search for: subdir_mod

...'mask::r-x'. This steals the 'w' flag from default:group:somedom\\domain\040users:rwx Therefore a new deleted file from another user of the group Domain Users, can't be created in the recycle share. Every try to manipulate the mask with recycle:directory_mode = 0777 and recycle:subdir_mode = 0777 has no effect. We tried different inherit settings: inherit acls = Yes inherit owner = Yes inherit permissions = Yes Samba Version: 4.9.5-git.187.71edee57d5alp151.2.6.1-SUSE-oS15.0-x86_64 smb.conf [global] security = ADS workgroup = somedom realm = somedom.NET us...

I make a recycle bin as follow: config-file = /etc/samba/recycle.conf vfs object = recycle recycle:subdir_mode = 0770 recycle:keeptree = Yes recycle:repository = Recycle Bin recycle:versions = Yes recycle:directory_mode = 0770 But testparm shows: Unknown parameter encounter: "config-file" Ignoring unknown parameter "config-file" What could be the problem and the solution? Regards, D...

...comment = Home Directories printable = no veto files = /.snapshot/.windows/.mac/.zfs/ writeable = yes browseable = yes recycle:repository = .recycle/%U recycle:keeptree = yes recycle:versions = yes recycle:touch = yes recycle:directory_mode = 0777 recycle:subdir_mode = 0700 shadow:snapdir = .zfs/snapshot shadow:sort = desc shadow:localtime = yes shadow:format = auto-%Y%m%d.%H%M-2w shadow:snapdirseverywhere = yes vfs objects = shadow_copy2 zfsacl hide dot files = yes guest ok = no nfs4:mode = special nfs4:acedup = merge...

Hello, we are using the vfs module recycle with the following config: vfs objects = recycle recycle: repository = .Papierkorb recycle:directory_mode = 0777 recycle:subdir_mode = 0777 recycle: keeptree = Yes recycle: exclude = *.tmp, *.temp, *.log, *.ldb recycle: exclude_dir = tmp recycle:versions = Yes Problem is that everybody can see deleted documents in the recycle bin. But if I set recycle:subdir_mode = 0770 then members of the group can not delete into the recy...

...CHARTEST] path = /mnt/vol0/CHARTEST printable = no veto files = /.snap/.windows/.zfs/ writeable = yes browseable = yes recycle:repository = .recycle/%U recycle:keeptree = yes recycle:versions = yes recycle:touch = yes recycle:directory_mode = 0777 recycle:subdir_mode = 0700 vfs objects = zfsacl streams_xattr aio_pthread hide dot files = yes guest ok = no nfs4:mode = special nfs4:acedup = merge nfs4:chown = yes zfsacl:acesort = dontcare [TESTME1] path = /mnt/vol0/TESTME1 printable = no veto files = /.snap/.windows/....

...I fix this problem. I had not put writing permission to the "domain users". Http://i.imgur.com/oLXS0Kn.png In the image above I show the permissions of the recycle folder. They are correct? Do I need to have these 3 entries below in my smb.conf? recycle:directory_mode = 0700 recycle:subdir_mode = 0700 recycle:inherit_nt_acl = Yes On Tue, Jun 13, 2017 at 3:23 PM, Rowland Penny <rpenny at samba.org> wrote: > On Tue, 13 Jun 2017 14:56:33 -0300 > Elias Pereira via samba <samba at lists.samba.org> wrote: > > > Hello guys, > > > > I configured the recyc...

...recycle recycle:keeptree = yes in the corresponding share sections in smb.conf on the member server. The problem is that the subdirectories created in the repository seem to receive arbitrary permissions (UNIX permissions, UNIX ACLs and NT ACLs) regardless of the recycle:directory_mode and recycle:subdir_mode settings, whereas the files which are moved to the recycle repository keep their original permissions. Ideally, also the directories in the recycle repository would keep the original permissions. Is there a way to configure the vfs_recycle module so that also the directory tree in the recycle repo...

...erit permissions = Yes guest account = guest guest ok=yes writeable = Yes # Recycle vfs objects = acl_xattr, recycle, shadow_copy2, full_audit #vfs objects = recycle, shadow_copy2 recycle:facility = LOCAL1 recycle:priority = NOTICE recycle:maxsize = 0 recycle:directory_mode = 0774 recycle:subdir_mode = 0774 recycle:keeptree = true recycle:touch = true recycle:versions = true recycle:exclude = *.tmp, *.log, *.obj, ~*.*, *.bak, *.exe, *.bin recycle:exclude_dir = tmp, temp, cache create mask = 0774 directory mask = 0774 # SHADOW COPY / SNAPSHOT shadow:mountpoint = /mnt/data/ shadow:snap...

...this list, it seems that it isn't working as excepted. Using Samba 4.4.5, compiled from sources Here is the conf for a share: [musique] path = /media/data/musique read only = No vfs objects = acl_xattr recycle recycle:directory_mode = 0770 recycle:subdir_mode = 0700 recycle:versions = Yes recycle:keeptree = Yes recycle:touch = Yes recycle:repository = .recycle full_audit:prefix = %U|%I|%S full_audit:success = connect disconnect mkdir rmdir open read write rename opendir unlink full_audit:f...

...;s no ACL: root at vdmsv1:~# getfacl /srv/work/.cestino/abarro getfacl: Removing leading '/' from absolute path names # file: srv/work/.cestino/abarro # owner: abarro # group: domain\040users user::rwx group::r-x other::r-x I've also tried to add to share definition: recycle:subdir_mode = 0700 recycle:directory_mode = 0700 (that the manpage say they are the default), but nothing changed. I've hit a bug? If i've not misconfigured something security implication of this behaviour are serious... Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Asso...

