similar to: Unexpected behaviour with ACL GROUP CONTROL

Dear all, I am struggling around with Windows ACLs and cannot find a solution nor how to troubleshoot that. I have two samba3 hosts. Hostname "donald" is my domain controller with samba 3.x + OpenLDAP server running. Hostname "pluto" is my other samba 3.x server which was joined to my domain. I use LDAP for my users+groups. I dont have winbind on my machines. On hostname

Hi Denis, on both samba hosts (donald and pluto) these commands work great: id johndoe getent group getent passwd My pluto:/etc/nsswitch.conf looks like that: [...] passwd: compat ldap group: compat ldap shadow: compat ldap [...] I want to add, that the described problem works fine if I try it on a share on "donald", my domain controller. The users are

Hi everybody, i'm getting mad configuring samba to join an ADS, resolve domain users and groups and set ACLs via windows explorer on a share mounted with POSIX ACL and extended attributes. At the point where i am, i've managed to get Samba join correctly the domain with idmap_rid backend working fine. I can correctly set (add, remove, modify) file acls and extended attributes

Dear all, ? ?I am using Samba + PDC LDAP in a single server. From last month onward i am facing problem When I set manualy the acl (setfacl -m g:group:rwx the_file) It's ok, the other domain member see the ACL But when I set the acl with a Windows Workstation, that's don't work it gives the furnished error : ? sysadm at sangam:/var/log/samba$ tailf log.r-sys-03703 ? [2009/11/08

Hi all I'm having some problems trying to configure ACLs from a Win2000 SP3 client. I'm running Samba 2.2.5 on kernel 2.4.18 (with acl + ext attr), Samba is compiled with acl support etc. Samba is configured with security=domain, and is running with local groups etc rather than thru winbind, I haven't been game enough to tread those waters yet. With the debug level set to 5

Hi all I get the following errors when trying to set acls, client os is NT4 and XP, server is 3.0.7 on solaris9 [2004/10/01 09:33:22, 0] smbd/posix_acls.c:create_canon_ace_lists(1385) create_canon_ace_lists: unable to map SID <sid number removed by me> to uid or gid. Samba is a member in a NT4 domain, all permissions is managed by unix uid/gid which are in NIS, each unix user exists

Hi all, I have joined samba server (3.0.14a-2) to an ADS. I can copy, move and remove files from any windows workstation and also I can set ACLs. I need migrate files from 4 w2k servers to samba server and preserve ACL's. One server are into ADS domain, but the others server are into others domains. I use robocopy.exe to migrate files and folders. When I run robocopy the files and folders are

Hello, does any one succeed to share acl with samba4? I installed the new release of samba4 from git. and trying to apply acl on shared folders from win7 ?but it is just not functionning: for instance I just created the folder?foldertest and trying to set permission deny on everyone and it gives trhe below error: [2012/10/10 03:19:56.221168, ?0]

Whenever I try to read or modify ACLs from my Windows 2000 PDC, my Samba Domain Member Server (Security = ADS) does not allow setting ACLs, nor does it display the existing ACLs. - I have setup ACLs in my Kernel - I have translated and installed libacl and libattr - I can see and modify ACLs with getfacl and setfacl. - I have translated Samba 3.0.23d with --with-acl-support=yes - I have enabled

Hi. I'm dealing with this "lib/smbldap.c:smbldap_open(1009)" message in the log file. I tried to find some hint in the net but I couldn't find anything that pointed to a solution. Below are the surrounding messages in a excerpt of the log file: [2007/04/02 17:31:10, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(918) fetch sid from uid cache 1088 ->

Maybe I'm doing somthing really stupid, but while copying some windows share onto a samba server, on some random subdirectory robocopy says ERROR 87 (0x00000057) Copying NTFS Security to Destination Directory... The samba logfile has lots of these lines. modules/vfs_posixacl.c:349(smb_acl_to_posix) smb_acl_to_posix: ACL is invalid for set (Das Argument ist ung?ltig) The strange thing is

Hi * I encounter severe problems with changing ACL settings in Samba 3.0.2a after migrating users from NT PDC to LDAP-SAM. I did not find anything about this in the mailing list yet. However, I have no idea (if) what I am doing wrong here. Although I can hardly believe that I am the first one to trigger that bug, it looks like a problem with the sid_to_gid routine. So please take a look at that:

SNIP > [2010/06/14 11:43:21, 10] smbd/posix_acls.c:3045(add_or_replace_ace) > Replacing ACE 1 with SID S-1-5-32-545 and flags 00 > [2010/06/14 11:43:21, 10] smbd/posix_acls.c:3007(merge_default_aces) > merge_default_aces: Merging ACE 3 onto ACE 1. > [2010/06/14 11:43:21, 10] smbd/open.c:2952(create_file_unixpath) > create_file_unixpath: open file Temp/Neu Textdokument.txt for

Well, I screwed around a bit and after doing a "wbinfo -u" and a "wbinfo -g" I stopped getting the "unable to map SID" error. Now I'm getting a different error. ;-D [2004/05/25 09:09:34, 3] smbd/dosmode.c:unix_mode(111) unix_mode(FC2-i386-disc1.iso) returning 0744 [2004/05/25 09:09:34, 3] smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2500)

On a Centos 7 minimal fresh install and samba 4.4.4 I have follow this howto: http://www.hexblot.com/blog/centos-7-active-directory-and-samba and I have Joining to an Active Directory server and login to it with domain user without problem. My problem occur when I try from windows to modify some new rights (ACL's) to new folder on samba share. The folder is created correctly but if I add

I'm configuring a standalone server(server role = standalone server) using POSIX ACLs to manage permissions on server. I need to manage permissions(At least basic ones, like read, write) from Windows GUI. Is that possible using standalone? When I try setting permissions on Windows I got this on the log: [2017/10/04 19:07:08.437837, 2] ../source3/smbd/posix_acls.c:3006(set_canon_ace_list)

Hello, I'm using winbindd with samba 3.0.1. Everything starts up as expected and tests return the expected results (wbinfo and getent). Files created via windows clients are create with the proper ownership and group membership. When I attempt to modify the permissions via the windows security tab (add another group, change ownership for example) I'll get a win pop up saying

Hi list, Since I've upgraded from samba 3.0.23c to 3.0.25c my ACL's don't work as expected anymore. I'm not sure where the problem is, however. The symptoms are simple: with 3.0.23c, I could grant and revoke user, group and world write access to and from files in a share. With 3.0.25c, I can't do that anymore. When I deselect group or world read access and apply the

I recently ran into a problem accessing Samba shares from SFU. From SFU's /net directory, I could read from files, move files, create directories and even append to files using >>. But, when I tried to create a file, I received a "Permission Denied" message. After looking at the logs I found something which looked out of place. I am currently using (I tried many different

Hi List, I have some severe problem with Samba 3 with ldapsam backend on debian stable. The problem is that I can not change the rights of a file or directory on the server from Windows. I get this in smb.log: ---cut--- [2004/03/14 21:59:09, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) create_canon_ace_lists: unable to map SID S-1-5-21-2443489570-4015384086-1858331161-3009 to uid or gid.