[Samba] How to set ACLs with Samba4 AD?

Lee Allen lee at leecallen.com
Fri Jan 18 11:12:09 MST 2013

I apologize if this is very beginner/basic.  In my defense, I can't get the
Samba4 documentation to compile on my system, and I can't find the man
pages online (a pointer to them would be extremely helpful).

And in general, I am having difficulty sorting through the documentation on
the wiki because much of it is clearly pre-Samba4 and therefore obsolete,
or at least questionable.  It's hard to know what is relevant.

Most of the posts I see here seem to be much better informed than I am.  I
would love to know how they obtained their knowledge.

So here is my question:
I am running Samba4 as an AD and file server.  How do I define ACLs for the
samba shares, for domain users & groups?
These users and groups are not defined on the underlying OS (CentOS 6.3).
It seems the answer is to do it via the underlying filesystem, but how is
that possible when the domain users & groups are not defined in the OS?

I see samba-tool has some ACL get/set capability.  Is that the answer?

Or is there some special magic to get CentOS to control file access by
referring to the Samba4 AD?

Many thanks in advance for any help.

And I would be very grateful for pointers to Samba4 introductory or
background material (I have used the HOW-TOs extensively).

Lee Allen

More information about the samba mailing list