Displaying 20 results from an estimated 1000 matches similar to: "Access Denied when changing ACLs from W2000 client"
2004 Sep 21
1
SFU Samba Permission Denied
I recently ran into a problem accessing Samba shares from SFU. From
SFU's /net directory, I could read from files, move files, create
directories and even append to files using >>. But, when I tried to
create a file, I received a "Permission Denied" message.
After looking at the logs I found something which looked out of place.
I am currently using (I tried many different
2011 Apr 05
2
acl_xattr access denied when adding permissions for another user
Dear all
We run Samba 3.5.8 on a Solaris 11 box on top of ZFS We got the
impression that the VFS module acl_xattr provides the best way
of keeping Windows ACLs. We don't have concurrent NFS or local users
so it's Windows only.
The clients as well as the Samba server are members of an AD domain.
Creating files/directories works as expected and also manipulating
permissions for the initial
2007 Oct 30
0
Problem with ACLs "Too many ACE entries for file to convert to posix perms."
At the suggestion of Stas, I'm starting a new thread on this one. This
pretty much covers where I'm at right now:
Doug, thanks, here's a complete listing of the config file, and some
logging, hopefully this will be illuminating to somebody.
> Neither of these lines set the log level.
Yes, I've been setting it in the init script. When I do ps -ef | grep
smbd, I see that
2010 May 28
1
samba 3.5.3: loads of errors copying some simple ACLs with robocopy
Maybe I'm doing somthing really stupid, but while copying some windows
share onto a samba server, on some random subdirectory robocopy
says ERROR 87 (0x00000057) Copying NTFS Security to Destination Directory...
The samba logfile has lots of these lines.
modules/vfs_posixacl.c:349(smb_acl_to_posix)
smb_acl_to_posix: ACL is invalid for set (Das Argument ist ung?ltig)
The strange thing is
2007 Jan 29
5
ACLs fail in 3.0.23d
Whenever I try to read or modify ACLs from my Windows 2000 PDC, my Samba
Domain Member Server (Security = ADS) does not allow setting ACLs, nor
does it display the existing ACLs.
- I have setup ACLs in my Kernel
- I have translated and installed libacl and libattr
- I can see and modify ACLs with getfacl and setfacl.
- I have translated Samba 3.0.23d with --with-acl-support=yes
- I have enabled
2004 May 25
1
FW: Trouble with ACLs
Well, I screwed around a bit and after doing a "wbinfo -u" and a "wbinfo -g"
I stopped getting the "unable to map SID" error. Now I'm getting a
different error. ;-D
[2004/05/25 09:09:34, 3] smbd/dosmode.c:unix_mode(111)
unix_mode(FC2-i386-disc1.iso) returning 0744
[2004/05/25 09:09:34, 3]
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2500)
2004 Oct 19
6
Samba 3.0.7 & OpenLDAP performance problem
hi,
sorry if this topic already exists, but i haven't found a solution yet.
I am using a Samba PDC with OpenLDAP.
After updating my Samba 2.2.7 to version 3.0.7, I encountered the following problem : All my Windows-clients are able to logon to the Domain but it takes several minutes until the Client finally is logged on. If I try to open a directory that is stored on the server, it takes
2002 May 15
4
Unable to validate owner sid.
I am trying to run Samba 2.2.4 on solaris 2.8 with W2K clients. I have an NT
app installed onto the Solaris 8 server which i would like to run off of the
mapped samba network drive. When i try to start the NT app it attempts to
read a file on the samba drive called .root.passwords but fails (This file
can be accessed with notepad). The following is an extract from the samba
error log. I get the
2005 Nov 17
3
Can't set ACL on Samba
Hi everybody,
i'm getting mad configuring samba to join an ADS, resolve domain
users and groups and set ACLs via windows explorer on a share mounted
with POSIX ACL and extended attributes.
At the point where i am, i've managed to get Samba join correctly the
domain with idmap_rid backend working fine.
I can correctly set (add, remove, modify) file acls and extended
attributes
2002 Aug 29
0
problem changing permissions
Whenever I try to add or remove a user for access to a file I get the
following error:
"Unable to save permission change on <filename>. Access is denied".
I took a look at my smbd log file and found this:
[2002/08/29 10:40:00, 5] smbd/posix_acls.c:unpack_nt_owners(433)
unpack_nt_owners: validating owner_sids.
