On Tue, 2013-10-01 at 13:48 +0530, Partha Sarathi wrote: > I hope you shoud use the below parameter under all share sections to > get the NTACL working. > > > vfs objects = acl_xattr,
Indeed, you would expect that to be needed. However, we put that in to the smb.conf 'by magic' whenever we see 'server role = active directory domain controller'. Frankly I think it should be the default, except for the fact that we didn't want to change it for upgrading users. We used the 'new' server role as a chance to at least make it a default for this important use case. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba