[Samba] confirm deletion - possible?

[Rowland penny]

On 26/01/2021 16:43, Stefan G. Weichinger via samba wrote:
> Am 26.01.21 um 13:16 schrieb Rowland penny via samba:
>> On 26/01/2021 12:03, Stefan G. Weichinger via samba wrote:
>>> I get feedback that the "power user" (userC in example below) isn't 
>>> able to access all the deleted files of the other users.
>>>
>>> And something about 0 bytes files in there ....
>>
>> We had this recently, it is the way that Windows rename etc works, it 
>> creates a NULL file then deletes it as part of the process.
>
> I haven't yet checked his mail in detail, but it sounds *wrong* to me?
>
> Does Windows fail here?
>
>>> userC is member of UNIX group "users"
>> If Windows is involved, then forget 'users' use 'Domain Users' (which 
>> 'users' is a member of) instead.
>
> But it isn't a Domain Member or DC ... that's why I assumed ...
>
> And I also forced group users (for years now ... I think that server 
> started in the days of samba-3.x).


Sorry, this thread has been going on so long, I forgot that 😅


>
>>> I assume I could/should get rid of stuff like "create mask" ? That 
>>> is historical stuff from years ago, never touched because "works".


This is one of the failings of a standalone server in a Windows domain, 
the users on the standalone server are not domain users, even if they 
have the same names. There is no way I personally would use a standalone 
server (which is akin to using a Windows Home edition) in a domain.


>>
>>
>> If Windows is involved, I would remove a lot of lines from the share 
>> and then set the permissions from Windows.
>
> I see and agree.
>
> So it seems like: switch over to Windows ACLs first, then apply new 
> permissions, test vfs_recycle after that.


I would add 'join the domain' in amongst all that 😁

Rowland


>
> Right?
>
> thanks @Rowland
>