search for: aclmod

Hi list, while preparing for the changed ACL/mode_t mapping semantics coming with onnv-147 [1], I discovered that in onnv-134 on my system ACLs are not inherited when aclmode is set to passthrough for the filesystem. This very much puzzles me. Example: $ uname -a SunOS os 5.11 snv_134 i86pc i386 i86pc $ pwd /Volumes/ACLs/dir1 $ zfs list | grep /Volumes rpool/Volumes 7,00G 39,7G 6,84G /Volumes $ zfs get aclmode,aclinherit rpool/Volumes NAME PROPERT...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi! We are setting up a new file server on an OpenIndiana box (oi_148). The spool is run-in version 28, so the "aclmode" option is gone. The server has to serve files to Linux, OSX and windows. Because of the missing aclmode option, we are getting nuts with the file permissions. I read a whole lot about the problem and the pros and cons of the decision of dropping that option in zfs, but I absolutely read not...

...to create a new filesystem, for example for each user to give them a home directory. So far, so good. The homes should be under tank/export/home/staff and my intention is to restrict the ACL rights so only the user self can access his own home directory. I study the ZFS Admin Guide and found the aclmode and aclinherit options, IMHO for my intention the following configuration fits my wishes / needs. zfs set aclmode=discard tank/export/home/staff zfs set aclinherit=passthrough-x tank/export/home/staff Now i set the ACLs on these staff directory : /bin/chmod A=owner@:rwxp---A-W-Cos:-------:a...

...y rm: file not removed: Permission denied So far, so good. But then I can do this: % chmod A=owner@:full_set:allow file % ls -V file -rwx------+ 1 abalfour root 1474560 May 11 18:43 file owner@:rwxpdDaARWcCos:-------:allow % rm file % I''ve tried this with all the aclmode values on the filesystem, and it''s always the same behavior. Am I missing something? Does the owner always have the ability to change the ACL to whatever they want? Thanks, Drew -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mail.opensolaris....

On Sat, 11 Mar 2017 08:18:26 +0100 "Niels Dettenbach \(Syndicat IT & Internet\) via samba" <samba at lists.samba.org> wrote: > Am 11. März 2017 00:04:13 MEZ schrieb Andrew Walker via samba > <samba at lists.samba.org>: > >I don't believe that ZFS on FreeBSD supports acltype=posixacl and > >sa-based > > If you want to see a working samba / zfs

...create mask = 0770 directory mask = 02770 inherit permissions = Yes inherit acls = Yes map archive = No map readonly = permissions vfs objects = zfsacl nfs4:acedup = merge nfs4:mode = special The issue is in the ENS share. I also have the ZFS file system aclmode and aclinherit set to passthrough, see output of zfs get all: kame % zfs get all fsdata/admin/ENS NAME PROPERTY VALUE SOURCE fsdata/admin/ENS type filesystem - fsdata/admin/ENS creation Mon Mar 15 14:47 2010...

...eds > changing on your system. Ok thanks. I wasn't sure which of the listed directories was important. I ran samba-tool with debug 9 and I think the issue is where it tries to create the sysvol volume, so I've created a new ZFS file system there and applied the following two options: aclmode=passthrough aclinherit=passthrough

...default data/users setuid on default data/users readonly off default data/users zoned off default data/users snapdir hidden default data/users aclmode groupmask default data/users aclinherit secure default # zfs get atime data/users NAME PROPERTY VALUE SOURCE data/users atime on default Looks like a little bug?...

Do we have enormous fragmentation here on our X4500 with Solaris 10, ZFS Version 10? What except zfs send/receive can be done to free the fragmented space? One ZFS was used for some month to store some large disk images (each 50GByte large) which are copied there with rsync. This ZFS then reports 6.39TByte usage with zfs list and only 2TByte usage with du. The other ZFS was used for similar

...exec on default data/nfstest setuid on default data/nfstest readonly off default data/nfstest zoned off default data/nfstest snapdir hidden default data/nfstest aclmode groupmask default data/nfstest aclinherit secure default data/nfstest canmount on default data/nfstest shareiscsi off default data/nfstest xattr on default #share -...

