created with the permissions below, where the "Domain Users" is already linked: getfacl rs-01 / # File: rs-01 / # Owner: administrator # Group: domain \ 040users user :: rwx user: rs-01: rwx user: administrator: rwx group :: r-x group: domain \ 040users: r-x group: BUILTIN \ 134administrators: rwx mask :: rwx other :: --- default: user :: rwx default: user: rs-01: rwx default: user: administrator: rwx default: x r-group :: default: group: domain \ 040users:...

...users)] KITA@fjsv003 [uid=10002(KITA@fjsv003) gid=10000(KITA@domain users) groups=10000(KITA@domain users)] STEP1.The folder was made by using the Explorer of Windows. ACL state is as follows. [root@sambaSV pub]# getfacl testfolder # file: testfolder # owner: KITA@fjsv002 # group: KITA@domain\040users user::rwx group::rwx other::--- STEP2.The folder attribute is changed from the security tab. "Domain Users(KITA\Domain Users)" $B"*(B"full control" checked and execute. [root@sambaSV pub]# getfacl testfolder # file: testfolder # owner: KITA@fjsv002 # group: KITA@domai...

...ter upgrading Samba to 4.3.11+dfsg-0ubuntu0.14.04.6 I'm unable to access third level of subdirectories on shares. ACLs are even on both 2nd and 3rd levels, but I get access denied no matter what I do. $ getfacl . Android/ Android/The\ Settlers\ HD/ # file: . # owner: anrdaemon # group: domain\040users user::rwx group::r-x other::--- # file: Android/ # owner: anrdaemon # group: domain\040users # flags: -s- user::rwx group::r-x other::--- # file: Android/The Settlers HD/ # owner: anrdaemon # group: domain\040users # flags: -s- user::rwx group::r-x other::--- I can access share itself (.), the &...

...at the group "domain admins" does not have privileges to read or delete user profiles. The acls on the profiles directory look right to me: [root at gecko share2]# getfacl profiles/ # file: profiles/ # owner: root # group: domain\040admins user::rwx user:root:rwx group::rwx group:domain\040users:rwx group:domain\040admins:rwx mask::rwx other::--- default:user::rwx default:user:root:rwx default:group::--- default:group:domain\040admins:rwx default:mask::rwx default:other::--- But the individual user directories do not inherit the default group acls from the parent: [root at gecko share2]#...

...'t >>>> figure out the reason. It used to work fine before the Samba >>>> upgrade. The wrong acl's for the .ldb file look like this: >>>> >>>> # file: praxis_be.ldb >>>> # owner: HEBI\\user1 >>>> # group: HEBI\\domain\040users >>>> user::rw- >>>> user:root:rwx??????????? #effective:r-- >>>> group::rwx??????????? #effective:r-- >>>> group:HEBI\\domain\040users:rwx??? #effective:r-- >>>> group:HEBI\\domain\040computers:r-x??? #effective:r-- >>>> mask::...

Hello, After joining Windows 7 to a Samba 4 (AD), when logging on I experience 'Access denied' error accessing user profile. As a result, Windows creates temporary profile for the domain user (the profile is deleted upon logoff). The roaming profiles directory has been created according to instructions in https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles Note: the home

...3:01 data > > root at filesvr:~# getfacl /data/test > getfacl: Removing leading '/' from absolute path names > # file: data/test > # owner: root > # group: SDCP\\domain\040admins > user::rwx > user:root:rwx > user:SDCP\\domain\040admins:rwx > user:SDCP\\domain\040users:rwx > group::rwx > group:SDCP\\domain\040admins:rwx > group:SDCP\\domain\040users:rwx > mask::rwx > other::--- > default:user::rwx > default:user:root:rwx > default:user:SDCP\\domain\040users:rwx > default:group::r-x > default:group:SDCP\\domain\040admins:r-x > defa...

...elete files, ADD a new ACE to the ACL, BUT I can't delete any ACE from the ACL. I hop this will work when using the vfs object. Setting and removing ACLs via commandline works: - ---------------- root at samba42-fs1:/glusterfs/daten# getfacl v3 # file: v3 # owner: administrator # group: domain\040users user::rwx user:domain\040users:r-x group::r-x group:administrator:rwx group:domain\040users:r-x mask::rwx other::r-x default:user::rwx default:user:administrator:rwx default:group::r-x default:group:domain\040users:r-x default:mask::rwx default:other::r-x root at samba42-fs1:/glusterfs/daten# setf...

Has anyone seen this when they do a getfacl on a samba share? [root@gfm-atlas GFM_Shares]# getfacl Installpoint/ # file: Installpoint # owner: root # group: AVMAX+domainadmins user::rwx group::rwx group:AVMAX+domain\040users:r-x mask::rwx other::--- default:user::rwx default:group::rwx default:group:AVMAX+domain\040users:r-x default:mask::rwx default:other::--- Notice the AVMAX+domain\040users anomaly. I have another Samba/Winbind server on the same domain and I do not get that when I apply ACL's. P...

