[Samba] Set primary group of file on samba share from windows

January 07th, 2012 - 11:40 am ET by Hubert Kario | Report spam
Hi all!

I want to use 'acl group control' setting to delegate privileges to specific
administrators.

Unfortunately, I'm unable to set the primary group using windows file
permissions dialog, I can only add and remove ACL groups.

I tried to do this by removing all groups but one from Windows. This doesn't
work: the primary group has all privs removed and the extra group is still in
ACLs only.

Then I tried to set the file/directory owner to group from Windows, but this
was met with a permission denied and a following log message:

[2012/01/05 21:13:03.349734, 3] smbd/nttrans.c:1899
(call_nt_transact_set_security_desc)
call_nt_transact_set_security_desc: file = projects/project A/New folder,
sent 0x1
[2012/01/05 21:13:03.349774, 3] smbd/posix_acls.c:1208(unpack_nt_owners)
unpack_nt_owners: unable to validate owner sid for
S-1-5-21-1526631811-284521863-152487935-11025
[2012/01/05 21:13:03.349804, 3] smbd/error.c:80(error_packet_set)
error packet at smbd/nttrans.c(1909) cmd0 (SMBnttrans)
NT_STATUS_INVALID_OWNER

Is setting the primary group possible, or do I have to do it from shell?

Regards,
Hubert Kario
QBS - Quality Business Software
02-656 Warszawa, ul. Ksawerów 30/85
tel. +48 (22) 646-61-51, 646-74-24
www.qbs.com.pl
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
email Follow the discussionReplies 4 repliesReplies Make a reply

Replies

#1 TAKAHASHI Motonobu
January 08th, 2012 - 02:50 am ET | Report spam
From: Hubert Kario
Date: Thu, 5 Jan 2012 23:36:58 +0100

Unfortunately, I'm unable to set the primary group using windows file
permissions dialog, I can only add and remove ACL groups.



Have your groups manupulated from Windows already added correctly
using "net groupmap list" or other method?

Have you correctly set "set primary group script"?

And your Samba joined AD and run Winbind?

As far as I examined we can change primary group via Samba under
certain environment.


TAKAHASHI Motonobu
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

Similar topics