[Samba] samba configuration

[Rowland Penny]

On Sat, 4 Aug 2018 20:33:16 -0500
Ivan Rojas via samba <samba at lists.samba.org> wrote:

> How can I get all the users who deleted the files and folders in the
> recycling folder, I have configured it and I delete folders with
> different users of the active directory but it only comes from a
> user, I send the complete configuration so that they can help.
> 
> ----
> # Global parameters
> [global]
>         workgroup = SOPORTE
>         realm = SOPORTE.LOCAL
>         netbios name = ADSSERVER
>         server role = active directory domain controller
>         server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,
> drepl, winbindd, ntp_signd, kcc, dnsupdate
>         idmap_ldb:use rfc2307 = yes
>         winbind enum users = yes
>         winbind enum groups = yes
> 
> [netlogon]
>         path = /var/lib/samba/sysvol/soporte.local/scripts
>         read only = No
> 
> [sysvol]
>         path = /var/lib/samba/sysvol
>         read only = No
> [sistemas]
>         path = /opt/sistemas
>         read only = no
>         force directory mode = 770
>         force create mode = 660
>         create mask = 0770
>         directory mask = 0770
> # Papelera de reciclaje
>         vfs objects = recycle full_audit
>         recycle:repository = /opt/recycle/recycle_sistemas/%u/%m
>         recycle:versions = Yes
>         recycle:keeptree = Yes
>         recycle:touch = yes
> 
> [RECYCLE BIN]
>         comment = Papelera de reciclaje
>         path = /opt/recycle
>         public = yes
>         writable = yes
>         admin users = SOPORTE\administrator
>         write list = SOPORTE\administrator
>         browseable = yes
> 
> ------
> 
> root at adsserver:/opt/recycle/recycle_sistemas# ll
> total 12
> drwx------ 3 SOPORTE\cmiranda users 4096 ago  4 19:13 ./
> drwxrwxr-x 3 root             users 4096 ago  4 19:13 ../
> drwx------ 3 SOPORTE\cmiranda users 4096 ago  4 19:13
> SOPORTE\cmiranda/

You are trying to do this on a DC, this means that you must use Windows
ACL's, see here:

https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs

If you read that page, you will find this warning:

Do not set additional share parameters, such as force user. Adding them
to the share definition can prevent you from configuring or using the
share.

Or, to put it another way, I do not think it will work as is.

Rowland