[Samba] Samba and Windows ACL Issue

Ross McInnes sysrm at stvincent.ac.uk
Tue May 31 12:03:31 GMT 2005

Heh ok, just the way things were going I wasn’t sure if this was the fix or

Will try this now.



-----Original Message-----
From: samba-bounces+sysrm=stvincent.ac.uk at lists.samba.org
[mailto:samba-bounces+sysrm=stvincent.ac.uk at lists.samba.org] On Behalf Of
Tony Earnshaw
Sent: 31 May 2005 12:33
To: samba at lists.samba.org
Subject: RE: [Samba] Samba and Windows ACL Issue

tir, 31.05.2005 kl. 12.46 skrev Ross McInnes:

> Heh ok im now very very confused.
> Ill re state my problem, and then can someone tell me if its an ACL 
> issue or not :)
> Basically I have a w2k3 domain, and samba 3.0.14a Member service.
> Samba is basically a FileStore.
> Its all configured fine (i.e I can log onto the w2k3 domain, and map 
> my home drive to samba nps)
> User accounts have to be managed/create on windows (since doing it on 
> the *nix machine just doesn?t work, cant set homedir, if its enabled 
> etc)
> Problem is that the script that does the user account creation needs 
> to change the permissions on the home directory it just created.
> That?s when I get a permission denied error. That?s using cacls.exe or 
> using the GUI. Even tho administrator is the owner, he cannot change 
> the grp or add another user etc.

The above's all a bit vague (I don't know why a Samba root preexec script
shouldn't do what you want abov); however:

> getfacl/setfacl
> -rw-r--r--    1 root     root            0 May 27 13:23 crap
> [root at dev1 2005]# getfacl crap
> # file: crap
> # owner: root
> # group: root
> user::rw-
> group::r--
> other::r--
> [root at dev1 2005]# setfacl -m crap -R group:students:rwx
> setfacl: Option -m: Invalid argument near character 1

You haven't ACL support on the mounted filesystem.

> If I chown Administrator:"Domain Users" crap
> I can see the file, but as stated before, cannot change the permissions.

You could if you did it as the file owner  in Windows and the Samba
filesystem really had ACL support, since smbd is running as root and Bruno
Guerreiro told you how to remount without a reboot. JHT already told you
what to change in /etc/fstab.

> Is this an ACL/FileSystem issue? Or something else?

Likely ACL. 


mail: tonye at billy.demon.nl

Eg er bergenser og, eg, men, Trondheims-ordfører Marvin Wiseth:
«Bergenserne er flinke til å gjøre mye ut av lite» (uttalte seg over 17.
mai feiringen iår, men gjelder sannsynligvis og dette mel mitt).

To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

More information about the samba mailing list