[Samba] Samba and Windows ACL Issue

Ross McInnes sysrm at stvincent.ac.uk
Fri Jun 3 13:19:46 GMT 2005


Well here is my samba config, for you or for anyone else :)

Ross

[global]
        netbios name = DEV1
        socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind enum users = yes
        winbind gid = 10000-20000
        workgroup = DEV-DOMAIN
        log file = /var/log/samba/samba.log
        os level = 20
        ldap idmap suffix = ou=auth1,dc=dev-domain,dc=stvincent,dc=ac,dc=uk
        winbind enum groups = yes
#        socket address = 1.2.3.4 <- Change this to match the IP address or
remove it to listen to all addresses.
        password server = auth1.DEV-DOMAIN.STVINCENT.AC.UK
        preferred master = no
        winbind separator = +
        winbind use default domain = yes
        max log size = 500 <- In K
        encrypt passwords = yes
        dns proxy = no
        realm = DEV-DOMAIN.STVINCENT.AC.UK
        security = ADS
        wins server = 172.16.2.254
        wins proxy = no
#       nt acl support = No


# Shares section
[adminshare]
        comment = testshare
        browseable = no
        writeable = yes
        guest ok = no
#       valid users = Administrator
        create mode = 0750
        path = /home

[adminshare2]
        comment = testshare2
        browseable = no
        writeable = yes
        guest ok = no
#       valid users = Administrator
        create mode = 0750
        path = /




[homes]
        comment = Personal Storage Area
        browseable = no
        guest ok = no
#       path = /home/DEV-DOMAIN/%U
        vfs object = recycle:repository=.recycle
                    recycle:versions=True
                    recycle:touch=True
                    recycle:keeptree=True
 
recycle:exclude=*.tmp|*.temp|*.o|*.obj|~$*|t*.1|t*.2|t*.3|t*.4|t*.5|t*.6|t$
                    recycle:exclude_dir=/tmp|/temp
                    recycle:noversions=*.doc|*.xls|*.ppt
 

-----Original Message-----
From: Tony Earnshaw [mailto:tonye at billy.demon.nl] 
Sent: 03 June 2005 11:36
To: Ross McInnes
Cc: samba at lists.samba.org
Subject: RE: [Samba] Samba and Windows ACL Issue

fre, 03.06.2005 kl. 11.19 skrev Ross McInnes:

> Heh. Well I see the Administrator and Domain Admins and Everyone bits
> 
> Nothing about adding the user ross to it. Also when I try and add 
> another person, it still comes up access denied :/

I'm afraid at this point I can't help you any more. At this stage you should
have a full list of users and groups - sounds as if your basic Samba config
isn't right, somehow :(

--Tonni

--
mail: tonye at billy.demon.nl
http://www.billy.demon.nl




More information about the samba mailing list