[Samba] Directory Permissions on Directory

Oliver Werner oliver.werner at kontrast.de
Mon Jan 9 16:52:40 UTC 2017


Hi Rowland here is it:

[global]
       netbios name = ID-175
       security = ADS
       workgroup = HQKONTRAST
       realm = HQ.KONTRAST

       dedicated keytab file = /etc/krb5.keytab
       kerberos method = secrets and keytab

       winbind trusted domains only = no
       winbind use default domain = yes
       winbind enum users  = yes
       winbind enum groups = yes
       winbind cache time = 300
	winbind refresh tickets = yes

       # Default idmap config used for BUILTIN and local accounts/groups
       idmap config *:backend = tdb
       idmap config *:range = 500-1023

       # idmap config for domain HQKONTRAST
       idmap config HQKONTRAST:backend = ad
       idmap config HQKONTRAST:schema_mode = rfc2307
       idmap config HQKONTRAST:range = 1024-99999

       # Use settings from AD for login shell and home directory
       winbind nss info = rfc2307

[IT-Security]
   path = /data/security
   browseable = yes
   writeable = yes
   force group = it_security
   valid users = @it_security
   create mask = 0660
   directory mask = 0770
   #oplocks = 0
   vfs objects = full_audit recycle
   full_audit:prefix = %u
   full_audit:success = mkdir rename rmdir unlink pwrite
   full_audit:failure = none
   full_audit:facility = LOCAL5
   full_audit:priority = NOTICE
   recycle:versions = yes
   recycle:exclude = .*, ~*


Thanks :)
OLIVER WERNER
System-Administrator




More information about the samba mailing list