[Samba] ACL with ActiveDirectory at Groups **UP**

[darkyz]

************
I added :

acl check permissions = False
veto oplock files = /*.doc/*.docx/*.xls/*.xlsx/*.pptx/*.ppsx/*.ppt/*.pps

but still doesn't work.

*************


> Dear All,
>
> I have problem with this smb.conf share section
> (I'm not samba admin, but I know this configuration)
>
> smb.conf 3.5.8
>
> ###################
> [AD-test-acl]
>       comment = AD-test-acl
>       path = /fs-e/AD/group/AD-test-acl
>        read only = No
>        create mask = 0770
>        directory mask = 0770
>
*acl check permissions = False
veto oplock files = /*.doc/*.docx/*.xls/*.xlsx/*.**pptx/*.ppsx/*.ppt/*.pps*

>        inherit permissions = Yes
>        inherit acls = Yes
>        browseable = No
>        blocking locks = No
>        delete readonly = Yes
>        dos filetime resolution = Yes
>        vfs objects = zfsacl
>        nfs4:acedup = merge
>        nfs4:chown = yes
>        nfs4:mode = special
> #####################
>
> the issue are:
>
> users network 1
>
>    when trying to edit a file the user cannot save the file due to
> incorrect permissions, however it seems that even though an error is
> given the file is still saved.
>    the file however then has readonly permission set and can no longer
> be used. Removing the readonly permission (properties) sometimes results
> in either the file being no longer visible (not always) or the file
> being no longer readable (again not always) - seems to depend on the user?
>
> users network 2
>
>    when trying to edit a file the user cannot save the file due to
> incorrect permissions, however a copy of the file is saved
>    again the copy of the file is set to readonly and removing the
> readonly property may result in the file becoming unusable (can no
> longer open from net2) or no longer visible from net2.
>
> do you have an idea to solve these problems?
> thanks, darkyz
>