[Samba] How to troubleshoot an ACL error?

[steve]

On Wed, 2014-03-05 at 11:29 -0500, Peter Clark wrote:
> On Wed, March 5, 2014 10:06 am, steve wrote:
> 
> > I don't know what your new domain only user is so I'll use pclark
> > Try:
> > rm -r /home/pclark
> > and recreate it:
> > mkdir /home/pclark
> > Then in smb.conf
> 
> I made a user paclark
> 
> >
> > [test]
> > path = /home/pclark
> > read only = no
> > admin users = SOMETHING\Administrator
> >
> > Not sure if default domain is working on the DC, so if not use:
> > admin users = Administrator
> > instead
> >
> > -make sure nscd is turned off and then restart samba
> > -Now go and look at the security tab as Administrator
> 
> NSCD isn't running on this server, it's running bind9 native with
> bind9_dlz for the AD backend.
> 
> > Anything?
> 
> Both ways for admin users come back with "the requested security
> information is either unavailable or can't be displayed" on the
> properties/security tab.
> 
> >
> > Steve
> >
> >
> 
> 

Are you sure that Administrator DN has both uidNumber and gidNumber
attributes? The latter also implies that a domain group e.g. Domain\
Users have gidNumber populated too. We choose 0, 20513 and 20513
respectively. Even though your smb.conf suggests that they are present,
it may be worth checking their existence.
HTH
Steve