[Samba] Some questions about sharing and permission.

[Jason Long]

# setfacl -R -m g:login1:r share/
#
# getfacl share/
# file: share/
# owner: root
# group: MYDOMAIN\\login2
user::rwx
group::rwx
group:MYDOMAIN\\login1:r--
mask::rwx
other::---I used "setfacl", but can't open the share and got error.
#
# cat /var/log/samba/192.168.56.8.log 
[2021/05/14 18:38:11.875709,  0] ../../source3/smbd/service.c:167(chdir_current_service)
  chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied. Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014 3000015 3000003 3000016 3000009 3000017
[2021/05/14 18:38:12.093263,  0] ../../source3/smbd/service.c:167(chdir_current_service)
  chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied. Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014 3000015 3000003 3000016 3000009 3000017
[2021/05/14 18:38:12.095973,  0] ../../source3/smbd/service.c:167(chdir_current_service)
  chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied. Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014 3000015 3000003 3000016 3000009 3000017
[2021/05/14 18:38:12.096731,  0] ../../source3/smbd/service.c:167(chdir_current_service)
  chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied. Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014 3000015 3000003 3000016 3000009 3000017
[2021/05/14 18:38:12.097405,  0] ../../source3/smbd/service.c:167(chdir_current_service)
  chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied. Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014 3000015 3000003 3000016 3000009 3000017
[2021/05/14 18:38:12.099042,  0] ../../source3/smbd/service.c:167(chdir_current_service)
  chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied. Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014 3000015 3000003 3000016 3000009 3000017
[2021/05/14 18:38:12.099692,  0] ../../source3/smbd/service.c:167(chdir_current_service)
  chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied. Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014 3000015 3000003 3000016 3000009 3000017
[2021/05/14 18:38:13.430913,  0] ../../source3/smbd/service.c:167(chdir_current_service)
  chdir_current_service: vfs_ChDir(/home/share) failed: Permission denied. Current token: uid=3000021, gid=100, 9 groups: 3000021 100 3000025 3000014 3000015 3000003 3000016 3000009 3000017






On Friday, May 14, 2021, 07:08:47 PM GMT+4:30, Rowland penny via samba <samba at lists.samba.org> wrote: 





On 14/05/2021 15:21, Jason Long wrote:
> Thanks.
> Can you tell me how can I use "chmod" for it?
>

No, what part of 'set the permissions from Windows' do you not understand ?

If you set 'acl_xattr:ignore system acl = yes' in a share, you cannot 
use chmod, you may be able to set the permissions on a Unix domain 
member using setfacl, but setting permissions from Windows is better and 
on a DC is the only way.


Rowland



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba