(recipient list getting longer...)
Hmm.Via username mapping, yes (we're a member server in a 2k mixed domain, but that side of things seems to be working).It may be that my post yesterday is about the same issue. I've noted that according to the log.nmbd that I have the same error. I can edit the perms on acl entries, or delete an acl entry, but cannot add a user to a list from the w2k side (I can of course use setfacl from the unix clients of the file server or on the server itself).
On further investigation, it appears that I _can_ modify existing ACLs, and I can even remove them (users, at least); but I can't add users to the ACL, which is what I really need.
My tests also were done as the owner of the file. In fact, our NT domain and NIS passwd have identical user names. It just can't determine the uid of the user from the machine SID+RID.
I've also noticed that it doesn't seem to be mapping the usernames properly in the ACL listing. I can't add users from W2k, so I have yet to see what that would be listed as, but let's say I have a username map
andrewfu = "Andrew Furey"
and I set the ACL on a file with
setfacl -m andrewfu:rwx myfile
Now, the permission via the ACL does work correctly (W2k user "Andrew Furey" can access the file, others can't), but in the W2k ACL list the user is listed as
andrewfu (SMBSERVERNAME\andrewfu)
rather than
Andrew Furey (Andrew [EMAIL PROTECTED])
as it does on the (same) W2k machine.
Not sure if this is relevant, but it may be linked...
--
ANDREW FUREY <[EMAIL PROTECTED]> - Sysadmin/developer for Terminus.
Providing online networks of Australian lawyers (http://www.ilaw.com.au)
and Linux experts (http://www.linuxconsultants.com.au) for instant help!
Disclaimer: http://www.terminus.net.au/disclaimer.html. GCS L+++ P++ t++
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
