similar to: strange default share ACLS's, where do they come from?

Hello, I'm running a PDC and a secondary DC in privilegded lxc containers and try to setup a fileserver in an unprivileged lxc container. The shares of the file server are on the ZFS of the host and mapped via bind-mount. I've got the problem, that I get error messages when setting the ACLs of a samba share either via the Windows explorer or using the smbcacls command. On Windows

Hi everyone, I've noticed a problem with Debian wheezy + samba 3.6.6 configured with acl_xattr in my configuration. The following test sequence causes Windows Explorer to report incorrectly ordered permission entries: 1) Map a share as with "admin" user credentials to a drive letter on a Windows client 2) Create a folder at the root of the share "rootfolder" 3) Create a

This is a long-standing issue going back at least a year from what I can see in mailing list archives. Still not working as of Samba 4.8.3. I think MS broke something with one of the Windows 10 updates. In my situation, this is a brand-new 4.8.3 install. For me the crashes happen when I try to edit the share folder permissions right out of the box from whatever Samba set in there by default.

Hi, I can not get the inheritance the way I want. My goal is, (1) to create a new Set of ACLs at directory "HERE" and (2) "set" the Windows checkbox "Replace all child object permission entries with inheritable permission entries from this object" My command looks like: smbcacls //mynas/share1 some/path/HERE

Hi, I haven't been able to find any doco that explicity states whether it is supported, so I am hoping someone out there can answer the following questions: Is it possible for a folder/file in a samba share to have win2k security permissions assigned to it? For example, I want my samba server to participate in an existing Win2k domain. I want users to be able to set their own

> Domain Admins is mapped as ID_TYPE_BOTH in idmap.ldb on the DC, this makes Domain Admins a group and a user. I looked on a brand new test DC (with nss-winbind), and it looks like it doesn't work right with winbind: root at dc1# ls -l /var/lib/samba/sysvol/ad-test.vx/Policies/ total 16 drwxrwx---+ 4 3000004 ADTEST\domain admins 4096 Jun 13 21:41 {31B2F340-016D-11D2-945F-00C04FB984F9}

hi. sorry for the "dumb" question, but I'm failing to figure out where the information printed by smbcacls come from. I have a 3.4.x server with basic settings, few shares and not much more. Share's access is controlled by unix file permissions. Filesystem has "acl" enabled, but no acl set up, so the standard unix permissions are being used. Still I have problem for a

On 11/06/2019 13:13, Sebastian Arcus via samba wrote: > > On 11/06/19 11:49, Rowland penny via samba wrote: >> On 11/06/2019 11:38, Sebastian Arcus via samba wrote: >>> >>> On 11/06/19 11:07, Rowland penny via samba wrote: >>>> On 11/06/2019 10:34, Sebastian Arcus via samba wrote: >>>>> I've just upgraded a Samba AD server to 4.10.2 a

OK so I've got samba-3.0.11 compiled with ACL support. I've running 2.4.25 with the ACL/ATTR patch applied. I can read and set ACLS's using the getfacl/setfacl programs. ldd /usr/sbin/smbd shows it's linked to libattr.so.1 and libacl.so.1. I can read ACL with the smbcacls program, but when I try to set them I get: ERROR: Unable to open credentials file! Also from the

On Thu, Jun 08, 2017 at 09:23:50AM -0700, Andy Qian via samba wrote: > Hi, all, > > we run smbcacls tool from linux machine to set file permissions on > windows server. > > here is our environment: > > > Linux machine: Ubuntu 14.04 LTS, kernel version 3.13.0-112-generic > > Samba version: 4.3.11 > > Windows machine: Windows server 2012 > > >

Hello folks, I'm trying to set NTFS permissions from command line using smbcacls , does anyone here know the flags for both subfolder and file permission inheritance ? I'm trying the following way without success, it sets inheritance for subfolder or file but never the both. smbcacls -S "ACL:user:ALLOWED/ givenflags /FULL" //127.0.0.1/share /directory

Hi, all, we run smbcacls tool from linux machine to set file permissions on windows server. here is our environment: Linux machine: Ubuntu 14.04 LTS, kernel version 3.13.0-112-generic Samba version: 4.3.11 Windows machine: Windows server 2012 the cmd we run is something like following: /usr/bin/smbcacls -U 'Domain\Administrator'%'pwd' '//win_server/testshare'

(Is this the right place to post such question?) I can't seem to grasp the right syntax for smbcacls This is a 306rc2, security=user system w/ passwords set via smbpasswd, and smbclient gives expected r/w behavior.I've seen the same on a 302a security=domain or ads system (I believe), which is why I think I'm misinterpreting something (or is smbcacls broken??) -- or what

On Thu, Jun 08, 2017 at 02:40:49PM -0700, Jeremy Allison wrote: > On Thu, Jun 08, 2017 at 06:43:34PM +0200, Ralph Böhme via samba wrote: > > Hi Andy, > > > > On Thu, Jun 08, 2017 at 09:23:50AM -0700, Andy Qian via samba wrote: > > > The smbcacls cmd worked before till recently. Due to the recent Windows > > > patch which disables SMB v1, we have to add the

I have installed Samba 3.5.2 and setup the service as a Domain member server, NT-4 style. Everything appears to be working just fine (NSS winbind is installed). The only problem is that the output from smbcacls when contacting this Samba server does not include the domain to which the server is joined. When I use smbcacls to test out an existing Windows server, the domain name is appended in

I am able to change owner from User1 to Administrator at Domain Controller/active-directory machine. And after that from linux box, using smbcacls -C DOMAIN\\User1 ...... command I am able to change owner from Administrator --> User1. But changing owner from User1 to Administrator using smbcacls is not working.   User1 is in Domain admins, Administrators , backup operators

Hey, hoping I can get some guidance on how this works. I've got a running samba standalone setup. On one of my shares, I want to preserve the ACL of files as they come from the client (Win 7), in essence acting as a file backup. My setup for this share is currently: valid users = @wheel public = no writeable = yes vfs objects = btrfs acl_xattr # acl_xattr: ignore system acls = yes # map

OS: CentOS release 5.4 (Final) Postfix: postfix-2.5.1-1.mysql.sasl2.vda.rhel5 Postfixadmin: 2.3 Dovecot: 1.2.11 Squirrelmai: 1.4.20 Configuration based on http://wiki.dovecot.org/HowTo/DovecotLDAPostfixAdminMySQL which I have updated a few time ;) Using postfixadmin I have create a virtual domain and created testing users (test1 ? test6). With Squirrelmail these users can login but issues arise

Hello, I am trying to setup an Email Server with Exim, dovecot and sieve support. I am not sure about the settings for Sieve, right now its's not working properly: user: test3 at gewaltphantasien.de maildir: /var/mails/gewaltphantasien.de/test3 I have the .dovecot.sieve file in the root dir of the users emails: root at ubuntu:/var/mails/gewaltphantasien.de/test3# cat

On Thu, Jun 08, 2017 at 06:43:34PM +0200, Ralph Böhme via samba wrote: > Hi Andy, > > On Thu, Jun 08, 2017 at 09:23:50AM -0700, Andy Qian via samba wrote: > > The smbcacls cmd worked before till recently. Due to the recent Windows > > patch which disables SMB v1, we have to add the following line into the > > [global] section in smb.conf file on Linux machine so that