-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hmmm. Silly SNAP systems do what I want (squash "everyone" if it is - ---). Anyone know what modifications they make to Samba?
I'm using GuardianOS 3.0.099, and it seems to have some extended ACLs that I don't recognize.
user::rwxdpo user:admin:rwxdpo group::------ group:admin:rwxdpo mask::rwxdpo other::r-x--- default:user::rwxdpo default:user:admin:rwxdpo default:group::------ default:group:admin:rwxdpo default:mask::rwxdpo default:other::r-x---
rruegner wrote: | Hi, | you got the same problem, many win admins have, | removing group everyone happens everywhere( in this group is everyone g | )in big windows hosting active dir companies, this makes their helpdesks | crazy *g. | Also deny permissions functions are simply a hoax by ms | I know windows book writers which have no real answer and say simply | "dont use it", maybe you are able to make cosmetic debuging with samba | about that but you will see another kind of problem will come up *g | So i wouldnt invest to much time in debugging a feature which is simply | rubbish from the creators of win and makes trouble in purly win networks | too | Best Regards | | | Tom Dickson schrieb: | | My users are complaining that to remove "Everyone" permissions from a | folder's ACL they have to "Deny" all permissions. This causes a Windows | warning to appear: "You have denied everyone access to New Folder. No | one will be able to access New Folder and only the owner will be bale to | change the permissions. Do you wish to continue?" | | This is confusing, because world permissions of --- will NOT prevent | other groups assigned either as the default group or in the POSIX ACL | |>>> from working. | | | | What I'd like to see is the following improvements. If the "Everyone" | group is removed by the Windows security editor, Samba sets world | permissions to "---". If the Everyone group is added, then Samba | modifies world permissions accordingly. And if the world or default | group permissions are "---", Samba does not display them in the Windows | ~ ACL dialog. | | Are there any objections why this wouldn't work? I'm tired of explaining | that the deny button really isn't denying everybody, and why the "Domain | Users" group cannot be removed, etc. | | (using 2.4.26 bestbits XFS+ACL, Samba 3.0.2a) | | -Tom
| .
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFA9ukb2dxAfYNwANIRAprbAJ915mMGR9CpCq+kdGxYhkdnXpMRggCfZaz2 wJBFfPQU6Nn724kenwcE+2U= =jVw1 -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
