Linux File Permissions
setfacl
The following can be used on a samba root share to allow access from multiple domains.
- NOTE : This is still being evaluated and may not be best practice. I am using this for a FreeNAS share that needed a trusted domain to access ACLs copied using robocopy.
- From a very helpful member on the ixsystems forums[1]
R - read extended attributes, c - read permissions, f - file inherit, d - directory inherit. These are covered here: https://www.ixsystems.com/community/threads/methods-for-fine-tuning-samba-permissions.50739/
setfacl -m everyone@:r-x---a-R-c---:fd-----:allow
