[Samba] Group Permissions Not Working

[Rowland Penny]

On Tue, 30 Apr 2019 16:22:10 +0000
"Banks, David \(db2d\) via samba" <samba at lists.samba.org> wrote:

> Test 1:
> User User1 is a member of group Group1.
> Group1 has R-X rights to the shared folder SITES.
> When User1 connects to the server over SMB he sees SITES but when he
> tries to access it he gets access denied. Logs for the attempt show
> “chdir (/srv/SITES) failed, reason: Permission denied”
> 
> Test 2:
> The same user can connect to the server over SSH and access the
> folder according to the group permissions as expected.
> 
> Test 3:
> The user is given specific permissions (via setfacl -m u:user1:r-x)
> or general permissions (via chmod o+rx). User1 connects over SMB and
> has access to the share as expected.
> 
> I can’t figure out if this is a problem with my config or with samba.
> I question samba but I have this working just fine on an older
> server. I think SSSD is OK as it seems to be authenticating the user
> just fine. Group1 definitely has R-X permissions to the folder. User1
> is definitely a member of Group1 as confirmed by command ‘groups
> User1’.
> 
> 
> Current Server (not working):
> Ubuntu 18.04.2
> SSSD
> Samba 4.7.6-Ubuntu
> 
> Older Server (working with same permissions):
> Ubuntu 16.04.6
> Winbind
> Samba 4.3.11-Ubuntu
> 

Before I waste my time, are you prepared to run this command:

apt-get purge sssd

You do not need sssd and it just gets in the way, you have to have
winbind running anyway.

If you are not prepared to remove sssd, then can I suggest you ask on
the sssd-users mailing list, this is because sssd is doing the
authentication (or trying to) now.

Rowland