[Samba] chdir_current_service: vfs_ChDir(/srv/samba/users) failed: Permission denied.

[Patrick Goetz]

On 11/27/21 17:40, spindles seven wrote:
> On 27 November 2021 20:05 Ralph Boehme wrote:
>> On 11/27/21 18:27, Patrick Goetz via samba wrote:
>>> Sure, but Samba, which runs are root,
>>
>> smbd does not run as root when executing SMB requests, it impersonates
>> the user UNIX token while doing this.
>>
> OK, that explains why one of my Domain Computers got permission denied, but that raises the other question - why then is a normal user able to access his/her files which live in /srv/samba/users/<username> without any problem?      The permissions on /srv/samba (before I added the "x") was rwxrwx--- : root and Domain Admins only have access.     So Domain Users were able to traverse the hierarchy but not Domain Computers.    Why?
> 

Unless you tell it not too, Samba will set POSIX ACL's on files and 
folders created by domain-bound machines.  As Louis mentioned, run the 
getfacl command on the file/folder in question and it will show you the 
"hidden" permissions.




> Thanks,
> 
> Roy
>