search for: ace_flag

Maybe I'm doing somthing really stupid, but while copying some windows share onto a samba server, on some random subdirectory robocopy says ERROR 87 (0x00000057) Copying NTFS Security to Destination Directory... The samba logfile has lots of these lines. modules/vfs_posixacl.c:349(smb_acl_to_posix) smb_acl_to_posix: ACL is invalid for set (Das Argument ist ung?ltig) The strange thing is

..._nt_acl: called for file withoutgroupperm [2010/10/29 16:51:22, 10] smbd/posix_acls.c:2519(canonicalise_acl) canonicalise_acl: Access ace entries before arrange : [2010/10/29 16:51:22, 10] smbd/posix_acls.c:2532(canonicalise_acl) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x [2010/10/29 16:51:22, 10] smbd/posix_acls.c:2532(canonicalise_acl) canon_ace index 1. Type = allow SID = S-1-22-2-495 gid 495 (apache) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x [2010/10/29 16:51:22, 10] smbd/posix_acls.c:2532(canonicalise_acl) canon_ace index 2. Type = allow...

...o. > > > >Just sayin' :-) :-). > > > > No, it's not. Apologies. > > http://www.cv.nrao.edu/~jmalone/sambalog.txt Looking at that log I see: posix_get_nt_acl: called for file . canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x So it's the top-level directory of the share /data/test that is root.root...

...stead. acls log: ===== [2011/01/27 16:16:53.079114, 10] smbd/posix_acls.c:2605(canonicalise_acl) canonicalise_acl: Default ace entries before arrange : [2011/01/27 16:16:53.079128, 10] smbd/posix_acls.c:2618(canonicalise_acl) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- [2011/01/27 16:16:53.079144, 10] smbd/posix_acls.c:2618(canonicalise_acl) canon_ace index 1. Type = allow SID = S-1-2-0 gid 1004 (COMPANY) SMB_ACL_GROUP ace_flags = 0x0 perms rwx <= HERE APPEARS [2011/01/27 16:16:53.079164, 10] smbd/posix_acls.c:261...

...> canonicalise_acl: Access ace entries before arrange : > [2016/11/14 11:32:30.009831, 10, pid=9336, effective(2310, 2049), > real(2310, 0), class=acls] ../source3/smbd/posix_a > cls.c:2737(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER > ace_flags = 0x0 perms r-- > [2016/11/14 11:32:30.009858, 10, pid=9336, effective(2310, 2049), > real(2310, 0), class=acls] ../source3/smbd/posix_a > cls.c:2737(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-9006 gid 9006 > (cvweb) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms...

Hello! I have samba share on my sshfs-mounted folder. All works just fine except I can't delete files from sshfs unless they are in 0777 chmodded directory. Even if that files were putted trough smbclient. I can read files, write files (regardless their directory permissions) but not delete them. Here is my share config: [myshare] comment = shre over sshfs path = /home/kli/work/remotes/dev

...had issues like > these with Samba before. The token is the list of uids/gids (or SIDs in Windows terms) that this smbd is using to represent the user right now. > However, I see this bit: > > > canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) > SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) > SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER > ace_flags = 0x0 perms r-x Looks like a perm set of rwxr-xr-x on the file to me, with...

...t_acl: called for file test [2012/05/10 14:24:33.711404, 10] smbd/posix_acls.c:2537(canonicalise_acl) canonicalise_acl: Access ace entries before arrange : [2012/05/10 14:24:33.711447, 10] smbd/posix_acls.c:2550(canonicalise_acl) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x [2012/05/10 14:24:33.711496, 10] smbd/posix_acls.c:2550(canonicalise_acl) canon_ace index 1. Type = allow SID = S-1-22-2-512 gid 512 (Domain Admins) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x [2012/05/10 14:24:33.713525, 10] smbd/posix_acls.c:2550(canonicalise_acl) canon_ace i...

Hello, Really stumped on this issue. I have samba 4.4.7 running on a new server. Users cannot write to files to which they have write permissions via group. Example: Here's the local filesystem on the samba server. I'm logged in as jmalone : jmalone at canis; cd /home/www.nrao.edu/content/logs/ : jmalone at canis; ls -l total 4 -rw-rw-r-- 1 jmalone nraoweb 0 Nov 10 10:02

....c:2724(canonicalise_acl) canonicalise_acl: Access ace entries before arrange : [2016/11/14 11:32:30.009831, 10, pid=9336, effective(2310, 2049), real(2310, 0), class=acls] ../source3/smbd/posix_a cls.c:2737(canonicalise_acl) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-- [2016/11/14 11:32:30.009858, 10, pid=9336, effective(2310, 2049), real(2310, 0), class=acls] ../source3/smbd/posix_a cls.c:2737(canonicalise_acl) canon_ace index 1. Type = allow SID = S-1-22-2-9006 gid 9006 (cvweb) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms rw- [2016/11/14 11:32:...

