[Samba] I: Missing 'security' tab

[Andrea Rossetti]

I still have this problem can anyone help me to solve or troubleshoot it?
I also have another samba member server apparently identical (and apparently configured identical) that instead work well.

See also this screenshot
https://imagebin.ca/v/3t1ykTpRAIzR

Inviato da Posta per Windows 10

Da: Andrea Rossetti
Inviato: venerdì 23 febbraio 2018 09:47
A: samba at lists.samba.org
Oggetto: Missing 'security' tab

Hi,
I try to formulate the question better! :)
I’ve successfully joined an ubuntu 16.04 machine, as member server, to an active directory domain Windows server 2012 R2 following the instructions in the wiki.samba.org “Setting up Samba as a Domain Member” now I set the acls using Windows acl on a share. For that I followed the instruction in the “Setting up a Share Using Windows ACLs” in the wiki. I also granted the SeDiskOperatorPrivilege to the 'Domain admins' group.
But when I try to manage the computer with the ‘computer management’ mmc snap-in from Windows as a user member of 'Domain admins' group, when I right click on the share and click on properties the 'security' tab is missing (see the attached screenshot).
Where is the problem or how can I troubleshoot the problem?

This is my smb.conf
-----------------------------------------------------
[global]
   workgroup = COM_SPOLETO
   realm = COMUNE.SPOLETO.LOCAL
   client signing = yes
   client use spnego = yes
   kerberos method = secrets and keytab
   security = ads
   bind interfaces only = yes
   interfaces = lo enp0s3
   enable privileges = yes
   idmap config * : backend = tdb
   idmap config * : range = 2000-9999
   idmap config COM_SPOLETO : backend = rid
   idmap config COM_SPOLETO : range = 10000-999999
   username map = /etc/samba/user.map
   vfs objects = acl_xattr
   map acl inherit = yes
   store dos attributes = yes
   winbind refresh tickets = Yes
   server string = %h server (Samba, Ubuntu)
   dns proxy = no
   log file = /var/log/samba/log.%m
   log level = 1
   max log size = 1000
   syslog = 0
   panic action = /usr/share/samba/panic-action %d
   server role = member server
   passdb backend = tdbsam
   map to guest = bad user
   usershare allow guests = no

[printers]
   comment = All Printers
   browseable = no
   path = /var/spool/samba
   printable = yes
   guest ok = no
   read only = yes
   create mask = 0700

[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   browseable = yes
   read only = yes
   guest ok = no

[geoportale-lizmap]
    comment = Progetti QGIS per Lizmap
    path = /opt/shares/geoportale-lizmap
    read only = no
    inherit acls = yes

Inviato da Posta per Windows 10