[Samba] Setting permissions on AD member file server

Greg Sloop <gregs@sloop.net> gregs at sloop.net
Wed Mar 16 03:11:56 UTC 2022


The OS itself is EXT4, IIRC.
The Samba shares are on a different set of disks, and they are a ZFS
volume. I'm also doing NFS to the same volumes, but not to the same
directories as the Samba shares. (So the NFS and Samba files/directories
aren't interacting in any way.)

(The whole thing used to be FreeNAS, but I decided I'd rather use Ubuntu's
ZFS, and avoid some of the weird stuff that FreeNAS drags along.)

On Tue, Mar 15, 2022 at 5:57 PM Patrick Goetz via samba <
samba at lists.samba.org> wrote:

> What's the underlying filesystem on your linux fileserver?
>
> On 3/15/22 12:18, Greg Sloop <gregs--- via samba wrote:
> > I think you need something like
> > setfacl -m group:"AD\domain users":rx
> > /abc-zfs-01/ad-shared-folders/shared-files/
> > [fully specifying the domain/group.]
> >
> > But, while that fixes the "invalid argument" - it still produces an
> > "Operation not supported" error.
> > And while I feel stupid, I'm not sure why - despite looking at the man
> file
> > and trying a few things.
> >
> > On Tue, Mar 15, 2022 at 9:27 AM Greg Sloop <gregs at sloop.net> <
> > gregs at sloop.net> wrote:
> >
> >>>   ( > greg )
> >>>   > Do you mean -n/--no-mask [not -m - there is no -m switch]
> >>>
> >>>   No, there IS -m (see man setfacl )  -m = modify.
> >>
> >> Well, yes and no.
> >>
> >> setfacl -m g:"domain users":rx
> /abc-zfs-01/ad-shared-folders/shared-files
> >> setfacl: Option -m: Invalid argument near character 3
> >>
> >> You're right, there is a -m (it's further down in the man file, and I
> >> didn't see it) but the syntax of that command is wrong. And when I did
> not
> >> see the -m in the "options" section I assumed the -m was a typo.
> >>
> >> I'll see what it's complaining about and if I can fix it. Since I'm not
> >> entirely sure what you're intending to do, I am not sure I'll get it
> right
> >> - and I know nothing of substance about setfacl.
> >>
> >>
> >>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


More information about the samba mailing list