similar to: Everyone group difference between ACL/no ACLs. (follow-up)

It might help if you view the default directory ACLs using the getfacl utility. These are what will be inherited by stuff created in the lower directories. I would ask yourself if you actually need ACLs at all. The Samba share permissions are pretty thorough and life is far easier without ACLs as you can clearly see what permissions are in use and backups are not an issue. ACLs can quickly

[global] netbios name = aphrodite security = ADS workgroup = SAMDOM realm = AD.SAMDOM.COM.AU log file = /var/log/samba/%m.log log level = 1 dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind refresh tickets = yes winbind trusted domains only = no winbind use default domain = yes

I'm using gentoo-1.4 and Samba 3.0 pdc. And i have problems with display and change of rights of access to directories. My system: Kernel 2.4.20-gentoo-r8 (File systems-> POSIX Access Control Lists it is included), Root file system - reiserfs, shared folders are on ext3 which is mounted with an option acl samba it is compiled with options " - with-acl-support - with-winbind -

I believe I have found either a bug or something I do not understand. I recently had a file-share issue and the resolution was to set the "others" permissions to 5, read and execute. The problem with this is that once I am in Windows on a workstation, this appears to allow "Everyone", "CREATOR OWNER", and "CREATOR GROUP" access. We normally setup our

On Sun, 28 Jan 2018 10:52:47 +0100 Micha Ballmann via samba <samba at lists.samba.org> wrote: > Im sorry last mail was not complete. > > ... > -> Login to Windows with administrator and connect to FILESERVER via > "Computer Management" -> Chosing Demo Share and going to security Tab > -> > > Cant set any ACL because, permission denied! >

Hello! I'm running Samba 2.2.8a on top of a ext3 filesystem with ACLs enabled. (kernel 2.4.20-gentoo-r2) With ACLs disabled (i.e., mount /dev/hdd1 /mnt/floppy (no -o ACL)), the Security box under windows 2000 works like I want it to with respect to the Everyone group; If I want the Linux permissions to be, say, 770 (rwxrwx---), I can select everyone and hit "Remove." The everyone

Greetings, jimc! > Thank you for your reply. > If you happen to read the post of 11/22, you will notice that it was not > me who spoke ill of Samba. > I put my bets on other people being able to figure it out; I hope that > one of them will help me. Try this: 1. Make sure your domain groups and users are recognized on the member server. At the very least, $ getent passwd

I found out, when im creating a complete new share, access via computer management - per default there is a share permission set with full controll to "everyone". When im trying now to set ACLs it is working. But when im deleting "everyone" and set Domain Admins and/or Unix Admins and give them full controll, im no more able to set ACLs! Micha Am 28. Januar 2018 12:00:07

Hello dear list members I am not an experienced user of Samba, so I can be committing some basic mistake, but it seems to me that there is something wrong with the way Samba propagates ACLs. I tried versions 3.0.32 and 3.2.4 and the result is the same. This happens with "map acl inherit = yes" on smb.conf. I have a directory (dir) with the following ACLs: # file: dir USER Admin

Hello, I'm running a PDC and a secondary DC in privilegded lxc containers and try to setup a fileserver in an unprivileged lxc container. The shares of the file server are on the ZFS of the host and mapped via bind-mount. I've got the problem, that I get error messages when setting the ACLs of a samba share either via the Windows explorer or using the smbcacls command. On Windows

Good morning, Samba List, I'm setting ACLs from the security tab of the properties window of a folder via a Windows XP SP2 client. The Samba share in question is running on 3.0.11 with an ext3 file system and Fedora Core 3 underneath. All this works great -- I can set up ACLs beautifully from Windows and when I check them out with getfacl on the Linux side, the results make sense to me.

Hai, the steps are (basily) good, only this one can be better.   >To solve, I executed the following commands: >Chown 10060: 30028 -R sysvol >Chmod 775 -R sysvol   If you use acl_xattr:ignore system acls = yes on the sysvol share, you must configur the share from withing windows.  (* or use smbcalcs , but i never used it. )   This is what i see:   ls -al  sysvol total 24 drwxrwx---+ 3

Hi folks, It seems that the setting acl_xattr:ignore system acls = yes reduces Windows compatibility when defined for a share. In all attempts I have used Windows tools (except editing smb.conf) Assume there is a share, where the files and folders in the share root should at least be readable by anybody having access to the share. For the sake of simplicity the following permissions apply on

Hi everyone, I have a Samba 4.2.3 PDC server with some shares on it. If I create a new share, it immediately has some strange ACL's. Could anyone tell me where these come from? Example: root at corrumpeer:/# cat <<EOF>>/etc/samba/smb.conf [test3] path = /tmp/test3 EOF root at corrumpeer:/# mkdir /tmp/test3 root at corrumpeer:/# chown root:users /tmp/test3 root at

Does you filesystem support extended attributes? What does "|getfattr -n security.NTACL |filename" return?|| On 30.01.2024 16:13, Peter Milesson wrote: > Hi folks, > > It seems that the setting acl_xattr:ignore system acls = yes reduces > Windows compatibility when defined for a share. In all attempts I have > used Windows tools (except editing smb.conf) > > Assume

Hey all, I decided to use the default ranges in the smb.conf of my member server, so I changed my smb.conf and it looks like that: ================================================== [global] netbios name = MEMBERSRV workgroup = MYDOM security = ADS realm = MYDOM.EXAMPLE.COM encrypt passwords = yes idmap config MYDOM:backend = ad idmap

Hello, I am having problem setting permission on shared folder: the folder is?datasamba/common and after I set full permission for a user itester (3000017) and also?tester (3000018), I could see that it is only granting r-x to those users. but I could see from the default permissions that they have rwx. getfacl /datasamba/common # file: datasamba/common # owner: root # group: users #

Im missing from the getfacl command one or both. CREATOR OWNER And/or CREATOR GROUP Especial "Creator Group" is very wise to set. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland Penny via samba > Verzonden: dinsdag 13 juni 2017 13:17 > Aan: samba at lists.samba.org > Onderwerp: Re:

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Pisch Tam?s via samba .... > > Unbelievable: I remowed every settings from the samba shares, except > path and read only in smb.conf. It turned out that I can set the > fliesystem permissions of every share, except the users share! > I checked the acls and xattrs of the

Im sorry last mail was not complete. ... -> Login to Windows with administrator and connect to FILESERVER via "Computer Management" -> Chosing Demo Share and going to security Tab -> Cant set any ACL because, permission denied! Am 27. Januar 2018 11:35:53 MEZ schrieb Micha Ballmann via samba <samba at lists.samba.org>: >Hello, > >i also fired up a new vm :)