[Samba] Samba as Domain Member: user get permission denied accessing share...

[Patrick Goetz]

On 3/9/22 09:00, Rowland Penny via samba wrote:
> On Wed, 2022-03-09 at 08:48 -0600, Patrick Goetz via samba wrote:
>>
>> OK, but that presumably resets the "o" permissions on /srv/samba or
>> linux will not let non-domain admins access the contents of that
>> folder.
> 
> It doesn't reset the 'o' permissions and non-domain admins will not
> have access, unless you set them using setfacl, but you shouldn't do
> this if you are setting the permissions from Windows.
> 
>>
>>
>> I was preparing to post about my frustrations with permissions
>> issues,
>> but let me ask separately: why is it necessary to set subsequent
>> permissions from Windows?
> 
> There are two ways of setting permissions:
> 
> https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.samba.org%2Findex.php%2FSetting_up_a_Share_Using_POSIX_ACLs&data=04%7C01%7C%7C7ad72bc4508f4ecf421f08da01dda63b%7C31d7e2a5bdd8414e9e97bea998ebdfe1%7C0%7C0%7C637824348738956307%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=FeSmUUKn%2FeKAMc0N8Y2bsAgBHKAYtLoRSaAPLosJ3a4%3D&reserved=0
> 
> https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.samba.org%2Findex.php%2FSetting_up_a_Share_Using_Windows_ACLs&data=04%7C01%7C%7C7ad72bc4508f4ecf421f08da01dda63b%7C31d7e2a5bdd8414e9e97bea998ebdfe1%7C0%7C0%7C637824348738956307%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=KryOuNsDsYPpwPA9O%2Bk7vMmBM8yFVHo0g9GUXCyoyJ8%3D&reserved=0
> 


Yes, I've read through both those pages multiple times.


> If you only have Linux clients, follow the first.
> If you only have Windows clients, follow the second
> 


Sure, but I'm guessing a large percentage of people using Samba have 
linux and Windows clients.  That's the problem.



> You should not mix the two ways of setting permissions, pick one and
> stick to it.
> 
> Rowland
> 
> 
> 
>