[Samba] Windows ACLs : problems

Stefan G. Weichinger lists at xunil.at
Tue Feb 25 13:59:18 UTC 2020

Am 25.02.20 um 14:51 schrieb Rowland penny via samba:
> On 25/02/2020 13:37, Stefan G. Weichinger via samba wrote:
>> right now, will retest.
>>> OK, I give in, I will alter the wiki page, if you use the 'rid' or
>>> 'autorid'  backend, you can use Domain Admins, just do not give Domain
>>> Admins a gidNumber.
>> 1) why and how could I have done that?
> Sorry, but I cannot remember just what backend everybody uses, in your
> case you would have no reason too ;-)
>> 2) this leads to another issue with locales and umlauts:
>> I can't "chgrp domänen-admins", in german it's "domänen-admins", on bash
>> shell it looks like
> Have you considered moving to the UK, we don't have those funny marks
> here ;-)
>> ->
>> # wbinfo -g
>> dom�nencomputer
>> dom�nencontroller
>> dom�nen-admins
>> dom�nen-benutzer
>> dom�nen-g�ste
>> # wbinfo --group-info="dom�nen-admins"
>> failed to call wbcGetgrnam: WBC_ERR_DOMAIN_NOT_FOUND
>> Could not get info for group dom�nen-admins
>> Do I have to log in with US locale?
> No and if you did, I don't think it would fix this problem, is locales
> setup correctly ?

I think so.

Tested with US locale, no change.

I now figured out to do:

# chown -R 10500:10512 *

But access from windows still is problematic with the DOM\Administrator :-(

> Having said that, you should be using 'getent group Domain Admins'
> (where 'Domain Admins' is replaced with your version (sorry, but as I
> said, we don't have those funny marks))

Not my idea. AD DC delivers the names like that.

More information about the samba mailing list