[Samba] Windows ACLs : problems

[Rowland penny]

On 25/02/2020 13:24, Stefan G. Weichinger via samba wrote:
> Am 25.02.20 um 14:16 schrieb Rowland penny via samba:
>
>> Do you have a user.map line in smb.conf ?
>>
>> Something like this:
>>
>> username map = /etc/samba/smb.conf
> It should be more like:
>
> username map = /etc/samba/samba_usermapping
>
> and not point to smb.conf, right? ;-)
DOH, yes, this is what you get with arguing with your brother about what 
the EU wants whilst trying to type something ;-)
>> Which contains something like this:
>>
>> !root = DOMAIN\Administrator
>
> # cat /etc/samba/samba_usermapping
> !root = CST\Administrator CST\administrator
Have you run 'net cache flush' ?

OK, I give in, I will alter the wiki page, if you use the 'rid' or 
'autorid'  backend, you can use Domain Admins, just do not give Domain 
Admins a gidNumber.

Rowland