On Mon, 21 Aug 2023 22:18:22 +0200 Joachim Lindenberg via samba <samba at lists.samba.org> wrote:> Hello Rowland, > If someone wants full_audit, will adding 'vfs objects = full_audit' > on a DC also have dfs_samba4 and acl_xattr enabled just because > running on a DC, or would this cause both defaults to be turned off? > Thanks, Joachim > >On a DC both the standard vfs objects will definitely be turned off if you set 'vfs objects = full_audit' anywhere. If you set that option in a share on a Unix domain member, it will override any 'vfs objects' set in global. Rowland
>On a DC both the standard vfs objects will definitely be turned off if you set 'vfs objects = full_audit' anywhere. If you set that option in a share on a Unix domain member, it will >override any 'vfs objects' set in global. > >RowlandIs this documented anywhere on the wiki? If not, what would be an appropriate location and title? There are already pages with specific information on vfs modules, but none contains that configuration pitfall: https://wiki.samba.org/index.php/Using_the_xattr_tdb_VFS_Module https://wiki.samba.org/index.php/Using_the_acl_xattr_VFS_Module https://wiki.samba.org/index.php/Using_the_streams_xattr_VFS_Module https://wiki.samba.org/index.php/Using_the_xattr_tdb_VFS_Module https://wiki.samba.org/index.php/NFS4_ACL_overview https://wiki.samba.org/index.php/Using_the_worm_VFS_Module Joachim