samba - Sep 2002 - XFS-ACL-Samba: Trouble adding acls

Hi,

I recently tried to use ACLs with samba. XFS is running, I can set ACLs 
using setfacl and read them with getfacl, no problem so far. Samba 
compiled fine with '--with-acl-support'.

Now I set up a share with 'nt acl support = yes', put there a file and 
added an acl with 'setfacl':

root@edjo[ACLTEST]# getfacl datei.txt 
# file: datei.txt
# owner: odenbach
# group: root
user::rwx
user:dirkn:rwx
group::---
mask::rwx
other::---

> Are you changing them as user with root permissions (admin user) ?
Nope, but as owner ( = ordinary user odenbach). I supposed this should 
work?

Christopher

Christopher Odenbach wrote:
> 
> > Are you changing them as user with root permissions (admin user) ?
> 
> Nope, but as owner ( = ordinary user odenbach). I supposed this should
> work?

	Not necessarily...
	Try root (or equivalent) user and see if it works.

Hi,
> > > Are you changing them as user with root permissions (admin user)
> > > ?
> >
> > Nope, but as owner ( = ordinary user odenbach). I supposed this
> > should work?
>
> 	Not necessarily...
> 	Try root (or equivalent) user and see if it works.
Just tried a root account - same result.

A funny thing is: The ACLs I set manually with setfacl are shown as

EDJO\odenbach

(edjo is the samba server).

When I add a user to the ACL, the user is displayed as

HNIRB\axel

(hnirb is the domain name)

until I press ok - then the entry just disappears.

Any ideas?

Christopher

Hi,
> Are you running winbindd? I don't think you can set ACL's for
> domain users unless you are. The domain user will not exist
> on the samba server so the ACL will be discarded. Personally
> I think we need to output some error at least to the log file
> but that is another issue.
No, I have no winbindd running, and I don't want to. Why would I need 
it? The username on the windows domain and on unix are the same. 
Couldn't Samba try to resolv the Domain name and when this fails try to 
strip the domain part and just take the unix name?

Christopher
>
> Christopher Odenbach wrote:
> > Hi,
> >
> > > > > Are you changing them as user with root permissions
(admin
> > > > > user) ?
> > > >
> > > > Nope, but as owner ( = ordinary user odenbach). I supposed
this
> > > > should work?
> > >
> > >       Not necessarily...
> > >       Try root (or equivalent) user and see if it works.
> >
> > Just tried a root account - same result.
> >
> > A funny thing is: The ACLs I set manually with setfacl are shown as
> >
> > EDJO\odenbach
> >
> > (edjo is the samba server).
> >
> > When I add a user to the ACL, the user is displayed as
> >
> > HNIRB\axel
> >
> > (hnirb is the domain name)
> >
> > until I press ok - then the entry just disappears.
> >
> > Any ideas?
> >
> > Christopher
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
=====================================================    Dipl.-Ing. Christopher
Odenbach
    HNI Rechnerbetrieb
    odenbach@uni-paderborn.de
    Tel.: +49 5251 60 6215
======================================================