similar to: Allow single sub-folder access on an otherwise prohibited share - why does the solution work?

> > Why is the second method working (and working as expected)? The only info > I found on the web is that DENY takes precedence over ALLOW, which does not > explain my finding, right? > In Windows, explicit permissions take precedence over inherited permissions, even inherited deny permissions. https://technet.microsoft.com/en-us/library/cc783530(v=ws.10).aspx Samba apparently

Hi, we are migrating our fileserver from an old novell netware system to a samba4 system. With netware all ACL were stored in a database, so that it was possible to quickly find which files one user or group had access to. I'm investigating the possibility of writing ntfs ACL on a database with samba. The module vfs_acl_tdb is able to do this, but values are hashed so that the db is not

HI , We have come up with a utility called smbxcals which is derived from smbcals, where we no need to establish the client connection to perform ACLs operations, by just giving the absolute path as a paratmeter can list and set ACLs as below, # smbxcacls /root/FOO/ REVISION:1 CONTROL:0x8404 OWNER:DEMOSP\Administrator GROUP:DEMOSP\Domain Users ACL:BUILTIN\Administrators:ALLOWED/OI|CI|I/FULL

On Fri, Mar 18, 2016 at 10:08:42AM -0700, Jeremy Allison wrote: > On Wed, Mar 16, 2016 at 11:13:12AM +0100, Matteo Maretto wrote: > > Hi, > > we are migrating our fileserver from an old novell netware system to > > a samba4 system. With netware all ACL were stored in a database, so > > that it was possible to quickly find which files one user or group > > had

I use rsync for backing up windows. After a restore of Desktop.ini I recognize that the hidden attribut and the system attribut will not been restored. I know, this are no unix attributes. But is there a way to backup and restore the windows attributes too? Thanks Matthias -- Don't Panic

We are happy to announce that the list of accepted sessions is available online [0]. The hacker's lab will be organized similar to the one at the US 2016 meeting [1]. To this end, we rely on you to send us topics via mail: eurollvm17-orga at cs.uni-saarland.de We will then look for knowledgeable volunteers and have a selection process to determine which are most interesting for the

Hi, The security tab of Windows does not accept unix groupnames, although they do work in icacls.exe on the commandline. It displays existing group rights, and allows to modify them, but does not allow to add new rights for unix groups, and the search function also does not list unix groups. Is there a trick to make them work in the security tab? I don't have OUs or AD-groups, this is classic

> Hi, this is because when you use '--as-sddl', the python code does this: > > if as_sddl: > try: > domain_sid = security.dom_sid(samdb.domain_sid) > except: > raise CommandError("Unable to read domain SID from > configuration files") >

Hi, Is there any drawbacks of using "nt acl support = No" on a share ? I mean breaking applications ? I do not want users to change permissions from Windows. With nt acl support = No, icacls returns no permissions Users have Full Control. It's fine for me that Security tab disappears. Users can access Linux shell, and i only want users to modify permissions from Linux.

Hi, I need to set ACLs on a samba server, and are using icacls in Win7. It takes several hours to edit an ACL with inheritance, affecting a directory tree with 300,000 files. Server cpu > 70%, client cpu < 20%. Is there a way how I can speed this up? Using "setfattr -R" in Linux does it in approximately 2 minutes, but I want real Windows ACLs. There are 300.000 files in a

Greetings, All! I've discovered a nasty mismatch in my recently upgraded domain. It seems that a number of builtin groups have mappings in idmap.ldb that overlap with posixAccount mappings in the sam.ldb. Namely, # file: var/lib/samba/sysvol/ads.example.com/scripts/ # owner: root # group: 544 user::rwx user:root:rwx group::rwx group:544:rwx group:30000:r-x group:30001:rwx

Hello, I am very new in R so I am so sorry for this question. I have the Barro-Lee data set which contains 98 countries and I want to run the regressions only for the Latin America countries, so what do you recomend? How can I delete all the other countries or how can I select the countries of Lat. Am. thank you this is the list of countries SHCODE COUNTRY NAME WBCTRY

James Wright <12wrigja at gmail.com> 9:56 PM (13 minutes ago) to samba Hi Samba users, I have a Samba server with a single share backed by a ZFS pool / collection of datasets. I can correctly navigate around the share, but the free space reporting within clients is inaccurate for various directories, especially those that are themselves setup as datasets in ZFS and have quota applied to

ACL management can be done for SMB2/SMB3 ACLs with two common tools depending on your preference. smbcacls (somewhat similar to using cacls.exe or icacls.exe in Windows but specifying the UNC name rather than a local path name). smbcacls sets up and tears down a network connection each time it is run and uses Samba user space code. or setcifsacl/getcifsacl (which calls cifs.ko to access the

Hi! I have few question to developers of VFS ACL modules (acl_tdb and acl_xattr): 1. Do you plan to extend quantity of entries in acl_tdb (now I can write 22 user ACLs plus CREATOR OWNER, CREATOR GROUP, domain users and everyone) 2. Do you plan to fix few ACLs eg. Traverse folder / Execute file (to traverse I need to enable additional permission List folder / read data to traverse through

On two Samba 4.4.2/4.4.3 member servers, "samba-tool ntacl get --as-sddl" gives the following error: ERROR: Unable to read domain SID from configuration files Which configuration files is it referring to? Without "--as-sddl" the command gives a correct output. It would be nice to get the permissions in sddl format... The same command works as expected on two AC DCs.

Recently configured a client with new server Unfortunately the PDC / Backup Machine is an NT4.0 Machine, {Updated with all current Service packs}\ I configured several departmental servers with FreeBSD & samba, these then push files to the NT Machine for nightly backup, one at a time through perl script. I have also configured a samba server to run WINS and DHCP only, for the network. All

On 2019-02-20 at 22:11 -0800 James Wright via samba sent off: > I read over the documentation for both the 'dfree' and 'get quota command' > options, but it seems that the paths those pass as their first parameter > are useless to me, as they mostly seem to be the share's root (represented > as '.'), not the actual path being queried. you might have a look

Thank you for your reply. If you happen to read the post of 11/22, you will notice that it was not me who spoke ill of Samba. I put my bets on other people being able to figure it out; I hope that one of them will help me. Sincerely jimc

Hello, Documentation mentions that Windows service resource provider "can start, stop, enable, and disable services". Is it possible to create (register) a service using this provider? I''m running stand-alone Puppet agent 3.4.2 on Windows. Thanks, Igor. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To