similar to: Windows inherit ACL problem

Hello I am using samba as member of NT Domain. I 've copied the folder inside linux and create new share in samba. The problem is that I need to fetch permission for that folder from NT Domain controller (otherwise I will have to set up permission again), is there any way how to copy folder with NT permission from one place to another ? (maybe smbcacls ? ) Many thanks for your help

Hello, I have installed CentOS 4.8 with samba 3.0.33. After joining to AD, group permission do not work. After "net groupmap add..." command nothing changed: # getfacl TESTDIR/ # file: TESTDIR # owner: root # group: testgroup user::rwx group::rwx other::--- user1 is in group "testgroup" net groupmap list testgroup (S-1-5-21-2207241064-1835560224-3992551478-2193) ->

We have the following share: [users] path = /home read only = No inherit acls = yes inherit permissions = yes inherit owner = yes the /home permissions are: drwxr-xr-x ... root root ... /home There are /home/user1, /home/user2, ... folders. When they are created their permissions are set like this: drwx--Sr-x ... user1 "Domain Users" ...

Hello, I have noticed some ALC issues with files and directories. I use samba server 3.0.33 on CentOS 4.8 joined to Windows 2003 domain. Everything works fine, all users are authenticated to domain controller. My aim is to give FULL ACCESS (open/read/write/rename/delete..) to directory "testdir" to two users, john and mark without using groups because I have no permissions on domain

Hi, We just noticed one thing in our system. We have a samba share, in that we have folder and files all have "inherit permissions" set on. When we change the windows permission on a top level folder(with windows explorer for example), the client is actually sending requests to change ACL of each subfolder and files under it, which we are not expecting since they should be inheriting

Morning all. I am reading trough https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html As I was curious what exactly 'map acl inherit' does. "This boolean parameter is only relevant for systems that do not support standardized NFS4 ACLs but only a POSIX draft implementation of ACLs. Linux is the only common UNIX system which does still not offer standardized NFS4 ACLs

Hi, I'm running Samba 4.8 servers with Windows ACL enabled shares (following https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs). This manual demands to set map acl inherit = yes store dos attributes = yes and requires extended attribute support from the share file system. So far, so good. Now I shall upgrade to CentOS 7.7 which brings Samba 4.9 which changes

Hi samba guys, I'm useing samba 2.2.3a (XFS/Linux W2k), and I found inconsisten behavior responsed to default ACL. The test is: 1> Create a direcotry named "share" from linux local. 2> Add default ACL to "share". 3> Touch new file "flinux"/make new directory "dlinux" under "share" from linux local. 4> Create new file

I noticed that vfs_acl_xattr doesn't work unless all the inherit and map inherit acl parameters are set to yes. Which is fine but if I turn off inherit owner it completely breaks inheritance and security.NTACL never gets set for the file/directory that's created by the user. I want the uid of the user who's connected to be written and not the owner of the parent directory. Is there

there are inherit acls = No inherit permissions = No inherit owner = No in my smb.conf But acl is inherited. What should I do?

I have just enabled user_xattr on the partition where my samba share is on. Now when I use getfattr I see the extended attribute user.SAMBA_PAI on my files. But ACL inheritance isn't taking place... When I (from within Windows) click on Properties > Security > Advanced an then enable "Allow inheritable permissions..." on a certain file, then the attribute user.SAMBA_PAI

I don't know what I've changed, but I'm no more able to change the rights from windows. It already worked for a couple of week... Is something wrong with my smb.conf ? [global] unix charset = LOCALE workgroup = NT1 realm = NT1.LOCAL server string = Linux Datei Server security = ADS #winbind use default domain = yes #username map = /etc/samba/smbusers acl compatibility = win2k nt acl

I am implementing Samba 3.05 (Suse Pro 8.2 Reiser File System) member server as a file server on a Windows NT4 network with one NT server (PDC). I am currently using WINS for name resolution on the network. Shortly after adding the Samba member server, I will upgrade NT 4.0 server to Windows 2000 (need samba server to alleviate some nasty disk space constraints). The Samba member server

Samba-4.3.5, Debian smb.conf === [global] workgroup = WG security = ADS realm = WG.LOCAL dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab server string = Samba 4 Client %h idmap config * : backend = tdb idmap config * : range = 2000-10000 idmap config * : backend = rid idmap config * : range = 300000-400000 #

Hello, i also fired up a new vm :) and configured "rid" backend. I followed all step in https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs. Sett the Attributs in smb.conf: vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes Granting the SeDiskOperatorPrivilege: # net rpc rights grant "SAMDOM\Domain Admins" SeDiskOperatorPrivilege

Hello I'm running Debian Etch with distro kernel & Samba package (2.6.18-5-686 & 3.0.24-6etch9). In my smb.conf I have : inherit owner = yes inherit permissions = yes inherit acls = yes I start with a dir test1 with no rights for group smb-Users, rx for group smb-Inf, and rwx for group smb-Bme-Fr : root@samba1:/mnt/temp # ll total 28 drwxr-xr-x 4 root root 4096 2008-01-04

Hi Timo my tests resulted in inheritance is given if a userfolder has set some acl to its new created subfolder , which is nice if some userfolder has its acl from global acl there is no inheritance to its new created subfolders, that subfolders will always created with full owner rights i am not really sure if its a good idea to have inheritance from global acl and if its hackabel what is your

Hi all, I have a share set up as follows: [images] path = /images read only = No create mask = 0660 directory mask = 2770 hide special files = yes hide files = /lost+found/ acl group control = yes inherit acls = yes map acl inherit = yes inherit permissions = yes map archive = no security mask = 0111 When users create files or directories under this share, the ACL's

On 11/06/19 16:44, Sebastian Arcus via samba wrote: > > On 11/06/19 14:54, Sebastian Arcus via samba wrote: >> >> On 11/06/19 13:29, Rowland penny via samba wrote: >>> On 11/06/2019 13:13, Sebastian Arcus via samba wrote: >>>> >>>> On 11/06/19 11:49, Rowland penny via samba wrote: >>>>> On 11/06/2019 11:38, Sebastian Arcus via

To my knowledge the 'inherit acls' option should make new files inherit the default acls from the containing folder... Please correct me if I'm wrong! But when I turn this setting on, it just don't seem to work... In other words, newly created files do not get the default acls from the containing folder... Please advice anyone... (running Samba 3.0.21b-1 on Debian Sarge)