Hi, I new to Samba and I have a couple of questions about how it handles NT ACLs (Access Control Lists). I tried searching the archives but couldn't find anything relevant. If this is documented somewhere, please point me at the relevant docs. I'm pretty sure Samba allows a NT client to set the security ACLs. My question is what happens if: I setup an entire Linux Volume to be an SMB share I backup my Linux based SMB folder to tape via tar, cpio, or whatever I do a "rm -rf" on the Linux Volume I restore my backup from tape. Will I get the NT ACLs restored. (I'd be surprised if the answer is no.) Now I delete just a single file, and then I do a single file restore. Do I get it's ACL info restored? It seems unlikely to me, but I don't know where this metadata is stored. =3D=3D=3D New scenario. I use smbclient to create a tar backup of an externally served SMB share. When I do a restore, do I get the ACLs restored? (I tried this with V2.2.1, but I did not get them. Maybe I did something wrong.) Thanks for any clarification regarding the above. Greg Freemyer Internet Engineer Deployment and Integration Specialist The Norcross Group www.NorcrossGroup.com
Are you using an ACL-enabled filesystem, or just letting Samba map ACLs onto standard UNIX privilages? If it's the latter, any UNIX backup tool should back them up. If it's the former, you'll need a tool that understands the filesystem ACLs. -----Original Message----- From: Greg Freemyer [mailto:freemyer@NorcrossGroup.com] Sent: Monday, January 28, 2002 7:05 PM To: samba@lists.samba.org Subject: [Samba]NT ACLs and backup. Hi, I new to Samba and I have a couple of questions about how it handles NT ACLs (Access Control Lists). I tried searching the archives but couldn't find anything relevant. If this is documented somewhere, please point me at the relevant docs. I'm pretty sure Samba allows a NT client to set the security ACLs. My question is what happens if: I setup an entire Linux Volume to be an SMB share I backup my Linux based SMB folder to tape via tar, cpio, or whatever I do a "rm -rf" on the Linux Volume I restore my backup from tape. Will I get the NT ACLs restored. (I'd be surprised if the answer is no.) Now I delete just a single file, and then I do a single file restore. Do I get it's ACL info restored? It seems unlikely to me, but I don't know where this metadata is stored. ==New scenario. I use smbclient to create a tar backup of an externally served SMB share. When I do a restore, do I get the ACLs restored? (I tried this with V2.2.1, but I did not get them. Maybe I did something wrong.) Thanks for any clarification regarding the above. Greg Freemyer Internet Engineer Deployment and Integration Specialist The Norcross Group www.NorcrossGroup.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
I want to be able to read environment variables to set smb.conf file. This is so that I can set all parameters for the machine from a single file. Anyone who can give me a quick pointer? The smb.conf docs were very unclear and I could not get it to work. Thanks.
David, I'm at the conceptual stage. I have a dedicated Redhat 7.2 box setup for testing, but I can change the config/filesystems as required. I want to build a dedicated "SMB storage and backup" server for our office. Sort of a NAS device with tape capability. My goal is to have this box do 3 things: 1) Serve SMB shares with full NT/2000 ACL support. 2) Be able to backup/restore the above on a file by file basis and have the ACL metadata maintained. 3) Use smbclient with the tar option to backup other SMB servers, and again be able to maintain the ACL metadata. For 2) above, I need to understand where the ACL metadata is stored, and which backup technology will allow it to be restored correctly. I gather from you comment below, that some Linux filesystems support Linux ACLs, and with those Samba uses this space to hold the NT ACLs. Could you tell me which Linux Filesystems do this, and which backup tools correctly handle the Linux ACL metadata. (I always use standard permissions under UNIX/Linux, so I have never had to do worry about them.) For 3) above, I tried the smbclient from Samba V2.2.1, but when I did the restore, it did not restore the ACL metadata. I'm hoping that I either did something wrong, or that there is a different backup/restore tool that supports this feature. Thanks for your help, Greg Freemyer Internet Engineer Deployment and Integration Specialist The Norcross Group www.NorcrossGroup.com>> Are you using an ACL-enabled filesystem, or just letting Samba map ACLs >> onto >> standard UNIX privilages?