I have a Samba 3.0.7 server running as a domain member, with ACL support enabled. When using a windows client to look at the security of a file, all of the permissions show the the samba server as the domain, not the actual domain name.


Example:

My Samba server is called CASE.
My domain is called CASEDOM

When I look at the permissions of a file, they show

CASE\erempel    full
CASE\erempel    read+execute
everyone        none

if I try to add another permission for the user
CASEDOM\bill

as soon as I click on the apply button, the permission dissapears.
I can only add permissions for CASE\bill

This is not the way I think it should work, and it is not the way it works on a windows server.

Any suggestions as to what I am missing?

Just for completeness, I am running on both Redhat Advance Server 3 and on AIX 5.2 and both have the same symptoms. Here is the smb.conf file.

----------------
# Samba config file created using SWAT
# from 142.104.16.109 (142.104.16.109)
# Date: 2004/11/04 14:33:57

# Global parameters
[global]
        workgroup = CASEDOM
        server string = testing
        security = DOMAIN
        update encrypted = Yes
        password server = ntsrvr1 ntsrvr2
        guest account = guest
        client NTLMv2 auth = Yes
        client lanman auth = No
        client plaintext auth = No
        syslog = 2
        log file = /usr/local/samba/var/log.%m
        debug pid = Yes
        debug uid = Yes
        deadtime = 600
        max smbd processes = 500
        socket options = TCP_NODELAY SO_KEEPALIVE
        load printers = No
        os level = 1
        ldap ssl = no
        invalid users = root, bin, sys
        create mask = 0700
        directory mask = 0700
        force unknown acl user = Yes
        map acl inherit = Yes
        veto files = /.cshrc/.login/.logout/.profile/.mailboxlist/
        map archive = No
        mangled names = No
        wide links = No

[home]
        comment = Home Accounts
        path = /home
        read only = No

--
Evan Rempel                             [EMAIL PROTECTED]
Senior Programmer Analyst               250.721.7691
Computing Services
University of Victoria
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to