samba - Oct 2002 - NT Security tab changes

Do I need to patch ACL support into the Linux kernel just to allow users 
to change permissions on files hosted on the Samba 2.2.5 server? All I 
really need is to allow users to set read/write/execute on files. Right 
now, I don't have an ACL-patched kernel installed on the server.

My users can see the security tab when they check the preferences on 
Samba-hosted files, but they can't change anything, even if they own the 
file. If the check or un-check a box, it just reverts back as soon as 
they click the Apply button. If I change the file perms using chmod at 
the server console, logged in as the user in question, it works fine...

All users have Windows 2000 Pro (not sure what SP). Samba is 
authenticating to OpenLDAP, and I'm using nss_ldap. Here's the relevant 
section of smb.conf:

[global]
         ldap server = localhost
         ldap port = 389
         ldap suffix = "o=internet"
         ldap admin dn = "cn=Manager,o=internet"
         ldap ssl = no
	workgroup = IS
	netbios name = THOR
	server string = Thor File Server
	security = server
	dos filemode = yes
	encrypt passwords = Yes
	log file = /var/log/samba/%m.log
	max log size = 0
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
	dns proxy = No

[private]
	comment = Private File Storage
	path = /usr/local/fileshare/home
	read only = No

-- 
Jules Agee
System Administrator
Pacific Coast Feather Co.
julesa@pcf.com      x284

Jules Agee wrote:
> 
> Do I need to patch ACL support into the Linux kernel just to allow users
	Yes, you do.

Jules Agee wrote:
> 
> Do I need to patch ACL support into the Linux kernel just to allow users
> to change permissions on files hosted on the Samba 2.2.5 server? All I
> really need is to allow users to set read/write/execute on files. Right
> now, I don't have an ACL-patched kernel installed on the server.
This stuff should work.  We have to translate the permissions back into
posix rwx, but as long as the changes fit that, and the user can do it
at the console, then it *should* work...

You might want to try Samba 3.0, see if it's any better there.  This may
well be a bug.  (Not that I'm particularly in a position to chase it
down, unfortunetly)

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net

On Thu, Oct 03, 2002 at 05:30:07PM -0700, Jules Agee
wrote:
> Do I need to patch ACL support into the Linux kernel just to allow users 
> to change permissions on files hosted on the Samba 2.2.5 server? All I 
> really need is to allow users to set read/write/execute on files. Right 
> now, I don't have an ACL-patched kernel installed on the server.
No you don't. So long as the users are only changing the u/g/w 
permissions Samba should reflect these onto the standard UNIX
permissions.

Jeremy.