similar to: Changing Permissions from W2k to a samba share - Access Denied

Hi everybody, i'm getting mad configuring samba to join an ADS, resolve domain users and groups and set ACLs via windows explorer on a share mounted with POSIX ACL and extended attributes. At the point where i am, i've managed to get Samba join correctly the domain with idmap_rid backend working fine. I can correctly set (add, remove, modify) file acls and extended attributes

At the suggestion of Stas, I'm starting a new thread on this one. This pretty much covers where I'm at right now: Doug, thanks, here's a complete listing of the config file, and some logging, hopefully this will be illuminating to somebody. > Neither of these lines set the log level. Yes, I've been setting it in the init script. When I do ps -ef | grep smbd, I see that

Paul, >1. Which user is logged on the the windows workstation trying to modify >a file on the samba share? Henrique are user, this user is in the list of administrators of the samba, but he is not administrator of the PDC (windows 2003). It looks at the parameters below of smb.conf: admin users = corniani, administrator, henrique >2. What are the ACLs on that file before you try to

Hi Folks, I am experiencing some problems with samba 3.0.20 which I can not solve on my own. We have updated from samba 3.0.10 to samba 3.0.20, but I am not sure when the problems started. We had a problem with idmap - I had hoped to solve - before. Whenever we rebooted the server, all of the ACLs got jumbled up. I thought that our winbindd_idmap.tdb somehow got broken. I re-created it, but

Hi, I'm getting confused about the role that kerberos authentication plays. What exactly is the point of using kerberos to join a samba server to an AD domain? If using kerberos still requires you to rely on winbindd for all the nsswitch stuff then what is the point? I can just as easily specify workgroup = wkgrp security =

Hallo, I have to shares: fstab.conf: /dev/sdb1 /mnt/xfs xfs defaults 0 1 /dev/sdb2 /mnt/ext3 ext3 defaults 0 1 smb.conf: [global] create mask = 0777 force create mode = 00 security mask = 0777 force security mode = 00 directory mask = 0777 force directory mode = 00 directory security mask = 0777 force directory security mode = 00 inherit permissions = No inherit acls = No

We are using SAMBA 3.6.6 on Centos 5 with the acl_tdb VFS module. Our share is backed by storage on a SAN devices that does not support ACLs or extended attributes ... so we're trying the acl_tdb module as a mechanism to support Windows ACLs. We have verified that samba has ACL support enabled, and ACL support works find if we export the share from the local EXT4 filesystem. When trying to

Well, I screwed around a bit and after doing a "wbinfo -u" and a "wbinfo -g" I stopped getting the "unable to map SID" error. Now I'm getting a different error. ;-D [2004/05/25 09:09:34, 3] smbd/dosmode.c:unix_mode(111) unix_mode(FC2-i386-disc1.iso) returning 0744 [2004/05/25 09:09:34, 3] smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2500)

Hi all I'm having some problems trying to configure ACLs from a Win2000 SP3 client. I'm running Samba 2.2.5 on kernel 2.4.18 (with acl + ext attr), Samba is compiled with acl support etc. Samba is configured with security=domain, and is running with local groups etc rather than thru winbind, I haven't been game enough to tread those waters yet. With the debug level set to 5

hi, sorry if this topic already exists, but i haven't found a solution yet. I am using a Samba PDC with OpenLDAP. After updating my Samba 2.2.7 to version 3.0.7, I encountered the following problem : All my Windows-clients are able to logon to the Domain but it takes several minutes until the Client finally is logged on. If I try to open a directory that is stored on the server, it takes

I recently ran into a problem accessing Samba shares from SFU. From SFU's /net directory, I could read from files, move files, create directories and even append to files using >>. But, when I tried to create a file, I received a "Permission Denied" message. After looking at the logs I found something which looked out of place. I am currently using (I tried many different

Whenever I try to read or modify ACLs from my Windows 2000 PDC, my Samba Domain Member Server (Security = ADS) does not allow setting ACLs, nor does it display the existing ACLs. - I have setup ACLs in my Kernel - I have translated and installed libacl and libattr - I can see and modify ACLs with getfacl and setfacl. - I have translated Samba 3.0.23d with --with-acl-support=yes - I have enabled

Dear all We run Samba 3.5.8 on a Solaris 11 box on top of ZFS We got the impression that the VFS module acl_xattr provides the best way of keeping Windows ACLs. We don't have concurrent NFS or local users so it's Windows only. The clients as well as the Samba server are members of an AD domain. Creating files/directories works as expected and also manipulating permissions for the initial

Hello, I'm using winbindd with samba 3.0.1. Everything starts up as expected and tests return the expected results (wbinfo and getent). Files created via windows clients are create with the proper ownership and group membership. When I attempt to modify the permissions via the windows security tab (add another group, change ownership for example) I'll get a win pop up saying

Hi list, I'd like to raise the issue discussed in the thread below. I've faced exactly the same problem and came to exactly the same way out - shutdown winbindd and use "force unknown acl user". We use "simple" mapping in the environment - all AD accounts have corresponding NIS accounts (the same name) and the mapping is being done by smbd. The problem here is that

Hi, I think the error is in converting the POSIx ACl, but I don't know how to fix this. I checked the following entry in the Log: [2020/03/14 00:37:37.015551, 2] ../../source3/smbd/posix_acls.c:3045(set_canon_ace_list) set_canon_ace_list: sys_acl_set_file type file failed for file . (Opera??o sem suporte). [2020/03/14 00:37:37.015616, 3]

When setting permission on a file or folder through Windows XP on a Samba share, I am not able to add additional Active Directory user ID's or groups to the ACL permissions. When I attempt to apply the setting I get a message "Unable to save permission changes on xxxx.file, access denied". I am receiving error "Too many ACE entries for file New Text Document.txt to convert to

Hello, I am running Samba 3.0.28 on a Solaris 10 8/07 x86_64 machine. Directory services and authentication are provided by MS Active Directory's LDAP and Kerberos. My problem is that, when attempting to add an ACE to a file from Windows (XP, SP2), I get an error saying "Access Denied". The share is a directory on a ZFS filesystem (NFSv4 ACLs). Below is the share definition:

Hi. I'm dealing with this "lib/smbldap.c:smbldap_open(1009)" message in the log file. I tried to find some hint in the net but I couldn't find anything that pointed to a solution. Below are the surrounding messages in a excerpt of the log file: [2007/04/02 17:31:10, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(918) fetch sid from uid cache 1088 ->

Hi all, I have a 2.2.7a member server (on Debian unstable), acting as a file server for a W2k domain (which also has some NT4 clients, ie. mixed mode). I'm also using ACLs. Imagine I have a file on the server with an ownership of DOMAIN+foo (full permission - rwx). I also have a user ACL on that file of DOMAIN+bar, also rwx. This all works fine. I was initially running into a problem