search for: systemacl

Hello, im trying to setup a share using windows acls. I followed the step ins https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs but hanging at "Adding a Share" # mkdir -p /srv/samba/Demo/ # chown root:"Domain Admins" /srv/samba/Demo/ *--> chown: ungültige Gruppe: »root:Domain Admins“* # net rpc rights list privileges SeDiskOperatorPrivilege -U

...ix group. I agree on this one. > No, because if Domain Admins is a Unix group, it cannot own GPOs in > sysvol and Domain Admins needs to own GPOs as a user. On a Samba DC, > Domain Admins is mapped to 'ID_TYPE_BOTH' and can own GPOs as a user. Not totaly.. Imo. Just set ignore systemacls on sysvol and you dont have any trouble with setting a gid on "domain admins" or domain guest, domain users, domain computers. This is why i have Sysvol, users, profiles and deploy shares, all set with ignore systemacl. All just due to the better matching for windows, and think mostly i...

ok, do the following. set ignore systemacl to yes on sysvol and netlogon. login as dom\administrator computer manager, connect to dc. share sysvol, goto share security, reset to defalts. same for folder. goto gpo manager, klik on every gpo object, if one has wrong acl, you get a message to reset it, thats ok. now never samba-tool sysvol...

...relax it a bit, but i dont recommend that. Your ready for the next step ;-) And a tip ahead. Settings like this apply to \\server\ ( users-home) | profiles | print$ for example. The why?, because this these shares might needs some extra windows love ;-) On these shares i apply the ignore systemacls to mimic the windows rights as close as possible. Reason for that is simple, less problems, but this doe depend on how you use the network. Test what applies best for you, but these shares where "normaly" only windows connect to. I set the ignore systemacl's. Try it and test it....

now, im on a phone and no browser, so limit help. first thing i see.   CN=Bj”rn <User>,CN=Users,DC=rootrudi,DC=de Bj”rn ?  is your system set to utf8? i dont know, but this does not look right. i see, wifi? yes, try utp. langsame Verbindung:500 kbps and do try the ignore systemacl.  that solves the user/group “nt authority\system” problems the easy way. greetz Louis Op 6 feb. 2018 om 20:27 heeft Micha Ballmann via samba <samba at lists.samba.org> het volgende geschreven: Thanks for help, this is a new domain controller without any modifcations, except one GPO. I...

...ites rights missing. > People test this and the computer$ can access the GPO.ini without problems, so why the event log. > Because of "SYSTEM" or an other user that is haveing user/group/SID problems with linux acls. > > I hope i explained good enough why i use and set ignore systemacl. > > > Greetz, > > Louis > > > > > > > > > > > > > > > > > > > > >> -----Oorspronkelijk bericht----- >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens >> Robert Marcan...

...with read and/or writes rights missing. People test this and the computer$ can access the GPO.ini without problems, so why the event log. Because of "SYSTEM" or an other user that is haveing user/group/SID problems with linux acls. I hope i explained good enough why i use and set ignore systemacl. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Robert Marcano via samba > Verzonden: woensdag 7 februari 2018 3:19 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] GPOs not Work...

...t with read and/or writes rights missing. People test this and the computer$ can access the GPO.ini without problems, so why the event log. Because of "SYSTEM" or an other user that is haveing user/group/SID problems with linux acls. I hope i explained good enough why i use and set ignore systemacl. Greetz, Louis -----Oorspronkelijk bericht----- Van: samba [mailto:samba-bounces at lists.samba.org] Namens Robert Marcano via samba Verzonden: woensdag 7 februari 2018 3:19 Aan: samba at lists.samba.org Onderwerp: Re: [Samba] GPOs not Working! On 02/06/2018 03:24 PM, L.P.H. van Belle via samba w...

.... > > Your ready for the next step ;-) > > And a tip ahead. > Settings like this apply to \\server\ ( users-home) | profiles | print$ for example. > > The why?, because this these shares might needs some extra windows love ;-) > On these shares i apply the ignore systemacls to mimic the windows rights as close as possible. > Reason for that is simple, less problems, but this doe depend on how you use the network. > > Test what applies best for you, but these shares where "normaly" only windows connect to. > I set the ignore systemacl'...

On 02/06/2018 03:24 PM, L.P.H. van Belle via samba wrote: > ok, > > do the following. > set ignore systemacl to yes on sysvol and netlogon. Added "acl_xattr:ignore system acls = yes" to both shares, restarted the server > > login as dom\administrator > computer manager, connect to dc. > share sysvol, goto share security, reset to defalts. > same for folder. I don't get th...

Hai Rowland, > > If you use 'ignore systemacls', then you must also ignore the > output of getfacl. This is because you are telling Samba to only use the ACLs > found in the EA 'security.NTACL' for the share and these can be, and > probably are, different from what getfacl shows. > > Rowland > > > -- &...

Hello, After joining Windows 7 to a Samba 4 (AD), when logging on I experience 'Access denied' error accessing user profile. As a result, Windows creates temporary profile for the domain user (the profile is deleted upon logoff). The roaming profiles directory has been created according to instructions in https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles Note: the home