search for: icacls

...shed so that the db is not queryable. Does anyone knows of a way to achieve this? I've had a look at the code of the vfs_acl_tdb module and, for what I understood, the ACL are written both on a tdb and on the filesystem. What's the behaviour of the module then? When I use a software like icacls, to backup ACL, it looks like samba is reading from the filesystem, because it takes a long time. But when I try to browse a directory with thousands of files, access is instantaneous. This makes me suppose samba is using the tdb. Am I correct? Thanks in advance for any help. Si segnala che i...

...EMOSP\Administrator GROUP:DEMOSP\Domain Users ACL:BUILTIN\Administrators:ALLOWED/OI|CI|I/FULL ACL:DEMOSP\Administrator:ALLOWED/I/FULL ACL:\CREATOR OWNER:ALLOWED/OI|CI|IO|I/FULL ACL:BUILTIN\Users:ALLOWED/OI|CI|I/READ By doing above it will be use full to set and get ACLs back door rather than from icacls. Please let me know if you are interested I can post the patch. -- Thanks & Regards -Partha

...ou needed more > indexes. > > > I've had a look at the code of the vfs_acl_tdb module and, for what > > I understood, the ACL are written both on a tdb and on the > > filesystem. > > What's the behaviour of the module then? > > When I use a software like icacls, to backup ACL, it looks like > > samba is reading from the filesystem, because it takes a long time. > > But when I try to browse a directory with thousands of files, access > > is instantaneous. This makes me suppose samba is using the tdb. > > Am I correct? > > Dep...

Hi list, I have managed to grant a specific user access to a sub-folder (sub-level 3 from the share's entry point, I think) on a Samba 4 share he/she is not allowed and not able to access in total/general. I tried 2 different ways with one of them working. I'd like to discuss why that is. For the sake of an example, let's say the share is for teaching material (exam templates,

...ays change to a sqlite backend if you needed more indexes. > I've had a look at the code of the vfs_acl_tdb module and, for what > I understood, the ACL are written both on a tdb and on the > filesystem. > What's the behaviour of the module then? > When I use a software like icacls, to backup ACL, it looks like > samba is reading from the filesystem, because it takes a long time. > But when I try to browse a directory with thousands of files, access > is instantaneous. This makes me suppose samba is using the tdb. > Am I correct? Depends on what icacls actually d...

...; indexes. >> >>> I've had a look at the code of the vfs_acl_tdb module and, for what >>> I understood, the ACL are written both on a tdb and on the >>> filesystem. >>> What's the behaviour of the module then? >>> When I use a software like icacls, to backup ACL, it looks like >>> samba is reading from the filesystem, because it takes a long time. >>> But when I try to browse a directory with thousands of files, access >>> is instantaneous. This makes me suppose samba is using the tdb. >>> Am I correct? &g...

...gn"? It seems to me that with acl_xattr offering complete Windows ACLs the situation is now mature enough and demands a proper tool for setting Windows ACLs from a *nix command line. This would greatly facilitate the life of those who maintain remote servers through ssh. A tool similar to icacls or SetACL in the Windows world.

...gh powershell (Set-Acl). The share was configured following guidelines at the Samba's wiki (https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs) and I took care about the "rpc rights grant" section. I am able to set permission from within Windows Explorer and using icacls.exe but I cannot using the Powershell's Set-Acl, it stuck with this message: set-acl : Some or all identity references could not be translated. Then I run some check and dug the samba's debug log and hit the errors: [2020/05/18 14:42:29.430946, 10, pid=31893, effective(0, 0), real(0, 0...

Hi, Is there any drawbacks of using "nt acl support = No" on a share ? I mean breaking applications ? I do not want users to change permissions from Windows. With nt acl support = No, icacls returns no permissions Users have Full Control. It's fine for me that Security tab disappears. Users can access Linux shell, and i only want users to modify permissions from Linux. I'm using samba as a file server on a legacy domain samba3 / ldap (with same users and password as my ne...

...karound for Windows ACL's and file attributes for rsync. Using some basic scripting will allow ACL information to be stored for future use on files transferred using rsync. Most will probably find the information worthless but thought I'd post it anyway. - To get ACL information, use the icacls program provided as part of Server 2003 SP1 (http://technet2.microsoft.com/windowsserver2008/en/library/403edfcc-328a-47 9d-b641-80c290ccf73e1033.mspx?mfr=true). This program can store ACL's for a given path into a file for restoring the ACL's later. Running this on the path for rsync and...

