[Samba] setfacl: Option -m: Invalid argument near character 3

[Rich Webb]

Rowland,

Are you running anything on your DC such as sssd or some form of
winbind?  I made the change you suggested and it's still not working. 

Also a point of interest:

getent group only returns unix groups and not domain groups.  

I'm thinking that I need sssd or similar type of service running maybe?

Rich
 

-----Original Message-----
From: samba-bounces at lists.samba.org
[mailto:samba-bounces at lists.samba.org] On Behalf Of Rowland Penny
Sent: Friday, December 19, 2014 4:24 AM
To: samba at lists.samba.org
Subject: Re: [Samba] setfacl: Option -m: Invalid argument near character
3


Hi, if I create a dir on one of my DC's and then set an ACL on it:

root at dc01:~# mkdir testdir
root at dc01:~# setfacl -m d:g:'domain admins':rwx ./testdir root at dc01:~#
getfacl ./testdir # file: testdir # owner: root # group: root user::rwx
group::r-x other::r-x default:user::rwx default:group::r-x
default:group:EXAMPLE\134Domain\040Admins:rwx
default:mask::rwx
default:other::r-x

So you can see it works, Don't know why others have suggested using
'-R', all it does is make setfacl recurse into directories.

I think your problem is this: '--use-ntvfs'

Try turning it off, see here, under the heading 'Starting s3fs': 
https://wiki.samba.org/index.php/Samba4/s3fs

Rowland

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba