[Samba] What are the parameter definitions for a SAMBA share to make it Fully NTFS compliant

[Bret Goodfellow]

Your link suggestion: https://wiki.samba.org/index.php/Shares_with_Windows_ACLs talks about the "SeDiskOperatorPrivilege".  Is running the "net rpc rights grant ...." necessary for the SAMBA share to be fully NTFS compliant, including inheritance".  My Windows admins hesitate to run this.  Bottom line, does this need to be run to resolve my problem?

-----Original Message-----
From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Rowland Penny
Sent: Wednesday, September 9, 2015 8:53 AM
To: samba at lists.samba.org
Subject: Re: [Samba] What are the parameter definitions for a SAMBA share to make it Fully NTFS compliant

On 09/09/15 15:25, Bret Goodfellow wrote:
> Hello there,
>
> I am trying to provide a SAMBA share so that it is fully NTFS compliant, and inheritance gets propagated down properly.  Rather than show all the various configurations that I have tried to no avail, does anyone have an idea how to define one of these shares?   I want this share to be completely controlled by the AD admin, with little or no intervention from the linux admin providing the SAMBA share.   What linux file permissions need to be set for the share?  Do I need to run setfacl as well?  What statement defs need to be provided in smb.conf?
>
> I would have thought that there would be a straight forward way of defining one of these shares, for defining a fully NTFS compliant share.  Below is a snippet of my file share def:
>
> [share9]
> Comment = For samba share of volume share9 vfs objecrts = glusterfs 
> glusterfs:volume = share9 glusterfs:logfile = 
> /var/log/samba/glusterfs_share9.%M.log
> glusterfs:loglevel = 7
> path = /
> read only = no
> guest ok = yes
> map acl inherit = yes
> inherit acls = yes
> inherit permissions = yes
> inherit owner = yes
> nt acl support = yes
> acl group control = yes
>
>
> Thank you for any suggestions.
>
> Bret
>

You could try reading this page on the wiki: 
https://wiki.samba.org/index.php/Shares_with_Windows_ACLs

This will hopefully help you, but the major point is you need to lose most of the lines you have added.

Rowland


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba