[Samba] "missing security tab" and related ACL issues
Stefan G. Weichinger
lists at xunil.at
Fri Nov 9 14:39:55 UTC 2018
Am 09.11.18 um 09:06 schrieb Stefan G. Weichinger via samba:
> We still saw now security tab fpr samba shares in Windows. Not as
> domain-admin, not as member of a user with the needed privilege.
>
> The security tab is there for local drives and windows-server-shares,
> only samba-4.8.6-shares miss it.
>
> I will recheck everything ...
# smbd -b | grep HAVE_LIBACL
HAVE_LIBACL
samba ~ # testparm -sv | grep -i acl
Server role: ROLE_DOMAIN_MEMBER
acl allow execute always = Yes
acl check permissions = Yes
acl group control = No
acl map full control = Yes
force unknown acl user = Yes
inherit acls = No
map acl inherit = Yes
nt acl support = No
vfs objects = acl_xattr full_audit
acl map full control = No
acl map full control = No
interesting, 3 lines with "acl map full control"
I have 2 shares with "acl map full control = No"
is it possible that this is somehow read serially and influences shares
below as well? I know that behavior from other software.
I added the recommended flags to one test-share now and let the admin
there test it.
More information about the samba
mailing list