similar to: ACL set in Windows not set in Samba

Hi Rowland, Thanks for replying again. On 13 May 2018 at 18:12, Rowland Penny via samba <samba at lists.samba.org> wrote: > On Sun, 13 May 2018 17:39:39 +0200 > Viktor Trojanovic via samba <samba at lists.samba.org> wrote: > > [...] > > > username map = /etc/samba/samba_usermap > > What is in the 'samba_usermap' ? > !root =

On Sun, 13 May 2018 17:39:39 +0200 Viktor Trojanovic via samba <samba at lists.samba.org> wrote: > Setup: Samba AD DC and Samba AD Member Server, Win10 clients only. > Samba version 4.8.1 > > Has something changed recently in the way ACL's are supposed to work? No > My existing shares work just fine but any ALC changes I make using > Windows are ignored in Samba.

Hello, I'm Oliver and I need help for a experiment. I have a sharing with Samba version 3.2.5, my distribution Linux is Debian(Lenny) and the acl version is 2.2.47. Below my configurations files: #/etc/fstab /dev/sda3 /shared reiserfs defaults,acl 0 1 #smb.conf [data] comment = files path = /shared inherit acls = yes inherit permissions = yes map acl inherit = Yes #

On 27.10.2015 11:17, Rowland Penny wrote: > On 27/10/15 09:34, Viktor Trojanovic wrote: >> >> >> On 27.10.2015 09:05, Rowland Penny wrote: >>> On 26/10/15 22:35, Viktor Trojanovic wrote: >>>> >>>> >>>> On 26.10.2015 23:03, Rowland Penny wrote: >>>>> On 26/10/15 21:38, Viktor Trojanovic wrote: >>>>>>

>> Side question: How is it even possible that Windows "remembers" the >> ACL it sets but it's not visible on Linux when using getfacl? Windows ACLs are being stored in Extended Attributes using the acl_xattr vfs module. Linux ACLs are not there because the line acl_xattr:ignore system acls = yes is telling Samba not to write them. On 13 May 2018 21:25, Viktor

>> Side question: How is it even possible that Windows "remembers" the >> ACL it sets but it's not visible on Linux when using getfacl? Windows ACLs are being stored in Extended Attributes using the acl_xattr vfs module. Linux ACLs are not there because the line acl_xattr:ignore system acls = yes is telling Samba not to write them. On 13 May 2018 21:25, Viktor

On 27.10.2015 12:38, Rowland Penny wrote: > See inline comments: > > On 27/10/15 11:17, Viktor Trojanovic wrote: >> >> >> On 27.10.2015 11:17, Rowland Penny wrote: >>> On 27/10/15 09:34, Viktor Trojanovic wrote: >>>> >>>> >>>> On 27.10.2015 09:05, Rowland Penny wrote: >>>>> On 26/10/15 22:35, Viktor Trojanovic

I have 2 servers I'm keeping synch'ed via rsync intel rh9 boxes with 2.4.20 kernel with xfs (1.3.0), acl, quota... and ootb rsync 2.5.5 rpm it works fine since a while recently I created a directory with restricted access, and I get "permission denied" error messages. this directory named RESTRICTED belongs to user "user1" group "group1" and has drwxrwx---

I run a very small Samba AD, consisting of a Samba AD DC and a Samba AD Member Server, acting as file server. Today, I added a new user to the AD but I simply can't manage to get access to the file server - only for this user, all others are working fine. My AD is rfc2307 based, so I manually have to add UID's. I did so for the new user, the ID is within range and not in use. I double

Hi, a more specific subject... -| -----Original Message----- -| From: -| samba-bounces+dirk.laurenz=fujitsu-siemens.com@lists.samba.o -| rg -| [mailto:samba-bounces+dirk.laurenz=fujitsu-siemens.com@lists -| .samba.org] On Behalf Of Laurenz, Dirk -| Sent: Monday, November 01, 2004 1:48 PM -| To: samba@lists.samba.org -| Subject: [Samba] Problem with 3.0.7 -| -| Hello everybody,

