Combining Samba and Active Directory (with rights set from Windows)

Question

linux

Good afternoon.

I ask for help in the following question, any links to guides (preferably verified), discussions on the same issue, etc. are welcome. etc.
Interested in deploying the Samb service on a Debian server (which, in principle, of course, is a trivial task), including this service in Active Directory, but in such a way that you can change access to folders with a simple mouse click directly from Windows Explorer.

For example, it would be possible to create a new folder "A", give it read access to users "U1" and "U2", but give write access to the user "U3" and all this without changing the Samba configs.

Answer 1

>> I will say this. What you're saying is simply not possible, managing Samba shares from >>Windows Explorer. After all, samba is a Linux server service and access to >> balls is configured only from under Linux.
This, my friend, is enchanting nonsense)))
Part one: wiki.linuxformat.ru/wiki/LXF123:Samba
Part two: wiki.linuxformat.ru/wiki/LXF124:Samba (what you need)
The author of the article, however, forgot add what you need to add the vfs_acl_xattr module to the samba config, otherwise all permissions will fall into the "special" item in the explorer window

Answer 2

To do this, you need to do everything according to the instructions, but the balls must be on the FS with support for the user_xattr option. In general, in a good way, this option should be enabled everywhere today - acl and user_xattr make life easier.
Everything.

Answer 3

If I understand you correctly, you only need this in order not to edit the configs “by hand”, well, that is, do not fumble through the folders through the configs, here is the official how-to, though on setting up a DC on samba4, but I think you will understand correctly and learn something useful, good luck!

Answer 4

Perhaps you will find something useful here . The truth is there for Ubuntu, but I think it will do for Debian.

Answer 5

Somehow I set up facl for such functionality a long time ago. But it greatly slows down the system - in direct proportion to the number of files with distributed permissions.

Answer 6

This scenario is described in the official Ubuntu wiki. I regret that I can’t give a link - it’s problematic from a mobile phone.

Answer 7

I will say this. What you are saying is simply not possible, managing Samba shares from Windows Explorer. After all, samba is a Linux server service and access to the balls is configured only from under Linux. At the configuration stage, only domain services are needed from Windows, as a result, in Linux we get domain accounts and give them rights.