samba - Mar 2005 - a request for a doc to get acl's working....

dear people,



   I've searched for hours, and I really can't seem to find *THE*
   solution.



   Is there a document somewhere that outlines how to get acl editing to
   work from windows?



   getfacl and setfacl all work, I can change whatever I want from the
   command line when I'm root. Using xfs, samba3.0.11 with ldap, and in
   my ldap is administrator. (because I thought that with 3.0.11 root is
   not needed anymore, because of the new privileges options)



   I ALWAYS get access denied when I try to change an acl. There must be
   a setting somewhere that I miss...



   My own account is in domain administrators group. I would like to be
   able to change acl's on my shares using my own account.



   Does anyone have a list of requirements, or a document describing how
   to realise this?



   I'm would be very grateful for ANY insight!



   Mourik Jan

On Monday 14 March 2005 11:22, mourik jan c heupink
wrote:
>    dear people,
>
>
>
>    I've searched for hours, and I really can't seem to find *THE*
>    solution.
>
When you find it (or write it) please send it to me for inclusion in the 
HOWTO.
>
>
>    Is there a document somewhere that outlines how to get acl editing to
>    work from windows?
>
Not specifically.
>
>
>    getfacl and setfacl all work, I can change whatever I want from the
>    command line when I'm root. Using xfs, samba3.0.11 with ldap, and in
>    my ldap is administrator. (because I thought that with 3.0.11 root is
>    not needed anymore, because of the new privileges options)
>
How have you set the new privileges? What worked/failed?

The 'root' account is no longer needed just to add machine accounts but
it has
not been superceded altogether.
>
>
>    I ALWAYS get access denied when I try to change an acl. There must be
>    a setting somewhere that I miss...
>
Obviously, but you have not explained precisely what you have done and that 
means we need to guess your actions and what failed. A bit of a tall order if 
that is correct. :)
>
>
>    My own account is in domain administrators group. I would like to be
>    able to change acl's on my shares using my own account.
>
Did you set all the privileges as documented in the new chapter in the 
Samba-HOWTO-Collection (Chapter 13) - see: 
http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf

An example of application of the privileges is given in section 6.6.4 in the 
Samba-Guide. See: www.samba.org/samba/docs/Samba-Guide.pdf
>
>
>    Does anyone have a list of requirements, or a document describing how
>    to realise this?
>
Yes! I do. I'd like to see you offer updates to the existing documentation
and
avoid (like the plague) creation of yet another howto (YAH!).
>
>
>    I'm would be very grateful for ANY insight!
>
>
>
>    Mourik Jan

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.