Hi,
I am currently trying to set up a Samba file server as a member of an existing Active Directory. Basic things worked, i joined the domain, I can see users and groups and my shares are visible in the Network.
What does not work are ACLs.I have tried various configurations and read through many tutorials and the posts in this forum. Still no success.
My smb4.conf looks like this:
With this config I don't even see the security tab in the Windows management console. When removing the nfsv4 stuff, like this
I can see the security tab but saving permissions is not possible.
zfs is set to aclmode =passthrough aclinherit=passthrough
OS is FreeBSD 10.3, Samba44 built from ports.
Can anyone tell me what I am doing wrong? I'll greatly appreciate any help on this.
Regards,
Ben
I am currently trying to set up a Samba file server as a member of an existing Active Directory. Basic things worked, i joined the domain, I can see users and groups and my shares are visible in the Network.
What does not work are ACLs.I have tried various configurations and read through many tutorials and the posts in this forum. Still no success.
My smb4.conf looks like this:
Code:
[global]
workgroup = TEST
server string = Samba Server Version %v
security = ads
realm = Test.local
use sendfile = true
idmap config * : backend = tdb
idmap config * : range = 100000-299999
idmap config TEST : backend = rid
idmap config TEST : range = 10000-99999
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
winbind refresh tickets = yes
restrict anonymous = 2
log file = /var/log/samba4/log.%m
max log size = 50
vfs objects = acl_xattr
map acl inherit = yes
store dos attributes = yes
[test]
path = /storage/samba/test/
read only = No
vfs objects = zfsacl
nfs4:mode = special
nfs4:acedup = merge
nfs4:chown = yes
nt acl support = yes
store dos attributes = yes
With this config I don't even see the security tab in the Windows management console. When removing the nfsv4 stuff, like this
Code:
[test]
path = /storage/samba/test/
read only = No
#inherit permissions = yes
#inherit acls = Yes
I can see the security tab but saving permissions is not possible.
zfs is set to aclmode =passthrough aclinherit=passthrough
OS is FreeBSD 10.3, Samba44 built from ports.
Can anyone tell me what I am doing wrong? I'll greatly appreciate any help on this.
Regards,
Ben