[Samba] Computer Management - Share Security - No Read Access
L.P.H. van Belle
belle at bazuin.nl
Fri Feb 22 08:52:36 UTC 2019
> ******* FAILED TO ENUMERATE OBJECTS IN CONTAINER. ACCESS IS DENIED
>
> Can't see where I could be deviating
Ok i think here ( as workaround ) the following.
> root at sce253:/# service smbd stop
> root at sce253:/# rmdir /server/share-files
> root at sce253:/# rmdir /server/users
> root at sce253:/# cd ..
> root at sce253:/# rmdir server
> root at sce253:/# mkdir -p /server/share-files
> root at sce253:/# mkdir -p /server/users
Install -d /server -o root -g "Domain Admins" -m 3771
> root at sce253:/# chown root:"Domain Admins" /server/share-files
> root at sce253:/# chown root:"Domain Admins" /server/users
> root at sce253:/# chmod 0770 /server/share-files
> root at sce253:/# chmod 0770 /server/users
Now try again.
The message:
>
> ******* FAILED TO ENUMERATE OBJECTS IN CONTAINER. ACCESS IS DENIED
Purly due to /server not allowing "DOMAIN USER" write access.
Because ... What is the windows "Primary group" yes. Domain Users.
So I thing also you might be affected with bug :
https://bugzilla.samba.org/show_bug.cgi?id=13371
https://bugzilla.samba.org/show_bug.cgi?id=11362
install -d /server -o root -g "Domain Admins" -m 3771
Should help here as workaround.
3 for the "domain admins" to enfoce this group and not domain users.
7 for root/Administrator
7 for the "domain admins"
1 to allow access through this folder for everybody.
Should work.
Greetz,
Louis
More information about the samba
mailing list