[Samba] ACL Windows GUI to set permissions?

[Rick Ruth]

I am implementing Samba 3.05 (Suse Pro 8.2 Reiser File System)  member
server as a file server on a Windows NT4 network with one NT server
(PDC).  I am currently using WINS for name resolution on the network.  

 

Shortly after adding the Samba member server, I will upgrade NT 4.0
server to Windows 2000 (need samba server to alleviate some nasty disk
space constraints).  The Samba member server is going into an NT4
domain, but will probably be upgraded to active directory shortly (when
I get around to it.)

 

Samba appears to be working properly.  I am using winbind based identity
resolution, and just about everything seems to be doing well.
Access/permissions to various shares appears to be working properly.

 

I would like to configure network share security via Windows, as I am
much more familiar with it.  I realize I need to set file permissions
locally on linux as well as the share, and that there is not an exact
correspondence.  One of the reference documents gave me the impression I
could manage share security from a windows machine, and I presumed they
were recommending it.

 

I have already set 'nt acl support = yes' in smb.conf file.  

 

In Win2K, when I try to access the security properties on a Samba share
I have full rights to, all users are shown as not having any
permissions.  If I attempt to change ACL information, the check boxes
get checkmarks, but when I close and re-open, all checkmarks are gone.
When I click the advanced button, permissions are shown accurately.

 

When I attempt to access security permissions on a directory (Samba
share) I have full  rights on from a Windows NT server I get a "The
system cannot find the file specified" error message box.

 

Is this the way it should work?  Should I use LDAP rather than winbind?
Is the Reiser file system causing my problems?  Is there an easy utility
to copy directories and files from the NT server to the Samba server?

 

Also, root and admin don't seem to have rights at all, even though they
are mapped in the /etc/samba/smbusers file.

 

Config file listed below.

 

# Samba config file created using SWAT

# from 127.0.0.1 (127.0.0.1)

# Date: 2004/08/11 11:50:07

 

# Global parameters

[global]

      workgroup = SP-CLE

      security = DOMAIN

      map to guest = Bad User

      username map = /etc/samba/smbusers

      client plaintext auth = No

      log level = 1

      syslog = 0

      log file = /var/log/samba/log.%m

      smb ports = 139 445

      name resolve order = lmhosts wins bcast hosts

      wins server = 172.16.0.250

      ldap ssl = no

      idmap uid = 10000-20000

      idmap gid = 10000-20000

      template primary group = 

      template shell = /bin/bash

      winbind separator = +

      map acl inherit = Yes

 

[homes]

      comment = Home Directories

      valid users = %S

      read only = No

      browseable = No

 

[test]

      path = /usr/s/test

      valid users = SP-CLE+BABE

      read only = No

 

 

Newbie written all over this one, eh?

 

Thanks for any help, suggestions, places to look, constructive
criticism.