similar to: Fileserver, AD, ACLs

On Mon, 5 Sep 2016 15:06:58 +0200 mathias dufresne via samba <samba at lists.samba.org> wrote: > Hi all, > > Here is the smb.conf used on my test files server. > _________________________________________________________________________ > [global] > workgroup = AD > realm = AD.DOMAIN > netbios name = SMBFS20 > > security = ads

Sorry, but I didn't really know how to word this. I have Univention Corporate server running as AD DC, with a UCS running as a member fileserver. One win10 client has file permission issues after lack of reboot or logout/login in roughly a weeks time. Symptom = can't write to shares even though permissions are correct. Sometimes files are created without honoring default ACL. Could this

Mandi! L.P.H. van Belle via samba In chel di` si favelave... [ I've written to Rowland, offlist, supposing a debian specific trouble... because we are back here, i change subject. ] > I have had a look in the bug reports. > See : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816301 Seems mildly related. I was on jessie samba 4.2 and i've just done the

> > I don't see where exactly the ways differ. I already played with idmap settings and keytab. It makes no difference. > > BTW the wiki entry does not explain how to create the keytab, so the setting is not really useful if you just follow that page. > > With the 'old system' you just have one range, this is now depreciated > and you should use the new

In a fresh samba AD domain i'm setting up the 'Profiles' share for roaming profiles, following the wiki: https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs leading to: [profiles] comment = Network Profiles Share csc policy = disable map acl inherit = Yes path = /srv/samba/profiles read only =

I try to set up a Samba4-based Fileserver in an Samba3-DC enviroment. Filesystem is ext4, CIFS + NFS4 should be provided. The same ACLs should be used over both protocols. With Samba 3 this was possible (using POSIX 1003.1e DRAFT 17 ACLs only) . How can I do the same with Samba 4 ? Posix-ACLs set on the server with setfacl are recogniced on a windows-client. But every change I do on a

On Tue, 28 Nov 2023 16:00:22 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > In a fresh samba AD domain i'm setting up the 'Profiles' share for > roaming profiles, following the wiki: > > https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs > >

On Tue, 8 Sep 2020, Rowland penny via samba wrote: > On 08/09/2020 13:55, Harald Hannelius wrote: >> >> On Tue, 8 Sep 2020, Rowland penny via samba wrote: >>> On 08/09/2020 13:27, Harald Hannelius via samba wrote: >>>> >>>> Hello, >>>> >>>> I have users in Samba AD with uid- and gidnumbers. I also have group

On 15/04/16 13:43, L.P.H. van Belle wrote: > Ok, i have tested a bit more also. > > Now i have this problem also on some other servers with D. Jessie. > > The sernet 4.2.11 debian wheezy works fine as far i can see now. > > All my member servers have these settings ( see below),. > Versies used are > 4.1.17 (all ok) ( debian jessie packages ) > 4.2.20 (fail wbinfo -u)

Hi, I have detected a very low performance with cp command or any write with CIFS mount (Netapp Storage), <15mb/s. Read performance is similar Local disk perofrmance is correct >100mb/s fstab entry is : //netapp/resource$/folder /mnt/test cifs username=u,password=p,domain=dom,iocharset=utf8,uid=1001,gid=1000,dir_mode=0700,file_mode=0700,auto Server is SLES 12 SP3 with latest updates

Mandi! Rowland Penny via samba In chel di` si favelave... >> acl_xattr:default acl style = windows >> acl_xattr:ignore system acls = yes > Why have you added those two last lines ? Ahem, really you need an answer?! ;-) I don't remember... ;-((( >> What i'm missing?! Thanks. > Well, because you have added this line: > acl_xattr:ignore system

Mandi! Rowland penny via samba In chel di` si favelave... > > And my Windows client works happily! > If you only had Unix clients, then you could stick with this way of doing > things, but you have Windows clients, so you need to work the Windows way > and make your Unix clients work the same way. No. In these years i've worked with 'POSIX ACLs', setting up scripts

Just wanted to say very interesting thread! I would like to share my experience as well if that's alright. I have noticed when using the ignore system acls = yes value, when checking on the Windows side permissions it appears as the following (copying from Peter here): -Permissions list- root (Unix User\root) Full Control This folder only Domain Admins (Private\Domain Admins) Read,

On Fri, 23 Feb 2024 08:13:08 +0100 Nicolas Boiss? via samba <samba at lists.samba.org> wrote: > Hello, > > I have a Fedora server, part of a domain, on which various shares are > configured. > > For one share, I want to set up permissions according to the groups > to which the users belong. But it doesn't work. For example, I want > the share to be accessible

On 30.01.2024 16:51, Ralph Boehme via samba wrote: > On 1/30/24 16:27, Rowland Penny via samba wrote: >> On Tue, 30 Jan 2024 16:13:41 +0100 >> Peter Milesson via samba <samba at lists.samba.org> wrote: >> >>> Hi folks, >>> >>> It seems that the setting acl_xattr:ignore system acls = yes reduces >>> Windows compatibility when defined

I was testing Samba 4.5rc2 with an existing smb.conf file that I have been using since Samba 4.1.x and found that I cannot access data in the share on Windows 2012 (my AD server), a Windows 2008 client or on a Ubuntu 16.04 client. I built a new version of Samba 4.4.5 using the same procedure as I did for building 4.5rc2 and the 4.4.5 Samba version worked with my smb.conf file. I then created a

Hi, aLL Using Samba-4.3.5 as a AD-member - fileserver. It's running in OpenVZ container (ProxMox VE). Domain is also build on Samba-4.3.5 (another VM). Fileserver's VM is mounted with acl, user_xattr options, Samba compiled with ACL support. There're domain users, for example, "usr1", "usr2". They're in domain group "dg1". There's a filepath

Hi folks, Thanks everybody for your information. I have continued my testing and have got the following to report: Setting up the share with either root:"Domain Admins", or "Administrator":"Domain Admins" as owner, while setting permissions on the share folder to 0777 from the start, and acl_xattr:ignore system acls = yes on the share definition in smb.conf (I

Gentlemen, I am struggling to solve this problem. My file server Samba 4.4.5. Even the administrator user (domain admin) could not write to the share. Could someone give me a hint, in order to solve this problem? shared folder: /mnt/data Folder permissions: # getfacl /mnt/data/teste/ getfacl: Removing leading '/' from absolute path names # file: mnt/data/teste/ # owner: ricardo

Perhaps everyone's clear on this - but I thought I should add this, just in case. (And perhaps the clarification should be added to the wiki.) When it says "Samba will ignore the standard Unix system ACL's (ugo)" This is technically true. HOWEVER! It only ignores the standard Unix system ACLS as it applies to SAMBA permissions. This won't allow Samba to read files that the