samba - Aug 2002 - smaba 2.2.5 and acls on XFS

Hi

i have a question concerning the acl supoprt of samba, i have a mandrake9
(2.4.19) with a xfs partition installed
locally i can get and set acls on the xfs parition

snip

[root@aclsmb data]# getfacl samba/
# file: samba
# owner: root
# group: root
user::rwx
group::r-x
other::r-x

[root@aclsmb data]# setfacl -m u:smalchow:rwx samba/
[root@aclsmb data]# getfacl samba/
# file: samba
# owner: root
# group: root
user::rwx
user:smalchow:rwx
group::r-x
mask::rwx
other::r-x

[root@aclsmb data]#


but i can't modify acls from within the native windows security dialog.

the samba machine is joined to the domain and i am trying to authenticate via
winbind

this is the relevant smb.conf   

workgroup = CTS-IO
server string = Samba Server %v

security = domain
password server = *
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind separator = \
winbind use default domain = yes
template homedir = /home/%D/%U
 obey pam restrictions = yes

[data]
   comment = whatever
   path = /data/samba
   read only = no
   public = yes

#smb.conf end

# this is the /etc/pam.d/samba

auth            required        /lib/security/pam_securetty.so
auth            required        /lib/security/pam_nologin.so
auth            sufficient      /lib/security/pam_winbind.so
auth            required        /lib/security/pam_pwdb.so user_first_pass shadow
nullok
account         required        /lib/security/pam_winbind.so
session         required        /lib/security/pam_stack.so
service=system-auth-winbind
password        required        /lib/security/pam_stack.so
service=system-auth-winbind

Can anyone please give me a hint how to get ACLs running

Soeren




______________________________________________________________________________
Die clevere Geldreserve: der DiBa-Privatkredit. Funktioniert wie ein Dispo, 
ist aber viel gunstiger! Alle Infos: http://diba.web.de/?mc=021104

Do you know if the ./configure line had --with_acl_support set or not.

If this is from a rpm, maybe you can get a specfile for it and look in there.

FYI: I have ACLs working with a SuSE distribution, but it did NOT work in there
release, I had to get the source RPM and re-compile is with the appropriate
flags.  I also had to install the ACL related dependancies prior to the compile.


Greg Freemyer
Internet Engineer
Deployment and Integration Specialist
Compaq ASE - Tru64 v4, v5
Compaq Master ASE - SAN Architect
The Norcross Group
www.NorcrossGroup.com

 >>  Hi

 >>  i have a question concerning the acl supoprt of samba, i have a
mandrake9
 >>  (2.4.19) with a xfs partition installed
 >>  locally i can get and set acls on the xfs parition

 >>  snip

 >>  [root@aclsmb data]# getfacl samba/
 >>  # file: samba
 >>  # owner: root
 >>  # group: root
 >>  user::rwx
 >>  group::r-x
 >>  other::r-x

 >>  [root@aclsmb data]# setfacl -m u:smalchow:rwx samba/
 >>  [root@aclsmb data]# getfacl samba/
 >>  # file: samba
 >>  # owner: root
 >>  # group: root
 >>  user::rwx
 >>  user:smalchow:rwx
 >>  group::r-x
 >>  mask::rwx
 >>  other::r-x

 >>  [root@aclsmb data]#


 >>  but i can't modify acls from within the native windows security
dialog.

 >>  the samba machine is joined to the domain and i am trying to
authenticate
 >>  via winbind

 >>  this is the relevant smb.conf  =20

 >>  workgroup =3D CTS-IO
 >>  server string =3D Samba Server %v

 >>  security =3D domain
 >>  password server =3D *
 >>  encrypt passwords =3D yes
 >>  smb passwd file =3D /etc/samba/smbpasswd
 >>  winbind uid =3D 10000-20000
 >>  winbind gid =3D 10000-20000
 >>  winbind separator =3D \
 >>  winbind use default domain =3D yes
 >>  template homedir =3D /home/%D/%U
 >>  obey pam restrictions =3D yes

 >>  [data]
 >>  comment =3D whatever
 >>  path =3D /data/samba
 >>  read only =3D no
 >>  public =3D yes

 >>  #smb.conf end

 >>  # this is the /etc/pam.d/samba

 >>  auth            required        /lib/security/pam_securetty.so
 >>  auth            required        /lib/security/pam_nologin.so
 >>  auth            sufficient      /lib/security/pam_winbind.so
 >>  auth            required        /lib/security/pam_pwdb.so
user_first_pass
 >>  shadow nullok
 >>  account         required        /lib/security/pam_winbind.so
 >>  session         required        /lib/security/pam_stack.so
 >>  service=3Dsystem-auth-winbind
 >>  password        required        /lib/security/pam_stack.so
 >>  service=3Dsystem-auth-winbind

 >>  Can anyone please give me a hint how to get ACLs running

 >>  Soeren




 >> 
__________________________________________________________________________
 >>  ____
 >>  Die clevere Geldreserve: der DiBa-Privatkredit. Funktioniert wie ein
 >>  Dispo,=20
 >>  ist aber viel gunstiger! Alle Infos: http://diba.web.de/?mc=3D021104

 >>  --=20
 >>  To unsubscribe from this list go to the following URL and read the
 >>  instructions:  http://lists.samba.org/mailman/listinfo/samba