similar to: acl_xattr and root permissions

Hai, Tip, think in groups not users when you setup/manage you servers, it will help. Now, root = Administrator user != Administrator but when you add a user as member of domain admins... because root = "Domain Admins" Read : https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs Dont forget also the "Creator owner" and "Creator Group"

Hello, I'm attempting to set up a daily Robocopy task on a Windows Server 2016 to duplicate a large directory tree -- including data, timestamps and ACLs -- to a Samba 4.5.12 server. This is my Robocopy command: Robocopy.exe C:\source \\foo\bar /XA:SH /XJ /MIR /NODCOPY /COPY:DTSO /A+:A /ZB I noticed that for a significant number of files, Robocopy will systematically identify them as

On Tue, 28 Nov 2023 16:00:22 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > In a fresh samba AD domain i'm setting up the 'Profiles' share for > roaming profiles, following the wiki: > > https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs > >

Samba 4 Simple Samba file share, Domain Controller Users - windows 7 I am having problems getting folder and file permissions to working properly from the Windows clients. No setting I change in smb.conf have any effect on files and folders created from windows clients. (I see this kind of question a lot other places so you must be tired of it.) Smb.conf [GLOBAL] force create mode = 0770

Does you filesystem support extended attributes? What does "|getfattr -n security.NTACL |filename" return?|| On 30.01.2024 16:13, Peter Milesson wrote: > Hi folks, > > It seems that the setting acl_xattr:ignore system acls = yes reduces > Windows compatibility when defined for a share. In all attempts I have > used Windows tools (except editing smb.conf) > > Assume

On 30.01.2024 16:51, Ralph Boehme via samba wrote: > On 1/30/24 16:27, Rowland Penny via samba wrote: >> On Tue, 30 Jan 2024 16:13:41 +0100 >> Peter Milesson via samba <samba at lists.samba.org> wrote: >> >>> Hi folks, >>> >>> It seems that the setting acl_xattr:ignore system acls = yes reduces >>> Windows compatibility when defined

Hi folks, It seems that the setting acl_xattr:ignore system acls = yes reduces Windows compatibility when defined for a share. In all attempts I have used Windows tools (except editing smb.conf) Assume there is a share, where the files and folders in the share root should at least be readable by anybody having access to the share. For the sake of simplicity the following permissions apply on

Hi Rowland, Thank you for the reply and info. On Tue, Jun 13, 2017 at 11:19 AM, Rowland Penny <rpenny at samba.org> wrote: > On Tue, 13 Jun 2017 09:15:40 +0200 > Neil via samba <samba at lists.samba.org> wrote: > > > OK, this a DC and therefore you will have to do things differently from > a Unix domain member. > > You might as well remove these lines from

Mandi! Rowland Penny via samba In chel di` si favelave... > Is this on a DC ? No, is a DM. > If it isn't, Try setting it up exactly like it is shown on the > wikipage, note that you only need the 'vfs objects' line if it isn't > set in [global] Wikipage say only: Create a new share. For details, see Setting up a Share Using Windows ACLs. and

Hai, In reponse to the why i recommend that. Since this is a "windows" only share, i recomment to set it up for that usage, with results in better matching for windows rights. Resulting in better working policies. The current POSIX rights did not match to my needs and resulted in inconsistant policies. This is why i use these for profiles and sysvol. And this is my setup order:

My previous email on this topic get no answer, i try to explain me better. The problem. Simply i was (ab)used, in my previous samba NT-mode domains, to have file created with the group-owner as the UNIX primary group; now, in AD, files get created group-owned by Windows primary group, eg 'Domain Users'. This simply 'breaks' most of my ACLs setup. I've read:

I am following this guide https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs But hitting issues with setting permissions on the share in Computer Management in the windows AD DC UI. Every time I try I get the error dialog with +----------------------------------------------------------------+ | An error occurred while applying security information to | |

Hello, I am currently struggling to understand the samba share configuration "acl_xattr:ignore system acls". I followed the wiki page https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs to configure shares for windows clients. My observations so far: I start with "acl_xattr:ignore system acls=no" and create a samba share. Afterwards, I use a windows client

Hi, I'm using Samba 4.6.5 and I have installed as follows: wget -c https://download.samba.org/pub/samba/stable/samba-4.6.5.tar.gz tar -xzvf samba-4.6.5.tar.gz cd samba-4.6.5 ./configure --enable-debug --enable-selftest make make install It seems that is working properly, however I can't create or update GPO with Windows Group Policy Management tool. When I try, "Denied

We are in the process of switching over shares from the old way of doing this to Windows ACLs: disable "valid users" "write list" etc and set ACLs via Windows Explorer ... And I struggle. I am asking for a way to "start ACLs from scratch". I ran "setfacl -b -R" on the dir on the samba server and did a "chown -R root:10513" to hand it to

On Tue, 30 Jan 2024 16:13:41 +0100 Peter Milesson via samba <samba at lists.samba.org> wrote: > Hi folks, > > It seems that the setting acl_xattr:ignore system acls = yes reduces > Windows compatibility when defined for a share. In all attempts I > have used Windows tools (except editing smb.conf) Lets walk through the relevant part of that parameter: 'ignore system

On Wed, Aug 24, 2016 at 04:06:42PM +0200, Ralph Böhme via samba wrote: > > Yeah, as much as I'd like to avoid adding a new option, I guess we > have to do something about it, my latest take on this is > > acl_xattr:default acl style = [posix|windows] > > This parameter determines the type of ACL that is > synthesized in case a file or

Mandi! Rowland Penny via samba In chel di` si favelave... >> acl_xattr:default acl style = windows >> acl_xattr:ignore system acls = yes > Why have you added those two last lines ? Ahem, really you need an answer?! ;-) I don't remember... ;-((( >> What i'm missing?! Thanks. > Well, because you have added this line: > acl_xattr:ignore system

> Rowland Penny <rpenny at samba.org> hat am 30. März 2017 um 16:46 geschrieben: > If you look here: > > drwxrwx---+ 2 RUBENS\gf root 4096 Mär 30 14:09 gf > > There is a '+' sign after the permissions, this means that there are > ACLs set on the directory, try running 'getfacl /fs/gf' Ok, first /fs/mrtx, then /fs/gf: root at fs:~# getfacl /fs/mrtx

In a fresh samba AD domain i'm setting up the 'Profiles' share for roaming profiles, following the wiki: https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs leading to: [profiles] comment = Network Profiles Share csc policy = disable map acl inherit = Yes path = /srv/samba/profiles read only =