...s ACL support enabled, and ACL support works find if we export the share from the local EXT4 filesystem. When trying to add a user ACL from Windows, we get ACCESS_DENIED error, with the following log entries: (set_canon_ace_list) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms rwx [2012/07/03 17:19:29.724227, 10] smbd/posix_acls.c:2757(set_canon_ace_list) canon_ace index 1. Type = allow SID = S-1-5-18 gid 10021 (10021) SMB_ACL_GROUP ace_flags = 0x0 perms rwx [2012/07/03 17:19:29.724417, 10] smbd/posix_acls.c:2757(set_canon_ace_list) canon_ace index 2. Ty...

...sure what the "token" is that I'm looking for. Again - sorry for my lack of familiarity with the internals here. I've *never* had issues like these with Samba before. However, I see this bit: canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x My interpretation of this is that samba things that the file GID is 0 and...

...remy Allison wrote: > > The token is the list of uids/gids (or SIDs in Windows terms) > that this smbd is using to represent the user right now. Okay - that makes sense. Thank you. >> >> canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) >> SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >> canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) >> SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x >> canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER >> ace_flags = 0x0 perms r-x > > Looks like a perm set of rwxr-xr-x...

...On Wed, Nov 16, 2016 at 03:25:24PM -0500, Josh Malone wrote: >> >> http://www.cv.nrao.edu/~jmalone/sambalog.txt > > Looking at that log I see: > > posix_get_nt_acl: called for file . > > canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x > > So it's the top-level directory of the share > /data/...

On Wed, Nov 16, 2016 at 03:12:06PM -0500, Josh Malone via samba wrote: > On 11/16/16 2:32 PM, Jeremy Allison via samba wrote: > >> > >>But the file is not root:root - it's owned by uid 12477 and group > >>9006. Why is Samba getting the wrong owner/group for this file? > > > >That is the core of your problem. What does the full debug level 10 >

...ve no user with this uid in the domain. I don't understand why I have a fpt group, there is no fpt group in the domain.   When I activated the log acl:10 in smb.conf I saw this line :   canon_ace index 2. Type = allow SID = S-1-5-21-175208659-1627204559-885930912-7022 gid 67022 SMB_ACL_GROUP ace_flags = 0x0 perms r-x canon_ace index 5. Type = allow SID = S-1-5-21-175208659-1627204559-885930912-7022 uid 67022 SMB_ACL_USER ace_flags = 0x3 perms r-x   Its seems samba didn't do difference between users and groups when he sets acl right on the directory.

...e token is the list of uids/gids (or SIDs in Windows terms) > >that this smbd is using to represent the user right now. > > Okay - that makes sense. Thank you. > > >> > >> canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) > >>SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > >> canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) > >>SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > >> canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER > >>ace_flags = 0x0 perms r-x > > > >Looks lik...

Hello, I have a question because POSIX ACL with SMB2 max protocol does not work properly.Did you test VFS xattr acls with SMB2 max protocol? Is it working corectly? Best regards/Adrian Berlin --

I'm running Samba 3.4.7 on Ubuntu 10.04. This is a recent upgrade and we've starting experience a sporadic problem after this upgrade. When users are browsing through Windows Explorer they sometimes run across folders that appear as unassociated files. This requires the user to click the 'Refresh' button in Windows Explorer to properly see the folders. The files and folders are

...no fpt group in > the domain. Are you running an ftp server on the computer ? > >   > When I activated the log acl:10 in smb.conf I saw this line : > >   > canon_ace index 2. Type = allow SID = > S-1-5-21-175208659-1627204559-885930912-7022 gid 67022 SMB_ACL_GROUP > ace_flags = 0x0 perms r-x > > canon_ace index 5. Type = allow SID = > S-1-5-21-175208659-1627204559-885930912-7022 uid 67022 SMB_ACL_USER > ace_flags = 0x3 perms r-x Oh look, there is RID '7022', for some reason, something that looks like a printer appears to be a user and group at th...