[2002/08/29 10:40:00, 5] smbd/posix_acls.c:unpack_nt_owners(474)
2003 Jan 09
0
Taking ownership of files on NT/2k
Hi all,
I have a 2.2.7a member server (on Debian unstable), acting as a file
server for a W2k domain (which also has some NT4 clients, ie. mixed
mode). I'm also using ACLs.
Imagine I have a file on the server with an ownership of DOMAIN+foo
(full permission - rwx). I also have a user ACL on that file of
DOMAIN+bar, also rwx. This all works fine.
I was initially running into a problem
2003 Dec 31
1
modify permissions fail on new file server.
Hello,
I'm using winbindd with samba 3.0.1. Everything starts up as expected
and tests return the expected results (wbinfo and getent). Files
created via windows clients are create with the proper ownership and
group membership. When I attempt to modify the permissions via the
windows security tab (add another group, change ownership for example)
I'll get a win pop up saying
2007 Jun 18
0
(no subject)
Hi list,
I'd like to raise the issue discussed in the thread below. I've faced exactly the same problem and came to exactly the same way out - shutdown winbindd and use "force unknown acl user".
We use "simple" mapping in the environment - all AD accounts have corresponding NIS accounts (the same name) and the mapping is being done by smbd.
The problem here is that
2002 Mar 01
2
unable to validate owner sid
Hi,
I was hoping someone could help me out or just point me in the correct
directions as to what I am doing wrong. I have Samba 2.2.3a installed and
configured with winbind for domain authentication using an ext3 file system
with ACL support. It is working great! Thanks Samba Team!
The problem that I am experiencing is I would like to use an application
like "xcopy" to propagate the
2001 Dec 19
3
Issues regarding owner sid
Here's a strange issue:
I'm running winnt4 with Samba 2.2.2 on Solaris 2.8. Basically, a windows app. has been installed onto a Samba share. The windows app has difficulties accessing text files on the share. I notice that in log.smbd, I get an error message (that corresponds to the file the app can't open). Here's a snippet from the file:
[2001/12/19 12:32:23, 3]
2009 Jun 25
1
Problems resolving most users with winbind and AD/SFU
Hello all,
I'm having a problem with Winbind resolving some users from AD on a W2KSP4
server running SFU 3.5 [8.0.1969.1]. All users and groups in the AD domain
have been assigned UIDs and GIDs via SFU. The Linux fileserver is running
CentOS 5.3 with Samba 3.0.33-3.7.el5. The fileserver has been joined to the
domain using authconfig with proper modifications made to nsswitch and pam.
2016 Feb 17
4
Can one set the owner of a folder to BUILTIN\Administrators?
I've recently attempted to migrate some windows server files over to
samba 4 hosted on a FreeNAS server.
Using robocopy with the /copyall switch, I expected everything,
including ACL's and ownership information to transfer over. For the
most part they have. The one problem I've ran into however, is that I'm
getting errors any time I or robocopy attempt to change the ownership to
2013 Mar 19
1
samba-tool classicupgrade (from v3 to v4) aborts with "Unable to get id for sid"
I'm trying to upgrade from samba3 -> 4. I ran this command:
WORKDIR=/usr/local/mobius
/usr/local/samba/bin/samba-tool domain classicupgrade --dbdir=$WORKDIR/var --use-xattrs=yes --realm=infinityhealthcare.com $WORKDIR/smb.conf
but it failed with the error given in this email's subject. What does it mean, and how do I fix it?
This is just another is a growing line of errors that
2004 Oct 28
0
Permission denied creating Clearcase view on Samba share.
If I try to create a clearcase view on a Windows 2000 Server share then it
creates a subdirectory tree. If I try it on a Samba share, it creates the
first directory correctly with the right user mapping and permissions and
then returns permission denied. I am able to manually create files and
directories on the samba share using explorer, so I guess that clearcase
must be using some different SMB
2005 Dec 13
1
Samba 3.0.20 acls not working anymore and problem with winbindd_idmap.tdb
Hi Folks,
I am experiencing some problems with samba 3.0.20 which I can not solve
on my own. We have updated from samba 3.0.10 to samba 3.0.20, but I am
not sure when the problems started.
We had a problem with idmap - I had hoped to solve - before. Whenever
we rebooted the server, all of the ACLs got jumbled up. I thought that
our winbindd_idmap.tdb somehow got broken. I re-created it, but