[Samba] Samba and Windows ACL Issue

[Tony Earnshaw]

tir, 31.05.2005 kl. 12.46 skrev Ross McInnes:

> Heh ok im now very very confused.
> 
> Ill re state my problem, and then can someone tell me if its an ACL issue or
> not :)
> 
> Basically I have a w2k3 domain, and samba 3.0.14a Member service.
> 
> Samba is basically a FileStore.
> 
> Its all configured fine (i.e I can log onto the w2k3 domain, and map my home
> drive to samba nps)
> 
> User accounts have to be managed/create on windows (since doing it on the
> *nix machine just doesn’t work, cant set homedir, if its enabled etc)
> 
> Problem is that the script that does the user account creation needs to
> change the permissions on the home directory it just created.
> 
> That’s when I get a permission denied error. That’s using cacls.exe or using
> the GUI. Even tho administrator is the owner, he cannot change the grp or
> add another user etc.

The above's all a bit vague (I don't know why a Samba root preexec
script shouldn't do what you want abov); however:

> getfacl/setfacl
> -rw-r--r--    1 root     root            0 May 27 13:23 crap
> [root at dev1 2005]# getfacl crap
> # file: crap
> # owner: root
> # group: root
> user::rw-
> group::r--
> other::r--
> 
> [root at dev1 2005]# setfacl -m crap -R group:students:rwx
> setfacl: Option -m: Invalid argument near character 1

You haven't ACL support on the mounted filesystem.

> If I chown Administrator:"Domain Users" crap
> 
> I can see the file, but as stated before, cannot change the permissions.

You could if you did it as the file owner  in Windows and the Samba
filesystem really had ACL support, since smbd is running as root and
Bruno Guerreiro told you how to remount without a reboot. JHT already
told you what to change in /etc/fstab.

> Is this an ACL/FileSystem issue? Or something else?

Likely ACL. 

--Tonni

-- 
mail: tonye at billy.demon.nl
http://www.billy.demon.nl

Eg er bergenser og, eg, men, Trondheims-ordfører Marvin Wiseth:
«Bergenserne er flinke til å gjøre mye ut av lite» (uttalte seg over 17.
mai feiringen iår, men gjelder sannsynligvis og dette mel mitt).