[Samba] how to reset home directory ACLs?

[Lorenzo Faleschini]

you mean loggin  in a client as domain administrator and change security 
tab for that folders with problems on the new server trough RSAT or 
Explorer?


Lorenzo Faleschini
IT Manager @ Nord Est Systems srl
----------------------------------------
m: +39 335 6055225 | skype: falegalizeit

Il 17/07/2014 08:33, Daniel Müller ha scritto:
> The best way Use a windows client:
> https://wiki.samba.org/index.php/Setting_up_a_home_share
>
>
> EDV Daniel Müller
>
> Leitung EDV
> Tropenklinik Paul-Lechler-Krankenhaus
> Paul-Lechler-Str. 24
> 72076 Tübingen
> Tel.: 07071/206-463, Fax: 07071/206-499
> eMail: mueller at tropenklinik.de
> Internet: www.tropenklinik.de
>
>
>
>
> -----Ursprüngliche Nachricht-----
> Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] Im
> Auftrag von Lorenzo Faleschini
> Gesendet: Mittwoch, 16. Juli 2014 17:20
> An: samba at lists.samba.org
> Betreff: [Samba] how to reset home directory ACLs?
>
> Hi guys,
>
> I'm migrating an old samba3 domain to a new domain with samba4 (1 DC  +
> 1 Fileserver + other members)
>
> I've imported all users trough a script with samba-tool, sucessfully mapped
> UID and GID on all machines using winbind, then I started rsyncing the old
> server shares to the new fileserver.
>
> rsync -rltmvh --delete-after --exclude=.recycle /OLDSERVERSHARE
> /NEWSERVERSHARE
>
> now, maybe in the old fileserver there where some screwed permissions (as I
> inherited it from previous IT who left).
> so I
> chmod -R -c 770 /NEWSERVERSHARE
> chown -R -c administrator:"domain users" /NEWSERVERSHARE
>
> and with this I'm able to manage it trough RSAT and set correct permissions
> to the majority of shares.
>
> I have still an issue with home folders.
> many files are readonly for the users but if they copy and paste they can RW
> access the copy.
> If I check ACL permissions of those RO files I see they don't have the
> permission for the user that is supposed to be the owner.
>
> is there a way I can recursively and easily fix ACLs on the homes folders
> and subfolders?
> maybe a new rsync run with some other parameter to fix acls as theyre
> supposed to be in destination?
> any clue?
>
> thanks in advance for your suggestions
>