samba - May 2007 - Smbcacls syntax questions (Samba-3.0.25rc2)

Hello list,

I'm testing out smbcacls to handle acls on a linux samba server with  
ext3 filesystem(acls enabled).

1. How can I change the rights mask with smbcacls? I.e mask:r-- ?

2. How can I change the permissions for an ACL to none?

  /usr/local/samba/bin/smbcacls //192.168.100.1/testshare janalb- 
owner -U backupuser%backupuser1 -M 'ACL:SF\backupuser:ALLOWED/0/'
ACE 'SF\backupuser:ALLOWED/0/': missing / at '0'


I ask this because I need to be able to reset the permissions to a  
specific state if something goes wrong.

The original permissions are shown as followed with getfacl janalb-owner

# file: janalb-owner
# owner: janalb
# group: sf
user::rwx
user:backupuser:rwx     #effective:---
group::r--      #effective:---
mask::---
other::---


Smbcacls returns the following when run against the same file.

REVISION:1
OWNER:SF\janalb
GROUP:SF\sf
ACL:SF\janalb:ALLOWED/0/FULL
ACL:SF\backupuser:ALLOWED/0/
ACL:SF\sf:ALLOWED/0/
ACL:\Everyone:ALLOWED/0/

As you can see backupuser, group sf and group everyone doesn't have  
any effective permissions due to the mask.

Is it possible using smbcacls to create the acls shown above on a  
newly created file? So far I'm having troubles with the mask permission.

Regards,
Henrik