>> If it's the latter, any UNIX backup tool should back them up. If it's the >> former, you'll need a tool that understands the filesystem ACLs.>> -----Original Message----- >> From: Greg Freemyer [mailto:freemyer@NorcrossGroup.com] >> Sent: Monday, January 28, 2002 7:05 PM >> To: samba@lists.samba.org >> Subject: [Samba]NT ACLs and backup.>> Hi,>> I new to Samba and I have a couple of questions about how it handles NT >> ACLs >> (Access Control Lists).>> I tried searching the archives but couldn't find anything relevant. If >> this >> is documented somewhere, please point me at the relevant docs.>> I'm pretty sure Samba allows a NT client to set the security ACLs.>> My question is what happens if: >> I setup an entire Linux Volume to be an SMB share >> I backup my Linux based SMB folder to tape via tar, cpio, or whatever >> I do a "rm -rf" on the Linux Volume >> I restore my backup from tape.>> Will I get the NT ACLs restored. (I'd be surprised if the answer is no.)>> Now I delete just a single file, and then I do a single file restore.>> Do I get it's ACL info restored? It seems unlikely to me, but I don't >> know >> where this metadata is stored.>> =3D=3D=3D >> New scenario.>> I use smbclient to create a tar backup of an externally served SMB share.>> When I do a restore, do I get the ACLs restored?>> (I tried this with V2.2.1, but I did not get them. Maybe I did something >> wrong.)>> Thanks for any clarification regarding the above.>> Greg Freemyer >> Internet Engineer >> Deployment and Integration Specialist >> The Norcross Group >> www.NorcrossGroup.com>> --=20 >> To unsubscribe from this list go to the following URL and read the >> instructions: http://lists.samba.org/mailman/listinfo/samba>> --=20 >> To unsubscribe from this list go to the following URL and read the >> instructions: http://lists.samba.org/mailman/listinfo/samba
Currently under Linux ACLs are supported with the ext2 and ext3 filesystems (with the proper kernel patches, available at http://acl.bestbits.at/), and xfs. They're POSIX ACLs, which don't map precisely to NT ACLs but have most of the same functionality. The only backup tool I'm aware of that currently supports ACLs is Star, which is mentioned on that site. It's possible to work around this with other tools by backing up the ACLs seperately to a flat file, using getfacl. This is what I currently do on my system, since the networked backup software I use is not ACL-aware. I'm not sure how smbclient's 'tar' option works, but my understanding is that smbclient does not understand ACLs. -----Original Message----- From: Greg Freemyer [mailto:freemyer-ml@NorcrossGroup.com] Sent: Tuesday, January 29, 2002 2:21 PM To: David Brodbeck; samba@lists.samba.org Subject: re[2]: [Samba]NT ACLs and backup. David, I'm at the conceptual stage. I have a dedicated Redhat 7.2 box setup for testing, but I can change the config/filesystems as required. I want to build a dedicated "SMB storage and backup" server for our office. Sort of a NAS device with tape capability. My goal is to have this box do 3 things: 1) Serve SMB shares with full NT/2000 ACL support. 2) Be able to backup/restore the above on a file by file basis and have the ACL metadata maintained. 3) Use smbclient with the tar option to backup other SMB servers, and again be able to maintain the ACL metadata. For 2) above, I need to understand where the ACL metadata is stored, and which backup technology will allow it to be restored correctly. I gather from you comment below, that some Linux filesystems support Linux ACLs, and with those Samba uses this space to hold the NT ACLs. Could you tell me which Linux Filesystems do this, and which backup tools correctly handle the Linux ACL metadata. (I always use standard permissions under UNIX/Linux, so I have never had to do worry about them.) For 3) above, I tried the smbclient from Samba V2.2.1, but when I did the restore, it did not restore the ACL metadata. I'm hoping that I either did something wrong, or that there is a different backup/restore tool that supports this feature. Thanks for your help, Greg Freemyer Internet Engineer Deployment and Integration Specialist The Norcross Group www.NorcrossGroup.com
