[Samba] Member server permissions issue

Rowland Penny rpenny at samba.org
Fri Feb 10 20:55:42 UTC 2023



On 10/02/2023 20:40, Rich Webb via samba wrote:
> #> ls -ld /server/shared
> drwxrwx---+ 47 root CORP\domain users 4096 Feb  6 20:13 /server/shared
> 
> #> getfacl /server/shared
> getfacl: Removing leading '/' from absolute path names
> # file: server/shared
> # owner: root
> # group: CORP\\domain\040users
> user::rwx
> user:root:rwx
> user:CORP\\domain\040admins:rwx
> user:CORP\\domain\040users:rwx
> group::rwx
> group:CORP\\domain\040admins:rwx
> group:CORP\\domain\040users:rwx
> mask::rwx
> other::---
> default:user::rwx
> default:user:root:rwx
> default:user:CORP\\domain\040admins:rwx
> default:user:CORP\\domain\040users:rwx
> default:group::---
> default:group:CORP\\domain\040admins:rwx
> default:group:CORP\\domain\040users:rwx
> default:mask::rwx
> default:other::---
> 
> #> samba-tool ntacl get /server/shared --as-sddl
> O:S-1-22-1-0G:DUD:PAI(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001301bf;;;DU)

Domain Admins has full permissions, but Domain Users only has modify 
permissions

Rowland



More information about the samba mailing list