zfs discuss - Oct 2009 - 2009.06 cifs/acl/windows-sid weirdness

I''m not sure if this is a bug or something. I tried researching but
have
come up dry due to hard to come up with right keywords. Anyway, we have been
using OSOL 2008.11 as a file server just fine using instructions very
similar to this
http://blog.scottlowe.org/2006/08/15/solaris-10-and-active-directory-integration/
  that has been working great.
Recently we have been trying to set up some 2009.06 file servers. Everything
goes fine. except when I view acl''s from a windows machine it
doesn''t show
the user or groups but instead the sid''s (windows security identifier).
So
if you were trying to see who had what permissions from a windows machine
you would have no idea. I should say if you do a /bin/ls -V from the osol
box you can see user/groups.
 on 2008.11 this whole thing works fine and I can see the users and group
names.

Has anyone else encountered this or does anyone have any thoughts?

-- 
HUGE

David Stahl
Sr. Systems Administrator
718 233 9164
www.hugeinc.com <http://www.hugeinc.com>



-- 
HUGE

David Stahl
Sr. Systems Administrator
718 233 9164
www.hugeinc.com <http://www.hugeinc.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://mail.opensolaris.org/pipermail/zfs-discuss/attachments/20091010/0e7b13ef/attachment.html>

2009/10/11 HUGE | David Stahl <dstahl at hugeinc.com>
> I''m not sure if this is a bug or something. I tried researching
but have
> come up dry due to hard to come up with right keywords. Anyway, we have
> been using OSOL 2008.11 as a file server just fine using instructions very
> similar to this
>
>
http://blog.scottlowe.org/2006/08/15/solaris-10-and-active-directory-integration/
>   that has been working great.
> Recently we have been trying to set up some 2009.06 file servers.
> Everything goes fine. except when I view acl''s from a windows
machine it
> doesn''t show the user or groups but instead the sid''s
(windows security
> identifier). So if you were trying to see who had what permissions from a
> windows machine you would have no idea. I should say if you do a /bin/ls -V
> from the osol box you can see user/groups.
>  on 2008.11 this whole thing works fine and I can see the users and group
> names.
>
Same happened to me when I had groups in Solaris ACLS, that were not added
to CIFS with "smbadm create <groupname>". After "smbadm
create <groupname>"
Windows ACL''s started to show names instead of SID''s.
>
> Has anyone else encountered this or does anyone have any thoughts?
>
> --
> HUGE
>
> David Stahl
> Sr. Systems Administrator
> 718 233 9164
> www.hugeinc.com <http://www.hugeinc.com>
>
>
>
> --
> HUGE
>
> David Stahl
> Sr. Systems Administrator
> 718 233 9164
> www.hugeinc.com <http://www.hugeinc.com>
>
> _______________________________________________
> zfs-discuss mailing list
> zfs-discuss at opensolaris.org
> http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://mail.opensolaris.org/pipermail/zfs-discuss/attachments/20091015/1e7aa4a1/attachment.html>