samba - Oct 2003 - Not sure if ACL support compiled in

Hi all,
I'm running Samba-3.0.0-2 on an RedHat 8 box.
I compiled it on my own with cups and acl support (and some things, too).
My clients are Win2k and WinXP.
The fileserver has a XFS filesystem with ACL support.
I created a test-share:

[test]
        comment = Test
        path = /xfspart/test
        read only = no
        inherit acls = yes

When i create a file from my WinXP Client it works great
And Windows shows me (under Security Tab) that my user has full permissions,
My group and other have read permissions.
When i try to add another user (mi) with read perm i get an "access
denied"
error.

Adding this user from the cli with setfacl works fine.
(see output of getfacl)

[root@host test]# getfacl test.txt
# file: test.txt
# owner: thmuelle
# group: Dom"nen-Benutzer
user::rwx
user:mi:rwx
group::r--
mask::rwx
other::r--

But my winXP shows me (in security tab) not this new user mi!

Did i miss something during compiletime?

Here's my output from ldd:

[root@host test]# ldd `which smbd`
        libgssapi_krb5.so.2 => /usr/kerberos/lib/libgssapi_krb5.so.2
(0x40017000)
        libkrb5.so.3 => /usr/kerberos/lib/libkrb5.so.3 (0x4002b000)
        libk5crypto.so.3 => /usr/kerberos/lib/libk5crypto.so.3 (0x40088000)
        libcom_err.so.3 => /usr/kerberos/lib/libcom_err.so.3 (0x40098000)
        libcrypto.so.2 => /lib/libcrypto.so.2 (0x4009a000)
        liblber.so.2 => /usr/lib/liblber.so.2 (0x4016e000)
        libldap.so.2 => /usr/lib/libldap.so.2 (0x40179000)
        libcups.so.2 => /usr/lib/libcups.so.2 (0x401a4000)
        libssl.so.2 => /lib/libssl.so.2 (0x401be000)
        libnsl.so.1 => /lib/libnsl.so.1 (0x401ee000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0x40203000)
        libpam.so.0 => /lib/libpam.so.0 (0x40230000)
        libresolv.so.2 => /lib/libresolv.so.2 (0x40238000)
        libdl.so.2 => /lib/libdl.so.2 (0x4024b000)
        libpopt.so.0 => /usr/lib/libpopt.so.0 (0x4024e000)
        libc.so.6 => /lib/i686/libc.so.6 (0x42000000)
        libsasl.so.7 => /usr/lib/libsasl.so.7 (0x40256000)
        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
        libgdbm.so.2 => /usr/lib/libgdbm.so.2 (0x40261000)

Would be great if anybody might give me a tip?
Can I fix it, without recompile something?

Regards
Thorsten

M?ller, Thorsten wrote:

> But my winXP shows me (in security tab) not this new user mi!
> 
> Did i miss something during compiletime?
seems like you didn'y use --with-acl switch
> 
> Here's my output from ldd:
> 
> [root@host test]# ldd `which smbd`
>         libgssapi_krb5.so.2 => /usr/kerberos/lib/libgssapi_krb5.so.2
> (0x40017000)
>         libkrb5.so.3 => /usr/kerberos/lib/libkrb5.so.3 (0x4002b000)
>         libk5crypto.so.3 => /usr/kerberos/lib/libk5crypto.so.3
(0x40088000)
>         libcom_err.so.3 => /usr/kerberos/lib/libcom_err.so.3
(0x40098000)
>         libcrypto.so.2 => /lib/libcrypto.so.2 (0x4009a000)
>         liblber.so.2 => /usr/lib/liblber.so.2 (0x4016e000)
>         libldap.so.2 => /usr/lib/libldap.so.2 (0x40179000)
>         libcups.so.2 => /usr/lib/libcups.so.2 (0x401a4000)
>         libssl.so.2 => /lib/libssl.so.2 (0x401be000)
>         libnsl.so.1 => /lib/libnsl.so.1 (0x401ee000)
>         libcrypt.so.1 => /lib/libcrypt.so.1 (0x40203000)
>         libpam.so.0 => /lib/libpam.so.0 (0x40230000)
>         libresolv.so.2 => /lib/libresolv.so.2 (0x40238000)
>         libdl.so.2 => /lib/libdl.so.2 (0x4024b000)
>         libpopt.so.0 => /usr/lib/libpopt.so.0 (0x4024e000)
>         libc.so.6 => /lib/i686/libc.so.6 (0x42000000)
>         libsasl.so.7 => /usr/lib/libsasl.so.7 (0x40256000)
>         /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
>         libgdbm.so.2 => /usr/lib/libgdbm.so.2 (0x40261000)
> 
Under 2.2.8a I have these links to libs
        	libacl.so.1 => /lib/libacl.so.1
	libattr.so.1 => /lib/libattr.so.1

These two make Samba to support Posix ACLs . As I told its in v. 2.2.8a, 
but I believe its same in 3.0.x version as well.

> Would be great if anybody might give me a tip?
> Can I fix it, without recompile something?
no
> 
> Regards
> Thorsten
Dan