[Samba] Problems with changing security setting on shared folders via Win2k

[newssysman at zbh.uni-hamburg.de]

Hi List,

I'm using Samba 3.0.1 as PDC and Openldap 2.1.23 as backend on a Suse 8.2 
System, both are build from scratch.
Nearly everything is fine, expect I'm not able to change the security 
setting of subfolders on my shares via my Win2k box.

More details:
Changing the security setting of my top level shares (created in smb.conf) 
works fine with the SRVMGR, but everytime I try to change (e.g. add a 
Domain User to a share) the security setting of a subfolder, with my Win2K 
box I get an Error: "The security settings of folder <name> could not be 
saved. Access denied". Maybe it's not the exact error message because I use 
a german Windows 2k.
I tried it as Administrator and as normal Domain User. Creating and 
deleting a folder  works fine. Another strange thing is that I get no 
information about the actual settings. No checkbox (full control, change, 
execte and so on) is selected. If someone wants to take a look at it I can 
send a screenshot of the settings.

Has anyone a clue for me how to fix this?

---------------------
Some settings of my smb.conf
[global]
	workgroup = ZBH
	netbios name =VESUVIO
	server string = ZBH_Master
	map to guest = Bad User
	passdb backend = ldapsam:ldap://ldap:389 (changed the real FQDN)
	pam password change = Yes
	passwd program = /usr/bin/smbpasswd %u
	encrypt passwords = yes
	security = users
	lanman auth = Yes
	ntlm auth = Yes
	domain logons = Yes
	os level = 65
	preferred master = Yes
	domain master = Yes
	wins support = Yes
	veto files = /*.eml/*.nws/riched20.dll/msblast.exe/*.{*}/
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 SO_KEEPALIVE 
IPTOS_LOWDELAY TCP_NODELAY
	[...]

[public]
       comment ="place for usefull things"
       path = /samba/public
       force group = users
       read only = no
       guest ok = yes
       browseable = yes

------------------

Best regards,

Erik Pagel