Seem my comments inline: There are 4 possible issues, your problem could reside in one, or all of
them: 1. You are using Mandrake 9.1 (so am I), and the kernel shipped with it lacks acl support :-( If you have acl installed: urpmi acl, you could give it a try: getfacl somefile setfacl -m u:someuser:somerights somefile *Acls are installed and confirmed working as tested by your instructions and my previous testing. 2. You aren't using an acl enabled filesystem: XFS supports them out of the box, for ext2/ext3, you have to specify acl in your /etc/fstab, and remount it. *Already done The problem is that I cannot get to setting permissions. As I stated I in my last post, I get as far as clicking in the windows mapped drive security tab and it asks for a logon name and password which I enter and then it bombs out with the error message "the credentials supplied conflict with an existing set of credentials." Another thing: from your logs it seem to be advisable, to try to map your groups: net3 groupmap as root *I have done this also, there is a typo in the samba-howto which did not help matters much.. Section 12.2 Discussion: 3) Map this domadm group to the "Domains Admins" group by running the command: root# net groupmap add ntgroup=Domain Admins UNIXgroup=domadm The quotes around "Domain Admins" are necessary due the space in the group name Well the example given did not include the quotes around "Domain Admins". After a couple of minutes I figured this one out. Maybe something for the Samba team to correct. At this point I cannot leave the PDC down any longer, I have users who need access to it and I am forced to downgrade yet again to 2.2.8. I was really hoping that 3.0 would be much smoother then this... The log entries still show the same messages. [2003/10/05 07:59:26, 1] smbd/service.c:make_connection_snum(698) win2000 (192.168.0.200) connect to service test initially as user markw (uid=501, gid=501) (pid 6917) [2003/10/05 07:59:27, 1] smbd/service.c:make_connection_snum(698) win2000 (192.168.0.200) connect to service test initially as user markw (uid=501, gid=501) (pid 6917) [2003/10/05 07:59:30, 1] smbd/fake_file.c:open_fake_file_shared1(45) access_denied to service[rootdir] file[$Extend/$Quota:$Q:$INDEX_ALLOCATION] user[markw] [2003/10/05 07:59:32, 0] rpc_server/srv_util.c:get_domain_user_groups(371) get_domain_user_groups: primary gid of user [root] is not a Domain group ! get_domain_user_groups: You should fix it, NT doesn't like that [2003/10/05 07:59:37, 1] smbd/service.c:close_cnum(880) win2000 (192.168.0.200) closed connection to service test [2003/10/05 08:02:45, 1] smbd/service.c:close_cnum(880) win2000 (192.168.0.200) closed connection to service test Regards, Mark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
