similar to: Purpose and functionality of "acl_xattr:ignore system acls"

I am following this guide https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs But hitting issues with setting permissions on the share in Computer Management in the windows AD DC UI. Every time I try I get the error dialog with +----------------------------------------------------------------+ | An error occurred while applying security information to | |

Does you filesystem support extended attributes? What does "|getfattr -n security.NTACL |filename" return?|| On 30.01.2024 16:13, Peter Milesson wrote: > Hi folks, > > It seems that the setting acl_xattr:ignore system acls = yes reduces > Windows compatibility when defined for a share. In all attempts I have > used Windows tools (except editing smb.conf) > > Assume

On Thu, 3 Jan 2019 15:46:24 +0100 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 03.01.19 um 15:29 schrieb Rowland Penny via samba: > > On Thu, 3 Jan 2019 15:08:46 +0100 > > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > > >> > >> We are in the process of switching over shares

Am 03.01.19 um 15:29 schrieb Rowland Penny via samba: > On Thu, 3 Jan 2019 15:08:46 +0100 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> >> We are in the process of switching over shares from the old way of >> doing this to Windows ACLs: >> >> disable "valid users" "write list" etc >>

On 30.01.2024 16:51, Ralph Boehme via samba wrote: > On 1/30/24 16:27, Rowland Penny via samba wrote: >> On Tue, 30 Jan 2024 16:13:41 +0100 >> Peter Milesson via samba <samba at lists.samba.org> wrote: >> >>> Hi folks, >>> >>> It seems that the setting acl_xattr:ignore system acls = yes reduces >>> Windows compatibility when defined

On Wed, 31 Jan 2024 11:53:44 +0100 Ralph Boehme <slow at samba.org> wrote: > On 1/31/24 11:19, Rowland Penny via samba wrote: > > When I logged into Windows and connected to a share that has > > 'acl_xattr:ignore system acls = yes' set and right clicked on its > > icon in Explorer and selected 'Properties', I found that 'EVERYONE' > > was

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland Penny via samba > Verzonden: vrijdag 21 september 2018 10:11 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] [SOLVED] Samba 4: 'Access denied' > error when accessing user profile during logon > > On Fri, 21 Sep 2018 09:35:13 +0200 >

On 1/31/24 11:19, Rowland Penny via samba wrote: > When I logged into Windows and connected to a share that has > 'acl_xattr:ignore system acls = yes' set and right clicked on its icon > in Explorer and selected 'Properties', I found that 'EVERYONE' was > listed. I removed 'EVERYONE', clicked 'Apply' then 'OK', which > completed

Hi Eric, On Thu, Aug 18, 2016 at 07:57:36AM -0600, Eric Eastman wrote: > >> The line causing the problem with 4.5rc2 is: > >> acl_xattr:ignore system acls = yes > > > > this change was introduced in > > <https://bugzilla.samba.org/show_bug.cgi?id=12028> > > > > Before explaining the gory details, one question: why are you setting > >

On Tue, 30 Jan 2024 16:13:41 +0100 Peter Milesson via samba <samba at lists.samba.org> wrote: > Hi folks, > > It seems that the setting acl_xattr:ignore system acls = yes reduces > Windows compatibility when defined for a share. In all attempts I > have used Windows tools (except editing smb.conf) Lets walk through the relevant part of that parameter: 'ignore system

On Wed, 31 Jan 2024 10:09:53 +0100 Ralph Boehme via samba <samba at lists.samba.org> wrote: > On 1/31/24 09:50, Peter Milesson via samba wrote: > > The crucial problem here is, that Everyone (yes, really everyone) > > can write to the root share. > > why don't you just change it? That's how it's supposed to work. > > -slow > It might be

On Wed, Aug 24, 2016 at 04:06:42PM +0200, Ralph Böhme via samba wrote: > > Yeah, as much as I'd like to avoid adding a new option, I guess we > have to do something about it, my latest take on this is > > acl_xattr:default acl style = [posix|windows] > > This parameter determines the type of ACL that is > synthesized in case a file or

On Fri, 7 Sep 2018 14:02:01 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 07.09.18 um 12:45 schrieb Rowland Penny via samba: > > On Fri, 7 Sep 2018 11:22:36 +0200 > > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > > >> > >> At a customer server (gentoo linux, so far only

On Thu, Aug 25, 2016 at 12:14:00PM -0700, Jeremy Allison wrote: > On Wed, Aug 24, 2016 at 04:06:42PM +0200, Ralph Böhme via samba wrote: > > > > Yeah, as much as I'd like to avoid adding a new option, I guess we > > have to do something about it, my latest take on this is > > > > acl_xattr:default acl style = [posix|windows] > > > >

On Fri, Aug 26, 2016 at 09:39:29AM -0700, Jeremy Allison wrote: > On Fri, Aug 26, 2016 at 06:33:26PM +0200, Ralph Böhme via samba wrote: > > On Thu, Aug 25, 2016 at 12:14:00PM -0700, Jeremy Allison wrote: > > > On Wed, Aug 24, 2016 at 04:06:42PM +0200, Ralph Böhme via samba wrote: > > > > > > > > Yeah, as much as I'd like to avoid adding a new option,

Hi folks, It seems that the setting acl_xattr:ignore system acls = yes reduces Windows compatibility when defined for a share. In all attempts I have used Windows tools (except editing smb.conf) Assume there is a share, where the files and folders in the share root should at least be readable by anybody having access to the share. For the sake of simplicity the following permissions apply on

On 1/30/24 16:27, Rowland Penny via samba wrote: > On Tue, 30 Jan 2024 16:13:41 +0100 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> Hi folks, >> >> It seems that the setting acl_xattr:ignore system acls = yes reduces >> Windows compatibility when defined for a share. In all attempts I >> have used Windows tools (except editing

On 11/06/2019 13:13, Sebastian Arcus via samba wrote: > > On 11/06/19 11:49, Rowland penny via samba wrote: >> On 11/06/2019 11:38, Sebastian Arcus via samba wrote: >>> >>> On 11/06/19 11:07, Rowland penny via samba wrote: >>>> On 11/06/2019 10:34, Sebastian Arcus via samba wrote: >>>>> I've just upgraded a Samba AD server to 4.10.2 a

Hai, Tip, think in groups not users when you setup/manage you servers, it will help. Now, root = Administrator user != Administrator but when you add a user as member of domain admins... because root = "Domain Admins" Read : https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs Dont forget also the "Creator owner" and "Creator Group"

Hi, i have setup an ad dc with samba 4.8, and then rigorously followed wiki tutorial at : https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs However, when following the last part (File System ACLs in the Back End), I don't get the expected results : [root at mydc ~]# getfattr -d /srv/samba/Demo/ doesn't yield anything and getfacl /srv/samba/Demo/ getfacl : suppression