[Samba] ACLs and winbind

[Thierry Lacoste]

I'm trying to allow XP clients to add ACLs in the homes share.
It appears that I'm unable to do it unless I use winbind
although I'm in a pure Samba/OpenLDAP environment.

I have a PDC and BDC with Samba/OpenLDAP
and a member Samba server with homes and profiles (below
is its smb.conf) on which I have Posix ACLs.
If I comment out the idmap lines I cannot add ACLs from XP
in my home share though. I can browse and pick domain users
and groups but cannot add them to the security tab of a file
in a user's home share.

Do I really need winbind?

Regards,
Thierry.

workgroup = STARS
netbios name = CAPELLA
security = DOMAIN
name resolve order = wins bcast
wins server = castor
netbios aliases = AHOMES APROFILES
password server = ALDAP1 ALDAP2

log level = 2

idmap gid = 10000-20000
idmap uid = 10000-20000

[homes]
  comment = Home Directories
  valid users = %S
  read only = No
  browseable = No

[Profiles]
  comment = Roaming Profile Share
  path = /export/profiles
  read only = No
  profile acls = Yes