similar to: Browsing.

Hi, I cant' see all folders I need when I browse share by W2k or XP Professional client? With W9x it browse correctly. I hope I've reported all you need to understand my situation: Samba-3.0.14a on RH9 joined to Windows Server 2003 and configured with Kerberos. Following my smb.conf. [global] netbios name = MILLX03 os level = 16 wins server =

Hi, I running samba-3.0.13-1 connect to W2k3, attr-2.4.19 and acl-2.2.27-1. I've a strange problem with ACL settings, following the data structure.I would that user1 could read/write only his personal folder, user1 belongs to domain users and can reach the user folder but he can't see his personal folder. I have tried to run setfacl -b (remove all ACL entries) and setup them again, format

Just a tip. If you create users with RSAT and you also uses unix id's ( UID/GID ) Used with AD backend. The first assign the UID/GID and then apply the home dir folders in RSAT. Only for user home dirs. This can help if you also use ssh to login and you cant enter your own home dir. Per example: Your ACL ( for the user ) > # File: rs-01 / > # Owner: administrator > # Group:

Sorry hehehehe I mean, when access RSAT and add the "Home Folder" of the User, and give a Apply, the folder is automatically created with the permissions below, where the "Domain Users" is already linked: getfacl rs-01 / # File: rs-01 / # Owner: administrator # Group: domain \ 040users user :: rwx user: rs-01: rwx user: administrator: rwx group :: r-x group: domain \

Hello Louis, In fact, the shares mentioned in my original messages are used in Windows-only. The accounts, however, are used in both Windows and Unix-type environments (we have quite a zoo of OSes in active use); so we actually use the Posix part of accounts for attributes and Kerberos component to authenticate in all non-Windows use. So my primary intent is to make the homes/profiles shares

Hi, on our samba 4 domain member server we use the vfs objects module 'recycle'. Unfortunately we ran into a strange permission problem with deleted folders. The newly created folders in the recycle folder have the wrong permission. The deleted file(s) itself has the correct group (rw) permissions. The shares correct permissions: getfacl Papierkorb/ # file: Papierkorb/ # owner: root #

I've set up a profiles share according to the wiki article: https://wiki.samba.org/index.php/Implementing_roaming_profiles Users are able to create new roaming profiles and they cannot browse each others' profiles, so all that is working. The only issue is that the group "domain admins" does not have privileges to read or delete user profiles. The acls on the profiles directory

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, i try to use a glusterfs with "vfs objects = glusterfs" settings in smb.conf. But if I try to access the volume I allways getting "tree connect failed: NT_STATUS_BAD_NETWORK_NAME" If I add another Share directly inside the mountet glusterfs I can access the share und read and wirte alle the data. Here is my smb.conf: -

On Fri, 7 Oct 2016 12:19:09 -0700 Mark Nienberg via samba <samba at lists.samba.org> wrote: > I've set up a profiles share according to the wiki article: > https://wiki.samba.org/index.php/Implementing_roaming_profiles > > Users are able to create new roaming profiles and they cannot browse > each others' profiles, so all that is working. The only issue is that >

Hello, My name is Hiro. I'm using samba 3.0.21b-2(acl) and RHEL4.1(kernel 2.6.9-11.ELsmp) + AD Server Following problem: When the attribute of the group of the folder was set to a full control twice, the member of the group became inaccessible. I want to know this problem is BUG or SPEC. One example [smb.conf] security = ADS acl check permissions = no acl group control = no acl map

Hai Good morning people around the world. More below. > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Sonic via samba > Verzonden: maandag 26 oktober 2020 18:00 > Aan: belle at samba.org > CC: Samba Mailing List > Onderwerp: Re: [Samba] GPO fail and sysvol perm errors > > On Mon, Oct 26, 2020 at 6:46 AM L. van

On 19/05/2020 21:29, Roy Eastwood wrote: >> You could try using a script Louis wrote, see here: >> https://github.com/thctlo/samba4/blob/master/samba-check-set-sysvol.sh >> >> The 'idmap config' lines are nothing to worry about, you cannot set them on a DC, but, for some reason, testparm etc warns about >> them. >> >> Rowland >> > Sorry, I

I've been working at this for a few days now and I can't figure out what is broken. Google turns up similar issues from years back, but I hope this is a bug resurfacing. ACL entries are being deleted when files are saved. Here is an example: username: user1 group membership: Domain Users directory: /share/test file: test.xls getfacl /share # file: share # owner: DOMAIN+backupuser #

On 28/03/2023 15:08, Peter Carlson via samba wrote: > > On 3/28/23 01:33, Rowland Penny via samba wrote: >> >> >> On 28/03/2023 01:59, Peter Carlson via samba wrote: >>> I am having troubles with windows ACLs.? I have been following the >>> wiki >>> (https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs) and must have messed

> You could try using a script Louis wrote, see here: > https://github.com/thctlo/samba4/blob/master/samba-check-set-sysvol.sh > > The 'idmap config' lines are nothing to worry about, you cannot set them on a DC, but, for some reason, testparm etc warns about > them. > > Rowland > Sorry, I should have said - I ran louis' script and set the acl's according

Hi Carlos, Your problem is userA can access home directory of userB? If your issue is only that, then you are right, this issue comes from the fact all AD users are, by default, in "Domain users" and your Home directories grant "Domain Users" "r-x" which means "read and enter" when applied to directory. Simply remove "Domain Users" from these

> OK, the only real problem that I can see is that you have: > > ea support = no > > This turns off the required EA. > Hmmm.... I thought this had resolved the issue, because the group names did update in the ACLs. However, I changed another group name about 20 minutes ago and it still hasn't updated in its associated ACL. I thought perhaps there was some lazy update or

I've just upgraded a Samba AD server to 4.10.2 a few weeks ago from 4.x (I'm afraid I'm not sure the exact earlier version) - and since then I just haven't managed to pin down the file permissions and inheritance on the shares as it's been constantly causing issues. This server is both a file server and a AD DC. The current problem I am facing is the permissions of the

Hai, Now, i did not know you used the DC for the profiles here but yes it looks good. Small comment on point 3 and 4. 3) Its good, you might notice a few more rights there compaired to what i posted, thats because you have your profiles on the DC but the settings are good. 4) yes, the security is ok, i like the higher security setting and try to mimic the windows settings as much as

On Wed, 20 Jun 2018 12:05:13 +0200 L.P.H. van Belle wrote: > > As said very busy, but i can spare a few minutes now. > > -rwxrwxr-x+ 1 3000000 domusers 2240 2018-06-18 17:33:55 /var/lib/samba/sysvol/hprs.local/policies/{3C103F7B-7250-4610-BC45-8B06353CAA7C}/User/Documents & Settings/fdeploy1.ini > -rwxrwx---+ 1 3000000 users 64 2018-06-18 17:34:22