search for: 134administrator

...the 'Add' button was greyed out, going to the 'share permissions' tab and adding Administrator with full permissions cured this. Once this was done, getfacl now returns: getfacl: Removing leading '/' from absolute path names # file: var/lib/samba/sysvol/ # owner: EXAMPLE\134Administrator # group: 3000000 user::rwx user:3000000:rwx S-1-5-32-544 Administrators group user:3000001:r-x S-1-5-32-549 Server Operators builtin group user:3000002:rwx S-1-5-18 Local System account user:3000003:r-x...

...hare permissions' tab and >> adding Administrator with full permissions cured this. >> >> Once this was done, getfacl now returns: >> >> getfacl: Removing leading '/' from absolute path names >> # file: var/lib/samba/sysvol/ >> # owner: EXAMPLE\134Administrator >> # group: 3000000 >> user::rwx >> user:3000000:rwx S-1-5-32-544 Administrators group >> user:3000001:r-x S-1-5-32-549 Server Operators builtin group >> user:3000002:rwx S-1-5-18 Local System account >> user:3000003:r-x S-1-5-11...

...yed out, going to the 'share permissions' tab and adding > Administrator with full permissions cured this. > > Once this was done, getfacl now returns: > > getfacl: Removing leading '/' from absolute path names > # file: var/lib/samba/sysvol/ > # owner: EXAMPLE\134Administrator > # group: 3000000 > user::rwx > user:3000000:rwx S-1-5-32-544 Administrators group > user:3000001:r-x S-1-5-32-549 Server Operators builtin group > user:3000002:rwx S-1-5-18 Local System account > user:3000003:r-x S-1-5-11 Authenticate...

...d >>> adding Administrator with full permissions cured this. >>> >>> Once this was done, getfacl now returns: >>> >>> getfacl: Removing leading '/' from absolute path names >>> # file: var/lib/samba/sysvol/ >>> # owner: EXAMPLE\134Administrator >>> # group: 3000000 >>> user::rwx >>> user:3000000:rwx S-1-5-32-544 Administrators group >>> user:3000001:r-x S-1-5-32-549 Server Operators builtin group >>> user:3000002:rwx S-1-5-18 Local System account >>> user:30000...

...rom the domain controller, either because the machine is unavailable or access has been denied.' when accessing some 'gpt.ini' files. For reference here is the getfacl output for the GPT.INI file in question from the two servers: TAINAN: getfacl GPT.INI # file: GPT.INI # owner: SMC\134administrator # group: SMC\134Domain\040Admins user::rwx user:SMC\134administrator:rwx group::rwx group:SMC\134Domain\040Admins:rwx group:3000002:rwx group:3000003:r-x group:SMC\134Enterprise\040Admins:rwx group:3000011:r-x mask::rwx other::--- AD-01: getfacl GPT.INI # file: GPT.INI # owner: SMC\134administrato...

...quot;root" or "Creator Group" are already listed in the dialogue box without me doing anything. On the Linux side, the extended permissions of the /var/share/samba/homes directory look like this root at fileserver:/var/share/samba# getfacl homes/ # file: homes/ # owner: MYDOMAIN\134administrator # group: MYDOMAIN\134domain\040admins user::rwx user:MYDOMAIN\134administrator:rwx group::rwx group:MYDOMAIN\134domain\040admins:rwx group:100004:r-x group:100005:rwx mask::rwx other::--- default:user::rwx default:user:MYDOMAIN\134administrator:rwx default:group::--- default:group:MYDOMAIN\134domai...

...ot;user1" from accessing NONWORKING directory. Have I missed something? Is there anything else I can check? thanks --- /tmp/NONWORKING_acl 2019-07-02 10:25:33.961928899 +0200 +++ /tmp/WORKING_acl 2019-07-02 10:25:50.061925261 +0200 @@ -1,21 +1,21 @@ -# file: NONWORKING -# owner: DOMAIN\134administrator +# file: WORKING +# owner: DOMAIN\134max # group: users # flags: -s- user::rwx user:DOMAIN\134administrator:rwx user:DOMAIN\134user1:rwx user:DOMAIN\134domain\040admins:rwx -group::rwx +group::r-x group:users:rwx group:DOMAIN\134domain\040admins:rwx mask::rwx -other::rwx +other::r-x...

