[Samba] Computer Management - Share Security - No Read Access

[Rowland Penny]

On Wed, 20 Feb 2019 07:39:44 +1300
Andrew Bartlett via samba <samba at lists.samba.org> wrote:

> On Tue, 2019-02-19 at 13:26 -0500, Marco Shmerykowsky via samba wrote:
> > 
> > root at sce253:/# ls -la /server
> > drwxrwx---+  4 root          domain admins 4096 Feb 17 19:13
> > programs
> > 
> > ** Login to Windows10 client with INTERNAL\administrator
> >     and launch Server Manager -> Computer Manager
> > 
> >     Action/Connect to another Computer -> Machine253
> > 
> >     Open System Tools/Shared Folders/Shares menu
> > 
> >     Right click properties of "programs" share
> > 
> >     Share permissions assigned to INTERNAL\programs
> >     (INTERNAL\Programs is a group created which includes
> >      users which are allowed to have access to the programs share)
> > 
> >     Security tab shows:
> > 
> >     "You must have permissions to view the properties
> >      of this object"
> >     (The 'Object' is \\Machine253\programs)
> 
> To be clear, permissions on the share files and folders are distinct
> to permissions on the share, which is what you are trying to change.

Unless the user changing the permissions from Windows has the required
privileges and the right to change the permissions it doesn't work.

> 
> ACL support in Samba and the filesystem doesn't change the ability to
> set share permissions, so the first part is a red herring.  

You must have different herrings in New Zealand ;-)

> 
> To make progress, try setting the share permissions as root.  That
> would tell us a bit more about if the privilege, rather than the
> fundamental operation, is at fault.

He is doing this as Administrator, so he should be doing this as root.

Rowland



> 
> Andrew Bartlett
>