Have you taken a look at https://wiki.samba.org/index.php/Samba_4/OS_Requirements#File_System_Support to ensure your file system will handle ACL's?
Ricky On Fri, Feb 15, 2013 at 10:35 AM, Sebastian Arcus <s...@open-t.co.uk> wrote: > Hi Ricky, > > Thanks for the reply. I have tried changing the permissions on the > netlogon share and the strange thing is that none of the changes I do in > the Security/ACL tab from the Windows XP machine which is joined to the > domain (but on the netlogon share which is on the server) actually stick. I > can access the shares fine with that machine, but if I change the > permissions, it seems to just ignore the changes - no error message. I am > logged in as the domain Administrator - so it seems like a bit of a > mystery. Then again - maybe I've done something silly when I've setup this > Samba AD DC - although I've followed all the instructions on the Samba wiki > and everything else seems to be working fine. > > > Sebastian > > > > On 14/02/13 05:31, Ricky Nance wrote: > >> Hi Sebastian, >> Many of the per share options can now be done using ACL's. In this case >> you would open the netlogon share (via windows) start -> run -> >> \\MY-SERVER\netlogon (then press enter), then right click on a blank >> spot in that folder (not on any other file or folder) and select >> properties. Find the security tab and you can make the modifications you >> want (specifically adding Everyone with full permissions should give you >> what you are looking for, though I have not been able to test this yet). >> If I get a chance soon I will do some testing to make sure that the acl >> change is all that is needed. >> >> To find out what options are available, samba-tool testparm -v will give >> you a nice list (at least for global). >> >> Ricky >> >> >> On Wed, Feb 13, 2013 at 4:33 AM, Sebastian Arcus <s...@open-t.co.uk >> <mailto:s...@open-t.co.uk>> wrote: >> >> I would like to migrate some of my Samba 3.x domains to Samba 4. >> Part of the functionality of the current system is allowing some >> Windows XP Pro computers, which are not joined to the domain, access >> to some public shares on the Samba server. I tried using "map to >> guest = bad user" with Samba 4 - but it appears to be completely >> ignored and the Windows XP machine keeps on prompting for >> username/password when trying to access the server share. Has this >> option been dropped in Samba 4? Is there another way to accomplish >> the same? >> >> Otherwise my Samba 4 domain seems to be working fine - and the >> Windows XP Pro machines which are joined to it can access the share >> fine. >> >> As a side note, I find it hard to figure out which smb.conf options >> are still available for Samba 4 and which are not. I've googled >> around and can't seem to find a wiki page or authoritative page. >> >> I use Samba 4.1.0pre1 >> >> Here is my smb.conf >> >> >> [global] >> workgroup = MYDOMAIN >> realm = mydomain.local >> netbios name = MY-SERVER >> server role = active directory domain controller >> idmap_ldb:use rfc2307 = yes >> map to guest = bad user >> >> [netlogon] >> path = /var/lib/samba/sysvol/__**mydomain.local/scripts >> >> read only = No >> public = Yes >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: >> https://lists.samba.org/__**mailman/options/samba<https://lists.samba.org/__mailman/options/samba> >> >> <https://lists.samba.org/**mailman/options/samba<https://lists.samba.org/mailman/options/samba> >> > >> >> >> >> >> -- >> >> > > -- > Linux vehicle CCTV - www.open-t.co.uk/iroko > -- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba