Цель: получение возможности управления правами средствами Windows.
smb.conf:
[global]
workgroup = DOMAIN
netbios name = server
server string = Samba server
security = ads
encrypt passwords = Yes
auth methods = winbind
client NTLMv2 auth = Yes
client lanman auth = No
client plaintext auth = No
hosts allow = 192.168.0. localhost
load printers = no
log level = 0 vfs:1
log file = /var/log/samba/log.%m
max log size = 1000
panic action = /usr/share/samba/panic-action %d
password server = 192.168.0.1
realm = DOMAIN.LOCAL
passdb backend = tdbsam
socket options = TCP_NODELAY
interfaces = 192.168.0.3/24
localmaster = no
os level = 8
domain master = no
preferred master = no
domain logons = no
wins support = no
dos charset = CP866
unix charset = KOI8-R
display charset = KOI8-R
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind enum groups = yes
winbind enum users = yes
winbind use default domain = yes
winbind refresh tickets = yes
nt acl support = yes
acl group control = yes
case sensitive = no
defer sharing violations = false
[share]
comment=share
path = /home/share/
admin users = "@DOMAIN\domain admins"
read list = "@DOMAIN\domain users"
write list = "@DOMAIN\domain users"
printable = no
read only = no
create mask = 0660
directory mask = 0770
full_audit:prefix = share=%S; id=%U; ip=%I -->
full_audit:success = unlink rmdir mkdir write rename write aio_write pwrite
full_audit:failure = unlink rmdir mkdir write rename write aio_write pwrite
full_audit:priority = INFO
При этих настройках при попытке сохранения прав доступа из проводника Windows выдается сообщение "Не удалост сохранить изменение разрешений... Отказано в доступе."
