[Samba] Domain Admins

[Larry McElderry]

OK, I have RTFM.  All the I could find.

I cannot seem to set permissions via WINXP Pro explorer. No matter what I do all I get is access denied - even if I own the file.
Samba log reveals:

[2005/04/20 10:56:08, 2] smbd/open.c:open_file(326)
  larry opened file xghost.bin read=Yes write=No (numopen=1)
[2005/04/20 10:56:08, 3] smbd/process.c:process_smb(1102)
  Transaction 19 of length 188
[2005/04/20 10:56:08, 3] smbd/process.c:switch_message(893)
  switch message SMBnttrans (pid 27187) conn 0x8b52b0
[2005/04/20 10:56:08, 3] smbd/nttrans.c:call_nt_transact_set_security_desc(2173)
  call_nt_transact_set_security_desc: file = xghost.bin, sent 0x4
[2005/04/20 10:56:08, 3] smbd/error.c:error_packet(147)
  error packet at smbd/nttrans.c(2179) cmd=160 (SMBnttrans) NT_STATUS_ACCESS_DENIED

Running on Suse 9.2
File system is Reiserfs with mount options acl,user_xattr 1 2
Samba is compiled with acl and ldap support
smbd -b
   HAVE_SYS_ACL_H
   HAVE_POSIX_ACLS

have net groupmap add ntgroup="Domain Admins" unixgroup=dpdev  which is our IT group.

Logged as myself
uid=272(larry) gid=544(Administrators) groups=0(root),100(users),101(dpdev),108(
vsifax),109(www),200(informix),512(Domain Admins),544(Administrators),1000(dp)

I can modify acls using setfacl but not through samba.

Even if I log in to windows as Administrator I get the same error.

What does it take to be a Samba Domain Admin  ver 3.0.15pre2