[Samba] NT_STATUS_NO_MEMORY accessing a DC shared resource

[Rowland Penny]

On Thu, 5 Jul 2018 16:15:27 +0200
"Ing. Claudio Nicora" <claudio.nicora at gmail.com> wrote:

> 
> > Undoubtedly '3000000' will be Administrator, who will be mapped to
> > ID '0' (root) in idmap.ldb and 'users' is mapped from 'Domain
> > Users' in idmap.ldb.
> Will live with that; that share is only used while playing with samba 
> config easily from Windows clients.
> I'll remove it just before going to production.
> 
> > There is a slight problem with the way you have set the permissions
> > (okay, a large one), the permissions, when set from Windows, are
> > stored in a file called NTACL.security
> >
> > Rowland
> Do you mean that Linux (other than Samba) could have issues accessing 
> those files?
> Even if I force them to root:root with chown?

No, what I am trying to say is, you are only looking at half of the
picture ;-)

If you run 'getfacl' against the share path, what is the output ?
What ever it is, this is where you set the permissions for Linux. You
can tighten the Unix permissions on the directory and then set the
required permissions with setfacl.

Rowland