[Samba] Samba4, problem with public resource

[Rowland Penny]

On 10/11/14 19:34, Miguel Angel Coa M. wrote:
> Hi,
> My smb.conf is the next:
>
> [......................]
>
> # Global parameters
>
> [global]
>
>             workgroup = MYDOMAIN
>
>             realm = MYDOMAIN.COM <http://MYDOMAIN.COM>
>
>             netbios name = SAMBA4
>
>             server role = active directory domain controller
>
>             server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, 
> drepl, winbind, ntp_signd, kcc, dnsupdate
>
>             vfs objects = acl_xattr
>
>         map acl inherit = Yes
>
>         store dos attributes = Yes
>
>             log level = 3
>
>             log file = /usr/local/samba/var/%m.log
>
>            #testing nfs slow
>
>             strict locking = no
>
>             read raw = yes
>
>             write raw = yes
>
>             socket options = TCP_NODELAY
>
AH, so it is an AD DC, it is not really recommended to use the DC as a 
fileserver, I would also suggest that you remove the lines below the 
'server services' line and above the [netlogon] share line. You also do 
not seem to have this line: 'idmap_ldb:use rfc2307 = yes'.

Rowland

> [netlogon]
>
>             path = 
> /usr/local/samba/var/locks/sysvol/mydomain.com/scripts 
> <http://mydomain.com/scripts>
>
>             read only = No
>
> [sysvol]
>
>             path = /usr/local/samba/var/locks/sysvol
>
>             read only = No
>
> [publico]
>
> path = /smbshares1/publico
>
>         read only = No
>
>         guest ok = Yes
>
>         hide files = /RECYCLER/
>
>         veto files = /*.lnk/*.exe/*.scr/autorun.inf/
>
>         directory mask = 0777
>
>         create mask = 0777
>
> ##END FILE
>
> [......................]
>
>
>
> Thanks
>
>
>
> Saludos.
> ---
> Miguel Coa M.
>
> 2014-11-10 16:14 GMT-03:00 Rowland Penny <rowlandpenny at googlemail.com 
> <mailto:rowlandpenny at googlemail.com>>:
>
>     On 10/11/14 19:10, Miguel Angel Coa M. wrote:
>
>         Hello Everyone,
>
>         I've install Samba4, (Version 4.1.6 and Centos6). I configured
>         the public
>         resource for all users but the strange is that some users
>         can't make
>         operation (read, modify, delete) in the root path "/public",
>         but these can
>         inside for folder "/public/test" . In the "Computer Management
>         -> Shared
>         Folders -> Shares"   I select the resource "propriety ->
>         permissions ....
>         -> group name o user " i have: Everyone, Domain Users,
>         Administrator with
>         "total control".
>
>         But when i'm going to connect to resource for create,edit or
>         modify file
>         appears error.
>
>
>
>         [......................]
>
>            check_reduced_name [rcortes.txt] [/smbshares1/publico]
>
>            check_reduced_name: rcortes.txt reduced to
>         /smbshares1/publico/rcortes.txt
>
>            check_reduced_name [rcortes.txt] [/smbshares1/publico]
>
>            check_reduced_name: rcortes.txt reduced to
>         /smbshares1/publico/rcortes.txt
>
>            rename_internals_fsp: Error NT_STATUS_ACCESS_DENIED rename
>         Nuevo
>         documento de texto (30).txt -> rcortes.txt
>
>            MYDOMAIN\rcortes closed file Nuevo documento de texto (30).txt
>         (numopen=2) NT_STATUS_OK
>
>            MYDOMAIN\rcortes opened file Nuevo documento de texto
>         (30).txt read=No
>         write=No (numopen=3)
>
>            MYDOMAIN\rcortes closed file Nuevo documento de texto (30).txt
>         (numopen=2) NT_STATUS_OK
>
>            check_reduced_name [rcortes.txt] [/smbshares1/publico]
>
>            check_reduced_name: rcortes.txt reduced to
>         /smbshares1/publico/rcortes.txt
>
>            unix_mode(rcortes.txt) returning 0666
>
>            MYDOMAIN\rcortes opened file Nuevo documento de texto
>         (30).txt read=No
>         write=No (numopen=3)
>
>         [......................]
>
>
>
>         The behavior is presented with only some users, other users
>         can work
>         without problems.
>
>
>
>
>
>         Resurces permissions
>
>         [......................]
>
>         drwxrwxrwt+ 91 MYDOMAIN\administrators  102 131072 Nov 10
>         09:21 publico
>
>         [......................]
>
>
>
>
>
>         Check member group
>
>
>
>         [......................]
>
>         [root at pdc4 ~]# samba-tool group listmembers "Domain Users"
>         |grep rcortes
>
>         ldb_wrap open of secrets.ldb
>
>         rcortes
>
>         [......................]
>
>
>
>         The smb.conf
>
>         [......................]
>
>         [publico]
>
>                  path = /smbshares1/publico
>
>                  read only = No
>
>                  guest ok = Yes
>
>                  hide files = /RECYCLER/
>
>                  veto files = /*.lnk/*.exe/*.scr/autorun.inf/
>
>                  directory mask = 0777
>
>                  create mask = 0777
>
>         [......................]
>
>
>
>
>
>
>
>         Thanks.
>
>     Hi, can you please post the '[......................]' part of
>     smb.conf :-)
>
>     Rowland
>
>     -- 
>     To unsubscribe from this list go to the following URL and read the
>     instructions: https://lists.samba.org/mailman/options/samba
>
>