similar to: mixing Windows ACL and POSIX ACL shares on one server?

On Fri, Nov 15, 2019 at 10:51:41AM +1300, Andrew Bartlett via samba wrote: > On Thu, 2019-11-14 at 21:45 +0100, Matthias Leopold via samba wrote: > > Hi, > > > > I posted a similar question in 2018 with no answers, so I'll try > > again: > > Is it possible to have shares with Windows ACLs and shares with > > POSIX > > ACLs on the same server

Matthias, I used setfacl to set POSIX and Ad ACLS. Windows users who are in the appropriate group can manage perms for both. Cheers, Tim On Thu, Nov 14, 2019 at 3:43 PM Matthias Leopold via samba < samba at lists.samba.org> wrote: > > > Am 14.11.19 um 23:03 schrieb Jeremy Allison via samba: > > On Fri, Nov 15, 2019 at 10:51:41AM +1300, Andrew Bartlett via samba > wrote:

Am 14.11.19 um 22:12 schrieb Rowland penny via samba: > On 14/11/2019 20:45, Matthias Leopold via samba wrote: >> Hi, >> >> I posted a similar question in 2018 with no answers, so I'll try again: >> Is it possible to have shares with Windows ACLs and shares with POSIX >> ACLs on the same server (security = user)? Since share permissions are >> handled

Am 14.11.19 um 23:03 schrieb Jeremy Allison via samba: > On Fri, Nov 15, 2019 at 10:51:41AM +1300, Andrew Bartlett via samba wrote: >> On Thu, 2019-11-14 at 21:45 +0100, Matthias Leopold via samba wrote: >>> Hi, >>> >>> I posted a similar question in 2018 with no answers, so I'll try >>> again: >>> Is it possible to have shares with Windows

Am 2018-02-19 um 17:39 schrieb Rowland Penny via samba: > On Mon, 19 Feb 2018 17:03:31 +0100 > Matthias Leopold via samba <samba at lists.samba.org> wrote: > >> Hi, >> >> i'm trying to setup Samba 4.6 on CentOS 7.4 as a Domain Member of a >> Windows 2012R2 Domain Controller with AD. To administer share >> security i have to use the "username

On Thu, 2019-11-14 at 21:45 +0100, Matthias Leopold via samba wrote: > Hi, > > I posted a similar question in 2018 with no answers, so I'll try > again: > Is it possible to have shares with Windows ACLs and shares with > POSIX > ACLs on the same server (security = user)? Since share permissions > are > handled differently for both types of shares I'm not sure

On 14/11/2019 20:45, Matthias Leopold via samba wrote: > Hi, > > I posted a similar question in 2018 with no answers, so I'll try again: > Is it possible to have shares with Windows ACLs and shares with POSIX > ACLs on the same server (security = user)? Since share permissions are > handled differently for both types of shares I'm not sure if this will > work. I

Hi, I'm building and managing standalone fileservers (security = user) with various passdb backends. I'm noticing different behaviour of Windows ACLs for servers with LDAP and TDB passdb backends. In a LDAP backed server (which I started with) I can freely add filesystem permissions (eg for groups) to objects (files/folders) via the Windows (7) permissions editor. In a TDB backed

Hi, I've been running a samba server with winbind (CentOS 7) as a member of an AD Domain (Windows 2012 R2) for several months without a problem. "Suddenly" I'm seeing the problem that the membership in newly created AD groups isn't correctly visible for some users on the samba server or only after some indefinite amount of time. I'm looking simply at the output of

List, I had Samba 3.0 running on Debian Lenny configured to use POSIX ACLs on ext3. They worked fine, or at least as fine as NT -> POSIX mapping ever did. After testing 3.3 with acl_xattr on using a different machine, I decided to give it a whirl on the production server. And yes, I know it's experimental. I defined a share thusly: vfs objects = acl_xatt acl map full

Am 11.02.19 um 16:33 schrieb Rowland Penny via samba: > On Mon, 11 Feb 2019 15:40:02 +0100 > Matthias Leopold via samba <samba at lists.samba.org> wrote: > >> >> >> Am 11.02.19 um 14:22 schrieb Rowland Penny via samba: >>> On Mon, 11 Feb 2019 13:46:05 +0100 >>> Matthias Leopold via samba <samba at lists.samba.org> wrote: >>>

I try to set up a Samba4-based Fileserver in an Samba3-DC enviroment. Filesystem is ext4, CIFS + NFS4 should be provided. The same ACLs should be used over both protocols. With Samba 3 this was possible (using POSIX 1003.1e DRAFT 17 ACLs only) . How can I do the same with Samba 4 ? Posix-ACLs set on the server with setfacl are recogniced on a windows-client. But every change I do on a

Am 2015-09-24 um 20:32 schrieb Marc Muehlfeld: > Hello Matthias, > > Am 23.09.2015 um 10:45 schrieb Matthias Leopold: >> this seems to be a mat{,t}hias discussion ;-) > > oh, sorry. :-) > > > > >> Marc, you said i can have windows ACLs on a standalone server. How do i >> accomplish the >>

Hi, i'm trying to setup Samba 4.6 on CentOS 7.4 as a Domain Member of a Windows 2012R2 Domain Controller with AD. To administer share security i have to use the "username map" feature. This works when i enumerate individual AD users there. When i want to use AD groups it only works with "primary" groups. This way i can't use the "Domain Admins" group

On Mon, 28 Jan 2019 10:09:43 +0100 Matthias Leopold via samba <samba at lists.samba.org> wrote: > I noticed I didn't ask a question ;-) > I noticed that you didn't give us much to work with ;-) Can you post the smb.conf files from the working ldap machine and the non-working 'tdb' machine. Rowland

Am 11.02.19 um 14:22 schrieb Rowland Penny via samba: > On Mon, 11 Feb 2019 13:46:05 +0100 > Matthias Leopold via samba <samba at lists.samba.org> wrote: > >> >> >> Am 11.02.19 um 13:22 schrieb Rowland Penny via samba: >>> On Mon, 11 Feb 2019 12:30:51 +0100 >>> Matthias Leopold via samba <samba at lists.samba.org> wrote: >>>

This might be more inclusive if I said, Linux Permissions vs POSIX ACLs vs vfs_xattr. I have recently begun to discover the power and flexibility of using POSIX ACLs (by mounting my EXT3/4 filesystems with the acl option). This solved alot of security permissions issues between Samba and Linux groups of users. As I have delved into this deeper and begun using the VFS object, vfs_xattr, things

Hi list, For testing purpose, I am running a standalone Samba 4.9.5 on Debian with the following smb.conf: [global] server role = standalone server map to guest = Bad User guest account = nobody [test] path = /home/yvan/Partage/share guest ok = yes writable = yes inherit acls = yes I want "bob", "alice" and guest user to have full access to all files in this share, so I

good day... well just need some good input on how to backup a samba server, and to preserve the posix-acl's.. got 1 pdc and 1 bdc running, but it seems that there isn't a good way to make a backup with acl.. nfs4 doesn't have anny good support for acl's (yet) so i tried to mount a samba share with mount -t smbfs.. no acl's there ?? so please is there a protocol/service that i

Le 09/08/2019 ? 21:36, Rowland penny via samba a ?crit?: > On 09/08/2019 20:18, Yvan Masson via samba wrote: >> Hi list, >> >> For testing purpose, I am running a standalone Samba 4.9.5 on Debian >> with the following smb.conf: >> >> [global] >> server role = standalone server >> map to guest = Bad User >> guest account = nobody > That