On Fri, Mar 25, 2022 at 05:37:26PM -0500, Patrick Goetz via samba
wrote:>
>
>On 3/25/22 17:35, Jeremy Allison wrote:
>>On Fri, Mar 25, 2022 at 05:27:55PM -0500, Patrick Goetz via samba wrote:
>>>
>>>
>>>On 3/24/22 12:10, Jeremy Allison via samba wrote:
>>>>On Thu, Mar 24, 2022 at 10:07:16AM -0700, Greg Sloop
<gregs---
>>>>via samba wrote:
>>>>>What's the proper way to REMOVE all the ACL's
assigned by Windows to a
>>>>>Samba share/folders/files?
>>>>>
>>>>>The short story is I was having problems assigning ACL's
via
>>>>>the Windows
>>>>>security dialog. I managed to fix that, but now users that I
>>>>>assign rights
>>>>>to a file/folder simply don't have those rights, and I
can't
>>>>>figure out why.
>>>>>
>>>>>I want to make absolutely sure that all the previous
ACL's are
>>>>>gone so I'm
>>>>>sure I'm working with a clean setup. If I still have
issues,
>>>>>then at least
>>>>>I'm starting from a clean base, so working through the
troubleshooting
>>>>>steps might be easier.
>>>>
>>>>If you are storing Windows ACLs into EA's then recursively
>>>>remove system.NTACL from all files/directories. You'll
>>>>need to be root.
>>>>
>>>
>>>Sorry, this lost me completely.? What is system.NTACL?
>>
>>system.NTACL is the extended attribute smbd uses to
>>store the Windows ACL in ndr format.
>
>I figured this much, but am unsure about the syntax for doing this --
>could you provide an example, please?
The syntax for doing what ? smbd stores these values internally.
I think samba-tool can show them.