Displaying 20 results from an estimated 53 matches for "aclinherit".
2008 May 29
17
SMC Webconsole 3.1 and ZFS Administration 1.0 - stacktraces in snv_b89
...the culprit? I tried setting it to JDL 1.5.0_15 and web-module zfs refused to start and register itself...
===
Application Error
com.iplanet.jato.NavigationException: Exception encountered during forward
Root cause = [java.lang.IllegalArgumentException: No enum const class com.sun.zfs.common.model.AclInheritProperty$AclInherit.restricted]
Notes for application developers:
* To prevent users from seeing this error message, override the onUncaughtException() method in the module servlet and take action specific to the application
* To see a stack trace from this error, see the source for this pa...
2009 Jun 22
2
Creating ZFS filesystem with inherited ACLs ?
...new filesystem, for example for each user to give them a home directory.
So far, so good. The homes should be under tank/export/home/staff and my intention is to restrict the ACL rights so only the user self can access his own home directory.
I study the ZFS Admin Guide and found the aclmode and aclinherit options, IMHO for my intention the following configuration fits my wishes / needs.
zfs set aclmode=discard tank/export/home/staff
zfs set aclinherit=passthrough-x tank/export/home/staff
Now i set the ACLs on these staff directory :
/bin/chmod A=owner@:rwxp---A-W-Cos:-------:allow /export/hom...
2008 Mar 19
2
aclinherit property changes fast track
Here is a draft of the fast track to allow ZFS to inherit mode
permission via owner@, group@ and everyone@
-Mark
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: aclinherit.fasttrack
URL: <http://mail.opensolaris.org/pipermail/zfs-discuss/attachments/20080319/42e8ace7/attachment.ksh>
2010 Oct 23
2
No ACL inheritance with aclmode=passthrough in onnv-134
...on my system ACLs are
not inherited when aclmode is set to passthrough for the filesystem.
This very much puzzles me. Example:
$ uname -a
SunOS os 5.11 snv_134 i86pc i386 i86pc
$ pwd
/Volumes/ACLs/dir1
$ zfs list | grep /Volumes
rpool/Volumes 7,00G 39,7G 6,84G /Volumes
$ zfs get aclmode,aclinherit rpool/Volumes
NAME PROPERTY VALUE SOURCE
rpool/Volumes aclmode passthrough local
rpool/Volumes aclinherit passthrough local
$ ls -dlV .
drwxr-xr-x+ 3 ldapadmin ldapgroup2 3 Okt 23 13:19 .
group:ldapgroup1:rwxp--aARWc---:fdi----:allow
group:lda...
2017 Feb 16
2
(DeviceIoControl, FSCTL_SET_SPARSE)
Hi Rowland,
I see this in the ZFS props, if that’s related, you might be referring to something in ext3 that im not aware of at the moment.
pool/myshare aclinherit restricted default
pool/myshare acltype off default
So, if you heard that I was going to use ext3, that was only as a solution, and that over ext4 due personal preference, since I made a mi...
2020 Mar 16
4
Problems with ACLs
On 16/03/2020 01:55, Marcio Demetrio Bacci via samba wrote:
> Hi,
>
> I think the error is in converting the POSIx ACl, but I don't know how to
> fix this.
You posted:
My two DC are Samba4 (migrated of the Windows 2008 Server) and my
current File Servers are Windows 2008 Server.
Yet, you have a Unix domain member: netbios name = SRV-FILESERVER
Is this the machine that you
2014 Mar 12
2
zfs permissions
...file,
use_ntvfs=use_ntvfs)
File "/usr/lib64/python2.6/site-packages/samba/ntacls.py", line 154, in
setntacl
smbd.set_nt_acl(file, security.SECINFO_OWNER | security.SECINFO_GROUP |
security.SECINFO_DACL | security.SECINFO_SACL, sd)
I cannot see where I am going wrong. I have zfs set
aclinheritance=passthrough-x, tried xattr on/off/sa/dir ...
Perhaps this belongs on the zfs list but would appreciate any feedback if
there are folk out there who have encountered this / not encountered this.
Thank you
2010 Oct 01
1
File permissions getting destroyed with M$ software on ZFS
...k = 0770
directory mask = 02770
inherit permissions = Yes
inherit acls = Yes
map archive = No
map readonly = permissions
vfs objects = zfsacl
nfs4:acedup = merge
nfs4:mode = special
The issue is in the ENS share. I also have the ZFS file system aclmode
and aclinherit set to passthrough, see output of zfs get all:
kame % zfs get all fsdata/admin/ENS
NAME PROPERTY VALUE SOURCE
fsdata/admin/ENS type filesystem -
fsdata/admin/ENS creation Mon Mar 15 14:47 2010 -
fsdata/admin/EN...
2016 Jan 15
1
problems with initial install, simple server config
...your system.
Ok thanks. I wasn't sure which of the listed directories was important.
I ran samba-tool with debug 9 and I think the issue is where it tries to
create the sysvol volume, so I've created a new ZFS file system there
and applied the following two options:
aclmode=passthrough
aclinherit=passthrough
2009 Jan 06
2
POSIX permission bits, ACEs, and inheritance confusion
...test system with Solaris 10u6 and I am somewhat confused as to how ACE inheritance works. I''ve read through http://opensolaris.org/os/community/zfs/docs/zfsadmin.pdf but it doesn''t seem to cover what I am experiencing.
The ZFS file system that I am working on has both aclmode and aclinherit set to passthrough, which I thought would result in the ACEs being just that - passed through without modification.
