similar to: Samba 4 Recursive ACL's

Greetings I'm trying to set files and directories ACL's from command line on Samba 4, i known i can do it using smbcacls command but not recursively unless writng some shell scripts, i also tried the samba + ntacl command but i couldn't figure it out how to use it, could you provide me an example or another way to apply ACL's (without windows admin tools) ?

Hi people, I'm testing Samba 4.0.17 running as classic pdc mode under FreeBSD 10 and 9.2 , all shares are on ZFS volumes, i would like to use UFS instead of ZFS , but according the wiki page https://wiki.freebsd.org/NFSv4_ACLs nfsv4 inheritance flags works only with ZFS , i tried the parameters inherit acls and inherit permissions with module vfs_zfsacl on the UFS shares but got no success

Hello, I'm running a PDC and a secondary DC in privilegded lxc containers and try to setup a fileserver in an unprivileged lxc container. The shares of the file server are on the ZFS of the host and mapped via bind-mount. I've got the problem, that I get error messages when setting the ACLs of a samba share either via the Windows explorer or using the smbcacls command. On Windows

I work with a product that's similar to a NAS. It utilizes CentOS 6 and Samba v4.0.0-64.el6.rc4 to serve CIFS clients. The product provides "full Windows ACL support" via the acl_xattr module. The underlying file system, a FUSE implementation, provides full support for extended attributes. That much of it works remarkably well. The product supports an option to replicate shares from

Hey, hoping I can get some guidance on how this works. I've got a running samba standalone setup. On one of my shares, I want to preserve the ACL of files as they come from the client (Win 7), in essence acting as a file backup. My setup for this share is currently: valid users = @wheel public = no writeable = yes vfs objects = btrfs acl_xattr # acl_xattr: ignore system acls = yes # map

This might be more inclusive if I said, Linux Permissions vs POSIX ACLs vs vfs_xattr. I have recently begun to discover the power and flexibility of using POSIX ACLs (by mounting my EXT3/4 filesystems with the acl option). This solved alot of security permissions issues between Samba and Linux groups of users. As I have delved into this deeper and begun using the VFS object, vfs_xattr, things

Hi all, I have an issue for setting windows acl using smbcacls command under NFS mount folder, but smbcacls seems to not work. And the error was showed by ERROR: security descriptor set failed: NT_STATUS_NOT_SUPPORTED. I wonder to know if other ways to set security.NTACL attribute in NFS. Thank you, Jeremy

On 10/11/15 03:22, Andrew Hart wrote: > Hey, hoping I can get some guidance on how this works. > > I've got a running samba standalone setup. On one of my shares, I > want to > preserve the ACL of files as they come from the client (Win 7), in > essence > acting as a file backup. My setup for this share is currently: > > valid users = @wheel > public = no >

Hello everyone, Someone can explain me please how netlogon scripts work on Samba running on active directory mode ? Is the "logon script " parameter still working ? I'm trying setup some scripts but still have no success .

Hi David Thanks you for reply, are you sure about this? Windows and Samba SMB byte range locking feature doesn't allow this by locking regions of a single file ? From: "David Bear" <dwbear75 at gmail.com> To: "Dante F. B. Colò" <dante.colo at stwbrasil.com> Cc: "samba" <samba at lists.samba.org> Sent: Friday, April 7, 2017 1:59:56 PM

As I said in my previous (unanswered but think I got it figured out) question, I'm transitioning my 3 NT domains to a single samba server, and currently the NT group stuff is a bloody mess, and just want to redo it, and the best way for me to do this is to figure out what groups are being used, and who are members of those groups, blah blah blah. The latter is fairly easy, but I'm not

On Tue, 5 Sep 2017 11:17:56 -0300 (BRT) Dante Colo via samba <samba at lists.samba.org> wrote: > Hello > > Is there anyway to restrict a user to logon on domain or connect to a > Samba AD server only from some specific client machines ? > > Regards > Dante > > Read in 'man smb.conf' about 'hosts deny' and 'hosts allow' Rowland

Hello Marc I already tried the first option the nt 4.0 way, but pointing the script to a network path (UNC path) instead of physical path , is it possible ? Best Regards Dante F.B. Col? ----- Original Message ----- From: "Marc Muehlfeld" <mmuehlfeld at samba.org> To: "samba" <samba at lists.samba.org> Sent: Friday, May 1, 2015 2:10:35 PM Subject: Re:

Hi everyone. I ran into notorios gpo error on windows clients. When I go to my dc controller and run samba-tool ntacl sysvolcheck I get an error: ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: DB ACL on GPO directory /usr/local/samba/var/locks/sysvol/tsnr.mtt/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}

Hello James I read this article, it's not working on Windows clients. ----- Original Message ----- From: lingpanda101 at gmail.com To: samba at lists.samba.org Sent: Monday, August 1, 2016 2:05:09 PM Subject: Re: [Samba] Samba 4 ad client not syncing time On 8/1/2016 12:56 PM, Dante F. B. Colò wrote: > Hello folks > > I've deployed Samba 4.0.26 using Sernet binary packages

Hello folks, I'm trying to set NTFS permissions from command line using smbcacls , does anyone here know the flags for both subfolder and file permission inheritance ? I'm trying the following way without success, it sets inheritance for subfolder or file but never the both. smbcacls -S "ACL:user:ALLOWED/ givenflags /FULL" //127.0.0.1/share /directory

Hm, can I fix it manually? Maybe sysvolcheck stumbles on the first error and misses something more severe later on. 2015-10-03 12:09 GMT+03:00 Rowland Penny <rowlandpenny241155 at gmail.com>: > On 03/10/15 00:50, Krutskikh Ivan wrote: > >> Hi everyone. >> >> I ran into notorios gpo error on windows clients. When I go to my dc >> controller and run >>

On 04/10/15 12:00, Krutskikh Ivan wrote: > ok, I've investigated the problem more closely. First of all, I didn't > mention that I have 2 domain controllers: dc(initial) and bdc (backup). > Rsync command > > /usr/bin/rsync -XAavz --delete-after dc:/usr/local/samba/var/locks/sysvol/* > /usr/local/samba/var/locks/sysvol/ > > fires every 5 minutes on bdc. > >

A Samba server I've configured uses the VFS acl_xattr module to support Windows ACLs. I'd like to view the ACL data, in as raw a state as possible, but also in a human readable format. Is there an existing utility that does that? If not, and I need to write an application to accomplish it, which APIs would you recommend (and on which attributes)? Thanks,Steve Tice

Hi Everyone ! I note that all of samba AD server that i maintain are not so fast in terms of data transfer, more specifically none of them go over 40 MB/s , one particularly which i'm trying to find out why doesn't go over 20 MB/s , transfering data using other protocols like FTP , rsync , rsync over ssh on any of these machines i can easily achieve 80 MB/s ,i also can get the same on