[Samba] smbclient4 - rights

[Petr Sevcik]

I changed rights on the directory to

REVISION:1
CONTROL:SR|PD|SI|DP
OWNER:BUILTIN\Administrators
GROUP:BUILTIN\Administrators
ACL:NT AUTHORITY\SYSTEM:ALLOWED/OI|CI/FULL
ACL:BUILTIN\Administrators:ALLOWED/OI|CI/FULL
ACL:BUILTIN\Server Operators:ALLOWED/OI|CI/READ
ACL:PYDIO\pm-uzivatel:ALLOWED/OI|CI/CHANGE

But situations is the same. I can change directory to Business with user 
with no rights.


On Tue, 22 Sep 2015, Rowland Penny wrote:

> On 22/09/15 08:01, petr.sevcik at linuxbox.cz wrote:
>> Hi,
>> 
>> I have a question, when I connect to smb folder using smbclient I can get
>> to folder where I haven't rights.
>> 
>> I cannot list content of the folder but I can "cd" to folder.
>> 
>> Is it right or it is bug? Do you have some workaroud?
>> 
>> ACLs sets on the folder:
>> 
>> smbcacls //192.168.3.119/orders/order1/Business -k
>> REVISION:1
>> CONTROL:SR|PD|SI|DI|DP
>> OWNER:BUILTIN\Administrators
>> GROUP:PYDIO\Domain Users
>> ACL:PYDIO\pm-uzivatel:ALLOWED/OI|CI/CHANGE
>> ACL:NT AUTHORITY\SYSTEM:ALLOWED/OI|CI/FULL
>> ACL:BUILTIN\Administrators:ALLOWED/OI|CI/FULL
>> ACL:BUILTIN\Server Operators:ALLOWED/OI|CI/READ
>> 
>> 
>> Connect to folder using user dispo-uzivatel
>> 
>> smbclient4 //192.168.3.119/orders password -U pydio/dispo-uzivatel
>> 
>> 
>> CD and DIR on the folder:
>> 
>> smb: \order1\> cd business
>> dos_clean_name [\order1\\business\]
>> smb: \order1\Business\> dir
>> NT_STATUS_ACCESS_DENIED listing \order1\Business\*
>>
>>                  51475068 blocks of size 1024. 48058104 blocks available
>> Total bytes listed: 0
>> 
>> 
>> Thans for your reply
>> Petr
>
> Please do not use smbclient4, it is not supported, in fact if you compile 
> samba4 yourself it will not be installed.
> Try using smbclient instead.
>
> Rowland
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>
>
>