In my test scenario, I am creating a folder, removing all ACEs and adding a single full access allow ACE with file and directory inheritance for one user:
> mkdir test
> chmod...
2017 Mar 06
2
samba on ZFS
...1:54:24 -0800
> brian lamb via samba <samba at lists.samba.org> wrote:
>
>> Hi Rowland,
>>
>> I see this in the ZFS props, if that’s related, you might be
>> referring to something in ext3 that im not aware of at the moment.
>>
>> pool/myshare aclinherit restricted default
>> pool/myshare acltype off default
>
> Samba provides a link between Samba and ZFS, see here for the manpage:
>
> https://fossies.org/linux/samba/docs/manpages/vfs_zfsacl.8
I am running Samba on ZFS without vfs_zfsacl, b...
2006 Nov 20
1
Temporary mount Properties, small bug?
...default
data/users readonly off default
data/users zoned off default
data/users snapdir hidden default
data/users aclmode groupmask default
data/users aclinherit secure default
# zfs get atime data/users
NAME PROPERTY VALUE SOURCE
data/users atime on default
Looks like a little bug?
I didn''t try it on a real disk.
Regards,
Gerrit
This mess...
2010 Mar 04
8
Huge difference in reporting disk usage via du and zfs list. Fragmentation?
Do we have enormous fragmentation here on our X4500 with Solaris 10, ZFS Version 10?
What except zfs send/receive can be done to free the fragmented space?
One ZFS was used for some month to store some large disk images (each 50GByte large) which are copied there with rsync. This ZFS then reports 6.39TByte usage with zfs list and only 2TByte usage with du.
The other ZFS was used for similar
2008 Jun 05
2
ZFS NFS cannot write
...setuid on default
data/nfstest readonly off default
data/nfstest zoned off default
data/nfstest snapdir hidden default
data/nfstest aclmode groupmask default
data/nfstest aclinherit secure default
data/nfstest canmount on default
data/nfstest shareiscsi off default
data/nfstest xattr on default
#share
- /data/nfstest rw ""
------------client
#mo...
2016 Feb 25
1
Can't create gpo with samba4.3 on FreeBSD and ZFS
...uot; response.Log files indicate ACL issues. Domain was provisioned with --use-ntvfs option.Filesystem is mounted with this options:zroot/ROOT/default on / (zfs, local, noatime, nfsv4acls)
acl options on zfs are this:zroot/ROOT/default aclmode passthrough inherited from zrootzroot/ROOT/default aclinherit passthrough inherited from zroot
samba-tool ntacl sysvolcheck returns errors:
ERROR(<type 'exceptions.TypeError'>): uncaught exception - (87, 'Attribute not found') File "/usr/local/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run retu...
2018 Sep 12
2
Cannot set Windows ACL security permissions Ubuntu 18.04 LXD privileged container
...DC = Samba 4.3.11 on Ubuntu 16.04 LTS inside a LXD privileged container
on the same host as above.
Second AD DC = Samba 4.7.6-Ubuntu on Ubuntu 18.04 inside a privileged
container on same host.
The underlying file system is zfs-on-linux and in all cases I set the
following zfs attributes:
xattrs=sa
aclinherit=passthrough
acltype=posix
A member server fs3 w/Samba 4.7.6-Ubuntu also privileged on the same host.
All workstations on the network are successfully joined to AD.
Windows OS = 10 1803, But RSAT is 17xx b/c the RSAT 1803 doesn't have the
DNS tools. so I had to downgrade.
All containers are &q...
2011 Jun 30
1
cross platform (freebsd) zfs pool replication
...users setuid on default
remotepool/users readonly off default
remotepool/users jailed off default
remotepool/users snapdir hidden received
remotepool/users aclinherit passthrough received
remotepool/users canmount on default
remotepool/users xattr off temporary
remotepool/users copies 1 default
remotepool/users version...
2008 Jul 15
1
Cannot share RW, "Permission Denied" with sharenfs in ZFS
...on default
tank setuid off local
tank readonly off default
tank zoned off default
tank snapdir hidden default
tank aclmode groupmask default
tank aclinherit secure default
tank canmount on default
tank shareiscsi off default
tank xattr on default
/etc/dfs/dfstab is empty
/etc/dfs/sharetab:
/tank - nfs rw
Now, when I try to mou...
2008 Jul 15
2
Cannot share RW, "Permission Denied" with sharenfs in ZFS
...on default
tank setuid off local
tank readonly off default
tank zoned off default
tank snapdir hidden default
tank aclmode groupmask default
tank aclinherit secure default
tank canmount on default
tank shareiscsi off default
tank xattr on default
/etc/dfs/dfstab is empty
/etc/dfs/sharetab:
/tank - nfs rw
Now, when I try to mou...
2008 Nov 24
1
No write permission if POSIX bits 0 on ZFS written by M$ Office - dos_mode returning r
...hare:
[sharename]
read only = No
browseable = yes
writeable = yes
directory mask = 0770
create mask = 0770
delete readonly = Yes
acl check permissions = False
vfs objects = zfsacl
nfs4:mode = special
ZFS aclmode and aclinherit are both passthrough
If userA creates a M$ word file on a directory with these ACLs (note:
inheritance) ...
drwxrwx---+ 2 userA group1 10 Nov 24 17:25 .
owner@:rwxpdDaARWc--s:fd-----:allow
group@:rwxpdDaARWc--s:fd-----:allow
group:group2...