Samba and winbind appear to correctly pull Sids/Account names to assign to
files when owner is writer of the file.

However, I have not been able to find a configuration that lets the writer
of the file (an administrator) assign a different individual as the
owner/group.  I am using the
SetSecurityDescriptorOwner()/SetKernelObjectSecurity() pair of calls.
Always get error 5 (ERROR_ACCESS).  Have a similar problem when writing
security descriptor as part of a BackupWrite() call.  Both pieces of code
are proven to work outside of samba.

configuration fragments:

   winbind separator = +
   winbind uid = 10000-20000
   winbind gid = 10000-20000
   password server = *
   security = domain
   dos filemode = yes

[ntfs_share]
    path = /home/ntfs_share
;    public = yes
;    only guest = yes
    writable = yes
    read only = no
    printable = no
    create mask = 0770
    directory mask = 0770
    admin users = *

Any guidance would be appreciated.


versions: Samba 2.2.7-5.8.0
          RedHat 8.0 3.2-7
          Linux 2.4.18-27.8.0

======================
Matthew Von-Maszewski
 [EMAIL PROTECTED]
 http://www.nuview.com


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to