[Samba] Help with centos 7, samba, windows ACLs
Robert Marcano
robert at marcanoonline.com
Thu Mar 7 14:31:29 UTC 2019
On 3/7/19 5:50 AM, Marco Gemignani via samba wrote:
> Hi,
>
> i have a small server with centos 7 samba 4.8.3
>
> done domain provision, joined some windows 10 PCs and i'm happy
>
> i prefer manage it from RSAT and i created a lot of policy, and all seem
> fine!
>
>
> main problem is how to set ACL on User folders, i'm unable to set share
> permissions from Windows on samba users share, when appy changes i
> receive an error like permission denied.
>
> edited pam allowing domain user logon locally but i not know how i can
> give root privileges on Domain Admins user, i try a lot of
> configurations bu visudo and no reply, i think i'm unable to set
> permission because the user logged on windows have Domain Admins group
> but it not have root privileges on linux so cant' change samba config, i
> think
I think you need to grant SeDiskOperatorPrivilege. The Wiki has an
explanation of that when setting up shares with Windows ACLs
https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Granting_the_SeDiskOperatorPrivilege_Privilege
>
>
> sorry for my bad english, any help will be apprecciated
>
>
More information about the samba
mailing list