[Samba] "missing security tab" and related ACL issues

Stefan G. Weichinger lists at xunil.at
Fri Nov 9 14:39:55 UTC 2018


Am 09.11.18 um 09:06 schrieb Stefan G. Weichinger via samba:

> We still saw now security tab fpr samba shares in Windows. Not as
> domain-admin, not as member of a user with the needed privilege.
> 
> The security tab is there for local drives and windows-server-shares,
> only samba-4.8.6-shares miss it.
> 
> I will recheck everything ...



# smbd -b | grep HAVE_LIBACL
   HAVE_LIBACL
samba ~ # testparm -sv | grep -i acl

Server role: ROLE_DOMAIN_MEMBER

	acl allow execute always = Yes
	acl check permissions = Yes
	acl group control = No
	acl map full control = Yes
	force unknown acl user = Yes
	inherit acls = No
	map acl inherit = Yes
	nt acl support = No
	vfs objects = acl_xattr full_audit
	acl map full control = No
	acl map full control = No

interesting, 3 lines with "acl map full control"

I have 2 shares with "acl map full control = No"

is it possible that this is somehow read serially and influences shares
below as well? I know that behavior from other software.

I added the recommended flags to one test-share now and let the admin
there test it.




More information about the samba mailing list