[Samba] ACL Access Denied from Windows XP workstation

Steve OBrien sobrien at ci.bend.or.us
Thu Feb 17 19:21:00 GMT 2005






I am running samba-3.0.10-1 on Fedora core 3 compiled with ACL support.  I
can connect to shares as expected, users in the correct Active Directory
groups have access, and the converse.  However when I manage the samba
server through Windows XP MMC and attempt to change permissions on the
security tab of the finance share I get "Access is Denied".  Anyone know
what I am doing wrong?  I removed my level 3 debug attachment due to it's
length.
TIA,
Steve O'Brien

My smb.conf looks like:

[global]
workgroup = DOMAIN
netbios name = FC3
realm = DOMAIN.COM
security = ADS
auth methods = winbind
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
password server = dc.domain.com
use spnego = yes
wins server = 192.168.19.35
winbind separator = \\
encrypt passwords = yes
printcap name = cups
disable spoolss = Yes
show add printer wizard = No
idmap uid = 15000-20000
idmap gid = 15000-20000
winbind use default domain = yes
use sendfile = Yes
printing = cups
winbind enum users = yes
winbind enum groups = yes
log level = 3
admin users = @"Domain Admins"

[finance]
comment = finance dept
path = /home/finance
valid users = @Finance
browseable = yes
nt acl support = yes
force group = Finance
admin users = @"Domain Admins"

My fstab for my /home slice looks like:

/dev/VolGroup00/LogVol04 /home                   ext3    acl        1 2

ldd smbd yields:

        libldap-2.2.so.7 => /usr/lib/libldap-2.2.so.7 (0x00df5000)
        liblber-2.2.so.7 => /usr/lib/liblber-2.2.so.7 (0x00111000)
        libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x0011d000)
        libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x004ff000)
        libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x00d37000)
        libcom_err.so.2 => /lib/libcom_err.so.2 (0x00131000)
        libresolv.so.2 => /lib/libresolv.so.2 (0x00ab2000)
        libcups.so.2 => /usr/lib/libcups.so.2 (0x00e57000)
        libssl.so.4 => /lib/libssl.so.4 (0x00f9a000)
        libcrypto.so.4 => /lib/libcrypto.so.4 (0x0034c000)
        libnsl.so.1 => /lib/libnsl.so.1 (0x00317000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0x00973000)
        libpam.so.0 => /lib/libpam.so.0 (0x00134000)
        libattr.so.1 => /lib/libattr.so.1 (0x0020a000)
        libacl.so.1 => /lib/libacl.so.1 (0x0013c000)
        libdl.so.2 => /lib/libdl.so.2 (0x00b7b000)
        libpopt.so.0 => /usr/lib/libpopt.so.0 (0x00142000)
        libc.so.6 => /lib/tls/libc.so.6 (0x00b7f000)
        libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x00149000)
        libz.so.1 => /usr/lib/libz.so.1 (0x0015d000)
        /lib/ld-linux.so.2 (0x00b38000)


More information about the samba mailing list