Groups | Search | Server Info | Login | Register

Groups > linux.samba > #60473

[Samba] Problem mapping extended acls with sssd and samba

Show all headers | View raw

Hello.

I have a file server with samba and sssd. Is working perfectly.

The problem is when I define extended ACLs using windows explorer. Acls are
not applied in the file system to the groups and users of the domain.

But when I work with winbind I can apply the extended acls in the file
system.


Follow the contents of the sssd.conf and smb.conf file

[global]
WORKGROUP = DOMAINE
Realm = DOMAINA.COM
Netbios name = FILESERVER
Dedicated keytab file = /etc/krb5.keytab
Kerberos method = dedicated keytab
Security = ads
Log level = 3
Log file = /var/log/samba/log.all
Max log size = 4000
Domain master = no
Local master = no
# Enable Extended ACLs #
Map acl inherit = yes
Store dos attributes = yes
Vfs objects = acl_xattr
[rh]
Path = / mnt / samba / rh
; Valid users = manuel@coorp.gnulinux souza@coorp.gnulinux
Write list = @ "rh@coorp.gnulinux" @ "diretoria@coorp.gnulinux" @
"vendas@coorp.gnulinux"

[Sssd]
Domains = domaina.com
Config_file_version = 2
Services = nss, pam

[Domain / domaina.com]
Ad_domain = domaina.com
Krb5_realm = COORP.GNULINUX
Realmd_tags = manages-system joined-with-samba
Cache_credentials = True
Id_provider = ad
Krb5_store_password_if_offline = True
Default_shell = / bin / bash
Ldap_id_mapping = True
Use_fully_qualified_names = True
Fallback_homedir = / home /% u @% d
Access_provider = ad

Why does it happen ?
Can someone please help me?

-- 
Att,

Edson Oliveira
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Back to linux.samba | Previous | Next — Next in thread | Find similar

Thread

[Samba] Problem mapping extended acls with sssd and samba edson via samba <samba@lists.samba.org> - 2017-03-19 21:20 +0100
  Re: [Samba] Problem mapping extended acls with sssd and samba Rowland Penny via samba <samba@lists.samba.org> - 2017-03-19 21:50 +0100
    Re: [Samba] Problem mapping extended acls with sssd and samba edson via samba <samba@lists.samba.org> - 2017-03-19 22:10 +0100
      Re: [Samba] Problem mapping extended acls with sssd and samba Rowland Penny via samba <samba@lists.samba.org> - 2017-03-19 22:30 +0100
        Re: [Samba] Problem mapping extended acls with sssd and samba edson via samba <samba@lists.samba.org> - 2017-03-19 22:40 +0100
          Re: [Samba] Problem mapping extended acls with sssd and samba edson via samba <samba@lists.samba.org> - 2017-03-21 03:10 +0100
            Re: [Samba] Problem mapping extended acls with sssd and samba Rowland Penny via samba <samba@lists.samba.org> - 2017-03-21 10:40 +0100
              Re: [Samba] Problem mapping extended acls with sssd and samba edson via samba <samba@lists.samba.org> - 2017-03-21 18:30 +0100

csiph-web