[Samba] ACL on groups working half
Tjaco Mast
t.mast at arch.leidenuniv.nl
Tue Mar 28 15:57:11 GMT 2006
Hi all Samba users,
For some I've got a Samba server running with the following config:
Debian Sarge 2.6.8 kernel
Samba 3.0.21 with winbind and LDAP as ADS member server
A W2K003 PDC
Samba's data partition is ext3 + ACL
I've migrated my users homedirs and profiledirs from W2K003 to Samba.
These each user owns his own homedir and has rwx------ permissions
This seems to be working excelent.
Then I made a groupshare open for everyone. The directory it points to
is closed for all domain users.
No one can access this share.
As I add domain-user tjaco with rwx by ACL (useing
share-properties-security in windows or setfacl on linux) tjaco has
instant access to the share.
Now I add tjaco to group mygroup useing MMC (tjaco shows up as a
groupmember of mygroup doing: getent group)
I remove tjaco from the ACL and add mygroup with rwx to ACL
Tjaco has NO access anymore
As I add group 'domain users' (which tjaco is a member of) with rwx to
ACL tjaco has access again.
This keeps me baffeled for some weeks now.
Furthermore I recall haveing read something about the importance of the
SYSTEM group that should be added to the ACL but I don't understand how.
SYSTEM is not a normal or builtin ADS group.
Who can help?
Thanks in advance, Tjaco
More information about the samba
mailing list