[Samba] dsacls

Stuart Naylor stuartiannaylor at thursbygarden.org
Tue Jul 29 04:05:08 MDT 2014

Are there any deny tools with samba4? Like the below example?

To set the permission to deny read access of the homePhone attribute on a single user object, you can use this command:

dsacls <DN of object> /D <security principal>:RP;homePhone 
For our example, the command would look like this:

dsacls "CN=Doe\, John,OU=newOU,DC=root,DC=net" /D root\


More information about the samba mailing list