similar to: SMB2 CREATE + ACCESS_SYSTEM_SECURITY

Hello, I tried this week to upgrade my samba 3.2.4 (2 PDCs one trusting the other) to samba 3.3.0 then samba 3.3.1, and apart from the problem with winbindd and trusted domain, my users are not able to modify any ms word document (excel does the same). You can open the file correctly, modify it, and when saving it, it pops up "Access denied" If you try to save the file in the same

I've been trying to run a .NET app on Windows 2008 against a Samba v3.6.1 server running on OpenSuse x64 v12.1 but keep running into problems. What the .NET app is doing is trying to read the ACL for a directory using UNC path pointing to a directory below the "users" share on the samba server. The app is running as user Administrator. On the samba side the Administrator user has

https://bugzilla.mindrot.org/show_bug.cgi?id=1423 Summary: Service ACL support for ssh on Mac OS X. Classification: Unclassified Product: Portable OpenSSH Version: 4.7p1 Platform: Other OS/Version: Mac OS X Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: bitbucket at

Dear Jeremy and samba team , This is suresh from EMC.I am having samba 3.4.8 on my NAS with posix acls support. When a backup software backs up files and folders, it typically backs up the security settings on the files/folders too. Then during restore, the software will try to restore the files/folders along with their security settings. The restore is now broken because security settings

Hi folks, I''ve got most everything done for the pure Ruby version of win32-file. The last thing left (since I''ll be moving the IO methods to a different package eventually) is the file security stuff. Here''s what I''ve got so far for the get_permissions method. However, I''m stuck at GetAce(). If someone could help me finish up this method, I

A Samba server I've configured uses the VFS acl_xattr module to support Windows ACLs. I'd like to view the ACL data, in as raw a state as possible, but also in a human readable format. Is there an existing utility that does that? If not, and I need to write an application to accomplish it, which APIs would you recommend (and on which attributes)? Thanks,Steve Tice

Hello: I have a Windows 2003 Server that is causing rpcclient to SEGV via the following command: $ rpcclient -U Administrator%foobar -c 'netshareenum 502' <server> ... type: 0x6269: SEC_DESC_OWNER_DEFAULTED SEC_DESC_DACL_DEFAULTED SEC_DESC_SACL_DEFAULTED SEC_DESC_DACL_TRUSTED SEC_DESC_SACL_AUTO_INHERIT_REQ SEC_DESC_SACL_PROTECTED SEC_DESC_RM_CONTROL_VALID SACL Segmentation fault

I am trying to solve what I perceive as undesirable behavior of my Samba server. Please understand I am not claiming this is a bug in Samba. It is simply different from the behavior I want, and I'm asking for help in modifying the behavior. My Samba server is version 3.5.4 (release 68.el6) and runs under CentOS 6.0 (x86_64). I happen to use Active Directory (AD) to authenticate, but am not

Thank you, Rowland! On 4 January 2016 at 10:36, Rowland penny <rpenny at samba.org> wrote: > On 04/01/16 01:43, Jonathan Hunter wrote: > >> I can view the data using ldbsearch when logged in as root on the DC >> itself >> - but how do I view the permissions and edit them from the commandline? >> > > They are stored in a hidden attribute called

On Wed, 2023-11-22 at 17:33 +0000, Jonathan Hunter wrote: > On Wed, 22 Nov 2023 at 01:03, Andrew Bartlett < > abartlet at samba.org > > wrote: > > Are you sure that the ACLs on all the items in the chain should > > allow reading? > > It's an excellent question, thank you - I'd like to just say "Yes" > but > I will certainly check, as

Hi, A while ago I successfully set permissions on a section of my LDAP / AD tree, using either ADUC or ADSIEDIT (I forget which). These permissions allowed my own user to access this section of the tree; I removed permissions for 'Domain Admins' etc. to ensure that others would not be able to view or change the data - this has worked great for many months. I have just tried to add a new

This is a PoC patch for NFSv4/ZFS ACLs. The objective of the patch is that rsync --acls support NFSv4/ZFS ACLs without requiring a new command line option NFSv4 ACLs can't be represented using POSIX draft ACLs, if an NFSv4 ACL is present a separate POSIX draft ACL will not be present and there are new APIs to access NFSv4 ACLs. So we need to distinguish between NFSv4 ACLs and POSIX ACLs in

On 11/04/2023 13:36, Gary Dale via samba wrote: > On 2023-04-11 04:15, Rowland Penny via samba wrote: >> >> >> What 'Debian distribution-specific' installation did you follow ? > The one linked to in AD DC wiki. Where abouts is this link ? I checked here: https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller But couldn't

Hi, I'm using libsmbclient library built from source3 directory of samba-3.6.7. When I connect to a vista/2008 server using this libsmbclient library, communication is happening in SMB1 protocol and NOT in SMB2. Please note that I've enabled SMB2 by adding following line to smb.conf max protocol = SMB2 Does libsmbclient library built from source3 directory of samba-3.6.7 supports SMB2?

I upgraded from 3.2.7 to 3.3.1 and am having the most peculiar problem with Microsoft Office 2007 and samba shares. Users can open a share, create, edit and delete files/folders with no problem. But when a user opens a file on a samba share in any Office application, for example Word, and clicks 'Save' then a dialog box opens: "Access denied. Contact your administrator". This

adding samba list On Fri, Jan 8, 2016 at 10:22 AM, Partha Sarathi <parthasarathi.bl at gmail.com> wrote: > Hi, > > > We have a customer who facing security issues after changing RID idmap > backend to AUTORID. > > > The History of the issue looks as below, > > 1) When samba configured with RID idmap backend customer requested to > change few permissions,

Hello, I'm using Windows Server 2008 R2 and Debian Linux with Samba 3.6.7 and I have problem with ACL permissions. When I set max protocol = SMB2 in smb.conf I am able to traverse through folder "test" as "user1" even if I set only read permission for "Others". If I set max protocol = NT1, I cannot traverse through the same folder as "user1" with the

Hi. With samba 3.0.25b as part of Mac OS X 10.5.4 Server, I'm encountering issues with .mdb files: Some Windows apps use client software on local machines and one Microsoft Access database on the SMB share. Everything works fine, as long as there's only one client using the .mdb file. As soon as a second client tries to access (and write!) to the .mdb file, the clients on the Windows

Hello,     I would like to share some info on how I was able to successfully run an online backup after several failed attempts. I would constantly get the following error when attempting to run an online backup. ERROR(runtime): uncaught exception - (3221225506, '{Access Denied} A process has requested access to an object but has not been granted those access rights.') Looking

I've been been trying to investigate this for sometime now, hence I came to the experts :) I have rejoined all my DC's with new names, see below. ;; ANSWER SECTION: <domain>.corp. 3600 IN NS psad101zatcrh.<domain>.corp. -> New rebuild, new hostname, RHEL6 to RHEL7 upgrade <domain>.corp. 3600 IN NS prdc001zafsrh.<domain>.corp. -> New