[Samba] Samba4 Permission Problem

[Rowland penny]

On 26/11/2019 11:01, André Luiz via samba wrote:
> Hello everyone,
>
>
> I am having the following problem with my samba:
>
>
> I did the installation and compilation from source and samba is working
> correctly integrated with my AD. However the following situation happens:
> when I am logged on to the workstation with a user from the domain
> administrators group I can create files and folders on the share. When I am
> logged in with a user who does not belong to the admin group, I cannot
> create anything within the share because it gives a permission denied error
> even though this user (non admin) is allowed to modify in the folder.
>
>
> Samba Version: 4.11.2
>
> OS: CentOS 7.7 - 1908
>
> Storage File System: ext4
>
>
> Workstation: Windows 10 Pro 1903
>
> OS Compilation: 18362.175
>
>
> Active Directory: Windows 2016 STD
>
>
> smb.conf file
>
>
You have a couple of problem lines:

reset on zero you = yes
attributes store = Yes

Do you mean:

reset on zero vc = yes
store dos attributes = Yes

If so, I would remove them.

You also have in [global]

map to guest = bad user
guest ok = no

Not much point in having them, the first maps any unknown users to guest 
and then the second (which is a default setting) denies guest access, I 
would remove both.

Why do you want 'wide links' ?

I would remove these lines:

unix extensions = no
unix extensions = no
wide links = yes

Finally, we come to your share:

I would make it look like this:

[data]
         path = /fileserver/data
         read only = no

And then read this:

https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs

Rowland