Op 02-04-2026 om 11:20 schreef B?la Becker via samba:> On Wed, Apr 1, 2026 at 11:15?PM Marco Gaiarin via samba
> <samba at lists.samba.org> wrote:
>> I need to setup some ACL in some shares, with full windows ACL; i can
set it
>> with ICACLS from windows, but i still prefere to do so from Linux.
>>
>> There's some guideline/document/howto on 'samba-tool ntacl
set' (i suppose),
>> or there's other command (that i've not found) compatible with
icacls?
> On Linux you should use setfacl / getfacl. Unless your file server is
> TrueNAS, in that case you should use the GUI for manipulating the
> share ACL's.
>
Posix ACLs (getfacl / setfacl) are a subset of the Windows ACLs.
The best option is to use smbcacls, which comes with Samba. It is well
documented in its man-page.
It will set ACLs over SMB, so it uses the Samba logic to determine how
the ACLs actually land on the Linux side. Samba will store it in Posix
ACLs and, for the functionality not supported by Posix ACLs, in xattrs.
The xattrs are not visible on the Linux side (although you can see that
they exist with getfattr).
samba-tool ntacl set is another option, it uses the sddl format and does
not need SMB-share access.
- Kees.