Problem setfacl on file server

Come here to share your tips and tricks for using Samba4
Locked
Eric
Messages: 29
Registration: March 11, 2018 - 08:22

July 1, 2018 - 6:23 PM

Hello,

I have a Samba4 infrastructure that works perfectly with three BDCs. I also followed the tutorial on the file server, but when I try to run `setfacl

-m group:"modomain\Domain Admins":rwx /monrepertoire`,
it returns
`setfacl: Option -m: Invalid argument near character 7`.

I don't understand this because the BDCs are working fine; I'm on an XFS partition.

However, if I run `getfacl`, it gives me the groups, and `wbinfo -g` works fine.

Do you have any ideas?
Thank you in advance.
Sincerely,
Eric
Fred_O
Messages: 5
Registration: Nov 06, 2017 - 4:14 p.m.

July 2, 2018 - 3:34 PM

Hello.

What does the "-m" option of setfacl do? The setfacl man page doesn't provide any information about this option, unlike the -n (--no-mask) option
. There's only the "--mask" option. Perhaps the answer lies there.
User avatar
dcardon
WAPT Expert
Messages: 1930
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

July 5, 2018 - 10:55 PM

Hello Eric,
Eric wrote: July 1, 2018 - 6:23 PM I have a Samba4 infrastructure that works perfectly with three BDCs. I also followed the tutorial on the file server, but when I try to run `

setfacl -m group:"modomain\Domain Admins":rwx /monrepertoire`,
it returns
`setfacl: Option -m: Invalid argument near character 7`.

I don't understand because the BDCs are fine; I'm on an XFS partition.

However, if I run `getfacl`, it gives me the groups, and `wbinfo -g` works fine.

Do you have any idea
If you followed the dev.tranquil.it tutorials for the file server, there should be the `winbind use default=yes` parameter, so you need to use the group name directly without prefixing it with the domain name:

setfacl -m group:"Domain Admins":rwx /mydirectory

Sincerely,

Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
Locked