Final permission fix after samba creates its driver dirs
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
2022-12-21 10:53:55 +01:00
parent ae4c886d82
commit f6cad8a87e

View File

@@ -74,22 +74,21 @@ if [ ! -f /var/lib/samba/private/secrets.tdb ]; then
# Join
net ads join --no-dns-updates -U"$ADMIN_ACCOUNT"%"$ADMIN_PASSWORD"
/etc/init.d/winbind start
/etc/init.d/smbd start
((/usr/bin/supervisord -c /etc/supervisor/conf.d/supervisord.conf -j /tmp/sp.pid)&)
sleep 10
# Allow adding printer drivers for Administrator
# Note: These commands require running winbind that resolves the group name
sleep 10
chgrp "Domain Admins" /var/lib/samba/printerdrivers
chmod 775 /var/lib/samba/printerdrivers
setfacl -m "d:g:Domain Admins:rwx" /var/lib/samba/printerdrivers
# Note: These commands require running winbind that resolves the group name and dcerpcd that accesses printers list
rpcclient -P -c enumprinters 127.0.0.1
chgrp -R "Domain Admins" /var/lib/samba/printerdrivers
chmod -R 775 /var/lib/samba/printerdrivers
setfacl -R -m "d:g:Domain Admins:rwx" /var/lib/samba/printerdrivers
# HACK: In Samba 4.16 and above shares are not visible otherwise
smbclient -L 127.0.0.1 -P
chmod 666 /var/lib/samba/share_info.tdb
/etc/init.d/winbind stop
/etc/init.d/smbd stop
kill `cat /tmp/sp.pid`
fi
# CUPS persistence and permissions