[Samba] Adding Share Windows ACL

[Rowland Penny]

On Fri, 26 Jan 2018 13:01:55 +0100
Micha Ballmann <ballmann at uni-landau.de> wrote:

> Hello,
> 
> i followed your adivces. But when im login in ADUC with the 
> Administrator and change to the security tab, there is a message, i
> have no permissions to the share. Therefore i can't set any ACL.
> 
> Is it possible or correct to create an additional user and also gave 
> them some admininstration (and an unix attribute) rights. Login with 
> this account to ADUC and set the ACLs?
> 
> For example:
> 
> On Linux:
> 
> # chown "xministrator:Unix Admins" SHAREFOLDER
> 
> Login with xministrator and set ACL.
> 
> Thy for help
> 
> Micha

Is this on a DC or a Unix domain member ?

If it is a Unix domain member, do you have a line similar to this in
smb.conf:

username map = /etc/samba/user.map

and does '/etc/samba/user.map' contain something like this:

!root = SAMDOM\Administrator SAMDOM\administrator

Where 'SAMDOM' is replaced by your uppercase WORKGROUP name.

Rowland