[Samba] Fix sharing ACL

Ricardo Pardim Claus ricardo.claus at yahoo.com.br
Mon Oct 24 15:42:43 UTC 2016


Dear Rowland, 
Follow my smb.conf

The smb.conf the fileserver:


# Global parameters 
[global] 
netbios name = SRV16 
server string = Samba4 Server 
security = ADS 
encrypt passwords = yes 
realm = domain.local 
workgroup = DOMAIN 
server services = smb 
log file = /var/log/samba/samba.log 
log level = 9 
# 
winbind enum users = yes 
winbind enum groups = yes 
winbind use default domain = Yes 
winbind nss info = RFC2307 
#idmap_ldb: Use 
vfs objects = acl_xattr 
map acl inherit = Yes 
store dos attributes = Yes 
# Idmap config for domain DOMAIN 
#idmap config DOMAIN: backend = ad 
idmap config DOMAIN: backend = rid 
#idmap config DOMAIN: schema_mode = RFC2307 
idmap config DOMAIN: range = 10000-99999 
idmap config * : backend = tdb 
idmap config * : range = 2000-9999 

[data] 
comment = Folder data
path = /mnt/data 
read only = no 
browseable = yes 
# 
map acl inherit = yes 
store dos attributes = yes 
# 
inherit acls = Yes 
inherit permissions = Yes 
guest account = guest 
guest ok=yes 
writeable = Yes 
# Recycle
vfs objects = acl_xattr, recycle, shadow_copy2, full_audit 
#vfs objects = recycle, shadow_copy2 
recycle:facility = LOCAL1 
recycle:priority = NOTICE 
recycle:maxsize = 0 
recycle:directory_mode = 0774 
recycle:subdir_mode = 0774 
recycle:keeptree = true 
recycle:touch = true 
recycle:versions = true 
recycle:exclude = *.tmp, *.log, *.obj, ~*.*, *.bak, *.exe, *.bin 
recycle:exclude_dir = tmp, temp, cache 
create mask = 0774 
directory mask = 0774 
# SHADOW COPY / SNAPSHOT 
shadow:mountpoint = /mnt/data/ 
shadow:snapdir = .snapshot 
shadow:basedir = /mnt/ 
shadow:sort = desc 
shadow:localtime = yes 
shadow:format = @GMT-%Y.%m.%d-%H.%M.%S 
# AUDIT FILESERVER 
full_audit:prefix = %u|%I|%S|%g 
full_audit:success = all 
full_audit:failure = all !open 
full_audit:facility = local1 
full_audit:priority = ALERT 



More information about the samba mailing list