[Samba] [solved] Access denied to change share security staff

Rommel Rodriguez Toirac rommelrt at nauta.cu
Mon Apr 17 13:42:07 UTC 2017

El 14 de abril de 2017 3:21:36 GMT-04:00, Rowland Penny <rpenny at samba.org> escribió:
>On Thu, 13 Apr 2017 17:10:16 -0400
>Rommel Rodriguez Toirac via samba <samba at lists.samba.org> wrote:
>> [root at gtmpve nagios]# net rpc rights list accounts
>> ATGTM00\Domain Admins
>> SeDiskOperatorPrivilege
>>  It look like the Domain admins yes have the
>> 'SeDiskOperatorPrivilege' privilege. I change the group of the share
>> with chgrp and try from Windows RSAT. I saw the Doamin admins group
>> with Special permissions set; but can chage anything in Secutiry tab.
>> In Share permissions tab yes.
>>  Now I get this: 
>> [root at gtmpve nagios]# getfacl /test/compartir/
>> getfacl: Eliminando '/' inicial en nombres de ruta absolutos
>> # file: test/compartir/
>> # owner: root
>> # group: ATGTM00\134domain\040admins
>> user::rwx
>> group::r-x
>> other::r-x
>> [root at gtmpve nagios]# ls -lda /test/compartir/
>> drwxr-xr-x. 2 root ATGTM00\domain admins 6 abr 13
>> 08:29 /test/compartir/
>>  The group ATGTM00\134domain\040admins have not permissions to write
>> in this directory. Is that right?
>Yes, that is your problem now, try 'chmod 0770 /test/compartir'
>This will then give 'root' and members of 'Domain Admin' full control
>of the directory, but you should then be able to add other users &
>groups from windows.

 Hello all;
it work fine.
 I change the mod of share to '0770' and everything work fine.
 Thank you Rowland, thank you Marc for your help.

Rommel Rodriguez Toirac
rommelrt at nauta.cu

More information about the samba mailing list