[Samba] cannot set filesystem permissions on shares

[Rowland penny]

On 04/07/2019 14:32, L. van Belle via samba wrote:
>
>> No, these are just wrong rights on you file system.
>>
>> A simple test, set /home/users to 777, create a folder from within windows.
>> Use getfacl to check the rights.
>>
>> Now, did you change the "share" security?
 From my knowledge, you do not need to change anything on the 'share' tab
>
>
> Short response on the smb.conf
> workgroup = A
> idmap config a : range = 10000-999999
>
> I assume this is a typo, so this is really..
> workgroup = A
> idmap config A : range = 10000-999999
>
> Did you notice the A and a change, i dont know if, conflicts, but a thing i
> noticed.
Don't think the case is a problem, if you run 'testparm', the DOMAIN is 
shown in lowercase.
>
> Then next email on the list.
>>>>> Run this : getfacl /home/users
>>>> getfacl: Removing leading '/' from absolute path names
>>>> # file: home/users
>>>> # owner: root
>>>> # group: A\\domain\040admins
>>>> user::rwx
>>>> user:root:rwx
>>>> user:10512:rwx
>>>> group::rwx
>>>> group:A\\domain\040admins:rwx
>>>> mask::rwx
>>>> other::---
>>>> default:user::rwx
>>>> default:user:root:rwx
>>>> default:group::rwx
>>>> default:group:A\\domain\040admins:rwx
>>>> default:mask::rwx
>>>> default:other::---
>>> Hmm, have you done something like running 'setfacl' on the directory ?
>> No.
> That most probley, happend after you changes a right from within windows.
> Check who user 10512 is and you know for sure.
> I suspect Adminstrator or Admin, if its Administrator ,then, the one should
> not have a UID.

It is Domain Admins.

> Rowland, send him the mkhomedir script, i dont believe this server is in
> production yet, so it a really good one to test it on.
> IF Pisch want to..

If he wants it, he can have it with pleasure.

Rowland