similar to: ACL's vs Share definitions (Trying again)

I'm really struggling with ACL's and permissions. I have a share owned by a user (douglas). Douglas can read, write and create to the share: [public] comment = Public Stuff path = /home/samba/pub nt acl support = yes public = yes admin users = douglas write list = douglas I'm logged in to Win2000 as douglas. Through the security tab on Win2000 I add read and

I have ACL's enabled and am getting a new error, in the Samba log (V 3.0.1Pre1, when attempting to set permissions on a file through Win2000: get_domain_user_groups: primary gid of user [terry] is not a Domain group ! get_domain_user_groups: You should fix it, NT doesn't like that Do I need to create a group on the windows(2000) side? The entries in the domaingroup.map

Hi, It has been a while since I used samba so for all purposes I could be seen as a newbie. Recently I installed samba and ran into a problem mounting shares as a user. I can work around this, no problem, but I'm curious about the *why*. Searching the mailing list (and other resources) did not reveal this problem, that's why I ask here. Samba version 3.2.4 mount.cifs version

I have a great understanding problem about acls and share-definitions. I use Samba 3.0.1pre3, compiled with acl-support, everything works fine, ACL's can be set with Windows XP File-Manager and the getfacl shows that it is OK. My Problem ist that I dont know how to define a share for acls. For example, here is my share [user1] Path=/lanman/user1 Valid users=user1,@root Force user=user1 Read

I'm having trouble with my new fileserver, I can't make the shares viewable by windows clients. I had the same problems with the first file server I built and cannot remember what I did to "fix" it. I have gone through the page "Setting up a share using Windows ACL's" on the Samba Wiki ( https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs) but

Hi all, I have a server that has ACL's enabled on it and the groups are set properly from the domain that are applied on top of it for the shared folders. I am running with Mac OS X 10.10.5 on the client side and am having nothing but issues with getting them to respect the ACL's set on the files. The Server Setup is as follows: Domain Server: Debian 7.9 with Samba 4.3.4 Member

Hi, I have a share (testshare) where different unix groups (testgroup1, testgroup2) should have access to. But I want that new files are only created with 660 permissions. Here are the ACL's of testshare: # file: testshare # owner: ralfgro # group: ve user::rwx group::rwx group:testgroup1:rwx group:testgroup2:rwx mask::rwx other::--- default:user::rwx default:group::---

I added a bibliographic reference to one of my .Rnw documents, to wit: \begin{thebibliography}{9} \bibitem{Jose} Jos{\'{e}} C. Pinheiro and Douglas M. Bates, \emph{Mixed-Effects Models in S and S-PLUS}, Springer, 2000. \end{thebibliography} just before the \end{document}. When I run Sweave on the result these lines disappear without a trace. Is this intentional? Subquestion: is

I'm having trouble with ACL's and wonder how many others are too. I see conflicting answers and comments about different aspects of ACL's from many prople on the list. I was wondering if ANYONE is successfully using ACL's with Samba 3.0 or above. Questions I have that I'm sure many are asking are: Was your Samba server configured as the DC? What client OS were you

I thought I had read a response to this. Went something like this: Word (and lots of others such apps) do not actually deal with the original file. They create a temporary file which overwrites the original when you save the new document. The 'new' file of course inherits the new editor's ownership. Hope this helps you. Noel -----Original Message----- From: Josh Konkol

I can't seem to get an answer to this question... Should I use winbind if my Domain Controller is a samba machine? Or is it only useful if my DC is a real MS DC and I have other unix/linux client machines? I'm strictly wanting to provide file and domain logon services to Win2000 machines via a samba DC. There are no other DC's involved. After reading the 3.0 HowTo on winbind

Good Morning Achim, Follows the exit of the requested command. Now the GPO funny not work when user is only the ?Domain Users? getfacl /var/lib/samba/sysvol/ getfacl: Removing leading '/' from absolute path names # file: var/lib/samba/sysvol/ # owner: root # group: 3000000 user::rwx user:root:rwx user:3000000:rwx user:3000003:r-x group::rwx group:3000000:rwx group:3000001:rwx

On 11/06/19 13:29, Rowland penny via samba wrote: > On 11/06/2019 13:13, Sebastian Arcus via samba wrote: >> >> On 11/06/19 11:49, Rowland penny via samba wrote: >>> On 11/06/2019 11:38, Sebastian Arcus via samba wrote: >>>> >>>> On 11/06/19 11:07, Rowland penny via samba wrote: >>>>> On 11/06/2019 10:34, Sebastian Arcus via samba

On 11/06/19 11:49, Rowland penny via samba wrote: > On 11/06/2019 11:38, Sebastian Arcus via samba wrote: >> >> On 11/06/19 11:07, Rowland penny via samba wrote: >>> On 11/06/2019 10:34, Sebastian Arcus via samba wrote: >>>> I've just upgraded a Samba AD server to 4.10.2 a few weeks ago from >>>> 4.x (I'm afraid I'm not sure the exact

On 26/06/16 12:43, Achim Gottinger wrote: > Created an feature request > > "add resolving for well known security principals" > > https://bugzilla.samba.org/show_bug.cgi?id=11997 > > Am 25.06.2016 um 12:35 schrieb Achim Gottinger: >> >> >> Am 25.06.2016 um 02:21 schrieb Achim Gottinger: >>> >>> >>> Am 24.06.2016 um 23:16

> You could try using a script Louis wrote, see here: > https://github.com/thctlo/samba4/blob/master/samba-check-set-sysvol.sh > > The 'idmap config' lines are nothing to worry about, you cannot set them on a DC, but, for some reason, testparm etc warns about > them. > > Rowland > Sorry, I should have said - I ran louis' script and set the acl's according

Am 23.01.2015 um 10:19 schrieb Rowland Penny: > On 23/01/15 07:34, Norbert Heinzelmann wrote: >> >> Am 22.01.2015 um 17:17 schrieb Rowland Penny: >>> On 22/01/15 12:57, Norbert Heinzelmann wrote: >>>> Am 22.01.2015 um 12:28 schrieb Rowland Penny: >>>>> On 22/01/15 10:53, Norbert Heinzelmann wrote: >>>>>> Hello,

I've just upgraded a Samba AD server to 4.10.2 a few weeks ago from 4.x (I'm afraid I'm not sure the exact earlier version) - and since then I just haven't managed to pin down the file permissions and inheritance on the shares as it's been constantly causing issues. This server is both a file server and a AD DC. The current problem I am facing is the permissions of the

Hello, I want to prevent users to change file/directory rights and haven't found any possible solution. Setup: --------- * Samba 3.6.3 * using LDAP for users an groups Config: ---------- workgroup = Samba security = user ldap admin dn = uid=samba_user,cn=admin,o=company,c=net passdb backend = ldapsam:ldap://ldap01.company.net ldap suffix =

Version 4.0.0beta4-GIT-8f44389 Hi everyone Up until recently, mounting a share on a Linux client preserved the permissions of the files in the share, but now it doesn't. e.g. on the server drwxrws---+ 2 root staff 4096 Jul 6 12:04 7a # file: year7 # owner: root # group: staff # flags: -s- user::rwx user:root:rwx group::rwx mask::rwx other::--- default:user::rwx default:user:root:rwx