When we try to change permissions for "file owner" and "group owner" on a file or folder on a samba-3.2.7 share from a windows 2003 client, the changes does not get applied. The "windows explorer security properties gui" does not return enny errors, the security settings just doesn't get applied. I have run a check with "getfacl" on the linux-samba-server and verified that they actually does not get applied. The same operation on users and groups other than "file owner" and "group owner" gets applied without any problems whatsoever. We have this problem on samba-servers running: sles10sp2/x64 samba 3.2.4 sles9sp3/x86 samba 3.2.6 and 3.2.7 sles9sp1/x86 samba 3.2.4 On a server running sles9sp3/x86 samba 3.0.26a these operations, changing permissions for "file owner" and "group owner" goes without any problems whatsoever. All these serveres are joined to a windows2003-domain or a windows 2003R2-domain using "net ads join". This is smb.conf from the testserver LORDVADER (joined to a windows 2003 domain), where we have reproduced the problem whith sles9sp3/x86 + samba 3.2.7: [global] workgroup = ahus netbios name = lordvader security = ADS realm = AHUS.NO encrypt passwords = yes lock directory = /var/lock/samba log level = 3 name resolve order = host wins server = 10.225.3.6 ldap admin dn= cn=Manager,dc=ahus,dc=no ldap idmap suffix = ou=Idmap ldap suffix = dc=ahus,dc=no idmap backend = ldap:ldap://127.0.0.1 idmap uid = 10000-200000 idmap gid = 10000-200000 winbind enum users = no winbind enum groups = no winbind separator = + winbind use default domain = yes winbind nested groups = yes template shell = /bin/bash template homedir = /home/%U default devmode = yes socket options = TCP_NODELAY host msdfs = no [testshare] path=/testshare force security mode = 0660 writable=yes browsable=yes create mask = 7770 directory mask = 7770 hide unreadable = yes regards Erik
Created attachment 3877 [details] level 10 log.smbd while trying to change "admin-erso" (owner) from "Full Control - This Folder Only" to "Full Control - This Folder, subfolders and files" on folder "test" level 10 log.smbd while trying to change "admin-erso" (owner) from "Full Control - This Folder Only" to "Full Control - This Folder, subfolders and files" on folder "test" on LORDVADER
Created attachment 3878 [details] level 10 log.winbindd while trying to change "admin-erso" (owner) from "Full Control - This Folder Only" to "Full Control - This Folder, subfolders and files" on folder "test" level 10 log.winbindd while trying to change "admin-erso" (owner) from "Full Control - This Folder Only" to "Full Control - This Folder, subfolders and files" on folder "test"
Sorry about the double attachment-comments. In the test, which the logs are from, I try to add "inheritence" to the folder. Other tests, like removing writepermissions give the same results. -kind regards Erik
I understand now that this is behavior is by design. Also, this does not work in 3.0.26a as I claim in the bugreport. I will put it to "invalid" -kind regards Erik