search for: setfacl

> Jul 22 14:39:39 dc1 named[27846]: samba_dlz: Failed to connect to > /var/lib/samba/private/dns/sam.ldb The good news is I believe I've found the problem: RUNNING: # file: samba/private # owner: root # group: root user::rwx group::r-x group:bind:r-x mask::r-x other::--- RESTORE: # file: samba/private # owner: root # group: root user::rwx group::r-x other::--- The bad news is

I just tried that and I got the same error. I think there is some extended acl support that I'm missing somewhere. It's like the setfacl command is not recognizing the AD groups as valid groups. I should also add the following information: This server is built up on CentOS 6.6 Minimal using the Sernet-Samba Enterprise packages. It looks like the binary that is running is /usr/sbin/samba and that is started with /etc/rc.d/init....

...r2: Employee1 Group: Project1 User3: Employee2 Group: Project2 Scenario: Director can move/rename/exclude folder from FOLDER... User1 can only access/read and execute files inside PROJECT1 and read PROJECT2 User2 can only access/read and execute files inside PROJECT2 and read PROJECT1 Can I use setfacl to solve this problem? Does anyone knows some good website with instructions and eg. Of usage? Thank you and sorry for my bad english!

...Users" group. That is the reason for the \ in > front of the space. It's translated as a literal. I think I could also > put quotes around it and not have to use the \ and the space. > > The problem is getent group only is listing local unix groups. I think > that is why setfacl is not able to add active directory groups to the > acl. That may be your problem, 'getent group' will not show any domain group, but 'getent group <a domain group>' should show the domain group. If you are running samba4 in AD mode, then you are running winbind, though...

...quot; group. That is the reason for the \ >in >front of the space. It's translated as a literal. I think I could >also >put quotes around it and not have to use the \ and the space. > >The problem is getent group only is listing local unix groups. I think >that is why setfacl is not able to add active directory groups to the >acl. > >Rich. > >-----Original Message----- >From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] >Sent: Friday, December 19, 2014 12:15 AM >To: Rich Webb >Subject: Re: [Samba] setfacl: Option -m: Invalid argu...

Hi all from last few days i got struct in problem.when i try to use setfacl command "setfacl -m u:himmat:r-- /ide2/asd" i get the error setfacl : /ide2/asd : operation not supported i also has mounted acl using -: "mount -f -o remount,acl / " Note: -f option is for force i am using red hat kernel 2.4.20-8 and acl-2.2.3-1 One more thing i have t...

...on the "Domain Users" group? Greetz, Louis >-----Oorspronkelijk bericht----- >Van: rwebb at zylatech.com [mailto:samba-bounces at lists.samba.org] >Namens Rich Webb >Verzonden: vrijdag 19 december 2014 14:40 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] setfacl: Option -m: Invalid argument >near character 3 > >Running CentOS 6.6 >Using the Sernet Enterprise packages - sernet-samba-ad. > >Just tried: > >getent group "Domain Users" >getent group DOMAIN\\Domain\ Users > >and neither command returned any entries...

...les path = /home/shares/shared I tried following the howto for setting ACLs from windows by managing the dc from a windows PC using computr management. I get an access denied error when trying to apply permissions. I tried setting the permissions from the command line using: setfacl -R -m g:MYDOM\\domain\ users:rwx ./shared and it gives me: setfacl: Option -m: Invalid argument near character 3 I've spent hours googling trying to find some indication as to what is going on but I can't seem to figure out what is happening. My filesystem is mounted with...

...nd returned any entries. > > Rich > > -----Original Message----- > From: samba-bounces at lists.samba.org > [mailto:samba-bounces at lists.samba.org] On Behalf Of Rowland Penny > Sent: Friday, December 19, 2014 8:37 AM > To: samba at lists.samba.org > Subject: Re: [Samba] setfacl: Option -m: Invalid argument near character > 3 > > On 19/12/14 13:22, Rich Webb wrote: >> Matt, >> >> Thanks for the reply. I'm not trying to add the "users" group. I'm >> trying to add the "Domain Users" group. That is the reason for...

...add the "Domain Users" group. That is the reason for the \ in front of the space. It's translated as a literal. I think I could also put quotes around it and not have to use the \ and the space. The problem is getent group only is listing local unix groups. I think that is why setfacl is not able to add active directory groups to the acl. Rich. -----Original Message----- From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] Sent: Friday, December 19, 2014 12:15 AM To: Rich Webb Subject: Re: [Samba] setfacl: Option -m: Invalid argument near character 3 Hello Rich,...

Hi all, I have "FreeBSD 7.0-CURRENT #1: Wed Jul 25" authenticating successfully against active directory via samba's winbindd(8). I need to manage samba shares via FreeBSD ACLs and CIFS ACLs. From my reading of setfacl(1) I should be able to set group permissions using the syntax of DOMAIN\group-name. For example: #setfacl -d -m g:"MYDOMAIN\mygroupname":rwx test However, when I do this on FreeBSD -CURRENT I get the following error: #setfacl -d -m g:"MYDOMAIN\mygroupname":rwx test...

