[Samba] Help with centos 7, samba, windows ACLs

Robert Marcano robert at marcanoonline.com
Thu Mar 7 14:31:29 UTC 2019


On 3/7/19 5:50 AM, Marco Gemignani via samba wrote:
> Hi,
> 
> i have a small server with centos 7 samba 4.8.3
> 
> done domain provision, joined some windows 10 PCs and i'm happy
> 
> i prefer manage it from RSAT and i created a lot of policy, and all seem 
> fine!
> 
> 
> main problem is how to set ACL on User folders, i'm unable to set share 
> permissions from Windows on samba users share, when appy changes i 
> receive an error like permission denied.
> 
> edited pam allowing domain user logon locally but i not know how i can 
> give root privileges on Domain Admins user, i try a lot of 
> configurations bu visudo and no reply, i think i'm unable to set 
> permission because the user logged on windows have Domain Admins group 
> but it not have root privileges on linux so cant' change samba config, i 
> think


I think you need to grant SeDiskOperatorPrivilege. The Wiki has an 
explanation of that when setting up shares with Windows ACLs

https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Granting_the_SeDiskOperatorPrivilege_Privilege

> 
> 
> sorry for my bad english, any help will be apprecciated
> 
> 




More information about the samba mailing list