...US_ACCESS_DENIED listing \* I have tried the following: 1. The Domain admin can still access the shares - both from smbclient and from Windows machines. 2. I have checked the acl's on the server, they look ok: # getfacl share_name/ # file: clients/ # owner: root # group: MYDOMAIN\134domain\040users user::rwx group::rwx group:MYDOMAIN\134domain\040users:rwx mask::rwx other::rwx default:user::rwx default:group::rwx default:group:MYDOMAIN\134domain\040users:rwx default:mask::rwx default:other::--- 3. "wbinfo -g" and "wbinfo -u" work correctly 4. Kerberos tests work correctl...

...ot AD-LAN\domain users 34 Sep 21 11:25 profiles >> >> 2. ACL list for [profiles] >> # getfacl /srv/samba/profiles >> getfacl: Removing leading '/' from absolute path names >> # file: srv/samba/profiles >> # owner: root >> # group: AD-LAN\134domain\040users >> # flags: --t >> user::rwx >> user:root:rwx >> group::rwx >> group:AD-LAN\134domain\040users:rwx >> mask::rwx >> other::--- >> default:user::rwx >> default:user:root:rwx >> default:group::--- >> default:group:AD-LAN\134domain\040us...

...applied, but I have no idea where is it coming from. Both client machines are Windows 7 - I just can't figure out the reason. It used to work fine before the Samba upgrade. The wrong acl's for the .ldb file look like this: # file: praxis_be.ldb # owner: HEBI\\user1 # group: HEBI\\domain\040users user::rw- user:root:rwx #effective:r-- group::rwx #effective:r-- group:HEBI\\domain\040users:rwx #effective:r-- group:HEBI\\domain\040computers:r-x #effective:r-- mask::r-- other::--- What I've tried: 1. I have set and reset the acl's on the Linux side for the share and parent dir (...

...= 0777 force directory security mode = 0 dos filetimes = yes Following my data structure: /data /user /dtomasoni /another user ... Data share is mounted on XFS filesystem so I use ACL: /data # file: data # owner: root # group: root user::rwx group::r-x group:domain\040users:r-x mask::rwx other::r-x default:user::rwx default:group::--- default:group:domain\040users:r-x default:mask::rwx default:other::r-x /user # file: user # owner: root # group: root user::rwx group::--- group:domain\040users:r-x mask::rwx other::r-x default:user::rwx default:group:...

...gt;>>>>> fine before the Samba upgrade. The wrong acl's for the .ldb file >>>>>> look like this: >>>>>> >>>>>> # file: praxis_be.ldb >>>>>> # owner: HEBI\\user1 >>>>>> # group: HEBI\\domain\040users >>>>>> user::rw- >>>>>> user:root:rwx??????????? #effective:r-- >>>>>> group::rwx??????????? #effective:r-- >>>>>> group:HEBI\\domain\040users:rwx??? #effective:r-- >>>>>> group:HEBI\\domain\040computers:r-x??...

...files > drwxrwx--T+ 1 root AD-LAN\domain users 34 Sep 21 11:25 profiles > > 2. ACL list for [profiles] > # getfacl /srv/samba/profiles > getfacl: Removing leading '/' from absolute path names > # file: srv/samba/profiles > # owner: root > # group: AD-LAN\134domain\040users > # flags: --t > user::rwx > user:root:rwx > group::rwx > group:AD-LAN\134domain\040users:rwx > mask::rwx > other::--- > default:user::rwx > default:user:root:rwx > default:group::--- > default:group:AD-LAN\134domain\040users:--- > default:mask::rwx > default:...

...Both client machines are Windows 7 - I just can't figure >> out the reason. It used to work fine before the Samba upgrade. The >> wrong acl's for the .ldb file look like this: >> >> # file: praxis_be.ldb >> # owner: HEBI\\user1 >> # group: HEBI\\domain\040users >> user::rw- >> user:root:rwx??????????? #effective:r-- >> group::rwx??????????? #effective:r-- >> group:HEBI\\domain\040users:rwx??? #effective:r-- >> group:HEBI\\domain\040computers:r-x??? #effective:r-- >> mask::r-- >> other::--- >> >> >&g...

...gid=151495(pnia) groupes=151495(pnia),105000(domain users),700000002(BUILTIN\users) root at mom11:/home/d/dare# ls -l total 8 drwxrwxr-x+ 2 dare domain users 4096 févr.  6 11:44 test_win10_v1 root at mom11:/home/d/dare# getfacl test_win10_v1/ # file: test_win10_v1/ # owner: dare # group: domain\040users user::rwx user:dare:rwx group::r-x group:domain\040users:r-x mask::rwx other::r-x default:user::rwx default:user:dare:rwx default:group::r-x default:group:domain\040users:r-x default:mask::rwx default:other::r-x What am i missing ? thanks Christian D -- <http://www.univ-brest.fr>