similar to: maintaining samba uid and gid in nt to ad migration

Hi all, I have "FreeBSD 7.0-CURRENT #1: Wed Jul 25" authenticating successfully against active directory via samba's winbindd(8). I need to manage samba shares via FreeBSD ACLs and CIFS ACLs. From my reading of setfacl(1) I should be able to set group permissions using the syntax of DOMAIN\group-name. For example: #setfacl -d -m g:"MYDOMAIN\mygroupname":rwx test

hi! I'm studing samba as PDC (with ldap backend) and I would know: - gid and uid are useful in samba? in other words: if pdc admin knows users' uids, he can recovery some wrong situations ? Example: if a user was cancelled and then readded, if his uid changes implies some troubles with shared files? NT mantains, after deletion, association between shared file and uid user and so if

> > On the file serever: > > Collected config --- 2019-07-03-10:27 ----------- > > > > Hostname: srv > > DNS Domain: a.b.hu > > FQDN: srv.a.b.hu > > ipaddress: 10.0.3.15 192.168.0.8 > > ----------- > > Samba is running as a Unix domain member > > ----------- > > > > This computer is running Debian 10.0 x86_64 > >

On btrfs, do the following ------------------ # su user1 # cd btrfs-part/ # touch aaa # getfacl aaa # file: aaa # owner: user1 # group: user1 user::rw- group::rw- other::r-- # su user2 # cd btrfs-part/ # setfacl -m u::rwx aaa # getfacl aaa # file: aaa # owner: user1 # group: user1 user::rwx <- successed to setfacl group::rw- other::r-- ------------------ but we

On 2019-02-19 3:47 pm, Rowland Penny via samba wrote: > On Tue, 19 Feb 2019 15:25:51 -0500 >> What exactly does "START AGAIN" imply? Just chmod? > > 'ls' shows the correct ownership and Unix permissions: > > drwxrwx---+ 4 root domain admins 4096 Feb 17 19:13 programs > > But 'getfacl' show something different: > > getfacl:

Hi guys, I've got a problem where if I set permissions on a folder(Admin) "setfacl -R -d -m u::rwx,g::wrx,o::- Admin/" and "setfacl -m o:- Admin" I get the following. mail:/data/samba/shared # getfacl Admin/ # file: Admin # owner: BCP+administrator # group: samba user::rwx user:samba:rwx group::rwx group:BCP+admin:r-x mask::rwx other::--- default:user::rwx

I hav a problem porting my ACLS from my old filserver to a new one... My old Fileserver: I have my shares on a partition supporting acls with ext3 /dev/md0 on /data/raid type ext3 (rw,acl,user_xattr) My new Fileserver: /dev/md0 on /data/raid type ext4 (rw,acl,user_xattr) Now I copied all my shares to the new Fileserver with rsync and backed up my acls with: getfacl -R

Am 10.06.2015 um 03:25 schrieb Mike: > I'm learning to be very deliberate with changing posix and windows acl's so > I don't disturb users' access to files and folders. > I check acl's on a specific file/folder on the server with getfacl. > Then make one small acl modification to one file in a sub-directory of a > share. > Then record the difference reported

Dear All I am facing a strange problem that I could not solve, so, maybe you can help me. Look at this situation: I created a new directory with those ACLs (through Samba using Windows XP) [root@server /home/smb/adm]# getfacl teste #file:teste #owner:1002 #group:1006 user::rwx group::rwx group:suporte:rwx group:administ:rwx mask::rwx other::--- [root@server /home/smb/adm]# getfacl -d teste

Can I use a command like this to clone an NT ACL? getfattr -n security.NTACL templateFile | sed -e 's/templateFile/realFile/' | sudo setfattr --restore=- I can see that the attribute gets copied over but when I view the ACL in Windows security tab it's not the same ACL, it's much bigger and includes all kinds of default-like stuff. I'm trying to find a way to update

Hi I posted this last week but go no answers. So I try again in case someone has any idea... I have a file server (linux with acl and quotas custom 2.4.18 kernel, samba 2.2.7a with acl, quotas and winbind) among others there's a share on which any user of the domain is allowed to put files, any user able to read and write other users' files (a public and free space) the problem is that

On Fri, 30 Nov 2018 09:06:34 +0000 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Fri, 30 Nov 2018 06:16:42 +0000 (UTC) > barani tharan <aru_barani at yahoo.com> wrote: > > > Dear Rowland Penny > >  I follow your mentioned step still i am face the same problem > > I have 1 Domain Controller [sambadc] and 1 Domain member for Samba > >

Hi Rowland, Thank you for the reply and info. On Tue, Jun 13, 2017 at 11:19 AM, Rowland Penny <rpenny at samba.org> wrote: > On Tue, 13 Jun 2017 09:15:40 +0200 > Neil via samba <samba at lists.samba.org> wrote: > > > OK, this a DC and therefore you will have to do things differently from > a Unix domain member. > > You might as well remove these lines from

Wonder if someone can point me in the right direction here - just built some new bricks running gluster 3.4 alpha 3 (from http://download.gluster.org) with the objective of testing them to replace some existing 3.2 systems in production. The main thing I was after was NFS ACL support, however on getting everything setup, I still don't seem to be able to see POSIX extended ACLs on the

Hello everyone, I plan to change an old samba share (SMB1) configured on an Samba PDC "old NT4 Style" server. For that plan, I choose to migrate domain from the old NT4 domain to on Microsoft Active Directory (Windows 2012 R2) set with posix attributes rfc2307, and then change the old Samba share with a new linux box (centos 7) with winbind, sssd configured against Microsoft AD. At

> Jul 22 14:39:39 dc1 named[27846]: samba_dlz: Failed to connect to > /var/lib/samba/private/dns/sam.ldb The good news is I believe I've found the problem: RUNNING: # file: samba/private # owner: root # group: root user::rwx group::r-x group:bind:r-x mask::r-x other::--- RESTORE: # file: samba/private # owner: root # group: root user::rwx group::r-x other::--- The bad news is

A bit of a minor off-topic issue, but on the off-chance that someone understands how ACLs work ... I've been trying to see if using default ACLs would help with the following issue: I have a third party application that is running as a non-root user ('user-a') and creating log files with mode 0600 (read/write only to the owner) in a log directory I have another application that

Hi guys, I'm having trouble setting up my file server running Samba 4 (4.0.3). I had no problem joining the domain (also a Samba 4 (4.0.3) with AD) but I can't get the ACL to work properly. I'm sure my settings are wrong and hoping for some help. When I try to set a user permission I get this error: setfacl -m u:administrator:rwx test3.txt setfacl: test3.txt: Malformed access ACL

On 2019-02-19 3:05 pm, Rowland Penny via samba wrote: > On Tue, 19 Feb 2019 14:44:05 -0500 > Marco Shmerykowsky <marco at sce-engineers.com> wrote: > >> >> >> # user administrator workaround >> >> username map = /etc/samba/user.map >> > >> > Just to check, what is in the user.map ? >> >> root at

Solaris 10U3, latest kqemu, qemu-0.9.0-CVS plus TAP patch. I''m aware that a fair amount of "rootish" access is required for the TAP and bridge stuff, and I''m working on that. As kind of a secuirty thought, I figured I''d use setfacl to give myself access to the /dev/kqemu device instead of leaving it mode 664 or 666. However, that didn''t work.