[Samba] Computer Management - Share Security - No Read Access

[L.P.H. van Belle]

> ******* FAILED TO ENUMERATE OBJECTS IN CONTAINER. ACCESS IS DENIED
> 
> Can't see where I could be deviating
Ok i think here ( as workaround ) the following. 


> root at sce253:/# service smbd stop
> root at sce253:/# rmdir /server/share-files
> root at sce253:/# rmdir /server/users
> root at sce253:/# cd ..
> root at sce253:/# rmdir server
> root at sce253:/# mkdir -p /server/share-files
> root at sce253:/# mkdir -p /server/users

Install -d /server -o root -g "Domain Admins" -m 3771

> root at sce253:/# chown root:"Domain Admins" /server/share-files
> root at sce253:/# chown root:"Domain Admins" /server/users
> root at sce253:/# chmod 0770 /server/share-files
> root at sce253:/# chmod 0770 /server/users

Now try again. 

The message: 
> 
> ******* FAILED TO ENUMERATE OBJECTS IN CONTAINER. ACCESS IS DENIED 
Purly due to /server not allowing "DOMAIN USER" write access. 
Because ... What is the windows "Primary group" yes. Domain Users. 

So I thing also you might be affected with bug :  
https://bugzilla.samba.org/show_bug.cgi?id=13371 
https://bugzilla.samba.org/show_bug.cgi?id=11362

install -d /server -o root -g "Domain Admins" -m 3771 
Should help here as workaround. 

3 for the "domain admins" to enfoce this group and not domain users. 
7 for root/Administrator
7 for the "domain admins"
1 to allow access through this folder for everybody. 

Should work. 


Greetz, 

Louis