...> are already listed in the dialogue box without me doing anything. > > > On the Linux side, the extended permissions of the > /var/share/samba/homes directory look like this > > root at fileserver:/var/share/samba# getfacl homes/ > # file: homes/ > # owner: MYDOMAIN\134administrator > # group: MYDOMAIN\134domain\040admins > user::rwx > user:MYDOMAIN\134administrator:rwx > group::rwx > group:MYDOMAIN\134domain\040admins:rwx > group:100004:r-x > group:100005:rwx > mask::rwx > other::--- > default:user::rwx > default:user:MYDOMAIN\134administrator...

...roup::--- default:group:3000000:rwx default:group:3000001:r-x default:group:3000002:r-x default:group:3000003:rwx default:mask::rwx default:other::--- To this: getfacl /var/lib/samba/sysvol/ getfacl: Removing leading '/' from absolute path names # file: var/lib/samba/sysvol/ # owner: HOME\134Administrator # group: 3000000 user::rwx user:3000002:rwx user:HOME\134Administrator:rwx group::rwx group:3000000:rwx group:3000001:r-x group:3000003:r-x mask::rwx other::--- default:user::rwx default:user:3000002:rwx default:user:HOME\134Administrator:rwx default:group::--- default:group:3000000:rwx default:gro...

Hi Rowland, I'm also not an expert, but with the amount of help you provide on the list, I will defer to you. I'd love to know your rational for prefering the "change ownership to administrator" approach over the "change group to Domain Admins approach". If it's just gut, that's fine too! Thanks! -----Original Message----- From: samba-bounces at

...the dialogue box without me doing anything. >> >> >> On the Linux side, the extended permissions of the >> /var/share/samba/homes directory look like this >> >> root at fileserver:/var/share/samba# getfacl homes/ >> # file: homes/ >> # owner: MYDOMAIN\134administrator >> # group: MYDOMAIN\134domain\040admins >> user::rwx >> user:MYDOMAIN\134administrator:rwx >> group::rwx >> group:MYDOMAIN\134domain\040admins:rwx >> group:100004:r-x >> group:100005:rwx >> mask::rwx >> other::--- >> default:user::rwx &gt...

I can't seem to verify whether or my first attempt at sending this message was successful, so I'm reposting it, using a different method. I apologize if anyone has seen it already. I have a Samba server, joined to my Windows Active Directory domain, and I'm having a problem setting ACLs on a share from Windows. On Windows, I get the error message "Unable to save permission

...nction works on Solaris. Does this work for anyone out there, using a Linux system? Thanks ===== "getfacl" output # owner: <My domain>\134<user1> # group: <My domain>\134mis user::rwx user:<My domain>\134<me>:rwx user:<My domain>\134administrator:rwx user:<My domain>\134<user2>:rwx user:<My domain>\134<user3>:rwx group::rwx group:<My domain>\134accounting:rwx mask::rwx other::rwx default:user::rwx default:user:<My domain>\134<user1>:rwx default:user:<My domain&...

...roup::--- default:group:3000000:rwx default:group:3000001:r-x default:group:3000002:r-x default:group:3000003:rwx default:mask::rwx default:other::--- To this: getfacl /var/lib/samba/sysvol/ getfacl: Removing leading '/' from absolute path names # file: var/lib/samba/sysvol/ # owner: HOME\134Administrator # group: 3000000 user::rwx user:3000002:rwx user:HOME\134Administrator:rwx group::rwx group:3000000:rwx group:3000001:r-x group:3000003:r-x mask::rwx other::--- default:user::rwx default:user:3000002:rwx default:user:HOME\134Administrator:rwx default:group::--- default:group:3000000:rwx default:gro...

...grafia/ chown -R 'ATGTM00\Administrator':'ATGTM00\Domain Admins' /samba/bibliografia/ I test and I guest is Ok: [root at gtmpve /]# getfacl --access /samba/bibliografia getfacl: Eliminando '/' inicial en nombres de ruta absolutos # file: samba/bibliografia # owner: ATGTM00\134administrator # group: ATGTM00\134domain\040admins user::rwx group::rwx other::--- I check if everything is in place for winbind and if it is working fine: [root at gtmpve /]# smbd -b | grep LIBDIR LIBDIR: /usr/lib64 [root at gtmpve /]# find / -type f -name pam_winbind.so /usr/lib64/security/pam_winbind.so...