search for: dacls

...|->b| |->3 |->4 All directories are owned by root/sys and contain read/write/execute ACLs for tom, dick, harry, and bob. A user listed in admin users for the share chooses adds an ACL for tim (rwx) from win2k to the top directory. All is well at this point. ACLs and DACLs for each user are applied to each folder. Now tom (who does not have admin rights to the share) creates a directory alpha under top->a->1 . He is the owner, and the directory contains all of the ACLs from 1, including the default ACL default:user:tom:rwx. The acl user:tom:rwx also exists,...

Hello, Not exactly samba but related to ntfs acls, so hope do not get flamed! Recently I am seeing a response to get security descriptor query to Windows server as Malformed Packet in wireshark trace and the number of aces in the dacl in big endian format. I thought all the data over the wire was in little endian format! I have seen this on Windows XP and Windows Server 2003. Have not

...and others I don't recall particularly restricting access to any of these (the only change I've tried to make, and as far as I knew succeeded in doing, was adding a group 'myou-admins' to be able to administer the OU=myou in addition to 'Domain Admins'). But from the above DACLs, I think that there are sufficient permissions that this CN=mygroup,OU=myou object should be OK to be read and queried? I haven't checked the DACL on each 'Person' member of the group - there are 35+ members of this group from various OUs across the tree - should I check the DACL on ea...

On Wed, 2023-11-22 at 17:33 +0000, Jonathan Hunter wrote: > On Wed, 22 Nov 2023 at 01:03, Andrew Bartlett < > abartlet at samba.org > > wrote: > > Are you sure that the ACLs on all the items in the chain should > > allow reading? > > It's an excellent question, thank you - I'd like to just say "Yes" > but > I will certainly check, as

When I change file property - security from Windows, I can see both from packet sniffer and Samba code, that there are 4 types of "security information": Owner ID Reference Primary Group ID Reference Discretionary ACL Reference System ACL Reference So if I want to change the primary group name on a file, by right click on the file->property->security->advanced->select

Hi All, I wanted to check the state of the ACL evaluation engine in samba. I have configured my linux sles 10, samba version 3.5.1-3.3-2332 with "ea support = yes", "store dos attributes=yes", "vfs objects = acl_xattr" and get lots of error + some failure messages. I attached the results of running the test against both samba as well as native windows 2003 cifs

Hi folks, I''ve got most everything done for the pure Ruby version of win32-file. The last thing left (since I''ll be moving the IO methods to a different package eventually) is the file security stuff. Here''s what I''ve got so far for the get_permissions method. However, I''m stuck at GetAce(). If someone could help me finish up this method, I

I've a problem with a program. Printing system does: type test.txt *>>* \\lnxsrv\printer and it return: "the parameter is incorrect" but if i try: type test.txt *> *\\lnxsrv\printer it works but if i try with early samba before 3.0.21 release "open extend >> " works ! with last samba release 3.0.25 not work and it tell me error ! Only simple >

...spsearch" The "wspsearch" cmd-line utility allows a WSP search request to be sent to a server (such as a windows server) that has the (WSP) Windows Search Protocol service configured and enabled. For more details see the wspsearch man page. Allow 'smbcacls' to save/restore DACLs to file -------------------------------------------- 'smbcacls' has been extended to allow DACLs to be saved and restored to/from a file. This feature mimics the functionality that windows cmd line tool 'icacls.exe' provides. Additionally files created either by 'smbcalcs'...

...spsearch" The "wspsearch" cmd-line utility allows a WSP search request to be sent to a server (such as a windows server) that has the (WSP) Windows Search Protocol service configured and enabled. For more details see the wspsearch man page. Allow 'smbcacls' to save/restore DACLs to file -------------------------------------------- 'smbcacls' has been extended to allow DACLs to be saved and restored to/from a file. This feature mimics the functionality that windows cmd line tool 'icacls.exe' provides. Additionally files created either by 'smbcalcs'...

The Wine development release 1.7.40 is now available. What's new in this release (see below for details): - Support for kernel job objects. - Various fixes to the ListView control. - Better support for OOB data in Windows Sockets. - Support for DIB images in the OLE data cache. - Improved support for MSI patches. - Some fixes for ACL file permissions. - Various bug fixes. The

On 28/12/15 10:07, L.P.H. van Belle wrote: > Hai Stefan, > > If you look from within windows, are you sysvol rights ok? > If so, just ignore these message. > There think there is nothing wrong with your sysvol rights, old bug imo. > > Greetz, > > Louis > > > > >> -----Oorspronkelijk bericht----- >> Van: samba [mailto:samba-bounces at

Hi, These were some suggestions from Clifford Heath regarding win32-security and Windows security in general. Regards, Dan PS - I''ll be on vacation until Jan, 2009. Merry Christmas and Happy New Year everyone! ---------- Forwarded message ---------- From: Clifford Heath <clifford.heath at gmail.com> Date: Fri, Dec 19, 2008 at 12:34 AM Subject: Re: [ANN] win32-security 0.1.0

...quot;-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Diso-8859-1"> <META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version = 5.5.2653.12"> <TITLE>ACLs and DACLs not propagated to owner of file/directory</TITLE> </HEAD> <BODY> <P><FONT SIZE=3D2>Hello,</FONT> <BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <FONT SIZE=3D2>I've = submitted the following to the bug tracking system,...

...spsearch" The "wspsearch" cmd-line utility allows a WSP search request to be sent to a server (such as a windows server) that has the (WSP) Windows Search Protocol service configured and enabled. For more details see the wspsearch man page. Allow 'smbcacls' to save/restore DACLs to file -------------------------------------------- 'smbcacls' has been extended to allow DACLs to be saved and restored to/from a file. This feature mimics the functionality that windows cmd line tool 'icacls.exe' provides. Additionally files created either by 'smbcalcs'...

...spsearch" The "wspsearch" cmd-line utility allows a WSP search request to be sent to a server (such as a windows server) that has the (WSP) Windows Search Protocol service configured and enabled. For more details see the wspsearch man page. Allow 'smbcacls' to save/restore DACLs to file -------------------------------------------- 'smbcacls' has been extended to allow DACLs to be saved and restored to/from a file. This feature mimics the functionality that windows cmd line tool 'icacls.exe' provides. Additionally files created either by 'smbcalcs'...

On 2023-04-11 10:12, Rowland Penny via samba wrote: > > > On 11/04/2023 13:36, Gary Dale via samba wrote: >> On 2023-04-11 04:15, Rowland Penny via samba wrote: >>> >>> >>> What 'Debian distribution-specific' installation did you follow ? >> The one linked to in AD DC wiki. > > Where abouts is this link ? > I checked here: >

adding samba list On Fri, Jan 8, 2016 at 10:22 AM, Partha Sarathi <parthasarathi.bl at gmail.com> wrote: > Hi, > > > We have a customer who facing security issues after changing RID idmap > backend to AUTORID. > > > The History of the issue looks as below, > > 1) When samba configured with RID idmap backend customer requested to > change few permissions,

Mapping between Windows DACLs and Posix user-group-other file permissions is complex, depends on externalities, and is necessarily lossy: http://www.cygwin.com/cygwin-ug-net/using-filemodes.html http://www.cygwin.com/cygwin-ug-net/ntsec.html While there's a lot of information at those links, they don't completely expl...

We've had a number of changes since the last release, and we have some other upcoming kernel changes that might require corresponding cifs-utils changes. So it's probably as good a time as any for a new release. Highlights: + fix for a minor security issue that can corrupt the mtab + new getcifsacl/setcifsacl tools that allow you to fetch and set raw Windows ACLs via an xattr. + a