similar to: Unable to edit permissions on member server share, users don't have access.

Hello List! I have a Samba AD domain with two virtualized DC's running 4.1.15 and 4.1.17. I have had two member file servers with odd permissions problems that I've now given up on, and decided to start fresh. I have created a File server (FS3) with Debian wheezy, built samba 4.1.17 from source, with configure options of : --with-ads --with-shared-modules=idmap_ad ... and placed the

On 27/02/15 19:09, Shane Robinson wrote: > Hello again List, Marc, and Louis! > > I'm afraid my message from yesterday may have been TL;DR. The short version > is as follows: > > Following the wiki's for AD member server (building from source on Debian > Wheezy) and Setting up shares with Windows acls did not give the expected > results > > First, I needed to

On 27/02/15 21:00, Shane Robinson wrote: > Hi Rowland, > > I'm also not an expert, but with the amount of help you provide on the list, > I will defer to you. > > I'd love to know your rational for prefering the "change ownership to > administrator" approach over the "change group to Domain Admins approach". > If it's just gut, that's

On 27/02/15 19:46, Shane Robinson wrote: > Hello all, > > Sorry about the top-posting. > > I have added the bit about the linking (YAY!, I'm helping!). > > Now if we can clear up the ACL issue, this will be a great day! > > Summary: To edit ACL's from Windows on a Debian Member server, we need to > either > 1) map the domain admin to root OR > 2) give

On 27/02/15 20:07, Shane Robinson wrote: > Hi Rowland, > > Chown to Administrator seems less flexible than Chgrp to Domain Admins on > the face of it. You could add/remove users from the Domain Admins group, > which allows/denies them the ability to change the permissions on the share. > By changing the owner to Administrator, only those credentials would have > that ability,

> > > Yes wbinfo shows the user but does 'getent passwd iuser' show > > > anything ? > > > > # wbinfo -i iuser > > iuser:*:4294967295:4294967295:iuser:/home/DOMAIN/iuser:/bin/false > > > > > > > > # getent passwd iuser > > iuser:*:4294967295:4294967295:iuser:/home/DOMAIN/iuser:/bin/false > > > > >

Greetings, All! I have an extremely strange issue. I'm using Ubuntu 14.04 and after upgrading Samba to 4.3.11+dfsg-0ubuntu0.14.04.6 I'm unable to access third level of subdirectories on shares. ACLs are even on both 2nd and 3rd levels, but I get access denied no matter what I do. $ getfacl . Android/ Android/The\ Settlers\ HD/ # file: . # owner: anrdaemon # group: domain\040users

Hello again List, Marc, and Louis! I'm afraid my message from yesterday may have been TL;DR. The short version is as follows: Following the wiki's for AD member server (building from source on Debian Wheezy) and Setting up shares with Windows acls did not give the expected results First, I needed to link libnss_winbind.so to /usr/lib/x86_64-linux-gnu for winbind to work. Marc - may I

Greetings, Rowland Penny via samba! > On 08/06/2023 13:53, Andrey Repin via samba wrote: >> Hello Rowland Penny, >> > Thursday, June 8, 2023, 2:10:39 PM, you wrote: >> > > >> On 08/06/2023 11:41, Andrey Repin via samba wrote: >>>> Greetings, All! >>>>> I've added a new DC to the working AD, transferred FSMO roles (checked, all 7

If you have "follow symlinks" In you smb.conf Try removing it, or set it to "follow symlinks = yes" And see what happens. At least these are affected. Ubuntu 4.3.11 https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1675698 Debian 4.2.14 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858564 Greetz, Louis > -----Oorspronkelijk bericht----- > Van:

On Fri, 9 Jun 2023 00:47:07 +0300 Andrey Repin via samba <samba at lists.samba.org> wrote: > Greetings, Rowland Penny via samba! > > > > > On 08/06/2023 13:53, Andrey Repin via samba wrote: > >> Hello Rowland Penny, > >> > Thursday, June 8, 2023, 2:10:39 PM, you wrote: > >> > > >> On 08/06/2023 11:41, Andrey Repin via samba

Hello again Rowland, list! Sorry for the delayed response, and top posting. To recap: I'd like to complete the member server wiki so that ACLs can be set from windows without taking undocumented steps. The three ways I've found to do this are: 1) map root to administrator. (LPH VanBelle's script uses this option.) 2) chmod 0775 then chgrp "<DOMAIN>\Domain Admins"

On 08/06/2023 13:53, Andrey Repin via samba wrote: > Hello Rowland Penny, > > Thursday, June 8, 2023, 2:10:39 PM, you wrote: > > > >> On 08/06/2023 11:41, Andrey Repin via samba wrote: >>> Greetings, All! >>>> I've added a new DC to the working AD, transferred FSMO roles (checked, all 7 >>> are ok') and (supposedly) correctly

Hello all, Sorry about the top-posting. I have added the bit about the linking (YAY!, I'm helping!). Now if we can clear up the ACL issue, this will be a great day! Summary: To edit ACL's from Windows on a Debian Member server, we need to either 1) map the domain admin to root OR 2) give explicit permissions to Domain Admins with a chmod 0755 and chgrp "MYDOM\Domain Admins"

Hi Rowland, *Apparently I accidentally replied directly to you instead of the list, this is from a couple days ago...* First off, thanks again for your help, your insight is invaluable. I have completed the changes you suggested: I've used ADUC to remove the NIS Domain and UID/GID number from the following Users/Groups: - group policy creator owners - enterprise admins - schema

On 25/09/2019 16:25, Roy Eastwood via samba wrote: > I have set up a share on a domain member server and am attempting to set the ACLs from a domain-joined Windows 7 computer as per the > WiKi at https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs > > I want to use one of the BUILTIN groups, Backup Operators to be able to have Full Control on files in the share (as

Hi Rowland, Chown to Administrator seems less flexible than Chgrp to Domain Admins on the face of it. You could add/remove users from the Domain Admins group, which allows/denies them the ability to change the permissions on the share. By changing the owner to Administrator, only those credentials would have that ability, no? What advantages do you predict with the change owner approach? What

On Thu, 22 Sep 2016 19:23:05 -0400 Jason Secord via samba <samba at lists.samba.org> wrote: > *Another reply that was accidentally sent to the wrong address...* > > I ran another test of a share on the raid array after making the > changes you suggested Rowland. I reset the ACLs > on /mnt/md0/samba_shares/test as outlined in the wiki and set the > default group to domain

Hi all, I am referring to the official wiki here: https://wiki.samba.org/index.php/Setting_up_a_home_share#Setting_up_the_share_and_filesystem_permissions I was struggling around for many hours before I have found out what caused my issue. Well, I have created the [home] share exactly as epxlained on the How-To, in detail: I am creating on the linux prompt at the member server the directory with

On Sun, 25 Sep 2016 00:49:25 -0400 Jason Secord via samba <samba at lists.samba.org> wrote: > Hi Rowland, > > From the top down, I'm going to try and cover every step involved in > the wiki and give you as much info as I can in the hope that we can > get this issue resolved, or at least determine that there is nothing > wrong with my config and that the underlying