samba-3.0.21b,1     A free SMB and CIFS client and server for UNIX

[global]
        dos charset = 866
        unix charset = KOI8-R
        display charset = KOI8-R
        workgroup = GTSS
        server string = Secondary Domain Controller (Samba %v)
        interfaces = 192.168.100.0/24, 192.168.0.0/24, 127.0.0.1
        bind interfaces only = Yes
        passdb backend = ldapsam:ldap://127.0.0.1
        enable privileges = Yes
        log level = 3
        log file = /var/log/samba/%m.log
        max log size = 1000
        time server = Yes
        load printers = No
        add user script = /usr/local/sbin/smbldap-useradd -m '%u'
        delete user script = /usr/local/sbin/smbldap-userdel '%u'
        add group script = /usr/local/sbin/smbldap-groupadd '%g'
        delete group script = /usr/local/sbin/smbldap-groupdel '%g'
        add user to group script = /usr/local/sbin/smbldap-groupmod -m '%u' '%g'
        set primary group script = /usr/local/sbin/smbldap-usermod -g '%g' '%u'
        add machine script = /usr/local/sbin/smbldap-useradd -w '%u'
        logon script = \\%L\netlogon\STARTUP.BAT
        logon path = \\%L\profiles\%u
        domain logons = Yes
        os level = 200
        preferred master = Yes
        domain master = Yes
        dns proxy = No
        ldap port = 389
        ldap admin dn = "cn=root,dc=gtss,dc=ru"
        ldap group suffix = ou=groups
        ldap machine suffix = ou=users
        ldap suffix = dc=gtss,dc=ru
        ldap user suffix = ou=users
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind enum users = No
        winbind enum groups = No
        winbind trusted domains only = Yes
        admin users = root, pirate, lva, denja, admin, dj_kill
        acl group control = Yes
        hosts allow = 192.168.100.0/24, 127.0.0.1, 192.168.0.0/24
        hosts deny = all
        printing = bsd
        print command = lpr -r -P'%p' %s
        lpq command = lpq -P'%p'
        lprm command = lprm -P'%p' %j
        browseable = No
[commerce]
        comment = Коммерческая служба
        path = /usr/local/gtss/docum/commerce
        read only = No
        browseable = Yes
        recycle:repository = .Корзина
        recycle:keeptree = Yes
        recycle:touch = Yes
        recycle:versions = Yes
        recycle:maxsize = 0
        recycle:exclude = *.tmp|*.tbi|*.temp|~$*|*.~??

>Судя по логам
>
>[2006/08/30 13:06:52, 2] smbd/posix_acls.c:set_canon_ace_list(2484)
>  set_canon_ace_list: sys_acl_set_file type file failed for file exchange/Новая папка (Operation
>not supported).
>[2006/08/30 13:06:52, 3] smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2583)
>  convert_canon_ace_to_posix_perms: Too many ACE entries for file exchange/Новая папка to
>convert to posix perms.
>[2006/08/30 13:06:52, 3] smbd/posix_acls.c:set_nt_acl(3273)
>  set_nt_acl: failed to convert file acl to posix permissions for
>file exchange/Новая папка.
>[2006/08/30 13:06:52, 3] smbd/error.c:error_packet(146)
>  error packet at smbd/nttrans.c(2094) cmd=160 (SMBnttrans) NT_STATUS_ACCESS_DENIED
>
>проблема в ACL?
>
>Это лечится или я не в ту сторону копаю?

Доброго дня! Как продвигается? Сейчас, похоже, решаю туже проблему, что и у тебя.