Hi, The security tab of Windows does not accept unix groupnames, although they do work in icacls.exe on the commandline. It displays existing group rights, and allows to modify them, but does not allow to add new rights for unix groups, and the search function also does not list unix groups. Is there a trick to make them work in the security tab? I don't have OUs or AD-groups, this is clas...

I use rsync for backing up windows. After a restore of Desktop.ini I recognize that the hidden attribut and the system attribut will not been restored. I know, this are no unix attributes. But is there a way to backup and restore the windows attributes too? Thanks Matthias -- Don't Panic

Hi, I need to set ACLs on a samba server, and are using icacls in Win7. It takes several hours to edit an ACL with inheritance, affecting a directory tree with 300,000 files. Server cpu > 70%, client cpu < 20%. Is there a way how I can speed this up? Using "setfattr -R" in Linux does it in approximately 2 minutes, but I want real Windows AC...

...default:group:544:rwx default:group:30000:r-x default:group:30001:rwx default:group:EXAMPLE\134RemoteUsers:r-x default:mask::rwx default:other::--- As you can see, the groups 544, 30000 and 30001 weren't resolved. Something similar happens, if I'm trying to look at it from Windows side: icacls \\dc1\netlogon\ 544(BUILTIN\Administrators) and 30001(SYSTEM) are resolved properly, but for 30000, the error message is along the lines of "Unable to resolve SID into account name". But when I bring up GUI on the same share, it magically resolve SID's into "Server Operators&qu...

ACL management can be done for SMB2/SMB3 ACLs with two common tools depending on your preference. smbcacls (somewhat similar to using cacls.exe or icacls.exe in Windows but specifying the UNC name rather than a local path name). smbcacls sets up and tears down a network connection each time it is run and uses Samba user space code. or setcifsacl/getcifsacl (which calls cifs.ko to access the ACL from the SMB3 mount) I have run into a few problems i...

...etails see the wspsearch man page. Allow 'smbcacls' to save/restore DACLs to file -------------------------------------------- 'smbcacls' has been extended to allow DACLs to be saved and restored to/from a file. This feature mimics the functionality that windows cmd line tool 'icacls.exe' provides. Additionally files created either by 'smbcalcs' or 'icacls.exe' are interchangeable and can be used by either tool as the same file format is used. New options added are: ?- '--save savefile'??? Saves DACLs in sddl format to file ?- '--recurse'?...

...etails see the wspsearch man page. Allow 'smbcacls' to save/restore DACLs to file -------------------------------------------- 'smbcacls' has been extended to allow DACLs to be saved and restored to/from a file. This feature mimics the functionality that windows cmd line tool 'icacls.exe' provides. Additionally files created either by 'smbcalcs' or 'icacls.exe' are interchangeable and can be used by either tool as the same file format is used. New options added are: ?- '--save savefile'??? Saves DACLs in sddl format to file ?- '--recurse'?...

...etails see the wspsearch man page. Allow 'smbcacls' to save/restore DACLs to file -------------------------------------------- 'smbcacls' has been extended to allow DACLs to be saved and restored to/from a file. This feature mimics the functionality that windows cmd line tool 'icacls.exe' provides. Additionally files created either by 'smbcalcs' or 'icacls.exe' are interchangeable and can be used by either tool as the same file format is used. New options added are: ?- '--save savefile'??? Saves DACLs in sddl format to file ?- '--recurse'?...

...etails see the wspsearch man page. Allow 'smbcacls' to save/restore DACLs to file -------------------------------------------- 'smbcacls' has been extended to allow DACLs to be saved and restored to/from a file. This feature mimics the functionality that windows cmd line tool 'icacls.exe' provides. Additionally files created either by 'smbcalcs' or 'icacls.exe' are interchangeable and can be used by either tool as the same file format is used. New options added are: ?- '--save savefile'??? Saves DACLs in sddl format to file ?- '--recurse'?...

...etails see the wspsearch man page. Allow 'smbcacls' to save/restore DACLs to file -------------------------------------------- 'smbcacls' has been extended to allow DACLs to be saved and restored to/from a file. This feature mimics the functionality that windows cmd line tool 'icacls.exe' provides. Additionally files created either by 'smbcalcs' or 'icacls.exe' are interchangeable and can be used by either tool as the same file format is used. New options added are: ?- '--save savefile'??? Saves DACLs in sddl format to file ?- '--recurse'?...