Hello, I'm looking for a solution to my problem : i have a samba server with ldap auth on Debian ETCH. I need to configure this samba for multi-group and multi-users. Example : user 1 (from group1) have to see his own directory (for writing), his group' directory (for writing and sharing) but also the "homes" of others users from this group... user2 (from group2)

On 27.10.2015 09:05, Rowland Penny wrote: > On 26/10/15 22:35, Viktor Trojanovic wrote: >> >> >> On 26.10.2015 23:03, Rowland Penny wrote: >>> On 26/10/15 21:38, Viktor Trojanovic wrote: >>>> I joined a Samba AD member server (file server) to a Samba AD DC. >>>> This seems to have worked. However, if I try to access the file >>>>

Inside a single directory, I have 2 subdirectories: dirname=working (root.root rwsrwsr-x) user::rwx group::rwx user:user1:rwx group:group1:rwx default:user::rwx default:group::rwx default:user:user1:rwx default:group:group1:rwx dirname=controlled (root.root rwsrwsr-x) user::rwx group::rwx group:group2:rwx default:group:group2:rwx default:user::rwx default:group::rwx The idea being that files

On 10/09/2016 02:51 AM, Rowland Penny via samba wrote: > Have you by any chance got another 3001108 'xidNumber' in idmap.ldb ? > If you give a user a 'uidNumber' attribute, the contents of this will be > used instead of the 'xidNumber' in idmap.ldb, hence you do not need to > (and probably shouldn't) use numbers in the '3000000' range. I managed to

On 10/09/2016 12:14 PM, Rowland Penny via samba wrote: > On Sun, 9 Oct 2016 11:50:42 -0600 > "Paul R. Ganci via samba"<samba at lists.samba.org> wrote: > >> >On 10/09/2016 02:51 AM, Rowland Penny via samba wrote: >>> > >Have you by any chance got another 3001108 'xidNumber' in >>> > >idmap.ldb ? If you give a user a

Hi, I think I've narrowed down my problem to the fact that the group mapping is not giving me the same GID for all 'equivalent' groups, as seen here: $ net groupmap list DOMAIN\Group1 (S-1-5-21-620321403-24207062-1845911597-172256) -> unixgrp1 $ getent group unixgrp1 unixgrp1:x:203: $ getent group DOMAIN\\Group1 DOMAIN\Group1:x:10001:DOMAIN\User1 This means that the GID of

I've spent some time updating, upgrading and generally consolidating an old Samba AD. I've managed to remove a very old unsupported (4.2) Samba AD DC following migration to a couple of new DC's - that seems to have worked out OK. Workstation logons and GPO's working fine. I'm now left with one problem after joining a new Samba (4.5.12) member server to the domain for file

On 17/11/15 16:57, Viktor Trojanovic wrote: > Hi Mathias, > > Thanks for replying. It seems you're describing the situation on the > AD DC. Computer and user mode access to my DC works fine and without > any issues but I can't access the shares of my *member* server *in > computer mode*. In user mode, it all works just fine. > > Viktor > > On 17.11.2015

Hello, I've been setting up new file server using samba 4.8.3 (centos 7 RPM), as samba 4 AD member server using my earlier smb.conf when I realised that I was  previously somewhat circumventing the SeDiskOperatorPrivilege by using "admin users map" to SAMDOM\Domain admins" parameter in smb.conf. I decided to change my smb.conf and setup shares following samba wiki. All

Hello, I am experiencing problems with auto directory creation for user shares. I have samba instance that is authenticated against samba PDC, on PDC i have 2 groups, group1 and group2. What i want to do now is to have separate folders for user shares for each group. so /mnt/share/group1/user1 would be for user1 in group 1 and /mnt/share/group2/user2 would be folder for user2 in group 2 root