...one can help. > > Thanks, > Rich > > -----Original Message----- > From: samba-bounces at lists.samba.org > [mailto:samba-bounces at lists.samba.org] On Behalf Of Rich Webb > Sent: Thursday, December 18, 2014 6:29 PM > To: samba at lists.samba.org > Subject: Re: [Samba] setfacl: Option -m: Invalid argument near character > 3 > > I just tried that and I got the same error. I think there is some > extended acl support that I'm missing somewhere. > > It's like the setfacl command is not recognizing the AD groups as valid > groups. > > I sh...

...p DOMAIN\\Domain\ Users and neither command returned any entries. Rich -----Original Message----- From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] On Behalf Of Rowland Penny Sent: Friday, December 19, 2014 8:37 AM To: samba at lists.samba.org Subject: Re: [Samba] setfacl: Option -m: Invalid argument near character 3 On 19/12/14 13:22, Rich Webb wrote: > Matt, > > Thanks for the reply. I'm not trying to add the "users" group. I'm > trying to add the "Domain Users" group. That is the reason for the \ > in front of the...

On btrfs, do the following ------------------ # su user1 # cd btrfs-part/ # touch aaa # getfacl aaa # file: aaa # owner: user1 # group: user1 user::rw- group::rw- other::r-- # su user2 # cd btrfs-part/ # setfacl -m u::rwx aaa # getfacl aaa # file: aaa # owner: user1 # group: user1 user::rwx <- successed to setfacl group::rw- other::r-- ------------------ but we should prohibit it that user2 changing user1''s acl. In fact, on ext3 and other fs, a message occurs: setfacl: a...

Hi I'm currently using Samba 3.0.4 with LDAP as a PDC. The PDC is in a trusted relationship (both ways) with a Windows NT4 server. I tried updating to 3.0.7 a short while back but had problems using 'setfacl' to set permissions for users on the trusted domain - i.e. > setfacl -m u:remote-dom+jbloggs:r-x . setfacl: Option -m: Invalid argument near character 3 Setting permissions for users on the local domain worked OK. When using 3.0.4, setfacl works OK for users on both domains. Yesterday,...

...was trying sss but it was ONLY "files" to start with. Rich -----Original Message----- From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] On Behalf Of L.P.H. van Belle Sent: Friday, December 19, 2014 8:53 AM To: samba at lists.samba.org Subject: Re: [Samba] setfacl: Option -m: Invalid argument near character 3 Im did not follow the complete thread, but you can check the following. smb.conf ## map id's outside to domain to tdb files. idmap config *:backend = tdb idmap config *:range = 50001-80000 ## map ids from the domain the range may no...

...>FS be a FS which is doable since I'm running a vmware platform. > >Rich > > >________________________________ > >From: Tim [mailto:rintimtim at gmx.net] >Sent: Friday, December 19, 2014 5:38 PM >To: Rich Webb; samba at lists.samba.org >Subject: Re: [Samba] setfacl: Option -m: Invalid argument near >character >3 > > >Sorry, ignore me. I didn't read the rest... > > >Am 19. Dezember 2014 23:29:54 MEZ, schrieb Tim <rintimtim at gmx.net>: > > What's the content of your /etc/nsswitch.conf? > > Am 19. Dezember 201...

...S 7. The setgid no longer works > like it did before, so now we create our shares like this following > the instructions from the wiki. > > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_POSIX_ACLs > > > # chmod 700 /u01/test > # chown root:root /u01/test > # setfacl -m group::--- /u01/test > # setfacl -m default:group::--- /u01/test > # setfacl -m other::--- /u01/test > # setfacl -m default:other::--- /u01/test > # setfacl -m group:unixadmins:rwx /u01/test > # setfacl -m default:group:unixadmins:rwx /u01/test > > > smb.conf > >  [...

...NACOMMAND robert | > > > [root at s1 abc]# getfacl /abc > # file: abc > # owner: root > # group: root > user::rwx > user:user01:--- > user:user02:--- > user:user03:--- > ... > user:user25:--- > group::r-x > mask::r-x > other::r-x > [root at s1 abc]# setfacl -m u:user30:rwx /abc > setfacl: .: Argument list too long > [root at s1 abc]# > > > > > Thanks and best regards, > muiz > _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/cento...

...ution tomorrow - kind of in a bind.. I hope someone can help. Thanks, Rich -----Original Message----- From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] On Behalf Of Rich Webb Sent: Thursday, December 18, 2014 6:29 PM To: samba at lists.samba.org Subject: Re: [Samba] setfacl: Option -m: Invalid argument near character 3 I just tried that and I got the same error. I think there is some extended acl support that I'm missing somewhere. It's like the setfacl command is not recognizing the AD groups as valid groups. I should also add the following information...