[Samba] Group Permissions Not Working

Rowland Penny rpenny at samba.org
Tue Apr 30 16:42:38 UTC 2019

On Tue, 30 Apr 2019 16:22:10 +0000
"Banks, David \(db2d\) via samba" <samba at lists.samba.org> wrote:

> Test 1:
> User User1 is a member of group Group1.
> Group1 has R-X rights to the shared folder SITES.
> When User1 connects to the server over SMB he sees SITES but when he
> tries to access it he gets access denied. Logs for the attempt show
> “chdir (/srv/SITES) failed, reason: Permission denied”
> Test 2:
> The same user can connect to the server over SSH and access the
> folder according to the group permissions as expected.
> Test 3:
> The user is given specific permissions (via setfacl -m u:user1:r-x)
> or general permissions (via chmod o+rx). User1 connects over SMB and
> has access to the share as expected.
> I can’t figure out if this is a problem with my config or with samba.
> I question samba but I have this working just fine on an older
> server. I think SSSD is OK as it seems to be authenticating the user
> just fine. Group1 definitely has R-X permissions to the folder. User1
> is definitely a member of Group1 as confirmed by command ‘groups
> User1’.
> Current Server (not working):
> Ubuntu 18.04.2
> Samba 4.7.6-Ubuntu
> Older Server (working with same permissions):
> Ubuntu 16.04.6
> Winbind
> Samba 4.3.11-Ubuntu

Before I waste my time, are you prepared to run this command:

apt-get purge sssd

You do not need sssd and it just gets in the way, you have to have
winbind running anyway.

If you are not prepared to remove sssd, then can I suggest you ask on
the sssd-users mailing list, this is because sssd is doing the
authentication (or trying to) now.


More information about the samba mailing list