Samba mangling ACL's

[Jeremy Allison]

On Thu, Nov 01, 2012 at 09:18:15AM +1100, Andrew Bartlett wrote:
> On Wed, 2012-10-31 at 15:10 -0700, Jeremy Allison wrote:
> > On Wed, Oct 31, 2012 at 05:07:52PM -0500, Ricky Nance wrote:
> > > Jeremy, as per our conversation on IRC you suggested... 'Try setting "create
> > > mask = 0777" and "directory mask = 0777"'. This seemed to fix the issue, but
> > > what kind of security am I giving up by setting those parameters?
> > 
> > None. A user can always set the security on their
> > own files.
> 
> I'm guessing we can't change it for existing installs, but should we be
> putting this in fileserver.conf as a default for the AD DC?

Yes, certainly !

Jeremy.