search for: mikha02

...servers (FreeBSD 11.2). The same effect is also visible on Samba 4.8.3 on CentOS 7. Start with a directory that looks like this: root at filur00:/tmp/test # ls -la total 50 drwxrwx--- 2 peter86 uf-iti-all 3 Feb 27 11:27 . drwxrwxrwt 10 root wheel 56 Feb 27 16:41 .. -rw-rw---- 1 mikha02 uf-iti-all 6 Feb 27 11:27 hello.txt Ie, no ACLs, just “pure” Unix permission bits. Share it as usual via smb.conf. With a smb.conf file with any “vfs objects” enabled (doesn’t matter which, or even with an empty list): vfs objects = ;; empty list vfs objects = shadow_copy2 zfsacl ful...

...lso visible on Samba > 4.8.3 on CentOS 7. > > Start with a directory that looks like this: > > root at filur00:/tmp/test # ls -la > total 50 > drwxrwx--- 2 peter86 uf-iti-all 3 Feb 27 11:27 . > drwxrwxrwt 10 root wheel 56 Feb 27 16:41 .. > -rw-rw---- 1 mikha02 uf-iti-all 6 Feb 27 11:27 hello.txt > > Ie, no ACLs, just “pure” Unix permission bits. Share it as usual via > smb.conf. > > > With a smb.conf file with any “vfs objects” enabled (doesn’t matter > which, or even with an empty list): > > vfs objects = ;; empty l...

...he objects at all… So we (a co-worker of mine) created the following patch which seems to solve the issue (it basically lies and adds the “write to attributes” of “write to files” is set): --- samba-4.9.4-test/source3/modules/nfs4_acls.c 2018-07-12 10:23:36.000000000 +0200 +++ samba-4.9.4-mikha02/source3/modules/nfs4_acls.c 2019-03-04 11:29:29.263401000 +0100 @@ -380,6 +380,17 @@ DEBUG(10, ("Windows mapped ace flags: 0x%x => 0x%x\n", ace->aceFlags, win_ace_flags)); + + // 2019-03-04 mikael.haglund at liu.se - Dirtyhack...

...on CentOS 7. >> >> Start with a directory that looks like this: >> >> root at filur00:/tmp/test # ls -la >> total 50 >> drwxrwx--- 2 peter86 uf-iti-all 3 Feb 27 11:27 . >> drwxrwxrwt 10 root wheel 56 Feb 27 16:41 .. >> -rw-rw---- 1 mikha02 uf-iti-all 6 Feb 27 11:27 hello.txt >> >> Ie, no ACLs, just “pure” Unix permission bits. Share it as usual via >> smb.conf. >> >> >> With a smb.conf file with any “vfs objects” enabled (doesn’t matter >> which, or even with an empty list): >> &...

Test 1: User User1 is a member of group Group1. Group1 has R-X rights to the shared folder SITES. When User1 connects to the server over SMB he sees SITES but when he tries to access it he gets access denied. Logs for the attempt show “chdir (/srv/SITES) failed, reason: Permission denied” Test 2: The same user can connect to the server over SSH and access the folder according to the group