search for: getcifsacl

Hi When I mount CIFS share (mount -t cids) with vers=1.0 I can perform getcifsacl sucessfully. But when I mount with vers=2.0, or 2.1, or 3.0, ACL reading fails. getxattr error: 95 REVISION:0x0 CONTROL:0x0 Why getcifsacl depends on SMB protocol version? Can I read ACL via newer SMB protocol? A asked on Serverfault but without reply: https://serverfault.com/questions/948052/...

On Wed, 23 Jan 2019 09:47:11 +0100 Miloslav Hůla via samba <samba at lists.samba.org> wrote: > Dne 2019-01-15 v 13:22 Miloslav Hůla via samba napsal(a): > > When I mount CIFS share (mount -t cids) with vers=1.0 I can perform > > getcifsacl sucessfully. But when I mount with vers=2.0, or 2.1, or > > 3.0, ACL reading fails. > > > > getxattr error: 95 > > REVISION:0x0 > > CONTROL:0x0 > > > > Why getcifsacl depends on SMB protocol version? Can I read ACL via > > newer SMB protocol? > &...

...2019 at 09:03:41AM -0800, Jeremy Allison via samba wrote: > > Check out the latest cifsfs code. I think Steve > and Aurelian and Ronnie added an ioctl for this. > > I'm here at Vault in Boston with Steve, I'll ask > him :-). Steve says there are two utilities in Linux, getcifsacl and setcifsacl that use a custom ioctl inside the Linux cifsfs kernel client to get/set SMB acls.

...hlighted changes: - smb3 alias/fstype is added - smb2-quota tool is added to display quota information - smb2-secdesc UI tool to view security descriptors is added - smbinfo is enhanced with capabilities to dump session keys and get/set compression of files - smbinfo bash completion is supported - getcifsacl tool is improved to support multiple files webpage: https://wiki.samba.org/index.php/LinuxCIFS_utils tarball: https://download.samba.org/pub/linux-cifs/cifs-utils/ git: git://git.samba.org/cifs-utils.git gitweb: http://git.samba.org/?p=cifs-utils.git;a=summary Detailed list of changes since 6.9 w...

...ids from 10000 to 20000 for domain users idmap uid = 10000-20000 # use gids from 10000 to 20000 for domain groups idmap gid = 10000-20000 # allow enumeration of winbind users and groups winbind enum users = yes winbind enum groups = yes winbind use default domain = yes cifstest6:/tmp # date;/tmp/getcifsacl /mnt/smb_c/Makefile Mon Nov 8 11:03:43 CST 2010 Revision: 0x1 Type: 0x9404 Owner: BUILTIN\Administrators Group: CIFSTESTDOM\Domain Users ACE: CIFSTESTDOM\Administrator: Allowed/ 0x0/ 0x1700a1 ACE: BUILTIN\Performance Log Users: Allowed/ 0x0/ CHANGE ACE: CIFSTESTDOM\stevef: Allowed/ 0x0/ FULL cifs...

Dear Jeremy, thanks for your instant reply. :-) Along with Linux native getfacl/fetfacl, I also tested getcifsacl/setcifsacl (for sure thoroughly ;-)). Unfortunately, these CIFS client tools seem to have been designed as part of the "old" CIFS Unix Extensions, working only for SMB/CIFS mounts, and are not supposed to work with SMB2/SMB3 mounts, as I guess. During my tests, the getcifsacl utility fa...

...S: Samba 4.5.16-Debian Capability: 0x8080f3fd SMB session status: 1 TCP status: 1 Local Users To Server: 1 SecMode: 0x3 Req On Wire: 0 Shares: 1) \\sambaserver\share Mounts: 1 Type: NTFS DevInfo: 0x20 Attributes: 0x1006f PathComponentMax: 255 Status: 1 type: DISK MIDs: clienthost:~# getcifsacl /media/testmount/einstieg.txt REVISION:0x1 CONTROL:0x9004 OWNER:S-1-5-21-3646497173-276132624-1362955480-290786 GROUP:S-1-22-2-100 ACL:S-1-5-21-3646497173-276132624-1362955480-290786:ALLOWED/0x0/RW ACL:S-1-22-2-100:ALLOWED/0x0/RW ACL:S-1-1-0:ALLOWED/0x0/ clienthost:~# umount /media/testmount cl...

