samba - Jan 2006 - ACL set up yet Security Properties not sticking.

Hi,

On a windows client if I attempt to modify the permissions on a file which
resides on a linux server,  when I hit "apply or ok" my changes are
lost.

Doing it from the unix cli (using setfacl) works as expected and the
changes are not lost.

Yet on windows if I right click - properties - Security.  select add,  add
a user or group,  hit Apply and the user/group I just added is removed.

ACL support is properly configured as far as I am aware on the linux file
server.

any one  with any idea as to what I should look at,  that would be great,
thanks!

It has been a bummer modifying all the permission change requests by hand.



=====================================================samba is built with ACL
support:
smbd -b |grep ACL
   HAVE_SYS_ACL_H
   HAVE_POSIX_ACLS
=====================================================Kernel has ACL support
built in as does the file system:
CONFIG_NFS_ACL=y
CONFIG_NFSD_ACL=y
CONFIG_NFS_ACL_SUPPORT=y
CONFIG_REISERFS_FS_POSIX_ACL=y
CONFIG_FS_POSIX_ACL=y
=====================================================mount returns:
/dev/mapper/VG01-LV01 on /export/exec type reiserfs (rw,acl,user_xattr)
======================================================if I modify a files ACL
from the command line (local to the server) the
changes stick and are viewable on the windows client:
exec:/export/exec/foobar # getfacl complight.jpg
# file: complight.jpg
# owner: greg
# group: users
user::rw-
group::r-x
group:systems_smb:r-x
mask::rwx
other::---

exec:/export/exec/foobar # setfacl -m user:john:rwx complight.jpg
exec:/export/exec/foobar # getfacl complight.jpg
# file: complight.jpg
# owner: greg
# group: users
user::rw-
user:john:rwx
group::r-x
group:systems_smb:r-x
mask::rwx
other::---
======================================================
The domain is controled by a samba pdc server running version 3.0.8,  all
linux samba servers run in DOMAIN mode.

I'll be glad to provide further information if required.

greg@fqdn.com wrote:
> Hi,
> 
> On a windows client if I attempt to modify the permissions on a file which
> resides on a linux server,  when I hit "apply or ok" my changes
are lost.
> 
> Doing it from the unix cli (using setfacl) works as expected and the
> changes are not lost.
> 
> Yet on windows if I right click - properties - Security.  select add,  add
> a user or group,  hit Apply and the user/group I just added is removed.
> 
> ACL support is properly configured as far as I am aware on the linux file
> server.
> 
> any one  with any idea as to what I should look at,  that would be great,
> thanks!
> 
> It has been a bummer modifying all the permission change requests by hand.
What version of kernel are you using?

There is a patch to 2.4.x kernel tree here:
http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git;a=commitdiff;h=5739b33aeee122d6096f93afdf5c8ea8f7e8e094;hp=e8e0b7c821da4287c8ca837190c7f34588df76e2

This could be the problem.

James Kosin

Its actualy a 2.6 kernel James,  but thanks for the quick reply.

Have a great day,
greg

Linux exec 2.6.5-7.191-default #1 Tue Jun 28 14:58:56 UTC 2005 i686 i686
i386 GNU/Linux

=================================





> greg@fqdn.com wrote:
>> Hi,
>>
>> On a windows client if I attempt to modify the permissions on a file
>> which
>> resides on a linux server,  when I hit "apply or ok" my
changes are
>> lost.
>>
>> Doing it from the unix cli (using setfacl) works as expected and the
>> changes are not lost.
>>
>> Yet on windows if I right click - properties - Security.  select add,
>> add
>> a user or group,  hit Apply and the user/group I just added is removed.
>>
>> ACL support is properly configured as far as I am aware on the linux
>> file
>> server.
>>
>> any one  with any idea as to what I should look at,  that would be
>> great,
>> thanks!
>>
>> It has been a bummer modifying all the permission change requests by
>> hand.
>
> What version of kernel are you using?
>
> There is a patch to 2.4.x kernel tree here:
>
http://www.kernel.org/git/?p=linux/kernel/git/marcelo/linux-2.4.git;a=commitdiff;h=5739b33aeee122d6096f93afdf5c8ea8f7e8e094;hp=e8e0b7c821da4287c8ca837190c7f34588df76e2
>
> This could be the problem.
>
> James Kosin
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>

greg@fqdn.com wrote:
> Its actualy a 2.6 kernel James,  but thanks for the quick reply.
> 
> Have a great day,
> greg
> 
> Linux exec 2.6.5-7.191-default #1 Tue Jun 28 14:58:56 UTC 2005 i686 i686
> i386 GNU/Linux
> 
> =================================
Greg,

The same patch applies to the 2.6.x kernel tree.

http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=ac34dd052400b1e63aa8e711a13c0670943296fd;hp=a12dea7af93ae83bd868c0dc09367090ead7cc1e

James Kosin