similar to: Samba-created files with POSIX ACLs gaining execute bit

Hai, The docs shown are a bit old, yes, i suggest start reading these. https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs https://wiki.samba.org/index.php/Setting_up_a_Share_Using_POSIX_ACLs Look at the smb.conf man and search for acl ( or exec ) Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens

Hi all, The part that I don’t understand is why the behavior is different when there are ACLs involved. Take the below example: # This share is chmod 777, [share1] path = /srv/share1 # mode is 0777, no ACLs readonly = no create mask = 0660 [share2] path = /srv/share2 # mode is 0770, ACLs readonly = no inherit acts = yes create mask = 0660 share1 acts exactly as expected — I get a 0660

These are the latests.. And the Why, Andrew already explain. Due to the mappings with windows acls. If the exec bit is missing, no windows programm will be allowed to start of a share. If i download an msi file to install and put it on a share, its not allowed to execute it. Which is exact what i want in my case. You might want to read

Hi all ! I have a PDC and a BDC in 2 differents subnets. I would like to sync their browse list but it doesn't seem to work. Actually here are a part my smb.conf files : PDC ------------------------------ ... remote browse sync = 10.10.20.10 remote announce = 10.10.20.10 security = user encrypt passwords = true domain logons = Yes os level = 70 preferred master = yes domain master = yes

I have a Samba4 AD Domain with one of the file servers as a domain member. This file server host the main network shares for the domain. Currently, Windows users mapping this share are authenticated using their AD domain credentials. That all works just fine. What I want to do now is ALSO allow a user on a network host which IS NOT a domain member, and the user is not domain users to also

When configuring a SunOS 5.9 box running Samba 2.2.8a with security=domain, as per http://us2.samba.org/samba/docs/using_samba/ch04.html#samba2-CHP-4-SECT-7 I get the following error "could not fetch trust account password for domain" when trying to connect to a share via 'net use * \\server\share /user:domain\username' However, 'security=user' works correctly.

On Thu, 20 Dec 2018 01:32:16 -0800 christian russell <christian.baltini at gmail.com> wrote: > Hi Rowland, I see the typo now too — I retyped it from scratch … oops. > > Here it is. > > [global] > workgroup = HOME > netbios name = IPA > realm = HOME.FRAPLIN.FUN > kerberos method = dedicated keytab > dedicated keytab file =

Matthias, Sorry I should have wrote more details. I agree with your message and I understand that template12 is not meant to be a share. What I tried to say is: when I have this configuration: [template12] writable = yes browsable = yes valid users = alex [alex] path = /home/alex copy = template12 I can see this error in /var/log/samba/log/smbd [2016/04/25 16:44:14.719192,

Thank you for your message. I was not sure if the example (from here https://www.samba.org/samba/docs/using_samba/ch06.html) was incorrect or if I was missing something. Alexandre Klein Tanuki Software, Ltd. 6-18-10-4F Nishi-Kasai, Edogawa-ku Tokyo 134-0088 Japan Tel: +81-3-3878-3211 Fax: +81-3-3878-0313 http://www.tanukisoftware.com On Mon, Apr 25, 2016 at 5:34 PM, Rowland penny <rpenny

Hello Marco, I am speaking about POSIX ACLs, yes. When I create a file via shell I get a 660 file. When I create a file via Samba I get a 770 file. I don’t understand why they would be different. Without ACLs shell / Samba created files get consistent permissions. Christian > On Dec 20, 2018, at 12:29 AM, Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > Mandi!

Hello, Is the example for 'copy' ( https://www.samba.org/samba/docs/using_samba/ch06.html ) valid? [template] writable = yes browsable = yes valid users = andy, dave, jay When I'm trying a similar configuration, I can't log in and I have this message in log.smbd: WARNING: No path in service template - making it unavailable! It seems I need to add a path: [template]

We're using Samba 3.0.21a-1 on a CentOS 4.2 server (kernel 2.6.9-22.0.2.ELsmp); everything works more or less fine, it's functioning as the PDC with an OpenLDAP back end (setup essentially straight from the Idealx.org playbook), etc. We're trying to mount Windows shares to back them up, and getting "permission denied" errors when trying to read certain files from those

I have set up a Fedora 8 server running Samba 3.0.28a-0.fc8 (the Fedora yum package version). I have successfully joined the server to the AD realm of a Win2003 server on the office network. Configuration was done following this guide: http://www.howtoforge.com/samba-domaincontroller-swat-fedora8-p3 However Authentication against the AD server does not work. When I test winbind with: #

hi list, we recently saw the following weird behaviour on samba v3.0.13 with MacOSX panther and tiger as clients --setup-- [share1] path = /data valid users = @admins force user = administrator inherit permissions = yes force create mode = 770 force directory mode = 2770 [share2] path = /data/folder valid users = @noadmins force user = administrator inherit permissions = yes force create mode

How to use copy: [template12] writable = yes browsable = yes valid users = andy, dave, jay [share1] path=/path/to/share1 copy = template12 [share2] path=/path/to/share2 copy = template12 Here template12 is a template and it used later for declaring shares share1 and share2. template (or in my example template12) is not meant to be used as a share because a share is a

On 25/04/16 08:52, Alexandre Klein wrote: > Matthias, > > Sorry I should have wrote more details. > I agree with your message and I understand that template12 is not meant to > be a share. > > What I tried to say is: > > when I have this configuration: > [template12] > writable = yes > browsable = yes > valid users = alex > > [alex] >

In the midst of evaluating Dovecot for use in solving some mbox locking issues (while also waiting for our eventual migration to maildir), I had an epiphany. It looks like Dovecot's auto-detection of mail formats would allow us to migrate from mbox to maildir on a user-by-user basis! I was thinking: 1. Let dovecot autodetect mail storage 2. Use some procmail trickery to detect which format

Hi all, after installing samba 2.2.5 (on Solaris8 running NIS+) it is not possible to create user entries in smbpasswd. I generated the smbpasswd file by # cat /dev/null | /samba/samba-2.2.5/source/script/mksmbpasswd.sh > /usr/local/samba/private/smbpasswd ----- then tried to create user entry "dummy" in smbpasswd by (user "dummy" exists under NIS+) # smbpasswd -a dummy

On Thu, 14 Jun 2018 16:03:35 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > Nevertheless, 'ls' does give names though I don't seem to have either > libnss-winbind or libpam-winbind files on my AD/DC. I keep forgetting that you use slackware, I suppose it uses something different, but do you have any file like: libnss_winbind.so.2 > > Circling back

Dear, all. I am pulling my hair because I could not find any error messsages that could point me to a fix to my problem. The directory I want to share was mounted on /home with drbd and heartbeat but then my users could not access any shares / their home directories. However, if I set up shares else where on my box like share under /opt or /usr/local, then the same users would be able to access