...untu:~# When the server is running 2:4.7.6+dfsg~ubuntu-0ubuntu2, it works: root at ubuntu:~# mktemp /mnt/test.XXXXXX /mnt/test.yGv3JP root at ubuntu:~# echo hello > /mnt/test.yGv3JP root at ubuntu:~# l /mnt/test.yGv3JP -rw-------+ 1 nobody nogroup 6 Jun 25 17:41 /mnt/test.yGv3JP The output of getcifsacl is quite different in both cases: # 4.7.6 server: root at ubuntu:~# getcifsacl /mnt/test.yGv3JP REVISION:0x1 CONTROL:0x9004 OWNER:S-1-5-21-3096988004-4058363749-2517819802-501 GROUP:S-1-22-2-65534 ACL:S-1-5-21-3096988004-4058363749-2517819802-501:ALLOWED/0x0/RW ACL:S-1-22-2-65534:ALLOWED/0x0/ ACL:...

...evious versions) 49eb190 smbinfo: missing help for fsctl-getobjid 2244e10 cifs.upcall: fix a compiler warning fb33ba3 smbinfo: add fsctl-getobjid support f9f5d42 smbinfo: fix code style 0feb1a8 setcifsacl: fix adding ACE when owner sid in unexpected location 1191a6c smbinfo: decode the ACEs ea9b99c getcifsacl: Improve help usage and add -h option. 670f416 getcifsacl: Do not go to parse_sec_desc if getxattr fails. b3f78f6 mount.cifs.rst: update vers=3.1.1 option description d93cabc Update mount.cifs with vers=default mount option and SMBv3.0.2 3f197a3 Added rst2man.py to the search list. 3a00449 mount.ci...

...-6.2/setcifsacl.c:578:result_independent_of_operands ? "(x & 0xff0000000000ULL) >> 48" is 0 regardless of the values of its operands. This occurs as the operand of assignment. ...which is entirely true. That shift should be 40 bits, not 48. Also fix a similar bug in getcifsacl.c. Signed-off-by: Jeff Layton <jlayton at samba.org> commit 930b724e784c28bd1b3024f7fc6ca24cdac82a4d Author: Jeff Layton <jlayton at samba.org> Date: Wed Oct 9 08:14:21 2013 -0400 getcifsacl: remove some dead code Coverity says: Error: DEADCODE (CWE-56...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Time for another cifs-utils release! Most of the patches in this release are for cifs.idmap, getcifsacl and setcifsacl. There were many bugs in those tools, so anyone that's deploying or using them is highly encouraged to upgrade. Highlights: * NFS-style device names are being deprecated in 6.0. Anyone using that sort of device name should move to the UNC-style syntax that the manpage has a...

We've had a number of changes since the last release, and we have some other upcoming kernel changes that might require corresponding cifs-utils changes. So it's probably as good a time as any for a new release. Highlights: + fix for a minor security issue that can corrupt the mtab + new getcifsacl/setcifsacl tools that allow you to fetch and set raw Windows ACLs via an xattr. + a lot of manpage patches webpage: http://linux-cifs.samba.org/cifs-utils/ tarball: ftp://ftp.samba.org/pub/linux-cifs/cifs-utils/ git: git://git.samba.org/cifs-utils.git gitweb: http://git.samba.o...

...wo common tools depending on your preference. smbcacls (somewhat similar to using cacls.exe or icacls.exe in Windows but specifying the UNC name rather than a local path name). smbcacls sets up and tears down a network connection each time it is run and uses Samba user space code. or setcifsacl/getcifsacl (which calls cifs.ko to access the ACL from the SMB3 mount) I have run into a few problems in the past with smbcacls with Kerberos (I need to post more details on that on samba-technical or dive in and fix it), and am fixing a problem currently with running setcifsacl (get works fine) to Azure, bu...

