[Samba] RV: Security tab missing, and another error

[Rowland penny]

On 11/02/16 18:53, Oscar . wrote:
> Hi all.
>
> I have Samba 4.2.8 in a Debian Virtual Machine, i have domain, can join a Windows 10 machine to domain, and i have logged with “administrator” domain account in my Windows 10 machine, wih RSAT tools i can create users etc
>
> The problem is with a created folder in server.
>
> Mkdir /usuarios
>
> Smb.conf:
>
> # Global parameters
> [global]
>          workgroup = PDC
>          realm = PDC.CASA
>          netbios name = SAMBA
>          server role = active directory domain controller
>          dns forwarder = 8.8.8.8
>          vfs objects = acl_xattr
>          map acl inherit = yes
>          store dos attributes = yes

First of all, you really should remove the three lines after 'dns 
forwarder', they are only required on a Samba Domain Member.

>
> [netlogon]
>          path = /var/lib/samba/sysvol/pdc.casa/scripts
>          read only = No
>
> [sysvol]
>          path = /var/lib/samba/sysvol
>          read only = No
>
> [usuarios]
>          path = /usuarios
>          read only = No
>
> I have done too :
>
> net rpc rights grant 'pcd.casa\Domain Admins' SeDiskOperatorPrivilege -Uadministrator

Try again with:

net rpc rights grant 'PDC\Domain Admins' SeDiskOperatorPrivilege 
-Uadministrator

> successful
>
> i cannot set permissions in security tab because there is no security tab in Windows 10 accessing \\pdc.casa

You should be trying to access \\samba.pdc.casa

>
> also <getent group "Domain Admins"> dont return anything and if i write <chgrp "Domain Admins" /usuarios> :
>
> chgrp: group invalid: «Domain Admins»

Is PAM setup correctly ?
Is /etc/nsswinbind setup correctly ?

>
> i have acl in fstab :
>
> user_xattr,acl,barrier=1,errors=remount-ro 0       1

You might as well remove 'user_xattr,acl,barrier=1', they are part of 
ext4 defaults (that is provided you are using the default ext4 filesystem)

Rowland