[Samba] vfs_recycle disables permissions inheritance on AD DC shares

[Rowland penny]

On 02/12/2019 15:32, Sebastian Arcus via samba wrote:
>
> On 02/12/19 15:10, Rowland penny via samba wrote:
>
> Thank you for the quick reply. I should have mentioned that these DC's 
> are at at different sites. At each site there is only one Linux server 
> - hence why the DC is also the file server.
Bad move, I would add a Unix domain member at each site, even if it is 
in a VM, by the way, are you using 'sites' ?
> I'm afraid I'm not sufficiently familiar with vfs objects and how they 
> work - I only used the configuration above based on the recommended 
> configs in the wiki. Are you saying above that I could have configured 
> the vfs recycle without using the "vfs objects = recycle" line - that 
> it isn't actually necessary in order to activate the recycle bin?

No, I am saying that you have turned off the default vfs objects by just 
specifying one.

You should have 'vfs objects = dfs_samba4 acl_xattr recycle'

Rowland