[Samba] Shares with Windows ACLs on standalone server?

[Rowland Penny]

On 06/10/15 14:24, Matthias Leopold wrote:
> Am 2015-09-24 um 20:32 schrieb Marc Muehlfeld:
>> Hello Matthias,
>>
>> Am 23.09.2015 um 10:45 schrieb Matthias Leopold:
>>> this seems to be a mat{,t}hias discussion ;-)
>>
>> oh, sorry. :-)
>>
>>
>>
>>
>>> Marc, you said i can have windows ACLs on a standalone server. How do i
>>> accomplish the
>>> "https://wiki.samba.org/index.php/Shares_with_Windows_ACLs#SeDiskOperatorPrivilege" 
>>>
>>>
>>> part when i don't have a domain?
>>
>> Skip the domain part or use the hostname, to use a local account.
>>
>>
>> Regards,
>> Marc
>>
>>
>>
>
> Hi Marc,
>
> thanks for your help so far, maybe you can answer one more question.
> Is it possible to have group mapping information locally (tdb) while 
> using "passdb backend = ldapsam"? See my post to this list on 2015-10-02
>
> regards
> matthias
>

Hi, well yes and no, 'yes' if you mean keep all authentication data etc 
in ldap and then map a local unix group to an ldap group, 'no' if you 
mean keep everything in ldap apart from local unix groups. You can only 
use one passdb backend.

Rowland