search for: smb_acl_group

The user ftp is present in /etc/passwd. I use CentOS 6 x86_64. Here is 'CN=fpt,CN=Users,DC=cogesys,DC=com' cn: fpt sn: POUGNAULT givenName: Fr‚d‚ric distinguishedName: CN=fpt,CN=Users,DC=cogesys,DC=com instanceType: 4 whenCreated: 10/26/2011 13:32:54 whenChanged: 10/26/2011 13:33:03 displayName: Fr‚d‚ric POUGNAULT uSNCreated: 25902109 memberOf:

...REDGROUP, I have no user with this uid in the domain. I don't understand why I have a fpt group, there is no fpt group in the domain.   When I activated the log acl:10 in smb.conf I saw this line :   canon_ace index 2. Type = allow SID = S-1-5-21-175208659-1627204559-885930912-7022 gid 67022 SMB_ACL_GROUP ace_flags = 0x0 perms r-x canon_ace index 5. Type = allow SID = S-1-5-21-175208659-1627204559-885930912-7022 uid 67022 SMB_ACL_USER ace_flags = 0x3 perms r-x   Its seems samba didn't do difference between users and groups when he sets acl right on the directory.

...nData: 01/01/1601 00:00:01 ADsPath: LDAP://godc6.cogesys.com/CN=FREDGROUP,CN=Users,DC=cogesys,DC=com e : samba [mailto:samba-bounces at lists.samba.org] De la part de Rowland Penny via samba Envoyé : mardi 13 juin 2017 16:48 À : samba at lists.samba.org Cc : Frédéric POUGNAULT Objet : Re: [Samba] SMB_ACL_GROUP SMB_ACL_USER On Tue, 13 Jun 2017 15:17:47 +0200 Frédéric POUGNAULT via samba <samba at lists.samba.org> wrote: > I installed a samba server v 4.6.6, Where did you get 4.6.6 from ? The latest stable release is 4.6.5 > > I use samba in classic mode (in /etc/default/sernet-samba)....

...31:10, 10] smbd/posix_acls.c:canonicalise_acl(2218) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --- [2007/04/02 17:31:10, 10] smbd/posix_acls.c:canonicalise_acl(2218) canon_ace index 1. Type = allow SID = S-1-5-21-2852544288-689542784-3650984603-3025 gid 1012 (ensur) SMB_ACL_GROUP perms rwx [2007/04/02 17:31:10, 10] smbd/posix_acls.c:canonicalise_acl(2218) canon_ace index 2. Type = allow SID = S-1-22-2-0 gid 0 (0) SMB_ACL_GROUP perms rwx I could see in the source of smbldap.c the 'offending line' but it didn't help this much since the only way I could devise t...

...rom cache 10003 -> S-1-5-21-365335231-1557355366-1421764157-1119 [2007/10/30 14:16:53, 10] smbd/posix_acls.c:create_canon_ace_lists(1505) create_canon_ace_lists: adding file ACL: canon_ace index 0. Type = allow SID = S-1-5-21-365335231-1557355366-1421764157-1119 gid 10003 (W2K3TEST+areaders) SMB_ACL_GROUP perms r-x [2007/10/30 14:16:53, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1015) fetch gid from cache 10006 -> S-1-5-21-365335231-1557355366-1421764157-513 [2007/10/30 14:16:53, 3] passdb/lookup_sid.c:fetch_gid_from_cache(1015) fetch gid from cache 10006 -> S-1-5-21-365335231-1557355366-...

...================================================================== Release Announcements ===================== This is is the latest stable release of Samba 3.6. Major enhancements in Samba 3.6.9 include: o When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries (bug #9236). o Winbind can't fetch user or group info from AD via LDAP (bug #9147). o Fix segfault in smbd if user specified ports out for range (bug #9218). Changes since 3.6.8: -------------------- o Michael Adam <obnox at samba.org> * BUG 9173: Make SMB2 compound req...

...================================================================== Release Announcements ===================== This is is the latest stable release of Samba 3.6. Major enhancements in Samba 3.6.9 include: o When setting a non-default ACL, don't forget to apply masks to SMB_ACL_USER and SMB_ACL_GROUP entries (bug #9236). o Winbind can't fetch user or group info from AD via LDAP (bug #9147). o Fix segfault in smbd if user specified ports out for range (bug #9218). Changes since 3.6.8: -------------------- o Michael Adam <obnox at samba.org> * BUG 9173: Make SMB2 compound req...

...27 16:16:53.079128, 10] smbd/posix_acls.c:2618(canonicalise_acl) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- [2011/01/27 16:16:53.079144, 10] smbd/posix_acls.c:2618(canonicalise_acl) canon_ace index 1. Type = allow SID = S-1-2-0 gid 1004 (COMPANY) SMB_ACL_GROUP ace_flags = 0x0 perms rwx <= HERE APPEARS [2011/01/27 16:16:53.079164, 10] smbd/posix_acls.c:2618(canonicalise_acl) canon_ace index 2. Type = allow SID = S-1-3-1 gid 0 (root) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms --- [2011/01/27 16:16:53.079182, 10] smbd/posix_acl...

...ogs I can see that the ACL -> UNIX convertion seems fine: gid_to_sid: local 100 -> S-1-22-2-100 canonicalise_acl: Access ace entries before arrange : canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --- canon_ace index 1. Type = allow SID = S-1-22-2-100 gid 100 (users) SMB_ACL_GROUP perms rw- canon_ace index 2. Type = allow SID = S-1-22-2-1001 gid 1001 (grupo2) SMB_ACL_GROUP_OBJ perms r-x canon_ace index 3. Type = allow SID = S-1-5-21-822431398-922470320-1179183166-1666 uid 1666 (user2) SMB_ACL_USER_OBJ perms rwx print_canon_ace_list: canonicalise_acl: ace entries after arrang...

Problem is apparently with locking issues, disabled oplocks in the [general] section, and the problem actually got worse... Here's what happens: User-A part of group1, opens Excel file off of share, saves, exits... User-B (or even User-A for that matter) tries to re-open same file, get error stating it's locked and can only open for read-only access... Both users in the same group, and

...D error, with the following log entries: (set_canon_ace_list) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms rwx [2012/07/03 17:19:29.724227, 10] smbd/posix_acls.c:2757(set_canon_ace_list) canon_ace index 1. Type = allow SID = S-1-5-18 gid 10021 (10021) SMB_ACL_GROUP ace_flags = 0x0 perms rwx [2012/07/03 17:19:29.724417, 10] smbd/posix_acls.c:2757(set_canon_ace_list) canon_ace index 2. Type = allow SID = S-1-5-21-1177087545-3838858134-2882343936-1294 uid 10002 (neosphere-admin) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx [2012/07/03 17:19:29.724755, 10] smbd/p...