[Samba] Samba 4 issues on FreeBSD 9

Daniel O'Connor darius at dons.net.au
Thu Feb 13 06:12:16 MST 2014

I have been experimenting with Samba 4 on FreeBSD 9 and after a lot of googling the core stuff is working (phew).

However I have a few problems, I am trying to setup roaming profiles and the tutorials suggest creating the share and then using a windows client to set the ACLs on it, however to do that the user needs the SeDiskOperatorPrivilege priv, so I 

[midget 23:38] ~ >net rpc rights grant LABF\\darius SeDiskOperatorPrivilege -Uadministrator -Sns
Enter administrator's password:
Successfully granted rights.
[midget 23:38] ~ >net rpc rights list privileges SeDiskOperatorPrivilege -Sns
Enter darius's password:
  LABF\Domain Users

However I am unable to set the ACLs (it reports access denied) and if I run whoami /priv on Windows I get..
Privilege Name                Description                          State
============================= ==================================== ========
SeShutdownPrivilege           Shut down the system                 Disabled
SeChangeNotifyPrivilege       Bypass traverse checking             Enabled
SeUndockPrivilege             Remove computer from docking station Disabled
SeIncreaseWorkingSetPrivilege Increase a process working set       Disabled
SeTimeZonePrivilege           Change the time zone                 Disabled

which doesn't even show SeDiskOperatorPrivilege, let alone suggest I have been granted it.

I also find I can't set group policy objects (access denied again) but I'm not sure how to go about tracking that down.. Any suggestions welcome :)


Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
"The nice thing about standards is that there
are so many of them to choose from."
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.samba.org/pipermail/samba/attachments/20140213/630fbd98/attachment.pgp>

More information about the samba mailing list