[Samba] cannot set filesystem permissions on shares

Rowland penny rpenny at samba.org
Wed Jul 3 11:56:42 UTC 2019


On 03/07/2019 12:34, L.P.H. van Belle via samba wrote:
> Finaly, i was waiting for this one.  ;-)
>
> Now after all changes Rowland suggested.
>
> Run this : getfacl /home/users
>
> Show the output.
>
> There are 5 things you need to think in.
> 1) The folder rights
> 2) The share rights
> 3) Posix or windows ACL's? ( use Windows ACL's my advice. )
> 4) Dont forget the "Primary Group".
> 5) If you use chmod, you must re-apply the windows ACL again on share/security (file/folder) level.
>
>
> Thats why i suggest, something like this. :
>
> getfacl /home/users/
> getfacl: Removing leading '/' from absolute path names
> # file: home/samba/
> # owner: root
> # group: BUILTIN\134administrators
> user::rwx
> user:root:rwx
> group::rwx
> group:BUILTIN\134administrators:rwx
> group:BUILTIN\134server\040operators:r-x
> group:NT\040AUTHORITY\134system:rwx
> group:NT\040AUTHORITY\134authenticated\040users:r-x
> mask::rwx
> other::r-x
> default:user::rwx
> default:user:root:rwx
> default:group::---
> default:group:BUILTIN\134administrators:rwx
> default:group:BUILTIN\134server\040operators:r-x
> default:group:NT\040AUTHORITY\134system:rwx
> default:group:NT\040AUTHORITY\134authenticated\040users:r-x
> default:mask::rwx
> default:other::---
>
> There is more, but im called for a meeting ...
>
> So sofar,
>
> Greetz,
>
> Louis
>
>
>
Hi Louis, I wonder if the OP is a candidate to test the mkhomedir script ?

Rowland





More information about the samba mailing list