RES: [Samba] Re: ACLs with Problem

[Luis Henrique de Faria Guimarães]

I believe that you it did not understand my explanation.  I have a Linux server executing samba intergrated with a server windows 2003 (PDC).  Linux is using the users of windows 2003 saw winbind.  But, the permissions for these of archive do not function.  When I try to change the permissions of an archive in the sharing of the samba, it I do not function.  The part of ACL of the samba is not functioning, you understood me.
The command getfacl sample that support ACL is functioning in the server linux.  It sees my /etc/fstab:
LABEL=/                 /                       ext3    defaults,acl    1 1
LABEL=/boot             /boot                   ext3    defaults        1 2
LABEL=/data             /data                   ext3    defaults,acl    1 2
none                    /dev/pts                devpts  gid=5,mode=620  0 0
none                    /proc                   proc    defaults        0 0
none                    /dev/shm                tmpfs   defaults        0 0
/dev/cciss/c0d0p2       swap                    swap    defaults        0 0
/dev/cdrom              /mnt/cdrom              udf,iso9660 noauto,owner,kudzu,ro 0 0
/dev/fd0                /mnt/floppy             auto    noauto,owner,kudzu 0 0

You can help this problem me?

Luís Henrique
-----Mensagem original-----
De: paul kölle [mailto:paul at subsignal.org]
Enviada em: quinta-feira, 22 de setembro de 2005 13:15
Para: samba at lists.samba.org
Assunto: [Samba] Re: ACLs with Problem


Luis Henrique de Faria Guimarães wrote:
> With this configuration the users of the PDC (windows 2003) are authenticantion way telnet 
> without problem.  However, the ACL do not function.  They see the exit with command getfacl teste.txt:
> 
> [root at redfree teste]# getfacl teste.txt
> # file: teste.txt
> # owner: root
> # group: Domain Users
> user::rwx
> user:henrique:rw-
> group::r--
> mask::rw-
> other::r--
Can you please describe what you expected to see here and why?

> 
> The user henrique appears in linux, but he does not appear in windows.
Then I'd say he's a linux user and not from AD via winbind right?

> When I try to add permissions through windows appears a message of "denied access".
If that is a "correct" result largely depends which user is logged in to
the windows workstation. It would be helpful if you set samba to a
moderate debug level, and provide the relevant logs generated when the
desired operation(s) fail.


hth
 Paul