...gt; fine, (see the zfs/acl stuff in my smb.conf from earlier), but > > samba-tool doesn't like them. Once provisioned they work really well. > > I can set them from FreeBSD using setfacl or from Windows just fine. > > I found this out, I also found you can use something called aclmode to > pass the acls through to the underlying filesystem, just have to get > around the provision error first. > > Yes you need to set the zfs properties aclmode and aclinherit to passthrough: [root at odin ~]# zfs get all zroot/jails | grep acl zroot/jails aclmode passth...

...am unable to create new GPOs, getting "invalid Parameter" response.Log files indicate ACL issues. Domain was provisioned with --use-ntvfs option.Filesystem is mounted with this options:zroot/ROOT/default on / (zfs, local, noatime, nfsv4acls) acl options on zfs are this:zroot/ROOT/default aclmode passthrough inherited from zrootzroot/ROOT/default aclinherit passthrough inherited from zroot samba-tool ntacl sysvolcheck returns errors: ERROR(<type 'exceptions.TypeError'>): uncaught exception - (87, 'Attribute not found') File "/usr/local/lib/python2.7/site...

...on default tank exec on default tank setuid off local tank readonly off default tank zoned off default tank snapdir hidden default tank aclmode groupmask default tank aclinherit secure default tank canmount on default tank shareiscsi off default tank xattr on default /etc/dfs/dfstab is empty /etc/dfs/sharetab:...

...on default tank exec on default tank setuid off local tank readonly off default tank zoned off default tank snapdir hidden default tank aclmode groupmask default tank aclinherit secure default tank canmount on default tank shareiscsi off default tank xattr on default /etc/dfs/dfstab is empty /etc/dfs/sharetab:...

A "good" acl manual. http://www.vanemery.com/Linux/ACL/linux-acl.html As i do prefeer the debian os, but i do really like the archlinux wiki. https://wiki.archlinux.org/index.php/Access_Control_Lists Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Frank Kahle > Verzonden: dinsdag 2 augustus 2016 13:55

Hi, S10U3: It seems, that ufs POSIX-ACLs are not properly translated to zfs ACL4 entries, when one xfers a directory tree from UFS to ZFS. Test case: Assuming one has an user A and B, both belonging to group G and having their umask set to 022: 1) On UFS - as user A do: mkdir /dir chmod 0775 /dir setfacl -m d:u::rwx,d:g::rwx,d:o:r-x,d:m:rwx /dir # samba would

...yone@:-wxp---A-W-Co-:------:deny everyone@:r-----a-R-c--s:------:allow The ACL now has three entries each for owner, group, and everyone. My original simple ACL has been turned into something unnecessarily complicated, and no longer meeting the standard for a Windows ACL. I tried setting aclmode to passthrough in the hopes that would prevent ACL munging, but no such luck. I also experimented with configuring an initial ACL on the home directory with defined inherited permissions for new files and subdirectories: owner@:rwxp---A-W-C--:-d----:allow owner@:rw-p---A-...

...em: samba share: [sharename] read only = No browseable = yes writeable = yes directory mask = 0770 create mask = 0770 delete readonly = Yes acl check permissions = False vfs objects = zfsacl nfs4:mode = special ZFS aclmode and aclinherit are both passthrough If userA creates a M$ word file on a directory with these ACLs (note: inheritance) ... drwxrwx---+ 2 userA group1 10 Nov 24 17:25 . owner@:rwxpdDaARWc--s:fd-----:allow group@:rwxpdDaARWc--s:fd-----:allow...

My Server is running 4.5.1 on Ubuntu 16.04, most of the shares are located on a zfs raid. Some of the added profiles are now getting corrputed and cannot login anymore due to some files in the profile share not being accessible After searching online I found two solutions: a) setting aclmode=passthrough, aclinherit=passthrough on the zfs volume b) using nt4 acl mode and the vfs_zfsacl module on samba when I added some code I found online last time I fucked up badly so I would like some input if what I found is correct or if using zfs would be a very bad idea from the beginning. My c...

...n Solaris can be edited from windows without the permission being changed. Files created from windows have the correct Solaris permissions, owner and group and can be edited without permissions being changed. We use the chmod command to set windows group permissions and Solaris permissions. The zfs aclmode and aclinherit are set to passthrough. [SambaServer] path = /sambashare read only = no create mask = 0660 force create mode = 0660 directory mask = 0770 force directory mode = 0770 inherit permissions= yes inherit acls = yes inherit owner = yes ea support = yes map archive = no map read only = pe...