[Samba] Unix users/groups and the Windows ACL editor

Victor Sudakov vas at mpeks.tomsk.su
Sun Feb 26 09:23:04 MST 2012

TAKAHASHI Motonobu wrote:
> > > 
> > > > There is a samba compiled --without-winbind --with-acl-support; the
> > > > Windows GUI ACL editor Security tab shows multiple users and groups
> > > > as "Unix User\joe" and "Unix Group\foo". I can remove those users
> > > > and groups from the GUI if I wish to.
> > > > 
> > > > Is there a way to _add_ Unix groups and users via the ACL editor?
> > > 
> > > If your file system has ACL feature, you can manupulate these groups
> > > to map them to Samba groups with "net groupmap add".
> > 
> > Do you mean to say I must map all those Unix groups to Windows groups
> > beforehand, before I can manupulate them in the ACL editor?
> Yes.

It's a pity. And where will this mapping be stored? NB: I don't use winbind.

> > > Also you can add users who map to Samba user.
> > 
> > Could you please elaborate on that? My Windows users do map to Unix
> > users, but when I add a Windows user in the ACL editor and press
> > "Apply", the user just disappears from the list.
> Have you enabled ACL feature on your filesystem? 

Yes, I have.

> And if you see an user as "Unix User\foo", the user is not mapped to a
> Samba user. If an user is mapped to a Samba user, then you see the user
> as "COMPUTERNAME\foo" in your Security tab.

All my domain users are mapped to Unix users by samba, e.g. a
DOMAIN\foo user is mapped to the Unix user "foo". 

Are you talking about some other mapping? Could you please elaborate?

Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov at sibptus.tomsk.ru

More information about the samba mailing list