...vfs object = recycle recycle:repository = .deleted/%U recycle:keeptree = Yes recycle:touch = Yes recycle:versions = Yes recycle:maxsixe = 0 recycle:exclude = *.tmp recycle:exclude_dir = /tmp recycle:directory_mode = 0777 recycle:subdir_mode = 0777 After that I restarted SMB-Services, the clients and even the server by itself. Unfortunately, the folder '.deleted" will be created but no deleted file nor folder will be moved to that directory. The file '/usr/lib64/samba/vfs/recycle.so' exists, so the installation se...

...ath = /mnt/noontec-movies/ writeable = yes printable = no veto files = /.snap/ hide dot files = yes guest ok = yes inherit permissions = yes vfs objects = recycle recycle:repository = .recycle/%U recycle:keeptree = yes recycle:versions = yes recycle:touch = yes recycle:directory_mode = 0777 recycle:subdir_mode = 0700 [Storage] comment = 500GB FAT file storage path = /mnt/noontec/ writeable = yes printable = no veto files = /.snap/ hide dot files = yes guest ok = yes inherit permissions = yes vfs objects = recycle recycle:repository = .recycle/%U recycle:keeptree = yes recycle:versions = yes recycle:tou...

...type acl type attr Or just run : apt-get install -y acl attr Try this : chmod 1770 /srv/work/.cestino/ Which sets : "creator Owner" (1), Owner (7), Group (7), World (0) So the owner and groups can create anything but your enforcing "creator owner" Then set: recycle:subdir_mode = 1700 recycle:directory_mode = 1700 I've not fully checked it, im to buzy with my builder atm. But im sure its something like that. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Marco Gaiarin via samba &...

...ws: [Users] path = /mnt/Tank/Users printable = no veto files = /.snap/.windows/.zfs/ writeable = yes browseable = yes recycle:repository = .recycle/%U recycle:keeptree = yes recycle:versions = yes recycle:touch = yes recycle:directory_mode = 0777 recycle:subdir_mode = 0700 vfs objects = zfsacl streams_xattr aio_pthread hide dot files = yes guest ok = no nfs4:mode = special nfs4:acedup = merge nfs4:chown = yes zfsacl:acesort = dontcare Any pointers would be much appreciated.

...full_audit:success = mkdir rename unlink rmdir pwrite full_audit:failure = none full_audit:facility = local7 # full_audit:priority = DEBUG full_audit:priority = notice # Log auf Datei löschen recycle:repository = /srv/export/samba/recycle recycle:subdir_mode = 0770 recycle:directory_mode = 0770 recycle:keeptree = Yes recycle:versions = Yes recycle:touch = Yes recycle:touch_mtime = Yes recycle:maxsize = 0 syslog = yes #idmap config *:backend = tdb #idmap config *:range = 85000-86000...

...path = /home/dados/ read only = no #hide unreadable = yes #hide unwriteable files = yes ## Lixeira para o Samba ADDC recycle:keeptree = yes recycle:versions = yes recycle:touch = yes recycle:directory_mode = 0700 recycle:subdir_mode = 0700 recycle:inherit_nt_acl = Yes #acl_xattr:ignore system acls = yes recycle:repository = .recycle/%U recycle:exclude = *.tmp, *.log, *.obj, ~*.*, *.bak recycle:exclude_dir = tmp, cache, profiles Do I need to create the .recycle folder on my fileserver?...

...attributes = Yes winbind use default domain = yes winbind enum users = yes winbind enum groups = yes username map = /etc/samba/user.map Dos charset = 850 unix charset = UTF-8 interfaces = eth0 eth2 vfs objects = recycle recycle: repository = .Papierkorb/%u recycle:directory_mode = 0777 recycle:subdir_mode = 0770 recycle: keeptree = Yes recycle: exclude = *.tmp, *.temp, *.log, *.ldb recycle: exclude_dir = tmp recycle:versions = Yes /etc/samba/user.map: -------------------- !root = MYDOM\domainadmin Access as domainadmin from windows to this file server is working as expected. So, should I just...

I have a Samba AD running Samba 4.7.5. Everything was working fine, when, seemingly out of the blue, the users started to be denied access to all shares. If I try from a Windows 7 or Windows 10 machine, logged in as a user in "Domain Uses", I get: "Windows cannot access \\server-name\share_name. You do not have permission to access \\server-name\share_name" If I use

...tory = /dados/recycle/%U recycle:keeptree = Yes recycle:touch = Yes recycle:versions = Yes recycle:maxsixe = 0 recycle:exclude = *.tmp *.temp *.o *.obj ~$* *.~?? thumbs.db recycle:exclude_dir = /tmp /temp /cache /recycle /ibam/transfer recycle:subdir_mode = 0700 printer name = impsuporte ############ Map usu?rio Sistema Unix/Windows ############ username map = /etc/samba/smbusers ############ LOGS ######################## os level = 33 debug level = 2 max log size = 8000 log file = /var/log/samba/%U_%m.log ###########...

...DIRECTORIES|VERSION|TOUCH > recycle:noversions = *.tmp|*.temp|*.dat|*.ini > recycle:exclude = > *.tmp|*.temp|*.o|*.obj|~$*|*.??|*.log|*.trace|*.TMP|*.ASV|*.$$$|*.asv > recycle:touch_mtime = yes > recycle:touch = Yes > recycle:keeptree = Yes > recycle:versions = Yes > recycle:subdir_mode = 0700 > recycle:directory_mode = 0770 > recycle:maxsize = 0 > recycle:minsize = 0 > recycle:repository = .recycle > > > [profiles] > browseable = No > comment = Network Profiles Share > create mask = 0644 > force create mode = 0660 > force directory mode = 07...