similar to: Samba ACLs and NFS ACLs:Differing results

This might be more inclusive if I said, Linux Permissions vs POSIX ACLs vs vfs_xattr. I have recently begun to discover the power and flexibility of using POSIX ACLs (by mounting my EXT3/4 filesystems with the acl option). This solved alot of security permissions issues between Samba and Linux groups of users. As I have delved into this deeper and begun using the VFS object, vfs_xattr, things

Hello, I am using the vfs_gpfs samba module to map ACLs through samba. It works fine on files, but directory ACLs are ignored. Ex: getfacl /sb/share/myplace/ file: sb/share/myplace/ owner: root group: root user::rwx user:afrankel:rwx group::--- mask::rwx other::--- When I try to access this folder in Windows, I get permission denied. The same permissions on a files, I can open it / modify it

Hai marcel, Im using nfsv4 kerberos based host/client. This is the line of the cat /proc/mounts nfs4 rw,relatime,vers=4.0,rsize=131072,wsize=131072,namlen=255,hard,proto=tcp,port=0,timeo=600,retrans=2,sec=krb5,clientaddr=192.168.xx.xx,local_lock=none,addr=192.168.xxx.xxx 0 0 fstab only contains : nfs4 sec=krb5 Yes, i did see the nfs4-acl-tools, seen that, hoped that helped a bit, But i did

Ok, i clarify a bit more. \\servername.internal.domain.tld\users2\%username% is used in my AD for the home folder of the users. %username% translates to the username. I tried 2 setups now, windows acl base setup and posix based setup. Both fail for me. THE SERVER with the shares ( and is nfs server) The samba/windows part. ( postix rights setup ) On the server this is /home/samba/users2

Hai..   I need to have my home dirs shared over some of my servers. I did setup a nfs4 kerberos base Debian jessie, samba 4.1.17 and sernet samba 4.1.3 on these servers.   This works, i can mount without problems.   But because verything is created with the windows user tools, the owner/Group is root. Like this   Server:   ls -al drwxrwx---+  2 root  root 4096 Sep  4 13:17

I didn't get any responses to my previous post "Wine broken on Samba shares due to colon ":" filenames" so I am re-posting with a subject to reflect what I now believe to the the root cause of my problems. I recently changed from mounting my home directory using NFS to mounting with CIFS via the pam module pam_mount.so. It turns out that I am having problems with many

Hi All, I know this isn't the ganesha mailing list but wondered if anyone can help. I'm having issue with file creation over NFS, I have a gluster volume "vol1" presented via Ganesha with the following config:EXPORT{? ? ? ? Export_Id = 20;? ? ? ? Path = "/vol1";? ? ? ? FSAL {? ? ? ? ? ? ? ? name = GLUSTER;? ? ? ? ? ? ? ? hostname = "gnfs01";? ? ? ? ? ? ? ?

Dear list, I'm trying to get a Thumper (Sun Fire X4500) to play nice with AD so that we can offer a nearline storage service. Since many of our users will have multiple group memberships, it's imperative that samba be able to recurse through the groups that a user is a member of to determine if they have access to a resource. What happens instead is that every user who authenticates is

According to the smb.conf man page, the "dos filemode" parameter will allow a user who is not the owner of a file to affect permissions changes on a file or folder provided he has write access to that object. This does not appear to be the case. Users with write access via user or group ACEs receive an "Access denied" error when attempting to make ACL changes via windows,

Hi everyone We're really struggling with nfs4 <--> windows acls. Scenario Samba4 share --> cifs --> win7. No problem Samba4 share --> nfs4 --> Linux. acls not inherited Neither is there inheritance vica versa. e.g. It is not possible to create files with group rw on a umask 0022 nfs4 share. nfs4_setfacl cannot override umask. Using POSIX or windows acls this works

Le mer. 15 mai 2024 ? 12:32, Rowland Penny via samba <samba at lists.samba.org> a ?crit : > On Wed, 15 May 2024 10:36:03 +0200 > mathias dufresne via samba <samba at lists.samba.org> wrote: > > > Hi everyone, > > > > Is it possible on Linux systems to share through SMB managed by Samba > > some NFS4 mounted FS and that Samba is using NFS4 ACLs only?

On Wed, 15 May 2024 13:02:24 +0200 mathias dufresne via samba <samba at lists.samba.org> wrote: > Le mer. 15 mai 2024 ? 12:32, Rowland Penny via samba > <samba at lists.samba.org> a ?crit : > > > On Wed, 15 May 2024 10:36:03 +0200 > > mathias dufresne via samba <samba at lists.samba.org> wrote: > > > > > Hi everyone, > > > > >

I groupapped the domadmins group in linux to ntgroup="Domain Admins" but instead of mapping to the SID number ending in 512 it's creating a new SID number endind in 2025 mapped to domadmins... Does anybody knows why??? It worked in the previous server. This is the command I execute net groupmap add ntgroup="Domain Admins" unixgroup=domadmin If I use the rid=512 option I

Hello! I'm trying to join a Windows XP (64 bit version) machine to a Samba 3.0.21a domain via smbldap-tools 0.9.1 on FreeBSD 6.0-RELEASE-p4 and I'm continually getting the message "The user name could not be found." I am attempting to join using members of the Domain Admins group (mapped to Unix group 515), and I'm noticing in the logs (below) that even though the machine

Hello List, we have installed samba Version 3.0.20-0.1-SUSE. when I'm entering > net getlocalsid I get > SID for domain <netbios name> is: S-1-5-21-4166838278-3756557259-2095403906 entering > net getlocalsid <domain name> returns > SID for domain <domain name> is: S-1-5-21-2018781741-1218799122-1862565094 Does this mean that the pdc itself is not in the domain

Hi, I have the following situation concerning group mapping: when I enter > net getlocalsid I get > SID for domain PDC is: S-1-5-21-4166838278-3756557259-2095403906 when I enter > net getlocalsid DOMAIN I get >SID for domain DOMAIN is: S-1-5-21-2018781741-1218799122-1862565094 The group mapping shows > net groupmap list > Domain Users

On Thu, Mar 19, 2015 at 10:17:36AM -0400, Kevin Taylor wrote: > Name : nfs4-acl-tools Relocations: (not relocatable) > Version : 0.3.3 Vendor: CentOS > Release : 6.el6 Build Date: Fri 22 Jun 2012 02:10:47 AM EDT > Install Date: Mon 31 Mar 2014 10:41:48 AM EDT Build Host: c6b10.bsys.dev.centos.org >

Hi. I'm using Samba on FreeBSD to host various file servers. Recently I've noticed one weird thing: samba needs w flag on file for being able to delete it, plus, when 'force user' is used, samba needs additional flags for group owning the file. Not sure if it was there all the time and it's just me, or may be this is an intended behaviour (I hope not), so, anyway I'll

> Date: Thu, 19 Mar 2015 11:59:47 +0100 > From: Volker.Lendecke at SerNet.DE > To: groucho.64738 at hotmail.com > CC: samba at lists.samba.org > Subject: Re: [Samba] NFS4 ACLs with samba 3 (or 4) > > On Wed, Mar 18, 2015 at 01:17:34PM -0400, Kevin Taylor wrote: > > I know this was discussed a lot a few years ago, but my google searches aren't quite getting me where

I am running two Fedora 13 servers, one as a Samba PDC and the other as a BDC. For the past week I have been tracing a series of issues which may or may not be related to Samba 3.5.4. Here is one problem that I am tracking and need help from the list with suggestions. >From a wireshark trace between my Samba server and an XP client I am seeing the following error status returned for up to a