Inno, that works very well - thank you! It's not that I don't want to use samba-tool to maintain ACLs, I don't know how to -- I cannot find any documentation on the program. I have successfully compiled all of Samba4 but the docs will not compile on my system.
If anybody can point me to a man page for samba-tool I would really appreciate it. Thanks again Inno! Lee On Fri, Jan 18, 2013 at 4:01 PM, Innocent Yevide <inye...@yahoo.fr> wrote: > Hello Lee, > > I am not sure I understand what is your real need. but If you don't want > to use samba-tool, you can use windows explorer to set your acls... > > assuming you have your file system supporting xattr, you can connect to > your share drive from windows with a privileged account like the > administrator. and then right click on the folder / property / security. > you should be able to set/reset acls for users and groups.... > > what I used to do, is create my folder, give full priviledge and even acls > (OS level) for all on that folder, and then as Admin on windows, I remove > and set privilege for only those who need it. > > You might need the following under your shared folder in smb.conf: vfs > objects = acl_xattr > > Regards, > > Inno. > > ------------------------------ > *De :* Lee Allen <l...@leecallen.com> > *À :* samba@lists.samba.org > *Envoyé le :* Vendredi 18 janvier 2013 22h12 > *Objet :* [Samba] How to set ACLs with Samba4 AD? > > I apologize if this is very beginner/basic. In my defense, I can't get the > Samba4 documentation to compile on my system, and I can't find the man > pages online (a pointer to them would be extremely helpful). > > And in general, I am having difficulty sorting through the documentation on > the wiki because much of it is clearly pre-Samba4 and therefore obsolete, > or at least questionable. It's hard to know what is relevant. > > Most of the posts I see here seem to be much better informed than I am. I > would love to know how they obtained their knowledge. > > So here is my question: > I am running Samba4 as an AD and file server. How do I define ACLs for the > samba shares, for domain users & groups? > These users and groups are not defined on the underlying OS (CentOS 6.3). > It seems the answer is to do it via the underlying filesystem, but how is > that possible when the domain users & groups are not defined in the OS? > > I see samba-tool has some ACL get/set capability. Is that the answer? > > Or is there some special magic to get CentOS to control file access by > referring to the Samba4 AD? > > Many thanks in advance for any help. > > And I would be very grateful for pointers to Samba4 introductory or > background material (I have used the HOW-TOs extensively). > > Lee Allen > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > > > -- *Lee Allen* email: l...@leecallen.com bus: (716) 773-2729 home: (716) 773-2326 cell: (716) 880-0854 fax: (716) 408-8844 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba