search for: have_libacl

...r server: vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes https://wiki.samba.org/index.php/Shares_with_Windows_ACLs#Enable_extended_ACL_support_in_smb.conf I have confirmed Samba is compiled with ACL support: [root at centos7member ~]# smbd -b | grep HAVE_LIBACL HAVE_LIBACL [root at centos7member ~]#

...r server: vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes https://wiki.samba.org/index.php/Shares_with_Windows_ACLs#Enable_extended_ACL_support_in_smb.conf I have confirmed Samba is compiled with ACL support: [root at centos7member ~]# smbd -b | grep HAVE_LIBACL HAVE_LIBACL [root at centos7member ~]#

Rowland, The wiki suggested doing "smbd -b | grep HAVE_LIBACL" and expecting to get back "HAVE_LIBACL". This is not the case on our IBM system with 4.10.6. The current version from IBM is 4.10.13 - considering upgrading in the hopes "HAVE_LIBACL" is present if I really need it. On the other hand, "smbd -b" does report that...

...amba.PDC/dbdir --realm=lin.GROUP --dns-backend=BIND9_DLZ /etc/samba.PDC/smb.PDC.conf --use-ntvfs We had to use the ntvfs as we got the Your filesystem or build does not support posix ACLs, which s3fs requires. Try the mounting the filesystem with the 'acl' option." The smbd -b | grep HAVE_LIBACL gave HAVE_LIBACL A user with the issue has the following uid=1091(chel) gid=1091(cheryl) groups=1091(cheryl),1002(domainusers),1004(lin),1009(workshop),1017(deptfin),1057(skillsdb),1058(incidentdb),1059(hrdb),1079(deptlegal),1086(depteng),1109(deptivolve),1117(deptsop),1119(deptjelldb),1169(dep...

Hi, I'm currently using an old Samba 3.6.3 on Ubuntu 12.04 LTS. Now it is required to use ACL's. Unfortunately, the Samba is running without the "HAVE_LIBACL" build option, my question is: how can i (re)configure it to enable ACL support via package manager? OFC i installed the required packages. Thanks, Robert

Am 11.09.18 um 10:06 schrieb Rowland Penny via samba: > On Tue, 11 Sep 2018 09:54:32 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> Am 07.09.18 um 20:07 schrieb Rowland Penny via samba: >>> On Fri, 7 Sep 2018 19:09:37 +0200 >>> "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:

...g totally stupid due to lack of familiarity with Linux, Windows, etc settings/configurations. However ...... Following https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs ** Samba Extended ACL Support (CHECK - Expected result returned) root at machine253:/# smbd -b |grep HAVE_LIBACL HAVE_LIBACL ** Enable Extended ACL Support in the smb.conf file (CHECK - Specified lines are part of [global] section - Full smb.conf provided) [global] workgroup = INTERNAL security = ADS realm = INTERNAL.COMPANY.COM server string = Samba 4 Client %h...

...security tab fpr samba shares in Windows. Not as > domain-admin, not as member of a user with the needed privilege. > > The security tab is there for local drives and windows-server-shares, > only samba-4.8.6-shares miss it. > > I will recheck everything ... # smbd -b | grep HAVE_LIBACL HAVE_LIBACL samba ~ # testparm -sv | grep -i acl Server role: ROLE_DOMAIN_MEMBER acl allow execute always = Yes acl check permissions = Yes acl group control = No acl map full control = Yes force unknown acl user = Yes inherit acls = No map acl inherit = Yes nt acl support = No vfs ob...

...ion." Which filesystem are you using, most support acl's by default, have you installed the acl & xattr packages. Whatever your problem is, you need to fix it, ntvfs is now only used in testing and isn't built by default, this happened at Samba 4.5.0 > > The smbd -b | grep HAVE_LIBACL gave HAVE_LIBACL > > A user with the issue has the following > uid=1091(chel) gid=1091(cheryl) > groups=1091(cheryl),1002(domainusers),1004(lin),1009(workshop),1017(deptfin),1057(skillsdb),1058(incidentdb),1059(hrdb),1079(deptlegal),1086(depteng),1109(deptivolve),1117(deptsop),1119(...

...oot at phmsrv01:/mnt/md0# setfacl -m g:adm:rwx test.txt *The commands returned the correct output:* root at phmsrv01:/mnt/md0# getfacl test.txt # file: test.txt # owner: root # group: root user::rw- group::r-- group:adm:rwx mask::rwx other::r-- *Step 3: Check Samba ACL Support:* smbd -b | grep HAVE_LIBACL *HAVE_LIBACL* *Step 4: As this is a Domain Member Server, check that extended ACL support exists in the smb.conf:* itwerks at phmsrv01:~$ cat /etc/samba/smb.conf | grep acl_xattr vfs objects = acl_xattr itwerks at phmsrv01:~$ cat /etc/samba/smb.conf | grep "map acl inherit"...

...Windows, etc > settings/configurations. > > However ...... > > Following > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs > > ** Samba Extended ACL Support > (CHECK - Expected result returned) > > root at machine253:/# smbd -b |grep HAVE_LIBACL > HAVE_LIBACL > > ** Enable Extended ACL Support in the smb.conf file > (CHECK - Specified lines are part of [global] section - Full > smb.conf provided) > > [global] > workgroup = INTERNAL > security = ADS > realm = INTERNAL.COMPAN...

