I have a samba server that authenticates users using LDAP, however it does have kerberos enabled as well. Unfortunately users authenticated using kerberos cannot delete files. I can test this using smbclient - if I use the '-k' switch, I cannot delete the files, if I don't, I can. The users does have read/write/execute access to the directory from where he is trying to delete the file.
Any idea what might be wrong?
The smb.conf:
security = user
passdb backend = ldapsam:ldap://ldap1.[...]
ldap ssl = start tls
ldap suffix = dc=mff,dc=cuni,dc=cz
ldap user suffix = ou=accounts
ldap group suffix = ou=groups
ldap admin dn = uid=[...]
ldapsam:trusted = yes
kerberos method = system keytab
realm = [...]
use spnego = yes
unix extensions = no
winbind enum users = Yes
winbind enum groups = Yes
winbind cache time = 7200
idmap cache time = 7200
idmap uid = 8000-50000
idmap gid = 8000-50000
name cache timeout = 7200
delete readonly = yes
[share]
comment = "Uzivatelska data"
path = /export/home
public = no
writable = yes
hide unreadable = yes