Suppose you have a folder named 'AAA'. Group 'Users' has read-execute
permissions on it. Now you create subfolder 'BBB', which, by default, inherits
'AAA' permissions. Then, you open ACLs dialog with Windows Explorer, and try to
revoke 'Users' access to 'BBB' by checking appropriate checkboxes. So, you set
them all and click 'Apply'.
Dialog window hangs. After waiting for about 30 mins, I`ve killed it.
Permissions remained still the same.
A workaround: disable inheritance on folder 'BBB', then operation succeeds.
Is it a Samba bug? When I try to do the same on Windows drive, I have no such
Sorry for terrible English. Hope you`ll understand my post :).
Forgot to post my smb.conf:
workgroup = DOMAIN
realm = DOMAIN
server string = test_cmp
guest account = guest
security = ads
password server = server
nt acl support = yes
encrypt passwords = yes
inherit acls = yes
inherit permissions = yes
map acl inherit = yes
store dos attributes = yes
idmap uid = 10000-20000
idmap gid = 10000-20000
load printers = no
local master = no
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
client schannel = no
admin users = DOMAIN\$ADMINS
comment = Data
path = /data
public = yes
writable = yes
I need to see the getfacl output for folder AAA, and for BBB and also need to
know what user you have logged in as and what groups they belong to. This will
help greatly in debugging this.
no feedback and probably it has been a more a support case, see https://www.samba.org/samba/support/