...> > domain-admin, not as member of a user with the needed privilege. > > > > The security tab is there for local drives and > > windows-server-shares, only samba-4.8.6-shares miss it. > > > > I will recheck everything ... > > > > # smbd -b | grep HAVE_LIBACL > HAVE_LIBACL > samba ~ # testparm -sv | grep -i acl > > Server role: ROLE_DOMAIN_MEMBER > > acl allow execute always = Yes > acl check permissions = Yes > acl group control = No > acl map full control = Yes > force unknown acl user = Yes > inherit acls =...

Perhaps I missed a permission change on the shared directory? It's supposed to be set to 0770, correct? I created the directory from root - can't recall what the permissions where or if I chmod'd it. Would a goof on that result in the inability to set permissions when using the windows administrator account. Basically the behavior I'm seeing? On 2019-02-18 3:36 am, Viktor

...ion." Which filesystem are you using, most support acl's by default, have you installed the acl & xattr packages. Whatever your problem is, you need to fix it, ntvfs is now only used in testing and isn't built by default, this happened at Samba 4.5.0 > > The smbd -b | grep HAVE_LIBACL gave HAVE_LIBACL > > A user with the issue has the following > uid=1091(chel) gid=1091(cheryl) > groups=1091(cheryl),1002(domainusers),1004(lin),1009(workshop),1017(de > ptfin),1057(skillsdb),1058(incidentdb),1059(hrdb),1079(deptlegal),1086 > (depteng),1109(deptivolve),1117(de...

...rned the correct output:* > > root at phmsrv01:/mnt/md0# getfacl test.txt > # file: test.txt > # owner: root > # group: root > user::rw- > group::r-- > group:adm:rwx > mask::rwx > other::r-- > > > *Step 3: Check Samba ACL Support:* > > smbd -b | grep HAVE_LIBACL > *HAVE_LIBACL* > > *Step 4: As this is a Domain Member Server, check that extended ACL > support exists in the smb.conf:* > > itwerks at phmsrv01:~$ cat /etc/samba/smb.conf | grep acl_xattr > vfs objects = acl_xattr > itwerks at phmsrv01:~$ cat /etc/samba/smb.c...

...ion." Which filesystem are you using, most support acl's by default, have you installed the acl & xattr packages. Whatever your problem is, you need to fix it, ntvfs is now only used in testing and isn't built by default, this happened at Samba 4.5.0 > > The smbd -b | grep HAVE_LIBACL gave HAVE_LIBACL > > A user with the issue has the following > uid=1091(chel) gid=1091(cheryl) > groups=1091(cheryl),1002(domainusers),1004(lin),1009(workshop),1017(de > ptfin),1057(skillsdb),1058(incidentdb),1059(hrdb),1079(deptlegal),1086 > (depteng),1109(deptivolve),1117(de...

...# getfacl test.txt > > # file: test.txt > > # owner: root > > # group: root > > user::rw- > > group::r-- > > group:adm:rwx > > mask::rwx > > other::r-- > > > > > > *Step 3: Check Samba ACL Support:* > > > > smbd -b | grep HAVE_LIBACL > > *HAVE_LIBACL* > > > > *Step 4: As this is a Domain Member Server, check that extended ACL > > support exists in the smb.conf:* > > > > itwerks at phmsrv01:~$ cat /etc/samba/smb.conf | grep acl_xattr > > vfs objects = acl_xattr > > itwer...

I am familiar with the contents of https://wiki.samba.org/index.php/Samba_%26_Windows_Profiles#Profile_share_using_POSIX_ACLs. Reading that given my set up (Samba-4.4.3_1 on FreeBSD10.3 and ZFS); and given that smbd -b | grep HAVE_LIBACL produces nothing; I infer that setting up roaming profiles using Windows ACLs are not going to work. I am correct? Which implies that I will have to use the POSIX method. However, just in case I am wrong I am asking if anyone here has any experience with setting up Samba4 roaming profiles on a zf...

...AC_DEFINE(SUPPORT_ACLS, 1) Configure detects the following after the above mod: $ grep -i acl config.status S["LIBS"]="-lacl " D["HAVE_SYS_ACL_H"]=" 1" D["HAVE_ACL_LIBACL_H"]=" 1" D["HAVE_ACLSORT"]=" 1" D["HAVE_LIBACL"]=" 1" D["HAVE_POSIX_ACLS"]=" 1" D["SUPPORT_ACLS"]=" 1"

...ons. >> >> However ...... >> >> Following >> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs >> >> ** Samba Extended ACL Support >> (CHECK - Expected result returned) >> >> root at machine253:/# smbd -b |grep HAVE_LIBACL >> HAVE_LIBACL >> >> ** Enable Extended ACL Support in the smb.conf file >> (CHECK - Specified lines are part of [global] section - Full >> smb.conf provided) >> >> [global] >> workgroup = INTERNAL >> security = ADS &...