[Samba] Setting Share Permissions and ACLs from Linux

[Robert Marcano]

On 11/27/20 10:37 AM, Rowland penny via samba wrote:
> On 27/11/2020 14:21, Robert Marcano via samba wrote:
>> Greetings.
>>
>> I usually has to setup share permissions remotely over a slow speed 
>> link. Having to start a remote desktop session just for settings a few 
>> permissions bits is painful.
>>
>> The wiki documents that you should use the Computer Management mmc 
>> module to do this and that the permissions are stored on share_info.tdb.,
> No, it said the 'share permissions' are stored in the .tdb, it now says 
> 'share tab permissions'
>> So I a have a few questions:
>>
>> ¿It is possible to set these permissions from the same server CLI? I 
>> tried smbcacls but this tool needs two parameters, the share and a 
>> file path inside that share, I tried with the "." file path just to 
>> check if that could work, but doesn't.
>>
>> As the share permissions are stored on share_info.tdb, what the share 
>> folder POXIS ACLs and user.SAMBA_PAI xattrs do on these directories 
>> that are used as shares?
> 
> Not one one of those has anything to do with the permissions set from 
> Windows. When you set the permissions from Windows, they are stored in 
> an EA, so you should be able to use 'samba-tool ntacl set', the only 
> problem will be in knowing what ACL to set.
> 

Thanks "samba-tool ntacl set" should help. I plan to copy some template 
ACLs from another share and just update the group names, so it should be 
easier than doing it remotely and having to add all the entries using a GUI

> Rowland
> 
> 
>