[Samba] Permissions issue on domain member server (samba as an appliance)

[Greg Dickie]

Hey Luis,

  Thank you very much for the links, I will go through them. I believe I
assigned the privileges correctly but will double heck. It feels like it's
very close to working so I'm probably just missing something obvious.

Thanks a lot,
Greg

On Sat, Oct 28, 2023 at 3:06 AM Luis Peromarta via samba <
samba at lists.samba.org> wrote:

> These are my notes. I’d rather use xattr and configure shares from windows.
>
> http://samba.bigbird.es/doku.php?id=samba:configuring-shares
>
> Also, have you assigned privileges ?
>
> http://samba.bigbird.es/doku.php?id=samba:server-privileges
>
> Using autorid as the idmap backend has some limitations. I recommend using
> rid.
>
> Regards.
> On 27 Oct 2023 at 20:08 +0100, Greg Dickie via samba <
> samba at lists.samba.org>, wrote:
> > Hi,
> >
> > We have a rat's nest of windows servers all sharing little bits of
> > storage which I'm trying to consolidate on one biggish linux server. I've
> > install a fresh Ubuntu 22.04 and samba 4.15 that comes standard. I've
> also
> > joined the domain using autorid as the backend and users are getting UID
> > and GIDs correctly as evidenced by wbinfo -i USER and id USER. I've also
> > mapped a domain admin user to root using username map and the connection
> > shows up as root in smbstatus. Created a share, changed the group of the
> > directory to "Domain Admins" and did a g+rwx on the share root dir.
> > Everything looks good.
> >
> > But. When I connect to the share as that admin user and try a mkdir tt I
> > get access denied. robocopy from one of the windows servers give me "A
> > required privilege is not help by the client".
> >
> > Level 10 logs are pretty verbose but I did not see a cause.
> >
> > What am I missing? Where should I look next?
> >
> > Thanks,
> > Greg
> >
> > --
> >
> >
> > Greg Dickie
> > just a guy
> > 514-983-5400
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/options/samba
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


-- 


Greg Dickie
just a guy
514-983-5400