samba - Jan 2005 - Where are Windows file permissions stored and how to change them?

Hello there,

where are the Windows file permissions (i.e. ACL) stored when using Samba?

How can I change them from within Linux? Or is it only possible with the 
Windows file permissions dialogue?

Thanks
Florian

i think samba doen't "store" anything, just "translate"
it. you need a
filesystem with acl support, just like ext3, and of course, enable it,
you can test it with a simple mount command to see if you have acls
activated:
root@nortix~# mount
/dev/hda1 on / type ext3 (rw,acl,errors=remount-ro)
/dev/hda3 on /home type ext3 (rw,acl)


you can admin this permissions with something like g/setfacl or
maybe a frontend like http://pytk-fsacls.sourceforge.net/ 
then the task of samba is just translate it to NTFS acls. when you
right-click on a file shared with samba you'll se an advanced
permissions button on security tab.

hope this help.



On Tue, 11 Jan 2005 10:54:25 +0100
Florian Effenberger <floeff@arcor.de> wrote:
> Hello there,
> 
> where are the Windows file permissions (i.e. ACL) stored when using
Samba?
> 
> How can I change them from within Linux? Or is it only possible with
the 
> Windows file permissions dialogue?
> 
> Thanks
> Florian
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba

Florian,
> where are the Windows file permissions (i.e. ACL) stored when 
> using Samba?
The answer is "it depends"!

If you have a Linux filesystem that  can store ACLs - such as ext3 with the
appropriate kernel build option - and you have told Samba that it should use
it, then the permissions are stored in the ACL, and you can access them
using the appropriate Linux utilities.

If you haven't done the above, then Samba tries to map the permissions to
the standard Unix permissions, with obviously limited success in some cases.

Hope this helps,

Ruth

Florian Effenberger wrote:
> Hi there,
> 
>> well, im not really sure about what im going to say, but i think you
>> must add users to samba with smbpasswd or import them from an existing
>> users table.
>>
>> anyone else can give some light?
> 
> adding the users is not the problem. If I added them and then just cp 
> the profile, Windows complains about permission problems...
> 
> Florian
Have you tried cp -a (it saves owner and standard permissions, not sure 
about acls though)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 256 bytes
Desc: OpenPGP digital signature
Url :
http://lists.samba.org/archive/samba/attachments/20050111/a3cde690/signature.bin

Hi,
> Have you tried cp -a (it saves owner and standard permissions, not sure 
> about acls though)
no, have not tried that, but I have to change Unix permissions to the 
new user nontheless. Somewhere in the profile, maybe in the .DAT file 
itself, Windows stores the users SID, taht seems to be the problem.

Florian

Florian Effenberger wrote:
> Hi,
> 
>> Have you tried cp -a (it saves owner and standard permissions, not 
>> sure about acls though)
> 
> no, have not tried that, but I have to change Unix permissions to the 
> new user nontheless. Somewhere in the profile, maybe in the .DAT file 
> itself, Windows stores the users SID, taht seems to be the problem.
> 
> Florian
> 
If you have your drive mounted with acls, the owner is stored with the 
file, and samba will translate this. I have been able to chown files 
like so: chown DOMAIN+user file and it works. getfacl <filename> should 
list the owner and group, as well as any ACLs
Hope that helps.
H
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 256 bytes
Desc: OpenPGP digital signature
Url :
http://lists.samba.org/archive/samba/attachments/20050111/8cbb74c3/signature.bin

Hi,
> If you have your drive mounted with acls, the owner is stored with the 
> file, and samba will translate this. I have been able to chown files 
> like so: chown DOMAIN+user file and it works. getfacl <filename>
should
> list the owner and group, as well as any ACLs
I have no files mounted with acls. I will try again and see if I can 
reproduce the error. :-)

Florian