similar to: Does it have any ways to use smbcacls in NFS ?

Hi, I'm trying to setup a domain with two DCs based on 4.0.3. Following some hint, I wanna use glusterfs for the sysvol. Glusterfs it runs nicely. I can set acls on both machines using setfacl and the other one lists them almost immediately with getfacl. But running "samba-tool ntacl sysvolreset is failing badly giving the following error. In a later attempt, without significant

Hi, all, we run smbcacls tool from linux machine to set file permissions on windows server. here is our environment: Linux machine: Ubuntu 14.04 LTS, kernel version 3.13.0-112-generic Samba version: 4.3.11 Windows machine: Windows server 2012 the cmd we run is something like following: /usr/bin/smbcacls -U 'Domain\Administrator'%'pwd' '//win_server/testshare'

I have samba 4.3 running on FreeBSD 10.2 on ZFS and I am unable to create new GPOs, getting "invalid Parameter" response.Log files indicate ACL issues. Domain was provisioned with --use-ntvfs option.Filesystem is mounted with this options:zroot/ROOT/default on / (zfs, local, noatime, nfsv4acls) acl options on zfs are this:zroot/ROOT/default aclmode passthrough inherited from

(Is this the right place to post such question?) I can't seem to grasp the right syntax for smbcacls This is a 306rc2, security=user system w/ passwords set via smbpasswd, and smbclient gives expected r/w behavior.I've seen the same on a 302a security=domain or ads system (I believe), which is why I think I'm misinterpreting something (or is smbcacls broken??) -- or what

On Thu, Jun 08, 2017 at 06:43:34PM +0200, Ralph Böhme via samba wrote: > Hi Andy, > > On Thu, Jun 08, 2017 at 09:23:50AM -0700, Andy Qian via samba wrote: > > The smbcacls cmd worked before till recently. Due to the recent Windows > > patch which disables SMB v1, we have to add the following line into the > > [global] section in smb.conf file on Linux machine so that

I want to get ACLs (output similar to that of smbcacls) for a *lot* of files (potentially millions). I can only process about 10 files per second when running the command (`smbcacls -U ...` via a Python wrapper), I'm looking for a faster way. Does anyone know any libraries or other commands that could help me? Failing that, I assume that much of the time taken is spent on authenticating

I'm trying to set up a Samba server with ACLS. Versions: - xfs in kernel-2.4.20. - samba-2.2.7a compiled with ACL support I'm trying first with smbcacls. But I can't manage to guess the syntax of the ACL command. I want the user "frankie" could RWX a file owned by "javi" #smbcacls //localhost/public te1st.txt -A ACL:frankie:0/0/RWX -U javi Failed to parse ACL

Hey, hoping I can get some guidance on how this works. I've got a running samba standalone setup. On one of my shares, I want to preserve the ACL of files as they come from the client (Win 7), in essence acting as a file backup. My setup for this share is currently: valid users = @wheel public = no writeable = yes vfs objects = btrfs acl_xattr # acl_xattr: ignore system acls = yes # map

This might be more inclusive if I said, Linux Permissions vs POSIX ACLs vs vfs_xattr. I have recently begun to discover the power and flexibility of using POSIX ACLs (by mounting my EXT3/4 filesystems with the acl option). This solved alot of security permissions issues between Samba and Linux groups of users. As I have delved into this deeper and begun using the VFS object, vfs_xattr, things

The Samba 3.0-RC1 "smbcacls" utility is reporting an error when I ask it to display the security information of a file on a Windows 2003 server: [root@demo5 bin]# ./smbcacls --user=SEITZDNSDOMNAIN\Administrator //seitzwin2003/Documents test.txt params.c:OpenConfFile() - Unable to open configuration file "/root/samba/debug/lib/smb.conf": No such file or

Hello, I'm running a PDC and a secondary DC in privilegded lxc containers and try to setup a fileserver in an unprivileged lxc container. The shares of the file server are on the ZFS of the host and mapped via bind-mount. I've got the problem, that I get error messages when setting the ACLs of a samba share either via the Windows explorer or using the smbcacls command. On Windows

Since I never received a reply, I am reposting this earlier post: I am trying to run the following command and keep getting the same error. My question is is there a problem with my command or is this possibly an issue with Samba smbcacls -d test_file -A ACL:DOMAIN\username:ALLOWED/0/CHANGE -U username Here is the error: debug_parse_params: unrecognized debug class name or format [test_file]

A Samba server I've configured uses the VFS acl_xattr module to support Windows ACLs. I'd like to view the ACL data, in as raw a state as possible, but also in a human readable format. Is there an existing utility that does that? If not, and I need to write an application to accomplish it, which APIs would you recommend (and on which attributes)? Thanks,Steve Tice

Hi all! I have a problem setting ACLs on a remote file on a Windows XP Pro SP2 box. I issue the following command: smbcacls -a 'ACL:BBI-DEV\beakid:ALLOWED/0/0x00100116' -U 'BBI-DEV \Admin' //BBI-DEV/Data /Niva.txt And I get this response from debug level 3. Password: Connecting to host=BBI-DEV Connecting to 192.168.1.124 at port 445 Doing spnego session setup (blob

Hi all! I have a problem setting ACLs on a remote file on a Windows XP Pro SP2 box. I issue the following command: smbcacls -a 'ACL:BBI-DEV\beakid:ALLOWED/0/0x00100116' -U 'BBI-DEV \Admin' //BBI-DEV/Data /Niva.txt And I get this response from debug level 3. Password: Connecting to host=BBI-DEV Connecting to 192.168.1.124 at port 445 Doing spnego session setup (blob

Hi, the command "samba-tool ntacl get --as-sddl" always returns "ERROR: Unable to read domain SID from configuration files" Does this command only work in AD-DC mode? Is there another way to transfer the complete ntacl info in Linux from one file to others? I'm using Samba 4.1.6 of Ubuntu 14.04 with server role = classic primary domain controller vfs objects = acl_xattr

I get this error when I run samba-tool ntacl sysvolcheck ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) There are two GPO directories. One is the Default Domain Controllers Policy and one is the Default Domain Policy It looks like it's the Default Domain Policy that's

I have successfully compiled and installed Samba 4.1.11 from source on OpenIndiana 151a8. I tested the server by creating a folder and adding a local samba user (smbpasswd -a) and mapping a drive from my Windows machine which successded. I was able to access the test file in the folder as well as edit and save it. Now I am trying to join my samba server to my domain but it is failing and the

Hi My Windows folks made security changes in AD that caused my Samba server to not work with AD anymore. Clients could not authenticate to their shares using their AD credentials anymore. Looking at the Samba log I could see error so I decided to reset the Computer account and to rejoin Samba to AD again. When I tried to join Samba to AD, "net ads join -U username", I got the following

Hello smbcacls is not able to locate the object of a share. I've attached a copy of the smb.conf file and the debug output of the smbcacls command. Within XP/NT I'm able to get and set the acls with no problem. Thanks Regards, Komal [global] workgroup = test server string = Samba Server interfaces = eth0, lo bind interfaces only = Yes passdb backend =