...Having them in the distro prevents autoreconf -i from installing the latest copies. Signed-off-by: Jeff Layton <jlayton at samba.org> commit 7dacd96a24edf9ab2e3d7ed798bd28bba5425349 Author: Jeff Layton <jlayton at samba.org> Date: Mon Dec 3 13:41:12 2012 -0500 getcifsacl: use "size" instead of reconverting original field to host endian Signed-off-by: Jeff Layton <jlayton at samba.org> commit c1fd5753a3f996203e4b39158e360f4b799a3254 Author: Jeff Layton <jlayton at samba.org> Date: Tue Dec 4 06:12:13 2012 -0500 getcifsacl: free...

...1 TCP status: 1 > Local Users To Server: 1 SecMode: 0x3 Req On Wire: 0 > Shares: > 1) \\sambaserver\share Mounts: 1 Type: NTFS DevInfo: 0x20 Attributes: 0x1006f > PathComponentMax: 255 Status: 1 type: DISK > > MIDs: > > clienthost:~# getcifsacl /media/testmount/einstieg.txt > REVISION:0x1 > CONTROL:0x9004 > OWNER:S-1-5-21-3646497173-276132624-1362955480-290786 > GROUP:S-1-22-2-100 > ACL:S-1-5-21-3646497173-276132624-1362955480-290786:ALLOWED/0x0/RW > ACL:S-1-22-2-100:ALLOWED/0x0/RW > ACL:S-1-1-0:ALLOWED/0x0/ > >...

...preference. > > smbcacls (somewhat similar to using cacls.exe or icacls.exe in > Windows but specifying the UNC name rather than a local path name). > smbcacls sets up and tears down a network connection each time it is > run and uses Samba user space code. > > or setcifsacl/getcifsacl (which calls cifs.ko to access the ACL from > the SMB3 mount) > > I have run into a few problems in the past with smbcacls with Kerberos > (I need to post more details on that on samba-technical or dive in and > fix it), and am fixing a problem currently with running setcifsacl >...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Things have been relatively quiet lately. Time for a release! Highlights: * A lot of manpage updates, additions and corrections * cifs.idmap can now map uid/gid to SID in addition to the other way around * getcifsacl/setcifsacl are now installed by default in /usr/bin instead of /usr/sbin. The manpages are now in section 1. * cifs.upcall has a new scheme for picking the SPN on krb5 mounts. The hostname is now always lowercased. If we fail to get a ticket using an unqualified name, it now attempts to gues...

I would like to be able to use SID's in linux so as to have ACL's identical to windows. Example usage why: Say I have an ntfs partitioned disk that I share with a co-worker that uses windows. Currently I am connected to the domain using rfc2307 and that allows me to authenticate using AD and on the nfs through the Isilon the windows users see files correctly permissioned but when I share

...eepens my suspicion that it not being used. The only reference I see is: Sep 24 09:32:01 pc-u20 kernel: FS-Cache: Netfs 'cifs' registered for caching Sep 24 09:32:01 pc-u20 kernel: Key type cifs.spnego registered Sep 24 09:32:01 pc-u20 kernel: Key type cifs.idmap registered If I run 'getcifsacl -r /path/to/cifsaclmount/some_file' and then I use the 'wbinfo --sid-to-uid' on the returns SID, it reports the proper mapping. What / how does the cifs.idmap 'upcall' work? What triggers it? I think the issue must be in that area.

G'day Guys, We are running Centos 6.4, samba4.0.10, compiled from tgz. Has anyone come up with this one before? samba-tool gpo aclcheck ERROR(<type 'exceptions.KeyError'>): uncaught exception - 'No such element' File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 175, in _run return self.run(*args, **kwargs) File