[Samba] cifs share for profiles

[L.P.H. van Belle]

Own anyway.. 

https://wiki.samba.org/index.php/Implementing_roaming_profiles 

and choose 1 to the 2 options. 

Or you use windows ACL
Or you use POSIX ACL

Best options is. 
Use Windows ACL, do NO chown/chmod.. do it from within windows. 
And add : 
acl_xattr:ignore system acls = yes to smb.conf in the profiles share. 

This should be oblicated in my opinion for the windows profiles share. 



Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland penny
> Verzonden: donderdag 7 juli 2016 10:35
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] cifs share for profiles
> 
> On 07/07/16 08:56, Trenta sis wrote:
> > Hi,
> >
> > I have installed samba 4.4.4 and configured and works perfect, now I
> need
> > to configure roaming profiles and reading
> > https://wiki.samba.org/index.php/Shares_with_Windows_ACLs
> >
> > I have detected that I can't configure
> >
> > chgrp "Domain Admins" /srv/samba/Demo/
> >
> >
> > I'm creating this share on our dc, but seem that with
> > # getent group "Domain Admins"
> >
> > any samba AD group is recovered
> 
> Have you altered the smb.conf on the Samba4 DC and if you have, can you
> post your smb.conf.
> 
> Can you also post an example of what you get when you run 'getent group
> "Domain Admins"
> 
> Rowland
> 
> >
> >
> >
> > I have found
> > "If you don't get an output showing the queried name and its ID, there
> may
> > be something wrong in your NSS configuration
> >
> <https://wiki.samba.org/index.php?title=Name_service_switch_(NSS)&action=e
> dit&redlink=1>
> > or
> > if you are using Winbindd with RFC2307 (idmap_ad)
> > <https://wiki.samba.org/index.php/Idmap_config_ad>, you might not have
> an
> > ID assigned (see User and group management
> > <https://wiki.samba.org/index.php/User_and_group_management> for how to
> > administer Unix Attributes in an AD)"
> >
> > but I don't know where is the problem with wbinfo we recover user and
> group
> > but with getent not.
> >
> > We are making thins test on our samba doamin controller with samba 4.4.4
> > and debian jessie
> >
> >
> > Where is the problem?
> >
> > Thanks
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba