[Samba] Error accessing the share_info.tdb file

[Rowland Penny]

On Thu, 25 Apr 2024 14:07:20 +0000
Philippe Maladjian via samba <samba at lists.samba.org> wrote:

> >
> >
> > -----Message d'origine-----
> > De : samba <samba-bounces at lists.samba.org> De la part de Rowland
> > Penny via samba Envoyé : jeudi 25 avril 2024 15:11 À :
> > samba at lists.samba.org Cc : Rowland Penny <rpenny at samba.org> Objet :
> > Re: [Samba] Error accessing the share_info.tdb file
> >
> > On Thu, 25 Apr 2024 12:42:16 +0000
> > Philippe Maladjian <pmaladjian at hilaire.fr> wrote:
> >
> > > On Thu, 25 Apr 2024 11:44:42 +0000
> > > Philippe Maladjian via samba <samba at lists.samba.org> wrote:
> > >
> 
> > #samba-tool testparm
> > INFO 2024-04-25 15:17:44,189 pid:3021
> > /usr/lib/python3/dist-packages/samba/netcmd/testparm.py #96: Loaded
> > smb config files from /etc/samba/smb.conf INFO 2024-04-25
> > 15:17:44,189 pid:3021
> > /usr/lib/python3/dist-packages/samba/netcmd/testparm.py #97: Loaded
> > services file OK. Press enter to see a dump of your service
> > definitions
> >
> > # Global parameters
> > [global]
> >         disable netbios = Yes
> >         disable spoolss = Yes
> >         netbios name = svad01
> >         printcap name = /dev/null
> >         realm = MYDOM.LAN
> >         restrict anonymous = 2
> >         server role = active directory domain controller
> >         server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,
> > drepl, winbindd, ntp_signd, kcc, dnsupdate
> 
> > 'nbt' is the AD DC name for 'nmbd', so you could turn that off as
> > well.
> Ok
> 
> >         smb ports = 445
> >         workgroup = MYDOM
> >         idmap_ldb:use rfc2307 = yes
> >         map acl inherit = Yes
> 
> > I would remove the 'map acl inherit' line
> 
> Why ?

For two reasons, the first is that it creates another EA, the second
is, I do not have it and the wiki works for myself.
You really only need to check/alter the 'Security' tab (for which a
better name would be 'NTFS permissions')

> 
> >
> > [sysvol]
> >         path = /var/lib/samba/sysvol
> >         read only = No
> >
> > [netlogon]
> >         path = /var/lib/samba/sysvol/mydom.lan/scripts
> >         read only = No
> >
> 
> > As I have said, it all works for myself, just where on the wiki
> > page that you linked to did it stop working. Also, are you working
> > as Administrator, a member of Domain Admins, or a normal user ?
> 
> I get the message when I edit a share and check the tab : "Share
> Permissions". To make this modification, I log in with a user account
> that is a member of the Domain Admins group.

I will alter the wiki age (yet again), to say that checking/altering
the 'Share' tab is (very) optional.

> 
> > Rowland
> Philippe.
> 
> > PS, please do not 'CC' me, just reply to the list.
> 
> Sorry, Outlook is really not convenient for communicating on mailing
> lists :(

From my experience of this list, no email client is convenient. ;-(

Rowland