search for: security_ac

...owner_sid : * owner_sid : S-1-5-21-801203796-115225906-466470621-512 group_sid : * group_sid : S-1-5-21-801203796-115225906-466470621-512 sacl : * sacl: struct security_acl revision : SECURITY_ACL_REVISION_ADS (4) size : 0x0078 (120) num_aces : 0x00000002 (2) aces: ARRAY(2) aces: struct security_ace type...

I've been been trying to investigate this for sometime now, hence I came to the experts :) I have rejoined all my DC's with new names, see below. ;; ANSWER SECTION: <domain>.corp. 3600 IN NS psad101zatcrh.<domain>.corp. -> New rebuild, new hostname, RHEL6 to RHEL7 upgrade <domain>.corp. 3600 IN NS prdc001zafsrh.<domain>.corp. -> New

...INHERITED 1: SEC_DESC_DACL_PROTECTED 0: SEC_DESC_SACL_PROTECTED 0: SEC_DESC_RM_CONTROL_VALID 1: SEC_DESC_SELF_RELATIVE owner_sid: * owner_sid: S-1-5-21-940051827-2291820289-3341758437-512 group_sid: * group_sid: S-1-5-21-940051827-2291820289-3341758437-512 sacl: NULL dacl: * dacl: struct security_acl revision: SECURITY_ACL_REVISION_ADS (4) size: 0x00c4 (196) num_aces: 0x00000007 (7) aces: ARRAY(7) aces: struct security_ace type: SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags: 0x03 (3) 1: SEC_ACE_FLAG_OBJECT_INHERIT 1: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC...

...???????????owner_sid ???????????????: S-1-22-1-1000 > ???????group_sid ???????????????: * > ???????????group_sid ???????????????: > S-1-5-21-337654209-2357861877-656557748-512 > ???????sacl ????????????????????: NULL > ???????dacl ????????????????????: * > ???????????dacl: struct security_acl > ???????????????revision ????????????????: SECURITY_ACL_REVISION_NT4 (2) > ???????????????size ????????????????????: 0x0098 (152) > ???????????????num_aces ????????????????: 0x00000006 (6) > ???????????????aces: ARRAY(6) > ???????????????????aces: struct security_ace > ?????????...

On 11/04/2023 13:36, Gary Dale via samba wrote: > On 2023-04-11 04:15, Rowland Penny via samba wrote: >> >> >> What 'Debian distribution-specific' installation did you follow ? > The one linked to in AD DC wiki. Where abouts is this link ? I checked here: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller But couldn't

Maybe I'm doing somthing really stupid, but while copying some windows share onto a samba server, on some random subdirectory robocopy says ERROR 87 (0x00000057) Copying NTFS Security to Destination Directory... The samba logfile has lots of these lines. modules/vfs_posixacl.c:349(smb_acl_to_posix) smb_acl_to_posix: ACL is invalid for set (Das Argument ist ung?ltig) The strange thing is

...: * > owner_sid : S-1-22-1-65534 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x017c (380) > num_aces : 0x00000010 (16) > aces: ARRAY(16) > aces: struct security_a...

...: S-1-22-1-65534 >>> group_sid : * >>> group_sid : S-1-22-2-65534 >>> sacl : NULL >>> dacl : * >>> dacl: struct security_acl >>> revision : SECURITY_ACL_REVISION_NT4 >>> (2) >>> size : 0x017c (380) >>> num_aces : 0x00000010 (16) >>> aces: ARRAY(16) &...

...owner_sid : S-1-22-1-65534 >> group_sid : * >> group_sid : S-1-22-2-65534 >> sacl : NULL >> dacl : * >> dacl: struct security_acl >> revision : SECURITY_ACL_REVISION_NT4 (2) >> size : 0x017c (380) >> num_aces : 0x00000010 (16) >> aces: ARRAY(16) >>...

...-65534 > group_sid : * > group_sid : S-1-22-2-65534 > sacl : NULL > dacl : * > dacl: struct security_acl > revision : > SECURITY_ACL_REVISION_NT4 (2) > size : 0x017c (380) > num_aces : 0x00000010 (16) >...

...n NT_STATUS_OK; > } > > +static NTSTATUS make_default_acl_windows(TALLOC_CTX *ctx, > + const char *name, > + SMB_STRUCT_STAT *psbuf, > + struct security_descriptor **ppdesc) > +{ > + struct dom_sid owner_sid, group_sid; > + size_t size = 0; > + struct security_ace aces[4]; > + uint32_t access_mask = 0; > + mode_t mode = psbuf->st_ex_mode; > + struct security_acl *new_dacl = NULL; > + int idx = 0; > + > + DBG_DEBUG("file [%s] mode [0%o]\n", name, (int)mode); > + > + uid_to_sid(&owner_sid, psbuf->st_ex_uid); > +...

On Fri, Aug 26, 2016 at 06:33:26PM +0200, Ralph Böhme via samba wrote: > On Thu, Aug 25, 2016 at 12:14:00PM -0700, Jeremy Allison wrote: > > On Wed, Aug 24, 2016 at 04:06:42PM +0200, Ralph Böhme via samba wrote: > > > > > > Yeah, as much as I'd like to avoid adding a new option, I guess we > > > have to do something about it, my latest take on this is >

...const char *name, > + SMB_STRUCT_STAT *psbuf, > + struct security_descriptor **ppdesc) > { > struct dom_sid owner_sid, group_sid; > size_t size = 0; > @@ -400,8 +413,7 @@ static NTSTATUS make_default_filesystem_acl(TALLOC_CTX *ctx, > struct security_acl *new_dacl = NULL; > int idx = 0; > > - DEBUG(10,("make_default_filesystem_acl: file %s mode = 0%o\n", > - name, (int)mode )); > + DBG_DEBUG("file %s mode = 0%o\n",name, (int)mode); > > uid_to_sid(&owner_sid, psbuf->st_ex_uid); > gid_to_...

On Fri, Aug 26, 2016 at 04:03:49PM -0700, Jeremy Allison wrote: > On Fri, Aug 26, 2016 at 02:46:19PM -0700, Jeremy Allison via samba wrote: > > On Fri, Aug 26, 2016 at 06:44:05PM +0200, Ralph Böhme wrote: > > > > > > Cheerio! > > > -slow > > > > Still reviewing this - but a few things that will need changing: > > > > When adding the