Hello,
I am interested in moving an Windows 2000 fileserver's files
over to a Debian 2.2 server running Samba 2.2.2.
I have ACL support compiled into kernel 2.2.20, and with winbindd
running I can attach ACLs attached to usernames from the PDC, which
works great.
However, if I copy a folder from the 2000 server to the Samba server,
the ACLs seem to be reset, is a network file copy supposed to preserve ACLs
in 2000? If so, does this work/not work with Samba currently?
I searched the archives but didn't see any direct hits. Feel free
to point me back there if this has been discussed. I'll attach my
[global] config too; I have seen some example configs that don't use
"nt acl support = yes" with winbindd as I currently am, but 2000
does not seem to show the "Security" tab in the properties for a file
or folder if I do not have this option.
Thanks!
-- begin smb.conf --
[global]
workgroup = WORKGROUP
netbios name = DEV
netbios aliases = fileserver
bind interfaces only = yes
interfaces = 10.0.0.1/24 10.0.0.2/24
encrypt passwords = Yes
hosts allow = All
log level = 2
domain master = false
preferred master = false
local master = No
security = domain
password server = PDC
add user script = /usr/local/samba/bin/add_user %u
nt acl support = yes
winbind separator = +
winbind cache time = 10
template shell = /bin/bash
template homedir = /home/%D/%U
winbind uid = 10000-20000
winbind gid = 10000-20000
domain admin group = rhelmer
root = administrator
-- end smb.conf --
Copying to an NT server doesn't preserve them either, as I recall. Network copies just don't preserve ACLs...the file gets the default ACL for the folder it's going into. If you find a good way to do this kind of migration while keeping the ACLs intact you'll make a lot of people very happy. ;) -----Original Message----- From: Rob Helmer [mailto:robert@namodn.com] Sent: Monday, January 14, 2002 6:53 PM To: samba@lists.samba.org Subject: winbindd and copying NT files/ACLs However, if I copy a folder from the 2000 server to the Samba server, the ACLs seem to be reset, is a network file copy supposed to preserve ACLs in 2000? If so, does this work/not work with Samba currently?
David Brodbeck <DavidB@mail.interclean.com> wrote:> From: David Brodbeck <DavidB@mail.interclean.com> > To: 'Rob Helmer' <robert@namodn.com>, samba@lists.samba.org > Subject: RE: winbindd and copying NT files/ACLs > Date: Tue, 15 Jan 2002 08:51:51 -0500 > > Copying to an NT server doesn't preserve them either, as I recall. > Network copies just don't preserve ACLs...the file gets the default > ACL for the folder it's going into. If you find a good way to do this > kind of migration while keeping the ACLs intact you'll make a lot of > people very happy. ;)Have you checked "scopy" - last I heard it was part of the NT Resource Kit. I have used it many times to copy files with full preservation of the ACE/ACL info. One warning though - this command will not create the empty directories, so you need to use xcopy32 to copy the tree of directories, and then use "scopy" to copy the files and their ACLs. Perhaps someone else on this list could validate this info - it dates back to NT4 and NT4 ResourcesKit SP2. Please will someone who has the current Win2K Resource Kit confirm if scopy is still in there? PS: We aim to make everyone happy. ;) Cheers, John T. -- John H Terpstra Email: jht@samba.org