Всем привет.Делаю файловый сервер Samba+nt acl.
Дошёл до проблемы описанной тут: https://www.opennet.ru/openforum/vsluhforumID1/60843.html
В винде не получатся менять права на папки через галочки в винде, пишет - Отказано в доступе. Если ставить через setfacl и заходить через винду, тоже не работает. А если заходить через ssh, то права работают.

RHEL 5.0, Samba 3.0.33-3.7.el5.

# mount
/dev/mapper/VolGroup00-LogVol00 on / type ext3 (rw,acl,user_xattr)
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
/dev/sda1 on /boot type ext3 (rw)
tmpfs on /dev/shm type tmpfs (rw)
/dev/sdc1 on /temp type ext3 (rw,acl,user_xattr)
none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw)
sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw)

# cat /etc/samba/smb.conf

[global]
        auth methods = winbind
        local master = no
        os level = 8
        domain master = no
        workgroup = BP
        nt acl support = Yes
        acl compatibility = auto
        acl group control = Yes
        security = ADS
        password server = BP.LOCAL
        encrypt passwords = Yes
        map acl inherit = Yes
        realm = BP.LOCAL
        netbios name = Test-files-sr
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        log level = acls:1
        log file = /var/log/samba/%m.%U.log
        max log size = 50000
        hosts allow = 192.168.1. 192.168.2.
        winbind uid = 10000-20000
        winbind gid = 10000-20000
        winbind cache time= 10
        winbind use default domain = Yes
        allow trusted domains = No
        template homedir = /usr/home/%D/%U
        template shell = /bin/bash
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind refresh tickets    = True
        load printers   = No
        disable spoolss = Yes
        show add printer wizard = No
        case sensitive = No
    
    map acl inherit = yes
    map hidden = no
        map system = no
        map archive = no
        store dos attributes = yes
        dos filemode = yes

[Temp]
        path = /usr/home/test
#       valid users = BP\sev
       admin users = @BP\Администраторы домена
#      read list = BP\sev
#       write list = BP\sev
        read only = No
        directory mask = 0770
        security mask = 0770