David, Thanks for that very useful info. Greg >> Currently under Linux ACLs are supported with the ext2 and ext3 >> filesystems >> (with the proper kernel patches, available at http://acl.bestbits.at/), >> and >> xfs. They're POSIX ACLs, which don't map precisely to NT ACLs but have >> most >> of the same functionality. >> The only backup tool I'm aware of that currently supports ACLs is Star, >> which is mentioned on that site. It's possible to work around this with >> other tools by backing up the ACLs seperately to a flat file, using >> getfacl. >> This is what I currently do on my system, since the networked backup >> software I use is not ACL-aware. >> I'm not sure how smbclient's 'tar' option works, but my understanding is >> that smbclient does not understand ACLs. >> -----Original Message----- >> From: Greg Freemyer [mailto:freemyer-ml@NorcrossGroup.com] >> Sent: Tuesday, January 29, 2002 2:21 PM >> To: David Brodbeck; samba@lists.samba.org >> Subject: re[2]: [Samba]NT ACLs and backup. >> David, >> I'm at the conceptual stage. I have a dedicated Redhat 7.2 box setup for >> testing, but I can change the config/filesystems as required. >> I want to build a dedicated "SMB storage and backup" server for our >> office. >> Sort of a NAS device with tape capability. >> My goal is to have this box do 3 things: >> 1) Serve SMB shares with full NT/2000 ACL support. >> 2) Be able to backup/restore the above on a file by file basis and have >> the >> ACL metadata maintained. >> 3) Use smbclient with the tar option to backup other SMB servers, and >> again >> be able to maintain the ACL metadata. >> For 2) above, I need to understand where the ACL metadata is stored, and >> which backup technology will allow it to be restored correctly. >> I gather from you comment below, that some Linux filesystems support Linux >> ACLs, and with those Samba uses this space to hold the NT ACLs. >> Could you tell me which Linux Filesystems do this, and which backup tools >> correctly handle the Linux ACL metadata. (I always use standard >> permissions >> under UNIX/Linux, so I have never had to do worry about them.) >> For 3) above, I tried the smbclient from Samba V2.2.1, but when I did the >> restore, it did not restore the ACL metadata. I'm hoping that I either >> did >> something wrong, or that there is a different backup/restore tool that >> supports this feature. >> Thanks for your help, >> Greg Freemyer >> Internet Engineer >> Deployment and Integration Specialist >> The Norcross Group >> www.NorcrossGroup.com Greg Freemyer Internet Engineer Deployment and Integration Specialist The Norcross Group www.NorcrossGroup.com
Please be more specific. What variables are your trying to read and how to do plan on using them? Joel On Tue, Jan 29, 2002 at 12:58:31PM -0600, Sanjiv Bawa wrote:> I want to be able to read environment variables to set smb.conf file. This > is so that I can set all parameters for the machine from a single file. > > Anyone who can give me a quick pointer? The smb.conf docs were very unclear > and I could not get it to work. >
Can you give us an example of WHAT environment variables you mean? Usually you create the smb.conf file one time, and it tends to not need editing that much (if ever). ...or were you referring to the logon script batch file that is executed at the windows client when they log on? (very different from the smb.conf file!) - john --On Tuesday, January 29, 2002 12:58 -0600 Sanjiv Bawa <sbawa@tabmaster.com> wrote:> I want to be able to read environment variables to set smb.conf file. This > is so that I can set all parameters for the machine from a single file. > > Anyone who can give me a quick pointer? The smb.conf docs were very > unclear and I could not get it to work. > > Thanks.
Sure. I want to set the DOMAIN for example from an evironment variable. Normally this makes no sense, but I have to setup multiple servers all with different domain names etc. and the domain name is used in a bunch of other places. Instead of changing a bunch of files, I would like to do it in one place. Ideally I would like to do DOMAIN = $DOM Thanks. -----Original Message----- From: samba-admin@lists.samba.org [mailto:samba-admin@lists.samba.org]On Behalf Of John Benedetto Sent: Tuesday, January 29, 2002 2:21 PM To: sbawa@tabmaster.com; samba@lists.samba.org Subject: Re: [Samba]smb.conf and Environment Variables Can you give us an example of WHAT environment variables you mean? Usually you create the smb.conf file one time, and it tends to not need editing that much (if ever). ...or were you referring to the logon script batch file that is executed at the windows client when they log on? (very different from the smb.conf file!) - john --On Tuesday, January 29, 2002 12:58 -0600 Sanjiv Bawa <sbawa@tabmaster.com> wrote:> I want to be able to read environment variables to set smb.conf file. This > is so that I can set all parameters for the machine from a single file. > > Anyone who can give me a quick pointer? The smb.conf docs were very > unclear and I could not get it to work. > > Thanks.-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba