[ILUG] Samba with AD Integration

[Walter Faleiro]

Hi,
We have a CentOS 5.5 server that runs Samba and is integrated with the AD.
As all the users are on AD, we run winbind service.
The server shares can be accessed as required and users can create folders
within the shares. However there is one issue noticed

If a user creates a share it lists the owner as the user name (as in AD) and
the group name as Domain Users. But if we try to assign permissions to the
share from the windows server (eg add another user with full permission) it
says access denied even though the Domain Admin, or the same user that
created the shares tries to change the permission.

Below are the Permissions created in a shared folder

drwxrwxr-x 2 SWAR\walter SWAR\domain users  4096 Oct 22 10:40 test


And the smb.conf file is





   workgroup = SWAR
   password server = *
   realm = SWAR.COM
   security = ads
   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431
   template shell = /sbin/nologin
   winbind use default domain = false
   winbind offline logon = false

#--authconfig--end-line--
;workgroup = SWAR

   server string = SAMBA Server on SYNC

;   security = ads
   netbios name = sync

   load printers = no

   log file = /var/log//samba/log.%m

   max log size = 550

;  password server = *

  encrypt passwords = yes

;   realm = swar.com

   socket options = TCP_NODELAY

   local master = no

;   domain master = no

   preferred master = no

   dns proxy = no

[homes]
        comment = Home Directories
        browseable = no
        writeable = yes

[printers]
        comment = All Printers
        path = /var/spool/samba
        browseable = no
        printable = yes


[share1]
comment = Public1 Share
path = /array/public1
public = yes
writable = yes
create mask = 0775
directory mask = 0775

[share2]
comment = Public2 Share
path = /array/public2
public = yes
writable = yes
create mask = 0775
directory mask = 0775

Any change in smb or winbind required so that domain admins can assign the
permissions required from windows systems to the samba shares  ?

Thanks,
--Walter