samba - Feb 2006 - Too Many Ace Entries for file

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings,

I am encountering a problem with Samba and setting acl's for
files/directories from the security dialog on my Windows clients. I
can easily toggle the file permissions. However, it am not able to
add/remove user/groups from the GUI interface on my windows clients. I
have also noticed when I add access with setfacl it doesn't not show
up in the security dialog.

I did notice when perusing the source code (posix_acl's.x) that it is
running a check here:

~ if (ace_count != 3) {
~                DEBUG(3,("convert_canon_ace_to_posix_perms: Too many
ACE entries for file %s to convert to \
posix perms.\n", fsp->fsp_name ));
~                return False;
~        }

I did attempt to bump it up but it just stopped erroring out :) ( Duh
liz!) still didnt work.. Any ideas?


- ----------Data----
# file: testfile
# owner: xxx if (ace_count != 3) {
# group: domain\040users
user::rwx
user:bin:rwx
user:lisa:r--
group::r--
mask::rwx
other::rw-




getfacl output:

Samba version:
Version 3.0.21b

mount output:
/dev/md0 on /home type ext3 (rw,acl)

uname:
2.6.12-10-686 #1 Mon Jan 16 17:58:04 UTC 2006 i686 GNU/Linux

Message from  client Log:
convert_canon_ace_to_posix_perms: Too many ACE entries for file
test1234 to convert to posix perms.

Directory Listing:
- -rw-rwxr--+ 1 root root               0 Feb 16 10:53 testfile

ldd output for smbd:
~ linux-gate.so.1 =>  (0xffffe000)
~        libcups.so.2 => /usr/lib/libcups.so.2 (0xb7f86000)
~        libssl.so.4 => /lib/libssl.so.4 (0xb7f52000)
~        libcrypto.so.4 => /lib/libcrypto.so.4 (0xb7e69000)
~        libnsl.so.1 => /lib/libnsl.so.1 (0xb7e53000)
~        libcrypt.so.1 => /lib/libcrypt.so.1 (0xb7e25000)
~        libpam.so.0 => /lib/libpam.so.0 (0xb7e1d000)
~        libattr.so.1 => /lib/libattr.so.1 (0xb7e18000)
~        libacl.so.1 => /lib/libacl.so.1 (0xb7e12000)
~        libresolv.so.2 => /lib/libresolv.so.2 (0xb7dff000)
~        libdl.so.2 => /lib/libdl.so.2 (0xb7dfb000)
~        libpopt.so.0 => /usr/lib/libpopt.so.0 (0xb7df3000)
~        libc.so.6 => /lib/tls/libc.so.6 (0xb7cc9000)
~        libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0xb7cb4000)
~        libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0xb7c4f000)
~        libcom_err.so.2 => /lib/libcom_err.so.2 (0xb7c4c000)
~        libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0xb7c2b000)
~        libz.so.1 => /usr/lib/libz.so.1 (0xb7c1b000)
~        libaudit.so.0 => /lib/libaudit.so.0 (0xb7c0d000)
~        /lib/ld-linux.so.2 (0x00577000)

smb.conf:
I  have nt acl support = yes in the share definitions.

- ---end data---
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFD9NT9lt/irWun80cRAgRUAJ9iEnOcVh2QDFixl/OdNFpoIRo6xQCeKo+k
vEE8IZ+rpefwYWc5Ehej7m4=NwES
-----END PGP SIGNATURE-----

On Thu, Feb 16, 2006 at 11:40:08AM -0800, liz wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Greetings,
> 
> I am encountering a problem with Samba and setting acl's for
> files/directories from the security dialog on my Windows clients. I
> can easily toggle the file permissions. However, it am not able to
> add/remove user/groups from the GUI interface on my windows clients. I
> have also noticed when I add access with setfacl it doesn't not show
> up in the security dialog.
> 
> I did notice when perusing the source code (posix_acl's.x) that it is
> running a check here:
> 
> ~ if (ace_count != 3) {
> ~                DEBUG(3,("convert_canon_ace_to_posix_perms: Too many
> ACE entries for file %s to convert to \
> posix perms.\n", fsp->fsp_name ));
> ~                return False;
> ~        }
> 
> I did attempt to bump it up but it just stopped erroring out :) ( Duh
> liz!) still didnt work.. Any ideas?
Looks like your Samba hasn't been compiled or isn't detecting ACL
support.

That code is only executed when ACL detection on the filesystem
fails.

Jeremy.