similar to: samba acl - able to change permissions that contradict user security setting

Dear samba team, What I noticed from the below example is , any user who has write access to share are able to change sub folder acls in it. we don't want that. how to restrict this to only admin users in NAS and to AD administrator in windows. ?. Please help . ---------------- 1) Import user from W2K3 R2 Server and set up a secure share. User has Read/Write access. 2)

Hello I vaguely remember reading an article months ago about some fork or altnernative provider of Samba called something like Link***. The Wikipedia article on Samba only mentions TNG. http://en.wikipedia.org/wiki/Samba_%28software%29 Does someone know what I'm refering to and could tell me more? Thank you.

I did not get any response . pinging it again. Dear samba team, please help me in understanding these. 1) in samba posix_acls.c why samba always setting the READ access for the file and READ and WRITE access for directory ? ---------- case S_IRUSR: /* Ensure owner has read access. */ pace->perms |= S_IRUSR; if (is_directory) pace->perms |= (S_IWUSR|S_IXUSR); and_bits =

Hi, Recently I have installed samba 3.4.8 on my device. Since then ftp (vsftp,proftpd) which is taking users from samba database with pam_smbpass.so is not working. After enabling detailed log I have noticed it is looking for the passwords in smbpasswd (/etc/samba/private) which is of zero size . I think all users passwd are located in passwd.tdb.I could fix this by giving "passdb

Dear Jeremy and samba team , This is suresh from EMC.I am having samba 3.4.8 on my NAS with posix acls support. When a backup software backs up files and folders, it typically backs up the security settings on the files/folders too. Then during restore, the software will try to restore the files/folders along with their security settings. The restore is now broken because security settings

hello, I'm using dovecot 2.0.16 and i would like to use acl for subfolder. The file dovecot-acl is well written in both folder test and the subfolder test/Test : cat /home/user2/Maildir/.test.Test/dovecot-acl user=user1 ilrws cat /home/user2/Maildir/.test/dovecot-acl user=user1 ilprws When user1 want to list, the folder test is well shown, but not the subfolder test/Test. This is the

woudln't work because all the users are in one group anyway. and i am not allowed to to give read rights do "any" (i.e. 755) but theres really no option in smb.conf like "read only users = " or something like that? Am 13.12.2011 17:56, schrieb Raffael Sahli: > On Tue, 13 Dec 2011 16:38:41 +0100, "skull"<skull17 at gmx.ch> wrote: >> I want to

I want to make a subfolder read only for certain users. for example: /data/pool is public rwx for all users. and now i would like to make a /data/pool/subfolder only rwx for user1 and grant read only permissions to user2 and user3 how do i do this? any links or direct tips on that? my suggestion would be something like this, but as you can imagine it didn't work: # The general datapool

Dear, I want to do the following set-up but I don't succeed in it: e.g.: users: user1 user2 user3 share: "test" with access from user1,2 and 3 Now I want to create a subfolder in "test" e.g. "subtest" but only with access for user1 and 3 but I'm not able to do that. Is there a solution for this? Thank you, Jethro

Hello, Running Samba 3.3.10 on FreeBSD 7.3. Cannot copy a folder with a subfolder and 10 files in the subfolder from an OSX 10.6.4 client to a folder on the Samba server. What happens is that the folder gets copied but not the subfolder and its files. root at aries:/usr/local/etc# testparm Load smb config files from /usr/local/etc/smb.conf Processing section "[homes]" Processing

Dear experts, I am having following problem on samba server side . please help me . 1) our device is running with samba server , in order to allow Microsoft windows mmc to change samba share permissions I am giving SeDiskOperatorPrivilege ( net rpc rights grant admin SeDiskOperatorPrivilege) privilege to samba users. This is working fine as long as our device is in standalone work group

Hi, i have a share called [home]. Designed like described here: https://wiki.samba.org/index.php/User_Home_Folders#Creating_the_Home_Folder_for_a_New_User. First i have no problems but i want to enable a trash folder for each user. At this time i have about 8000 home directories. The directorys are subfolders from [home]. Is it possible to enable a trash folder inside the home directory

we are trying to figure out how and email box is not empty. All we did was /mail/user1 /mail/user2 /mail/shared ln -s /mail/shared /mail/user1/shared ln -s /mail/shared /mail/user2/shared Perms are fine and people where dropping emails in here fine. We added a third one and the user also right clicked in their IMAP client and added a subfolder. It was around that time they where gone. Could

Hi There , I have KVM VM with 4 qcow2 disks and 2 raw disks . when I try to take full system snapshot by excluding raw disks . it is give below error . can you help me how to fix this ?. or is it possible to take full system snapshot in this case .?. When I change XMl as internal snapshots for raw disks . It throws a message snapshot are not supported on war disks .

Hi, I'm wondering, whether it's possible, to define an ACL on the mailbox itself. We use Dovecot 1.2.15 (included in Debian 6) and maildir filesystem layout: /home/mail01/user1/Maildir/new \ /home/mail01/user1/Maildir/cur Inbox /home/mail01/user1/Maildir/tmp / /home/mail01/user1/Maildir/.folder1/new \ /home/mail01/user1/Maildir/.folder1/cur folder1

On 2019-12-08 15:01, Rowland penny via samba wrote: > On 08/12/2019 18:18, Howard Fleming via samba wrote: >> I am building a Samba4 setup to replace a Samba3 server I built for >> small non profit school back in 2012. >> >> It is running CentOS 6.x, samba version 3.6.23-52.el6_10. ?Rather >> than attempt to upgrade this system to Samba4, it makes more sense

Hi, I think I found a bug in Dovecot 2.1.17 and 2.2.13. In our setup, sometimes ACLs stop working because "dovecot-acl-list" is replaced by an empty file. We found that lazy_expunge is connected to this. To reproduce, create ACLs for "user1" in a folder. Put a mail in that folder and expunge it, so that the folder will be created in the "expunged" namespace.

hi, i was able to successfully run vfs_shadow on a samba share with win xp shadow copy client. but i think it?s currently not implemented that one could export [homes] with this vfs object, because AFAIK each @GMT-snap has to resist directly under the samba share. but [homes] is a virtual share representing different shares (depending on users). has anybody hints about using vfs_shadow with

Hi, I running samba-3.0.13-1 connect to W2k3, attr-2.4.19 and acl-2.2.27-1. I've a strange problem with ACL settings, following the data structure.I would that user1 could read/write only his personal folder, user1 belongs to domain users and can reach the user folder but he can't see his personal folder. I have tried to run setfacl -b (remove all ACL entries) and setup them again, format

I have an issue with samba+acl and Windows checkbox "Replace all Child object permissions" . I have a folder with defaults ACLs : /default:user:user1:rwx, default:user:user2:rwx owned by user1/ On Windows if I'm checking "Replace all Child object permissions with inheritable permissions from this object" on this folder, it losts the default ACL