[Samba] Windows ACL adjustments, permission denied

Mike Partyka mpartyka at gmail.com
Wed Jan 4 14:10:42 GMT 2006


Yes, using Winbind, AD users and groups appear to be local users and groups
to the *nix box, so you can then chown/chgrp files and dirs specifying the
user/group as "DOMAIN/user". That's one way of adding AD users and groups.
You should also be able to use the Microsoft MMC, or windows explorer to do
this.

Additionally if your kernel supports POSIX ACL's and Extended attributes you
can modify any permissions in a 200X ACL that appears on: share properties
->Advanced button ->Permissions tab

I actualy spoke too soon as i was mistaken i had found the solution, i am
still having a problem doing this. The change i made allows me to apply
changes to the ACL's and i get no error, but in actuality the change is not
being made, if you reopen the share properties and look at the ACL it's
unchanged. So i still have a problem somewhere.

HTH
Mike

On 1/3/06, Adam Nielsen <adam.nielsen at uq.edu.au> wrote:
>
> > Once i did this, i was able to change the ACL, all i wanted. Hope
> > this saves someone some effort down the line.
>
> Just out of curiosity, what ACLs are you changing?  Because my set up
> only gives me access to the ugo/rwx UNIX permissions.  I can't add an
> arbitrary user, like DOMAIN/UserX.  Is this what you're able to do?
>
> Cheers,
> Adam.
>


More information about the samba mailing list