On Sun, Feb 27, 2022 at 06:52:11PM +0000, Jochen Korge || PCSM GmbH via samba wrote:>Hi, >I found some mismatch between the Wiki and my system: > >https://www.samba.org/samba/docs/current/man-html/vfs_acl_xattr.8.html >states, that >acl_xattr:ignore system acls = yes >Enforces: >create mask = 0666 >directory mask = 0777 > >Via Samba created directories and files do have: >File: 0764 >Directory: 0775 >Though. > >Is this some "specialty" of vfs_ceph or a bug or "only" an Documentation issue? >Do those permissions have any influence on Windows-Clients?Quick question, in your smb.conf, do you have: obey pam restrictions = yes set ?
Jochen Korge || PCSM GmbH
2022-Feb-28 18:18 UTC
[Samba] strange umasks with vfs_ceph backend
Hi,
it is not set and defaults to NO
testparm -vs | grep obey
Load smb config files from /etc/samba/smb.conf
Loaded services file OK.
Weak crypto is allowed
Server role: ROLE_DOMAIN_MEMBER
obey pam restrictions = No
Cheers Jochen
Mit freundlichen Gr??en / best regards,
Jochen Korge
Mobil +49 711 28695277
PCSM GmbH
Crailsheimerstrasse 15, 70435, Stuttgart
Tel. +49 711 230 44 96
Fax +49 711 230 44 97
Gesch?ftsf?hrer: Thomas Martin | Sitz der Gesellschaft: Stuttgart
Amtsgericht Stuttgart HRB-Nr.: 733394 / USt.-Idnr.: DE815181359
-----Urspr?ngliche Nachricht-----
Von: Jeremy Allison <jra at samba.org>
Gesendet: Montag, 28. Februar 2022 18:52
An: Jochen Korge || PCSM GmbH <Jochen.Korge at pcsm.de>
Cc: samba at lists.samba.org
Betreff: Re: [Samba] strange umasks with vfs_ceph backend
On Sun, Feb 27, 2022 at 06:52:11PM +0000, Jochen Korge || PCSM GmbH via samba
wrote:>Hi,
>I found some mismatch between the Wiki and my system:
>
>https://www.samba.org/samba/docs/current/man-html/vfs_acl_xattr.8.html
>states, that
>acl_xattr:ignore system acls = yes
>Enforces:
>create mask = 0666
>directory mask = 0777
>
>Via Samba created directories and files do have:
>File: 0764
>Directory: 0775
>Though.
>
>Is this some "specialty" of vfs_ceph or a bug or "only"
an Documentation issue?
>Do those permissions have any influence on Windows-Clients?
Quick question, in your smb.conf, do you have:
obey pam restrictions = yes
set ?
On Mon, Feb 28, 2022 at 06:18:43PM +0000, Jochen Korge || PCSM GmbH via samba wrote:>Hi, >it is not set and defaults to NO > >testparm -vs | grep obey >Load smb config files from /etc/samba/smb.conf >Loaded services file OK. >Weak crypto is allowed >Server role: ROLE_DOMAIN_MEMBER > > obey pam restrictions = No > >Cheers JochenHmmm, in that case (I was thinking the mask may have gotten set wrong) you'll have to debug level 10 and look at a single file creation to see what is going on.