[Samba] samba-tool of delegation of permissions

Marc Muehlfeld samba at marc-muehlfeld.de
Mon May 20 12:04:38 MDT 2013


Hello Andrew,

Am 19.05.2013 13:39, schrieb Andrew Bartlett:
>> Have you read the 'Known issues/limitations' on that page
>> (http://wiki.samba.org/index.php/Samba_AD_DC_HOWTO/AD_Delegation#Known_issues.2Flimitations)?
>>
>> You still need 'acl:search=false' in your smb.conf, even if you run the
>> latest version.
>
> If that is the case, after resetting the ACLs or on a fresh provision,
> please file a bug, showing how windows does it differently.  We match
> windows behaviour now, as far as we know.

The bug report about that, already exists:
https://bugzilla.samba.org/show_bug.cgi?id=9788

Because I don't have Windows servers, I have no way to find out how 
Windows react.

But when I wrote the "Join machines to the Domain as non-Domain-Admin" 
Howto, I take over the steps from MS:
http://support.microsoft.com/kb/932455/en-us

That's why I think, samba is still doing something different on 
delegation, than MS in that case, if I have to use 'acl:search=false'.


Regards,
Marc


More information about the samba mailing list