Suppose you have a folder named 'AAA'. Group 'Users' has read-execute permissions on it. Now you create subfolder 'BBB', which, by default, inherits 'AAA' permissions. Then, you open ACLs dialog with Windows Explorer, and try to revoke 'Users' access to 'BBB' by checking appropriate checkboxes. So, you set them all and click 'Apply'. Dialog window hangs. After waiting for about 30 mins, I`ve killed it. Permissions remained still the same. A workaround: disable inheritance on folder 'BBB', then operation succeeds. Is it a Samba bug? When I try to do the same on Windows drive, I have no such problems. Sorry for terrible English. Hope you`ll understand my post :).
Forgot to post my smb.conf: [global] workgroup = DOMAIN realm = DOMAIN server string = test_cmp guest account = guest security = ads password server = server nt acl support = yes encrypt passwords = yes inherit acls = yes inherit permissions = yes map acl inherit = yes store dos attributes = yes idmap uid = 10000-20000 idmap gid = 10000-20000 load printers = no local master = no winbind enum users = yes winbind enum groups = yes winbind use default domain = yes client schannel = no admin users = DOMAIN\$ADMINS [test_save] comment = Data path = /data public = yes writable = yes
I need to see the getfacl output for folder AAA, and for BBB and also need to know what user you have logged in as and what groups they belong to. This will help greatly in debugging this. Thanks, Jeremy.
no feedback and probably it has been a more a support case, see https://www.samba.org/samba/support/