similar to: Samba 4 ACL's

Greetings everyone I'm trying to set files and directories ACL's from command line on Samba 4, i known i can do it using smbcacls command but not recursively unless writng some shell scripts, i also tried the samba + ntacl command but i couldn't figure it out how to use it, could you provide me an example or another way to apply ACL's (without windows admin tools) ? Sorry for the

Hi people, I'm testing Samba 4.0.17 running as classic pdc mode under FreeBSD 10 and 9.2 , all shares are on ZFS volumes, i would like to use UFS instead of ZFS , but according the wiki page https://wiki.freebsd.org/NFSv4_ACLs nfsv4 inheritance flags works only with ZFS , i tried the parameters inherit acls and inherit permissions with module vfs_zfsacl on the UFS shares but got no success

Hello, I'm running a PDC and a secondary DC in privilegded lxc containers and try to setup a fileserver in an unprivileged lxc container. The shares of the file server are on the ZFS of the host and mapped via bind-mount. I've got the problem, that I get error messages when setting the ACLs of a samba share either via the Windows explorer or using the smbcacls command. On Windows

I work with a product that's similar to a NAS. It utilizes CentOS 6 and Samba v4.0.0-64.el6.rc4 to serve CIFS clients. The product provides "full Windows ACL support" via the acl_xattr module. The underlying file system, a FUSE implementation, provides full support for extended attributes. That much of it works remarkably well. The product supports an option to replicate shares from

Hey, hoping I can get some guidance on how this works. I've got a running samba standalone setup. On one of my shares, I want to preserve the ACL of files as they come from the client (Win 7), in essence acting as a file backup. My setup for this share is currently: valid users = @wheel public = no writeable = yes vfs objects = btrfs acl_xattr # acl_xattr: ignore system acls = yes # map

This might be more inclusive if I said, Linux Permissions vs POSIX ACLs vs vfs_xattr. I have recently begun to discover the power and flexibility of using POSIX ACLs (by mounting my EXT3/4 filesystems with the acl option). This solved alot of security permissions issues between Samba and Linux groups of users. As I have delved into this deeper and begun using the VFS object, vfs_xattr, things

As I said in my previous (unanswered but think I got it figured out) question, I'm transitioning my 3 NT domains to a single samba server, and currently the NT group stuff is a bloody mess, and just want to redo it, and the best way for me to do this is to figure out what groups are being used, and who are members of those groups, blah blah blah. The latter is fairly easy, but I'm not

This is a long-standing issue going back at least a year from what I can see in mailing list archives. Still not working as of Samba 4.8.3. I think MS broke something with one of the Windows 10 updates. In my situation, this is a brand-new 4.8.3 install. For me the crashes happen when I try to edit the share folder permissions right out of the box from whatever Samba set in there by default.

On 10/11/15 03:22, Andrew Hart wrote: > Hey, hoping I can get some guidance on how this works. > > I've got a running samba standalone setup. On one of my shares, I > want to > preserve the ACL of files as they come from the client (Win 7), in > essence > acting as a file backup. My setup for this share is currently: > > valid users = @wheel > public = no >

Hi all, I have an issue for setting windows acl using smbcacls command under NFS mount folder, but smbcacls seems to not work. And the error was showed by ERROR: security descriptor set failed: NT_STATUS_NOT_SUPPORTED. I wonder to know if other ways to set security.NTACL attribute in NFS. Thank you, Jeremy

Hello everyone, Someone can explain me please how netlogon scripts work on Samba running on active directory mode ? Is the "logon script " parameter still working ? I'm trying setup some scripts but still have no success .

> It's needed after every GPO addition and edit. There must be a root > cause to hunt down somewhere. Or is it a bug in 4.13.0 ? Yes, and no. Yes, its a bug. No, in my opionion its an old setting thats just needs some updating. Try this. samba-tool ntacl set "O:LAG:BAD:P(A;OICI;0x001f01ff;;;BA)(A;OICI;0x001200a9;;;SO)(A;OICI;0x001f01

Hi David Thanks you for reply, are you sure about this? Windows and Samba SMB byte range locking feature doesn't allow this by locking regions of a single file ? From: "David Bear" <dwbear75 at gmail.com> To: "Dante F. B. Colò" <dante.colo at stwbrasil.com> Cc: "samba" <samba at lists.samba.org> Sent: Friday, April 7, 2017 1:59:56 PM

Hi everyone, I have a Samba 4.2.3 PDC server with some shares on it. If I create a new share, it immediately has some strange ACL's. Could anyone tell me where these come from? Example: root at corrumpeer:/# cat <<EOF>>/etc/samba/smb.conf [test3] path = /tmp/test3 EOF root at corrumpeer:/# mkdir /tmp/test3 root at corrumpeer:/# chown root:users /tmp/test3 root at

Hi everyone. I ran into notorios gpo error on windows clients. When I go to my dc controller and run samba-tool ntacl sysvolcheck I get an error: ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exception - ProvisioningError: DB ACL on GPO directory /usr/local/samba/var/locks/sysvol/tsnr.mtt/Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}

Hello Marc I already tried the first option the nt 4.0 way, but pointing the script to a network path (UNC path) instead of physical path , is it possible ? Best Regards Dante F.B. Col? ----- Original Message ----- From: "Marc Muehlfeld" <mmuehlfeld at samba.org> To: "samba" <samba at lists.samba.org> Sent: Friday, May 1, 2015 2:10:35 PM Subject: Re:

Hello James I read this article, it's not working on Windows clients. ----- Original Message ----- From: lingpanda101 at gmail.com To: samba at lists.samba.org Sent: Monday, August 1, 2016 2:05:09 PM Subject: Re: [Samba] Samba 4 ad client not syncing time On 8/1/2016 12:56 PM, Dante F. B. Colò wrote: > Hello folks > > I've deployed Samba 4.0.26 using Sernet binary packages

On Tue, 5 Sep 2017 11:17:56 -0300 (BRT) Dante Colo via samba <samba at lists.samba.org> wrote: > Hello > > Is there anyway to restrict a user to logon on domain or connect to a > Samba AD server only from some specific client machines ? > > Regards > Dante > > Read in 'man smb.conf' about 'hosts deny' and 'hosts allow' Rowland

On 11/06/2019 13:13, Sebastian Arcus via samba wrote: > > On 11/06/19 11:49, Rowland penny via samba wrote: >> On 11/06/2019 11:38, Sebastian Arcus via samba wrote: >>> >>> On 11/06/19 11:07, Rowland penny via samba wrote: >>>> On 11/06/2019 10:34, Sebastian Arcus via samba wrote: >>>>> I've just upgraded a Samba AD server to 4.10.2 a

Hello folks, I'm trying to set NTFS permissions from command line using smbcacls , does anyone here know the flags for both subfolder and file permission inheritance ? I'm trying the following way without success, it sets inheritance for subfolder or file but never the both. smbcacls -S "ACL:user:ALLOWED/ givenflags /FULL" //127.0.0.1/share /directory