[Samba] Member server permissions issue
Rowland Penny
rpenny at samba.org
Fri Feb 10 20:55:42 UTC 2023
On 10/02/2023 20:40, Rich Webb via samba wrote:
> #> ls -ld /server/shared
> drwxrwx---+ 47 root CORP\domain users 4096 Feb 6 20:13 /server/shared
>
> #> getfacl /server/shared
> getfacl: Removing leading '/' from absolute path names
> # file: server/shared
> # owner: root
> # group: CORP\\domain\040users
> user::rwx
> user:root:rwx
> user:CORP\\domain\040admins:rwx
> user:CORP\\domain\040users:rwx
> group::rwx
> group:CORP\\domain\040admins:rwx
> group:CORP\\domain\040users:rwx
> mask::rwx
> other::---
> default:user::rwx
> default:user:root:rwx
> default:user:CORP\\domain\040admins:rwx
> default:user:CORP\\domain\040users:rwx
> default:group::---
> default:group:CORP\\domain\040admins:rwx
> default:group:CORP\\domain\040users:rwx
> default:mask::rwx
> default:other::---
>
> #> samba-tool ntacl get /server/shared --as-sddl
> O:S-1-22-1-0G:DUD:PAI(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001301bf;;;DU)
Domain Admins has full permissions, but Domain Users only has modify
permissions
Rowland
More information about the samba
mailing list