samba - Mar 2020 - Problems with ACLs

On 16/03/2020 01:55, Marcio Demetrio Bacci via samba
wrote:
> Hi,
>
> I think the error is in converting the POSIx ACl, but I don't know how
to
> fix this.
You posted:

My two DC are Samba4 (migrated of the Windows 2008 Server) and my 
current File Servers are Windows 2008 Server.

Yet, you have a Unix domain member: netbios name = SRV-FILESERVER

Is this the machine that you cannot set the permissions on ?

If so, what is the filesystem ?

Are the acl & xattr packages installed ?

Rowland

Hi,
>Is this the machine that you cannot set the permissions on ?
Yes.
>If so, what is the filesystem ?
Ext4 for SO and Ext4 for shared files, but I have created a pool ZFS on
this last filesystem (/dev/vdb1).

Dispositivo Inicializar In?cio      Fim  Setores Tamanho Id Tipo
/dev/vda1   *             2048 62912511 62910464     30G 83 Linux

Disco /dev/vdb: 5 TiB, 5497568624640 bytes, 10737438720 setores
Unidades: setor de 1 * 512 = 512 bytes
Tamanho de setor (l?gico/f?sico): 512 bytes / 512 bytes
Tamanho E/S (m?nimo/?timo): 512 bytes / 512 bytes
Tipo de r?tulo do disco: gpt
Identificador do disco: CCDF5294-6E78-644F-954E-40F97DCE25FC

Dispositivo      In?cio         Fim     Setores Tamanho Tipo
/dev/vdb1          2048 10737420287 10737418240      5T Solaris /usr &
Apple ZFS
/dev/vdb9   10737420288 10737436671       16384      8M Solaris reservado 1

Are the acl & xattr packages installed ?
Yes to acl and attr. No to xattr.
Now, I installed xattr, but don't work.

Regards,

M?rcio Bacci

Em seg., 16 de mar. de 2020 ?s 06:05, Rowland penny via samba <
samba at lists.samba.org> escreveu:
> On 16/03/2020 01:55, Marcio Demetrio Bacci via samba wrote:
> > Hi,
> >
> > I think the error is in converting the POSIx ACl, but I don't know
how to
> > fix this.
>
> You posted:
>
> My two DC are Samba4 (migrated of the Windows 2008 Server) and my
> current File Servers are Windows 2008 Server.
>
> Yet, you have a Unix domain member: netbios name = SRV-FILESERVER
>
> Is this the machine that you cannot set the permissions on ?
>
> If so, what is the filesystem ?
>
> Are the acl & xattr packages installed ?
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On 16/03/2020 13:50, Marcio Demetrio Bacci wrote:
> Hi,
>
> >Is this the machine that you cannot set the permissions on ?
> Yes.
>
> >If so, what is the filesystem ?
> Ext4 for SO and Ext4 for shared files, but I have created a pool ZFS 
> on this last filesystem (/dev/vdb1).
>
If zfs is involved in any way, you will have problems, zfs uses 
nfs4acls, you could try adding 'nfs4acl_xattr' to the 'vfs
objects' line.

Rowland

I have a few ZFS pools on samba file servers, over CentOS 6.x and 7.x. Windows
ACLs are working perfectly. The ZFS filesystems were created with, among others,
the following options:

zfs create -o aclinherit=passthrough -o acltype=posixacl -o -o xattr=sa

> I have a few ZFS pools on samba file servers, over CentOS 6.x and 7.x.
Windows ACLs are
> working perfectly. The ZFS filesystems were created with, among others, 
the following options:
> zfs create -o aclinherit=passthrough -o acltype=posixacl -o -o xattr=sa
Which then gives:

zfs get all zpool1/zfs1 | grep -i 'acl\|attr'

zpool1/zfs1  aclinherit            passthrough            local
zpool1/zfs1  xattr                 sa                     local
zpool1/zfs1  acltype               posixacl               local