[Samba] Change in behaviour for the "%U" substitution in 4.10.8?

Rowland penny rpenny at samba.org
Fri Sep 6 09:52:15 UTC 2019

On 06/09/2019 10:34, gac wrote:
> No problem - https://pastebin.com/G8pa3bdE
Please just post things like this in line ;-)

root at server:/var/log/samba# ls -lad /shares
drwxr-xr-x 9 root root 4096 Jan 16  2019 /shares #

Owner:Group is root:root, but anybody can enter

root at server:/var/log/samba# ls -lad /shares/DOMAIN
drwxr-xr-x+ 16 1106001204 employees 4096 Sep  6 09:43 /shares/DOMAIN

Why a number and not a username ? only the number can write, but anybody 
can enter and read

But there are ACLs set, so what does 'getfacl /shares/DOMAIN' return ?

root at server:/var/log/samba# ls -lad /shares/DOMAIN/username
drwxr-x---+ 32 username domain users 4096 Sep  6 08:34 

Only the user has full access, but Domain Users can enter and read, 
access from anyone else is denied

But there are ACLs set, so what does 'getfacl /shares/DOMAIN/username' 
return ?

I think your problem has a lot to do with '1106001204' not being 
resolved to a name, so who is it ?

Can you check with 'wbinfo -R 1204'


More information about the samba mailing list