search for: sec_ace_flag_inherited_ace

...0x5a (90) 0: SEC_ACE_FLAG_OBJECT_INHERIT 1: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 1: SEC_ACE_FLAG_INHERIT_ONLY 1: SEC_ACE_FLAG_INHERITED_ACE 0x0a: SEC_ACE_FLAG_VALID_INHERIT (10) 1: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size : 0x0038 (56) access_mask...

I've been been trying to investigate this for sometime now, hence I came to the experts :) I have rejoined all my DC's with new names, see below. ;; ANSWER SECTION: <domain>.corp. 3600 IN NS psad101zatcrh.<domain>.corp. -> New rebuild, new hostname, RHEL6 to RHEL7 upgrade <domain>.corp. 3600 IN NS prdc001zafsrh.<domain>.corp. -> New

...EVISION_ADS (4) size: 0x00c4 (196) num_aces: 0x00000007 (7) aces: ARRAY(7) aces: struct security_ace type: SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags: 0x03 (3) 1: SEC_ACE_FLAG_OBJECT_INHERIT 1: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0x03: SEC_ACE_FLAG_VALID_INHERIT (3) 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0: SEC_ACE_FLAG_FAILED_ACCESS size: 0x0024 (36) access_mask: 0x001f01ff (2032127) object: union security_ace_object_ctr(case 0) trustee: S-1-5-21-940051827-2291820289-3341758437-512 aces: struct security_ace type: SEC_A...

...??????????????????????????1: SEC_ACE_FLAG_OBJECT_INHERIT > ??????????????????????????????1: SEC_ACE_FLAG_CONTAINER_INHERIT > ??????????????????????????????0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > ??????????????????????????????0: SEC_ACE_FLAG_INHERIT_ONLY > ??????????????????????????????0: SEC_ACE_FLAG_INHERITED_ACE > ???????????????????????????0x03: SEC_ACE_FLAG_VALID_INHERIT (3) > ??????????????????????????????0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > ??????????????????????????????0: SEC_ACE_FLAG_FAILED_ACCESS > ???????????????????????size ????????????????????: 0x0014 (20) > ???????????????????????a...

On 11/04/2023 13:36, Gary Dale via samba wrote: > On 2023-04-11 04:15, Rowland Penny via samba wrote: >> >> >> What 'Debian distribution-specific' installation did you follow ? > The one linked to in AD DC wiki. Where abouts is this link ? I checked here: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller But couldn't

Maybe I'm doing somthing really stupid, but while copying some windows share onto a samba server, on some random subdirectory robocopy says ERROR 87 (0x00000057) Copying NTFS Security to Destination Directory... The samba logfile has lots of these lines. modules/vfs_posixacl.c:349(smb_acl_to_posix) smb_acl_to_posix: ACL is invalid for set (Das Argument ist ung?ltig) The strange thing is

...ALLOWED/OI|CI|IO/RWXDPO ACL:Everyone:ALLOWED/OI|CI/RWXDPO admin at BizNAS-H5:/mnt/lvol0$ Note that the ACE entries are in the same order, however in the first case where Windows reports incorrectly ordered ACE's Creator Owner, Creator Group and Everyone ACE's include the "I" flag SEC_ACE_FLAG_INHERITED_ACE The share folder, rootfolder and subfolder1 permissions are as shown below (steps 1 through 3) smbcacls //localhost/20120821_3 rootfolder/.. REVISION:1 CONTROL:0x8004 OWNER:BIZNAS-H5\nobody GROUP:Unix Group\root ACL:BIZNAS-H5\nobody:ALLOWED/0x0/FULL ACL:Unix Group\%naslocal%:ALLOWED/0x0/FULL ACL:...

...1: SEC_ACE_FLAG_OBJECT_INHERIT > 1: SEC_ACE_FLAG_CONTAINER_INHERIT > 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: SEC_ACE_FLAG_INHERITED_ACE > 0x03: SEC_ACE_FLAG_VALID_INHERIT (3) > 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS > > > TO workaround this issue we went back to RID based idmap backend and now > for some users are not able to login itself and they get the b...

..._INHERIT >>> 1: SEC_ACE_FLAG_CONTAINER_INHERIT >>> 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT >>> 0: SEC_ACE_FLAG_INHERIT_ONLY >>> 0: SEC_ACE_FLAG_INHERITED_ACE >>> 0x03: SEC_ACE_FLAG_VALID_INHERIT (3) >>> 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS >>> >>> >>> TO workaround this issue we went back to RID based idmap backend and now >>> for some use...

..._ACE_FLAG_OBJECT_INHERIT >> 1: SEC_ACE_FLAG_CONTAINER_INHERIT >> 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT >> 0: SEC_ACE_FLAG_INHERIT_ONLY >> 0: SEC_ACE_FLAG_INHERITED_ACE >> 0x03: SEC_ACE_FLAG_VALID_INHERIT (3) >> 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS >> >> >> TO workaround this issue we went back to RID based idmap backend and now >> for some users are not able to login...

...SEC_ACE_FLAG_CONTAINER_INHERIT > 0: > SEC_ACE_FLAG_NO_PROPAGATE_INHERIT > 0: SEC_ACE_FLAG_INHERIT_ONLY > 0: > SEC_ACE_FLAG_INHERITED_ACE > 0x03: > SEC_ACE_FLAG_VALID_INHERIT (3) > 0: > SEC_ACE_FLAG_SUCCESSFUL_ACCESS > > > TO workaround this issue we went back to RID based idmap >...