Halo,
saya sedang coba setup samba 3 yang join ke ADS (w2k3 mixmode), dan
berhasil. Semua domain member bisa baca shared folder di samba.

Salah satu fitur samba yang penting ingin dijalankan adalah ACL,
tetapi gagal. Samba dikompile dengan menginclude "--with-acl-support".
Saya memakai kernel Linux 2.4.25 yang sudah dipatch (patch dari
http://acl.bestbits.at/), dan rasanya sudah berhasil ACL jalan di
Linux:

[EMAIL PROTECTED] root]# chacl -l *
anaconda-ks.cfg [u::rw-,g::r--,o::r--]
etc_pam.d_login [u::rw-,g::r--,o::r--]
etc_pam.d_sshd [u::rw-,g::---,o::---]
install.log [u::rw-,g::r--,o::r--]
install.log.syslog [u::rw-,g::r--,o::r--]
[EMAIL PROTECTED] root]#

test join domain :

[EMAIL PROTECTED] root]# net ads testjoin
Join is OK
[EMAIL PROTECTED] root]#

output dari testparm :

[EMAIL PROTECTED] root]# testparm
Load smb config files from /opt/samba-3.0.6/lib/smb.conf
Processing section "[homes]"
Processing section "[printers]"
Processing section "[print$]"
Processing section "[SHARES]"
Loaded services file OK.
'winbind separator = +' might cause problems with group membership.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

# Global parameters
[global]
  unix charset = LOCALE
  workgroup = SYSTEMS01
  realm = KPC.CO.ID
  server string = Samba-3.0.6
  security = ADS
  password server = 148.175.153.138
  username map = /opt/samba-3.0.6/lib/username_map.conf
  use kerberos keytab = Yes
  log level = 5
  syslog = 0
  log file = /var/opt/samba-3.0.6/%m
  max log size = 50
  socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
  preferred master = No
  local master = No
  domain master = No
  wins server = 148.175.153.138
  idmap uid = 10000-20000
  idmap gid = 10000-20000
  template primary group = "Domain Users"
  template shell = /bin/bash
  winbind separator = +
  winbind cache time = 1
  winbind use default domain = Yes
  winbind nested groups = Yes

[homes]
  comment = Home directories on Linux
  path = /home/%D/%U
  valid users = %S
  read only = No
  browseable = No

[printers]
  comment = Samba-Linux print spool
  path = /var/spool/samba
  guest ok = Yes
  printable = Yes
  browseable = No

[print$]
  comment = Printer drivers
  path = /var/opt/samba-3.0.6/lib/drivers
  admin users = root, Administrator
  write list = root

[SHARES]
  comment = Shared directory in Linux
  path = /SHARES
  admin users = EmirF
  read only = No
  guest ok = Yes
[EMAIL PROTECTED] root]#



dengan konfigurasi seperti diatas, perubahan ACL di linux command-line
di "\\samba\SHARES\" tidak visible dari windows explorer.

Saya juga sudah coba rubah dari properties windows explorer atau via
computer management, dan gagal dengan permission denied.

Help, acl ini gimana cara pake nya ??

-- 
EF - Jack of all trades, master of none.

-- 
Unsubscribe: kirim email kosong ke [EMAIL PROTECTED]
Arsip, FAQ, dan info milis di http://linux.or.id/milis.php
Tidak bisa posting? Baca:
http://linux.or.id/wiki/index.php?pagename=ProblemMilisDanSolusi
http://linux.or.id/wiki/index.php?pagename=TataTertibMilis

Kirim email ke