[Samba] permission denied with windows acls

[Rowland Penny]

On Mon, 29 Jan 2024 07:55:05 -0800
Peter Carlson via samba <samba at lists.samba.org> wrote:

> Just to make sure this morning, I created another VM and it behaves
> the same, so obviously we have something slightly different in our
> configs. I think we have gone through the client side pretty
> thoroughly and they are the same.  That leaves:
> 
>   * our security settings on the share -  but you said that your
> machine isn't in domain users and domain computers doesn't have
> access to the share.  What else there to test here?
>   * file server samba settings
>   * possibly version differences
>       o Client: Version 4.15.13-Ubuntu
>       o File Server: Version 4.19.0pre1-GIT-1e793357906
>       o Domain Controller: Version 4.18.0pre1-GIT-d385058ce7c
>       o I was doing some work on generic user level linux GPOs which
> is why the DC and FS are running from source
>   * or even at the DC.?
> 
> What's the easiest way to proceed?  I can post pretty much any config 
> needed.
> 

The share I am mounting is a simple share on a Unix domain member using
the 'rid' backend (as is the client), these are the permissions on the
share:

ls -lad /srv/share
drwxrwx--- 3 rowland domain users 4096 Jan 28 21:48 /srv/share

The share in smb.conf is this:

[data]
    path=/srv/share
    read only = no

With that, I can start my VM and find the share in /mnt/test

I think my next step will have to be to set up a new share on the
server, but this time set the permissions from Windows and see if that
mounts on the Unix client. But it will have to be tomorrow now.

Rowland