Bug 11442 - Inherited permissions cannot replicate
Summary: Inherited permissions cannot replicate
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.2.3
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-08-11 09:13 UTC by Yuriy Tabolin
Modified: 2020-01-06 12:07 UTC (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Yuriy Tabolin 2015-08-11 09:13:25 UTC 
I have 3 DCs run Samba 4.2.3. When I assign some security permissions on object in ADSI edit with option "Apply to: This object and all descendant objects", after replication on other DCs on descendant objects these permisions are lost. Same behavior is when I assign security permissions on OU in ADUC. On other DCs OU has replicated permissions, but on descendant objects permissions are absent.

Because of this, I cannot assign flexible permissions to security group and delegate some non standard functions to this group. 

Thanks for any help!
Comment 1 Björn Jacke 2020-01-06 12:07:23 UTC 
can you test with with a recent 4.11 version, please? I think this should be fixed by now.