similar to: Set ACLs on Samba share from Windows

Okay, let's try this again. I have a Samba server, joined to my Windows Active Directory domain, and I'm having a problem setting ACLs on a share from Windows. On Windows, I get the error message "Unable to save permission changes on <folder>. The parameter is incorrect." and when I look in my Samba log, I see the message "ACL is invalid for set (Invalid

OK, there is a discussion over on samba-technical about nss_winbind and the question about Administrator being mapped to 0 was raised. Now I have always thought that it should, but in fairness, I decided to see what happens when it isn't, so I removed Administrator from idmap.ldb and restarted samba. Before restarting samba, I checked a few things, on the DC, getfacl returned this for

On 20/02/15 21:27, Davor Vusir wrote: > > Rowland Penny skrev den 2015-02-19 18:15: >> OK, there is a discussion over on samba-technical about nss_winbind >> and the question about Administrator being mapped to 0 was raised. >> Now I have always thought that it should, but in fairness, I decided >> to see what happens when it isn't, so I removed Administrator

Hi all, I'm afraid I'm back to my old issue of GPO permissions. I have two ADDCs providing an AD Domain (internal.stmaryscollege.co.uk (short-name 'SMC')). Servers are called 'ad-01' and 'tainan'. ad-01 is 'Version 4.0.10' and tainan is 'Version 4.1.0rc4' (the latest version in the package repos of the respective OSs (arch and gentoo)) I have

Hi Rowland, I'm also not an expert, but with the amount of help you provide on the list, I will defer to you. I'd love to know your rational for prefering the "change ownership to administrator" approach over the "change group to Domain Admins approach". If it's just gut, that's fine too! Thanks! -----Original Message----- From: samba-bounces at

I’ve actually found a solution to my problem, but I wanted to post it here, since someone else might have the problem in the future, and I think it would be nice if I could spare them the week of Googling I needed. Basically, I have an AD member server, running Samba 4.2.10 (on Centos 7.2.1511). Here’s my smb.conf: [global]         workgroup = SUBDOMAIN         server string = Samba Server

Hi everyone, after some struggling I have finally set up a Samba AD DC and a file server more or less successfully. Unfortunately I am failing at one of the last steps: the configuration of the home share, where I can't set the permissions correctly which, as a consequence, seems to prevent the creation of the users' folders on the home share I am using the standard Samba packages on

To whom it may concern, I've spent the last couple of hours searching the internet looking for an answer to a Samba question and have come up dry. Here's the problem I'm facing. When a drive is mapped on a RH Linux 9.0 server with the latest Samba update from RH, I can right click on the directory and it shows a partial read-only on all directories regardless. I need Samba to show

> > On the file serever: > > Collected config --- 2019-07-03-10:27 ----------- > > > > Hostname: srv > > DNS Domain: a.b.hu > > FQDN: srv.a.b.hu > > ipaddress: 10.0.3.15 192.168.0.8 > > ----------- > > Samba is running as a Unix domain member > > ----------- > > > > This computer is running Debian 10.0 x86_64 > >

I have a samba DC based on Debian Buster running samba 4.12.2 from Louis' repo. A second DC on Raspbian buster is running samba 4.12.0. I have sysvol replication working using rsync/unison as per the WiKi. I wasn't having any issues until I tried to edit a GPO and found that all the acl settings had disappeared. This may have happened when I upgraded the DCs from 4.11.x to 4.12.x

Hi, i provisioned a domain and all went well, until i added the second dc.... for example: the new DC2 tells me: getfacl /usr/local/samba/var/locks/sysvol # file: usr/local/samba/var/locks/sysvol # owner: root # group: BUILTIN\134administrators user::rwx user:root:rwx user:BUILTIN\134administrators:rwx user:BUILTIN\134users:r-x user:ELEMAY\134guest:rwx user:ELEMAY\134domain\040guests:r-x

We are running a fileserver (Samba version 3.0.10-1.4E.9) on CentOS 4.4. No AD, clients are Windows XP and OS X. Linux acl's are used for access to directories and files. Each top-level folder belongs to a primary group with mode 2770. The acl's restrict access to lower level directories. We need to pass the acl's down the directory tree or else users may have unexpected access to

Hello, I'm running samba v2.0.5a and I have some problems with settings users access rights to our Projects share. We have a projects share with project directories: \\XX\Projects\P1 ... P5 and 6 people : U1 ... U6 All users must have primary group "users". I need to set permissions for each Px directory and each Ux user. (For ex.: U1,U2 has rwx for P1/* U2,U3,U6 has

I need help understanding what is happening and trouble shooting. I have two servers running Samba 2.3.3, one as a Domain Controller one as a Member Server. Both are running Ubuntu 8.10. smbd, nmbd and winbindd using the tdb back end are running on both. I have two shares on the member server and as far as I can tell they are identical. [Projects] works as expected but [Windows] always asks

OS: CentosOS 7 I have installed samba + openldap + smbldap-tools + pam by: yum --enablerepo=extras install -y epel-release yum install -y smbldap-tools yum install -y samba openldap openldap-clients openldap-servers migrationtools yum install -y nss-pam* I know that smbldap-tools is a dead project, but I'm interested in it and would like research on it. I create users and

> You could try using a script Louis wrote, see here: > https://github.com/thctlo/samba4/blob/master/samba-check-set-sysvol.sh > > The 'idmap config' lines are nothing to worry about, you cannot set them on a DC, but, for some reason, testparm etc warns about > them. > > Rowland > Sorry, I should have said - I ran louis' script and set the acl's according

Hello! I have direstory with following acl: getfacl Visio2002 # file: Visio2002 # owner: ilyin # group: ilyin user::rwx user:dm:rwx user:pitomtsev:rwx user:nap:rwx user:mav:rwx user:goi:rwx user:ilyin:rwx user:huzyahmetov:rwx group::r-x group:common:r-x mask::rwx other::--- default:user::rwx default:user:pitomtsev:rwx default:user:nap:rwx default:user:mav:rwx default:user:goi:rwx

On 6/14/2016 1:16 PM, Rowland penny wrote: > On 14/06/16 17:38, J. Echter wrote: >> Hi, >> >> i provisioned a domain and all went well, until i added the second >> dc.... >> >> for example: >> >> the new DC2 tells me: >> >> getfacl /usr/local/samba/var/locks/sysvol >> >> # file: usr/local/samba/var/locks/sysvol >> #

Hello, I am using the vfs_gpfs samba module to map ACLs through samba. It works fine on files, but directory ACLs are ignored. Ex: getfacl /sb/share/myplace/ file: sb/share/myplace/ owner: root group: root user::rwx user:afrankel:rwx group::--- mask::rwx other::--- When I try to access this folder in Windows, I get permission denied. The same permissions on a files, I can open it / modify it

Hi- I am experiencing some odd behavior with ACLs with winbindd using Samba 2.6 on Debian Woody (kernel version 2.4.18). 1. I am unable to alter permissions from Win2K clients using the Properties->Security interface. Is this normal? I get the "Unable to save Permission Changes on new Folder. Access is denied." message. This occurs with all accounts, both privileged and