samba - Aug 2006 - Why can't I delete "Everyone" ACL entry on a Samba share?

Hi list,

Using Samba 3.0.22 on a Debian box.
Samba is using security = ADS and is a member server.

Winbind, kerberos works as expected.

BUT

If I look at the security tab in windows I always see the Everyone  
entry.
I think this is because the POSIX "other" entry in the FS on the  
debian box, correct?

Can I remove it? If so how?

Thanks,
Henrik

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Henrik Zagerholm wrote:
> If I look at the security tab in windows I always 
> see the Everyone entry. I think this is because the POSIX "other"
> entry in the FS on the debian box, correct?
> 
> Can I remove it? If so how?
Can't remove it.  That's by design.




cheers, jerry
====================================================================Samba       
------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE6iIIIR7qMdg1EfYRAsNNAKCV+o7U6wuMoAUy9u5IVdF4fyXtqwCgk1S0
D6SL3+HtBqV0R0ncHEmUYGs=Yz/T
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Robert Mortimer wrote:
>> Henrik Zagerholm wrote:
>>> If I look at the security tab in windows I always
>>> see the Everyone entry. I think this is because the POSIX
"other"
>>> entry in the FS on the debian box, correct?
>>>
>>> Can I remove it? If so how?
>> Can't remove it.  That's by design.
>>
>>
> But you can remove "Everyone's" rights!
Yup.  For the archives, you cannot remove Everyone because
it is part of the Unix permission set.




jerry


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE6yDbIR7qMdg1EfYRAkxnAKCw/l3EPIXYfoZOne33L2Y9laICCQCgh5bp
ix0a6pyun3bMu4W2RdNvHnI=4MJZ
-----END PGP SIGNATURE-----