[Samba] Permission denied while trying to setup share with RSAT

[Peter Milesson]

On 13.12.2023 11:03, Rowland Penny via samba wrote:
> On Wed, 13 Dec 2023 09:34:45 +0100
> Peter Milesson via samba <samba at lists.samba.org> wrote:
>
>>
>> On 12.12.2023 20:00, Peter Milesson via samba wrote:
>>>
>>> On 12.12.2023 19:46, Rowland Penny via samba wrote:
>>>> On Tue, 12 Dec 2023 19:34:20 +0100
>>>> Peter Milesson via samba <samba at lists.samba.org> wrote:
>>>>
>>>>> Hi Rowland,
>>>>>
>>>>> Just one more bit of information. I don't think it is relevant,
>>>>> but who knows. All servers are VMs that I migrated from Xen to
>>>>> Qemu/KVM a week ago. The VMs are running off of LVM volumes (like
>>>>> before).
>>>>>
>>>>> I have also checked Apparmor. Samba is not under Apparmor control.
>>>>>
>>>>> Best regards,
>>>>>
>>>>> Peter
>>>>>
>>>>>
>>>> I have heard of VMs where root doesn't work, could this be your
>>>> problem ?
>>>>
>>>> I ask this because I use Oracle virtual box and it works for
>>>> myself, with Apparmor !
>>>>
>>>> Rowland
>>>>
>> Hi folks,
>>
>> I finally found the culprit. When setting up shares with RSAT you
>> must not activate
>>
>> acl_xattr:ignore system acls = yes
>>
>> until AFTER setting up share security.
> Glad you found  the cause.
>
>> This statement is incredibly easy to miss in the Samba Wiki! It
>> should be contained in the warning above the section. See
>> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs
> I have updated the page, hopefully it is a bit more clearer.
>
> Rowland
>
Hi Rowland,

Super! Thanks a lot. It will save many hours, and much frustration!

Have a nice day,

Peter