similar to: Inheritance of ACLs with Samba

Hi Team, I am trying to setup a samba CTDB cluster to export gluster volme as samba share. While CTDB cluster works well, I ran into an issue with creating subdirectories and also creating files/directories within subdictories when accessing the share from both linux and windows servers. Setup details : We have a three node cluster with nodes snode1, snode2 and snode3. I have a gluster

Hi Team, I am trying to setup a samba CTDB cluster to export gluster volme as samba share. While CTDB cluster works well, I ran into an issue with creating subdirectories and also creating files/directories within subdictories when accessing the share from both linux and windows servers. Setup details : We have a three node cluster with nodes snode1, snode2 and snode3. I have a

Hi! We're using sernet-samba 3.0.28-21 on debian. (The smb.conf can be found below) There are 2 subfolders in root share directory "ponudbe" and "projects": srv03:/srv/data/test# getfacl * # file: ponudbe # owner: root # group: root user::rwx user:COMPANY+administrator:rwx group::r-x group:COMPANY+ponudbe_rw:rwx mask::rwx other::--- default:user::rwx

On 11/06/19 16:44, Sebastian Arcus via samba wrote: > > On 11/06/19 14:54, Sebastian Arcus via samba wrote: >> >> On 11/06/19 13:29, Rowland penny via samba wrote: >>> On 11/06/2019 13:13, Sebastian Arcus via samba wrote: >>>> >>>> On 11/06/19 11:49, Rowland penny via samba wrote: >>>>> On 11/06/2019 11:38, Sebastian Arcus via

On 11/06/19 14:54, Sebastian Arcus via samba wrote: > > On 11/06/19 13:29, Rowland penny via samba wrote: >> On 11/06/2019 13:13, Sebastian Arcus via samba wrote: >>> >>> On 11/06/19 11:49, Rowland penny via samba wrote: >>>> On 11/06/2019 11:38, Sebastian Arcus via samba wrote: >>>>> >>>>> On 11/06/19 11:07, Rowland penny

Hi, I have a problem with the removal of inheritance ACLs of subdirectories. It almost sounds like only adding ACLs work but removals of inheritance ACL's not. By default the access rights (including ACLs) should be inherited, but it should also be possible to remove the access rights from any subdirectory. This is what I am trying to do, I have a share called media with some users /

[global] netbios name = aphrodite security = ADS workgroup = SAMDOM realm = AD.SAMDOM.COM.AU log file = /var/log/samba/%m.log log level = 1 dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind refresh tickets = yes winbind trusted domains only = no winbind use default domain = yes

Hello, I try to set acl settings on a public folder including its subfolders. There is no option for acting recursive. But the documentation says wildcards can be given on the mailbox name. But this doesn't work. No matter how the mailbox name is provided with a wildcard, doveadm always tells Mailbox doesn't exist. Folder example: public/project1 public/project1/subdir1

On 2017-04-23 17:19, Henry via samba wrote: > On 2017-04-23 17:01, Rowland Penny wrote: >> On Sun, 23 Apr 2017 14:07:44 +1000 >> Henry via samba <samba at lists.samba.org> wrote: >> >>> Following: >>> >>> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs >>> >>> In windows: >>> >>> I

On 2019-12-08 15:01, Rowland penny via samba wrote: > On 08/12/2019 18:18, Howard Fleming via samba wrote: >> I am building a Samba4 setup to replace a Samba3 server I built for >> small non profit school back in 2012. >> >> It is running CentOS 6.x, samba version 3.6.23-52.el6_10. ?Rather >> than attempt to upgrade this system to Samba4, it makes more sense

Hi all, I have rsync'ed directory /rootdir/dirdir/ from Server1 to Server2, using cmd on Server2 "rsync Server1:/rootdir/dirdir -avz /rootdir/dirdir". There were some sub-directories from Server1 got updated to become the symbolic links. For example, directory /rootdir/dirdir/subdir1/ now becomes the symbolic link /rootdir/dirdir/subdir1 pointing to the new created directory

Add new option --ignore-non-existing-directory, that is a variant of --ignore-non-existing, but applies ONLY to directories. This was previously proposed in bug #8366, but I independently had a use case for it in the Gentoo infrastructure. X-URL: https://bugzilla.samba.org/show_bug.cgi?id=8366 X-URL:

From: "Robin H. Johnson" <robbat2 at gentoo.org> Add new option --ignore-non-existing-directory, that is a variant of --ignore-non-existing, but applies ONLY to directories. This was previously proposed in bug #8366, but I indepentantly had a use case for it in the Gentoo infrastructure. X-URL: https://bugzilla.samba.org/show_bug.cgi?id=8366 X-URL:

Hi, I have a problem with the inheritance of ACLs, respectively the removal of the inherited ACLs in subdirectories. The following szenario: By default the access rights (including ACLs) should be inherited, but it should also be possible to remove the access rights from any subdirectory. Therefore I've set up the following configuration: [Finanzen] path = /shares/finanzen msdfs root =

On 2017-04-23 17:01, Rowland Penny wrote: > On Sun, 23 Apr 2017 14:07:44 +1000 > Henry via samba <samba at lists.samba.org> wrote: > >> Following: >> >> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs >> >> In windows: >> >> I can set permissions under the "Share Permissions" tab. >> >> I am

Hey all, I decided to use the default ranges in the smb.conf of my member server, so I changed my smb.conf and it looks like that: ================================================== [global] netbios name = MEMBERSRV workgroup = MYDOM security = ADS realm = MYDOM.EXAMPLE.COM encrypt passwords = yes idmap config MYDOM:backend = ad idmap

On 11/06/19 13:29, Rowland penny via samba wrote: > On 11/06/2019 13:13, Sebastian Arcus via samba wrote: >> >> On 11/06/19 11:49, Rowland penny via samba wrote: >>> On 11/06/2019 11:38, Sebastian Arcus via samba wrote: >>>> >>>> On 11/06/19 11:07, Rowland penny via samba wrote: >>>>> On 11/06/2019 10:34, Sebastian Arcus via samba

Look at the acl(5) man page and you'll see that the ACCESS CHECK ALGORITH starts: IF the effective user ID of the process matches the user ID of the file object owner ... ELSE IF the effective user ID of the process matches the qualifier of any entry of type ACL_USER, THEN IF the matching ACL_USER entry and the ACL_MASK entry contain the requested permissions, access is

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, http://wiki.dovecot.org/ACL mentions: "Currently there is no ACL inheritance." However this applies to a folder inherit ACLs to existing subfolders; when you share a folder and a non-owner creates a sub-folder within, no ACLs are set, hence, the creator cannot access the new folder. Could the "create mailbox"-process

From: "Robin H. Johnson" <robbat2 at gentoo.org> Add new option --ignore-non-existing-directory, that is a variant of --ignore-non-existing, but applies ONLY to directories. This was previously proposed in bug #8366, but I indepentantly had a use case for it in the Gentoo infrastructure. X-URL: https://bugzilla.samba.org/show_bug.cgi?id=8366 X-URL: