Nick, It could happen if the Windows clients were to point to a DNS server that doesn't know about your AD domain. If the DNS configuration of your Windows client is correct, you might have stumbled on CR 6621137: Unable to set ACL on a share. This problem has sometimes been seen on XP/2003 clients.
Regards, Natalie Nick Ross wrote: >Hi Natalie, > >Thanks for the informative response! It always helps to understand >where the problem originates, so your clarification was great. > >In terms of the DACL locations, we've tried setting permissions from >domain member systems (even tried from one of the DCs), but we're never >able to browse the AD tree to select a security group or specific user. >smbd prints "smbd[ACSPORTAL-HB\Administrator]: testshare rw access >granted." > >daemon.debug prints "smbrdr_ntcreatex: 14 \lsarpc" and "SmbRdrNtCreate: >fid=49152" > >This is a share created from a ZFS pool on an X4500. Suggestions? > >I just downloaded b82, so I'll give it a shot from there. > >Best Regards, >Nick Ross >_______________________________________________ >storage-discuss mailing list >[email protected] >http://mail.opensolaris.org/mailman/listinfo/storage-discuss > > _______________________________________________ storage-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/storage-discuss
