My smb.conf with broken directory permissions from macOS clients.

smb.conf

[global]

   workgroup = DONTPANIC
   server string = Samba Server
   server role = standalone server
   log file = /var/log/samba/log.%m
   max log size = 50

    # Needed for Time Machine
    fruit:model = MacPro
    fruit:advertise_fullsync = true

    # Unsuccessful experiments to get permissions working
    inherit acls = yes
    acl allow execute always = yes
    inherit permissions = yes
    unix extensions = no

#[Time Machine Vault]
#    path = /mnt/backup/%U
#    valid users = %U
#    vfs objects = catia fruit streams_xattr
#    browseable = yes
#    writable = yes
#    read only = no
    # These are automatically enforced by "fruit:time machine = yes"
    #durable handles = yes
    #kernel oplocks = no
    #kernel share modes = no
    #posix locking = no
#    ea support = yes
#    fruit:aapl = yes
#    fruit:time machine = yes

[homes]
    comment = Home Directories
    vfs objects = catia fruit streams_xattr
    browseable = no
    writable = yes

[tmp]
    path = /mnt/dungeon/tmp
    vfs objects = catia fruit streams_xattr
    browseable = yes
    writable = yes
    valid users = @smb_tmp
    guest ok = yes
    force directory mask = 2770
    force create mask = 2660
    force user = nobody
    force group = smb_tmp