[Samba] What options do I have to create OUs and ACLs in Samba4?

John Lewis oflameo2 at gmail.com
Sun Feb 15 13:19:41 MST 2015


On 02/15/2015 03:05 PM, Marc Muehlfeld wrote:
> Hello Rowland,
>
> Am 15.02.2015 um 20:37 schrieb Rowland Penny:
>> FYI Marc, It is allowing 'Domain Computers' access to
>> "CN=demo01,CN=Users,DC=samdom,DC=example,DC=com", the container will
>> inherit ACES and 'Domain Computers' can read the sddls, list children
>> and read control. :-)
>>
>> See here:
>> https://msdn.microsoft.com/en-gb/library/windows/desktop/aa374928%28v=vs.85%29.aspx
>>
>>
>> and here:
>> https://msdn.microsoft.com/en-gb/library/windows/desktop/aa379602%28v=vs.85%29.aspx
>
>
> Thanks for that interesting links. Maybe I can write a user
> documentation for the Wiki out of that for the really tough guys using
> samba-tool :-)
>
>
> Regards,
> Marc
>
I would greatly appreciate it Marc. I am one of the tough guys. I can't
afford to sneak a Windows Server machine onto my 1GB memory Ramnode VPS.
I think I could get around that with some ssh reverse proxies, openVPN,
creative firewall rules, but being able to do it with samba tool would
be simpler.


More information about the samba mailing list