similar to: nt acl support

Hi, we are migrating our fileserver from an old novell netware system to a samba4 system. With netware all ACL were stored in a database, so that it was possible to quickly find which files one user or group had access to. I'm investigating the possibility of writing ntfs ACL on a database with samba. The module vfs_acl_tdb is able to do this, but values are hashed so that the db is not

On Fri, Mar 18, 2016 at 10:08:42AM -0700, Jeremy Allison wrote: > On Wed, Mar 16, 2016 at 11:13:12AM +0100, Matteo Maretto wrote: > > Hi, > > we are migrating our fileserver from an old novell netware system to > > a samba4 system. With netware all ACL were stored in a database, so > > that it was possible to quickly find which files one user or group > > had

HI , We have come up with a utility called smbxcals which is derived from smbcals, where we no need to establish the client connection to perform ACLs operations, by just giving the absolute path as a paratmeter can list and set ACLs as below, # smbxcacls /root/FOO/ REVISION:1 CONTROL:0x8404 OWNER:DEMOSP\Administrator GROUP:DEMOSP\Domain Users ACL:BUILTIN\Administrators:ALLOWED/OI|CI|I/FULL

Hi, I need to set ACLs on a samba server, and are using icacls in Win7. It takes several hours to edit an ACL with inheritance, affecting a directory tree with 300,000 files. Server cpu > 70%, client cpu < 20%. Is there a way how I can speed this up? Using "setfattr -R" in Linux does it in approximately 2 minutes, but I want real Windows ACLs. There are 300.000 files in a

Just thought I'd post a simple workaround for Windows ACL's and file attributes for rsync. Using some basic scripting will allow ACL information to be stored for future use on files transferred using rsync. Most will probably find the information worthless but thought I'd post it anyway. - To get ACL information, use the icacls program provided as part of Server 2003 SP1

On Wed, Mar 16, 2016 at 11:13:12AM +0100, Matteo Maretto wrote: > Hi, > we are migrating our fileserver from an old novell netware system to > a samba4 system. With netware all ACL were stored in a database, so > that it was possible to quickly find which files one user or group > had access to. > I'm investigating the possibility of writing ntfs ACL on a database > with

Il 19/03/2016 10:20, Volker Lendecke ha scritto: > On Fri, Mar 18, 2016 at 10:08:42AM -0700, Jeremy Allison wrote: >> On Wed, Mar 16, 2016 at 11:13:12AM +0100, Matteo Maretto wrote: >>> Hi, >>> we are migrating our fileserver from an old novell netware system to >>> a samba4 system. With netware all ACL were stored in a database, so >>> that it was

Hi, The security tab of Windows does not accept unix groupnames, although they do work in icacls.exe on the commandline. It displays existing group rights, and allows to modify them, but does not allow to add new rights for unix groups, and the search function also does not list unix groups. Is there a trick to make them work in the security tab? I don't have OUs or AD-groups, this is classic

> Hi, this is because when you use '--as-sddl', the python code does this: > > if as_sddl: > try: > domain_sid = security.dom_sid(samdb.domain_sid) > except: > raise CommandError("Unable to read domain SID from > configuration files") >

> Le 11/03/2014 10:32, Eric PEYREMORTE a ?crit : > Some news here. I didn't test with 5.01 yet (didn't see that one sorry). > With 5.01 i don't have any problem. Problems begin with 5.10. > -- > Eric PEYREMORTE Hello Eric: To sum up your report: _ 4.0x works; _ 4.10-pre22 (lwip branch) works; _ 5.01 (elflink branch) works; _ 5.10 (lwip merge into elflink) fails; I

Dear list, I am struggling with a problem about interaction between a samba share and ACLs set through powershell (Set-Acl). The share was configured following guidelines at the Samba's wiki (https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs) and I took care about the "rpc rights grant" section. I am able to set permission from within Windows Explorer and using

Le 11/03/2014 00:56, Gene Cumm a ?crit : > On Mon, Mar 10, 2014 at 7:55 PM, Gene Cumm <gene.cumm at gmail.com> wrote: >> On Mon, Mar 10, 2014 at 7:15 PM, Gene Cumm <gene.cumm at gmail.com> wrote: >>> On Mon, Mar 10, 2014 at 6:52 PM, Schlomo Schapiro <schlomo at schapiro.org> wrote: >>>> Hi, >>>> >>>> On 10 March 2014 18:13,

Greetings, All! I've discovered a nasty mismatch in my recently upgraded domain. It seems that a number of builtin groups have mappings in idmap.ldb that overlap with posixAccount mappings in the sam.ldb. Namely, # file: var/lib/samba/sysvol/ads.example.com/scripts/ # owner: root # group: 544 user::rwx user:root:rwx group::rwx group:544:rwx group:30000:r-x group:30001:rwx

On Tue, Mar 11, 2014 at 11:08 AM, Eric PEYREMORTE <eric.peyremorte at iut-valence.fr> wrote: > Le 11/03/2014 15:27, Ady a ?crit : > >>> Le 11/03/2014 10:32, Eric PEYREMORTE a ?crit : >>> Some news here. I didn't test with 5.01 yet (didn't see that one sorry). >>> With 5.01 i don't have any problem. Problems begin with 5.10. >>> --

Greetings, jimc! > Thank you for your reply. > If you happen to read the post of 11/22, you will notice that it was not > me who spoke ill of Samba. > I put my bets on other people being able to figure it out; I hope that > one of them will help me. Try this: 1. Make sure your domain groups and users are recognized on the member server. At the very least, $ getent passwd

Hi, We only have Dell computers here. We have about 100 optiplex 380. Here is a link to download my wireshark traces : http://dl.free.fr/qgCPEM5Uo In this traces i tested pxelinux and lpxelinux 6.03 on optiplex 740(the one working) and optiplex 380. pxelinux works on both computers but very slowly on 380 as seen in traces. lpxelinux works only on 740. On 380 it seems to enter in a kind of

Hi! I have few question to developers of VFS ACL modules (acl_tdb and acl_xattr): 1. Do you plan to extend quantity of entries in acl_tdb (now I can write 22 user ACLs plus CREATOR OWNER, CREATOR GROUP, domain users and everyone) 2. Do you plan to fix few ACLs eg. Traverse folder / Execute file (to traverse I need to enable additional permission List folder / read data to traverse through

Yes on optiplex 790 i upgraded from A07 to A18 (there was a nic upgrade) but it didn't change anything.. On optiplex 380 i upgraded from bios A01 to A07(don't know if upgrade contained pxe or not)... I tried, lpxelinux.0 and it wasn't faster. Only v4.07 helped on these machines. Tomorrow, i will give a try with 6.03pre2. In wireshark, i saw no errors, the packet length was the

On Wed, 10 Jan 2024 14:52:12 +0000 bd730c5053df9efb via samba <samba at lists.samba.org> wrote: > I can confirm that on slackware too if I use rid as the backend for > the ad domain winbind works offline and the system doesn't slow to a > crawl for every process I try to start. The 'problem' (if it is a problem) with using the 'ad' backend is that everything

?Hi,? On 10 March 2014 18:13, Eric PEYREMORTE <eric.peyremorte at iut-valence.fr>wrote: > Ok i give up. I will stick with the old version version (4.07) which works > well with dell 380 and 790. > > I tried to understand what happened between 4.07 and 5 but i don't have > the skill to understand low level c. > > Seems that the memory management changed a lot, maybe