search for: security_ace

...: * sacl: struct security_acl revision : SECURITY_ACL_REVISION_ADS (4) size : 0x0078 (120) num_aces : 0x00000002 (2) aces: ARRAY(2) aces: struct security_ace type : SEC_ACE_TYPE_SYSTEM_AUDIT_OBJECT (7) flags : 0x5a (90) 0: SEC_ACE_FLAG_OBJECT_INHERIT 1: SEC_ACE_FLAG_CONTAINER_INHERIT...

I've been been trying to investigate this for sometime now, hence I came to the experts :) I have rejoined all my DC's with new names, see below. ;; ANSWER SECTION: <domain>.corp. 3600 IN NS psad101zatcrh.<domain>.corp. -> New rebuild, new hostname, RHEL6 to RHEL7 upgrade <domain>.corp. 3600 IN NS prdc001zafsrh.<domain>.corp. -> New

...sid: * owner_sid: S-1-5-21-940051827-2291820289-3341758437-512 group_sid: * group_sid: S-1-5-21-940051827-2291820289-3341758437-512 sacl: NULL dacl: * dacl: struct security_acl revision: SECURITY_ACL_REVISION_ADS (4) size: 0x00c4 (196) num_aces: 0x00000007 (7) aces: ARRAY(7) aces: struct security_ace type: SEC_ACE_TYPE_ACCESS_ALLOWED (0) flags: 0x03 (3) 1: SEC_ACE_FLAG_OBJECT_INHERIT 1: SEC_ACE_FLAG_CONTAINER_INHERIT 0: SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0: SEC_ACE_FLAG_INHERIT_ONLY 0: SEC_ACE_FLAG_INHERITED_ACE 0x03: SEC_ACE_FLAG_VALID_INHERIT (3) 0: SEC_ACE_FLAG_SUCCESSFUL_ACCESS 0:...

...???dacl: struct security_acl > ???????????????revision ????????????????: SECURITY_ACL_REVISION_NT4 (2) > ???????????????size ????????????????????: 0x0098 (152) > ???????????????num_aces ????????????????: 0x00000006 (6) > ???????????????aces: ARRAY(6) > ???????????????????aces: struct security_ace > ???????????????????????type ????????????????????: > SEC_ACE_TYPE_ACCESS_ALLOWED (0) > ???????????????????????flags ???????????????????: 0x03 (3) > ??????????????????????????????1: SEC_ACE_FLAG_OBJECT_INHERIT > ??????????????????????????????1: SEC_ACE_FLAG_CONTAINER_INHERIT > ??...

On 11/04/2023 13:36, Gary Dale via samba wrote: > On 2023-04-11 04:15, Rowland Penny via samba wrote: >> >> >> What 'Debian distribution-specific' installation did you follow ? > The one linked to in AD DC wiki. Where abouts is this link ? I checked here: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller But couldn't

Maybe I'm doing somthing really stupid, but while copying some windows share onto a samba server, on some random subdirectory robocopy says ERROR 87 (0x00000057) Copying NTFS Security to Destination Directory... The samba logfile has lots of these lines. modules/vfs_posixacl.c:349(smb_acl_to_posix) smb_acl_to_posix: ACL is invalid for set (Das Argument ist ung?ltig) The strange thing is

...ecurity_acl > revision : SECURITY_ACL_REVISION_NT4 (2) > size : 0x017c (380) > num_aces : 0x00000010 (16) > aces: ARRAY(16) > aces: struct security_ace > type : > SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x03 (3) > 1: SEC_ACE_FLAG_OBJECT_INHERIT > 1: SEC_ACE_FLAG_CONTAINER_INHE...

...: SECURITY_ACL_REVISION_NT4 >>> (2) >>> size : 0x017c (380) >>> num_aces : 0x00000010 (16) >>> aces: ARRAY(16) >>> aces: struct security_ace >>> type : >>> SEC_ACE_TYPE_ACCESS_ALLOWED (0) >>> flags : 0x03 (3) >>> 1: SEC_ACE_FLAG_OBJECT_INHERIT >>>...

...revision : SECURITY_ACL_REVISION_NT4 (2) >> size : 0x017c (380) >> num_aces : 0x00000010 (16) >> aces: ARRAY(16) >> aces: struct security_ace >> type : >> SEC_ACE_TYPE_ACCESS_ALLOWED (0) >> flags : 0x03 (3) >> 1: SEC_ACE_FLAG_OBJECT_INHERIT >> 1: SEC...

...SECURITY_ACL_REVISION_NT4 (2) > size : 0x017c (380) > num_aces : 0x00000010 (16) > aces: ARRAY(16) > aces: struct security_ace > type : > SEC_ACE_TYPE_ACCESS_ALLOWED (0) > flags : 0x03 (3) > 1: > SEC_ACE_FLAG_OBJECT_INHERIT...

...n NT_STATUS_OK; > } > > +static NTSTATUS make_default_acl_windows(TALLOC_CTX *ctx, > + const char *name, > + SMB_STRUCT_STAT *psbuf, > + struct security_descriptor **ppdesc) > +{ > + struct dom_sid owner_sid, group_sid; > + size_t size = 0; > + struct security_ace aces[4]; > + uint32_t access_mask = 0; > + mode_t mode = psbuf->st_ex_mode; > + struct security_acl *new_dacl = NULL; > + int idx = 0; > + > + DBG_DEBUG("file [%s] mode [0%o]\n", name, (int)mode); > + > + uid_to_sid(&owner_sid, psbuf->st_ex_uid); > + g...

On Fri, Aug 26, 2016 at 06:33:26PM +0200, Ralph Böhme via samba wrote: > On Thu, Aug 25, 2016 at 12:14:00PM -0700, Jeremy Allison wrote: > > On Wed, Aug 24, 2016 at 04:06:42PM +0200, Ralph Böhme via samba wrote: > > > > > > Yeah, as much as I'd like to avoid adding a new option, I guess we > > > have to do something about it, my latest take on this is >

...n NT_STATUS_OK; > } > > +static NTSTATUS make_default_acl_windows(TALLOC_CTX *ctx, > + const char *name, > + SMB_STRUCT_STAT *psbuf, > + struct security_descriptor **ppdesc) > +{ > + struct dom_sid owner_sid, group_sid; > + size_t size = 0; > + struct security_ace aces[4]; > + uint32_t access_mask = 0; > + mode_t mode = psbuf->st_ex_mode; > + struct security_acl *new_dacl = NULL; > + int idx = 0; > + > + DBG_DEBUG("file [%s] mode [0%o]\n", name, (int)mode); > + > + uid_to_sid(&owner_sid, psbuf->st_ex_uid); > + g...

On Fri, Aug 26, 2016 at 04:03:49PM -0700, Jeremy Allison wrote: > On Fri, Aug 26, 2016 at 02:46:19PM -0700, Jeremy Allison via samba wrote: > > On Fri, Aug 26, 2016 at 06:44:05PM +0200, Ralph Böhme wrote: > > > > > > Cheerio! > > > -slow > > > > Still reviewing this - but a few things that will need changing: > > > > When adding the