samba - May 2007 - altered ACLs do not apply on existing subdirectories

Hello,

My samba 3.0.24 works fine on AIX 5.3. I'm using AD domain.  
Windows users can add new user permissions to files and folders and they are
inherited for all NEW files and subfolders created in the future.

But, changing permission on the security tab to a folder does not
alter the EXISTING files/sub-folders like it does on a real windows
network drive.
Here are my current settings:

        security = ADS

        auth methods = winbind

        username map = /etc/samba/smbusers

        syslog = 0

        log file = /var/lOG/samba/%m.log

        max log size = 150

        name resolve order = hosts

        client signing = Yes

        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

        load printers = No

        show add printer wizard = No

        local master = No

        dns proxy = No

        ldap ssl = no

        idmap uid = 100000-200000

        idmap gid = 100000-200000

        template shell = /bin/bash

        winbind separator = +

        winbind cache time = 0

        winbind enum users = Yes

        winbind enum groups = Yes

        winbind use default domain = Yes

        acl compatibility = auto

        acl check permissions = Yes

        acl group control = No

        acl map full control = Yes

        inherit permissions = Yes

        inherit acls = No

        profile acls = No

        map acl inherit = Yes

        store dos attributes = Yes



[samba]

        comment = SAMBA

        path = /samba/smbdata

        valid users = "@MYDOMAIN+domain users"

        read only = No

        inherit permissions = Yes

        inherit acls = Yes

        dos filemode = Yes



Thanks

Ruda

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Rudolf Chytil wrote:
> Hello,
> 
> My samba 3.0.24 works fine on AIX 5.3
Does AIX have file system support for extended attributes ?
You'll need this to get 'map acl inherit = yes' to work.




jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGVFneIR7qMdg1EfYRAiNoAKDBwFwHywrmvuU1U09xb9li6xrXZwCg5I5U
LLTd1EZ53GGTV4+Im/7aznQ=xYfd
-----END PGP SIGNATURE-----