samba - Aug 2023 - ...or howto change vfs_acl_xattr options inplace without changing access rights

Sebastian Neustein wrote:
> I have to migrate our data from one old samba server to a new one. Due 
> to various reasons we had to change some settings. Now I struggle to 
> get the acls right.
> ?Previously the acls were stored via posix and extended attributes, 
> now they are stored only in extended attributes

With the default settings of vfs_acl_xattr samba takes posix acls into 
account when delivering data - how can I activate
"acl_xattr:ignore system acls = yes"
without loosing the information saved in posix acls? Background: our 
future file system won't be able to support acls.

Is there a way to migrate all acl information from the posix acls into 
the extended attributes? I have an inkling that I read at some stage, 
that vfs_acl_xattr deletes/overwrites the extended attributes once the 
posix acls are changed. Is there a way to trigger that on cli?

The idea is to change these settings on the old server before copying 
the data to the new server. I hope to be able to use rsync for the 
migration then.

Thanks you for any help with this!
Sebastian

On 8/18/23 09:55, Sebastian Neustein via samba wrote:
> With the default settings of vfs_acl_xattr samba takes posix acls into 
> account when delivering data - how can I activate
> "acl_xattr:ignore system acls = yes"
> without loosing the information saved in posix acls? Background: our 
> future file system won't be able to support acls.
Sorry, but this is confusing? Why don't you want to loose POSIX ACLs 
when the new filesystem doesn't support them anyway?

I would basically rsync, preserving xattrs, and set POSIX filesystem 
permissions to 0777/0666. vfs_acl_xattr will be serving NT ACLs from the 
migrated xattrs, ignoring filesystem permissions given that 
"acl_xattr:ignore system acls = yes" is set.

-slow

-- 
Meet us at Storage Developer Conference (SDC)
On 18th to 21st September 2023 in Fremont, CA
More information at https://samba.plus/events

Meet us at the conference storage2day 2023!
26th & 27th September, in Frankfurt am Main
Event on Storage Networks & Data Management
Find more info at https://samba.plus/events

Ralph Boehme, Samba Team                      https://samba.org/
SerNet Samba Team Lead                     https://sernet.de/en/
SAMBA+ Samba packages                        https://samba.plus/
SAMBA+ Webinar                 https://samba.plus/samba-webinars

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20230821/28bd3d06/OpenPGP_signature.sig>