On 2009-10-19 23:04, Jeremy Allison wrote:> On Sat, Oct 17, 2009 at 12:40:10AM +0200, Peter Rindfuss wrote:
>> Hi,
>>
>> It seems that at some point "map acl inherit = yes" stopped
working for
>> me. I now have Samba 3.4.2, but this problem started with an earlier
>> version, possibly some 3.2.x or 3.3.x. No SAMBA_PAI extended attributes
>> are created anymore, but existing ones are still honored.
>>
>> OS is Suse 11.0, file system is XFS.
>>
>> What could be wrong?
>
> Not sure, can you log a bug and upload logs please ?
>
Hi Jeremy,
I will file a bug, if necessary, but perhaps my further investigations
can help.
My statement "no SAMBA_PAI extended attributes are created anymore" is
wrong, I apologize. But it is interesting what really happens to SAMBA_PAI:
I looked at an old existing folder:
Windows security tab shows that rights are inherited from the folder
above. SAMBA_PAI is
0x010003000300009a7500000151c3000002ffffffff009a7500000151c3000002ffffffff
When I remove and (try to) set inheritance again, SAMBA_PAI becomes
0x02048d0300030000009a750000000151c300000302ffffffff0b009a7500000b0151c300000302ffffffff
and inheritance is gone, same as if SAMBA_PAI were not there at all.
When I manually set SAMBA_PAI to the first value, inherited rights are
back there again.
One more interesting observation:
The acl_xattr VFS module seems to work fine with respect to inheritance
(on a test share). BTW, the SAMBA_PAI created with acl_xattr looks
similar to the non-working one above.
Cheers, Peter