[Samba] Windows ACLs : problems

Rowland penny rpenny at samba.org
Tue Feb 25 13:54:30 UTC 2020


On 25/02/2020 13:49, Stefan G. Weichinger via samba wrote:
> Am 25.02.20 um 14:30 schrieb Rowland penny via samba:
>
>> OK, I give in, I will alter the wiki page, if you use the 'rid' or
>> 'autorid'  backend, you can use Domain Admins, just do not give Domain
>> Admins a gidNumber.
> While you're at it ;-)
>
> It also isn't clear to me where "Unix Admins" comes from.
Out of my head ;-)
>
> I have to add that group on the DC, add my admin-users ... right? Then
> grant the SeDiskOperatorPrivilege ... then chgrp the files in the share?

You do not need it, it is only required if using the winbind 'ad' 
backend and only then if you don't want possible problems with sysvol.

Rowland





More information about the samba mailing list