[Samba] Changing Owner/Group under Domain security

[Matthew Von-Maszewski]

Samba and winbind appear to correctly pull Sids/Account names to assign to
files when owner is writer of the file.

However, I have not been able to find a configuration that lets the writer
of the file (an administrator) assign a different individual as the
owner/group.  I am using the
SetSecurityDescriptorOwner()/SetKernelObjectSecurity() pair of calls.
Always get error 5 (ERROR_ACCESS).  Have a similar problem when writing
security descriptor as part of a BackupWrite() call.  Both pieces of code
are proven to work outside of samba.

configuration fragments:

   winbind separator = +
   winbind uid = 10000-20000
   winbind gid = 10000-20000
   password server = *
   security = domain
   dos filemode = yes

[ntfs_share]
    path = /home/ntfs_share
;    public = yes
;    only guest = yes
    writable = yes
    read only = no
    printable = no
    create mask = 0770
    directory mask = 0770
    admin users = *

Any guidance would be appreciated.


versions: Samba 2.2.7-5.8.0
          RedHat 8.0 3.2-7
          Linux 2.4.18-27.8.0

======================
Matthew Von-Maszewski
 matthew at nuview.com
 http://www.nuview.com