search for: nfs4acl_xattr

Is nfs4acl_xattr available in any version of samba? I just upgraded to 4.9.6 but it doesn’t seem to be baked in.

Hello All I am trying to use nfs4acl_xattr plugin from samba source code. https://www.samba.org/samba/docs/current/man-html/vfs_nfs4acl_xattr.8.html I mounted NFSv4 mount point locally and exported it through samba with vfs objects set to nfs4acl_xattr. *[root at test3 ajain]# net conf showshare local[local] path = /home/a...

...t;mailto:samba at lists.samba.org>> wrote: >> >> On 14/05/2019 15:39, Banks, David (db2d) via samba wrote: >>> The error I get suggests it’s not a part of of the build... >>> >>> Error loading module >>> '/usr/lib/x86_64-linux-gnu/samba/vfs/nfs4acl_xattr.so': >>> /usr/lib/x86_64-linux-gnu/samba/vfs/nfs4acl_xattr.so: cannot open >>> shared object file: No such file or directory >>> >>> >>> >>>> On May 10, 2019, at 2:00 PM, Banks, David (db2d) via samba >>>> <samba at list...

On Tue, Apr 10, 2018 at 04:28:10PM +0530, Akash Jain wrote: > Can you please elaborate more on which extensions you referred to? > What all basic things do we need to do to use nfs4acl_xattr module with > native NFS4 export mounted locally and shared through samba to get/set NT > ACLs? I guess you have to patch the code, or find someone who does it for you. Iirc currently the module doesn't offer what you're looking for and neither does any other module. -slow -- Ralp...

Hello Jeremy and Ralph Thanks for your suggestions. I compiled samba-4.8.0 and running it instead of samba-4.6.2. I saw the changes that you mentioned in the latest vfs_nfs4acl_xattr module. The operation not supported error is gone but it is now failing with access denied. Here is what I tried: *[root at test3 ajain]# net conf showshare local[local] path = /home/ajain/mount comment = local share guest ok = no read only = no hosts allow = AL...

...ed attributes to/from TDB file. *<Ralph>* *Iirc parsing NFSv4 ACLs would require extensions to the module to support the string identifiers and mapping to ids.* *</Ralph>* Can you please elaborate more on which extensions you referred to? What all basic things do we need to do to use nfs4acl_xattr module with native NFS4 export mounted locally and shared through samba to get/set NT ACLs? Thanks Akash On Mon, Apr 9, 2018 at 11:11 PM, Akash Jain <akash.jain110683 at gmail.com> wrote: > Hi Ralph > > Thanks a lot. With xattr_tdb I could at least list the files getting rid &gt...

Hi Ralph Thanks a lot. With xattr_tdb I could at least list the files getting rid of access denied error. I still do not see the exactly mapped ACEs in the Security Descriptor of a file in Windows Explorer but I will debug that little further and then come back with questions. I see only 1 entry of Everyone on Windows client side if there are added ACEs using nfs4_setfacl. Let me know if that

...t; Hello, >> Merry Christmas > Thanks Rowland! Hope you had a Merry Christmas too >>> The shares of the file server are on the ZFS of the host and mapped >>> via bind-mount. >> >> Ah, that could be a problem, ZFS uses NFSv4 ACLs >>> >> Try 'nfs4acl_xattr' instead, see 'man vfs_nfs4acl_xattr' > > I tried to set in the [users] share. The result in the log.smbd looks > like this: > > ------ > > root at svr-002:/# tail -f /var/log/samba/log.smbd [2019/12/27 > 13:39:51.454236,? 0] ../source3/smbd/service.c:631(make_...

...gt; > > > Hi All > > > > > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > > > per strace output of nfs4_setfacl is system.nfs4_acl. > > > > The source code has defined it as > > > > #define NFS4ACL_XATTR_NAME      ( "system.nfs4acl" ) > > > > > > > > Note there is missing underscore. > > > > > > > > After this, the EOPNOTSUPP error is not observed. > > > > > > > > Hope this helps > > > > > > Hmmm...

...4 in parallel and make samba use (ie.: read, write and enforce) nfsv4 acls to implement winnt-acls? i know that using nfs3 and posix acls is working halfway okay, but couldn't find anything useful for nfsv4 and the associated acls - sorry if i missed something obvious. i played around with the nfs4acl_xattr and acl_xattr vfs objects, only to find that the extended attributes written by those are entirely different from the system.posix_acl_access that nfsv4 seems to use. would re-exporting a nfsv4 share mounted on a nfsv4 client via samba work? thank you very much & with kind regards, t. -------...

Hello, I'm running a PDC and a secondary DC in privilegded lxc containers and try to setup a fileserver in an unprivileged lxc container. The shares of the file server are on the ZFS of the host and mapped via bind-mount. I've got the problem, that I get error messages when setting the ACLs of a samba share either via the Windows explorer or using the smbcacls command. On Windows

On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > Hi All > > I found there is one bug in the plugin. The name of the attribute for ACL as > per strace output of nfs4_setfacl is system.nfs4_acl. > The source code has defined it as > #define NFS4ACL_XATTR_NAME      ( "system.nfs4acl" ) > > Note there is missing underscore. > > After this, the EOPNOTSUPP error is not observed. > > Hope this helps Hmmm. This has been changed for Samba 4.8.0 and above, with commit df99ac27106dededcf0a98a251e58c24b90bf6d1. This would see...

...0PM +0530, Akash Jain wrote: > > > Hi All > > > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > > per strace output of nfs4_setfacl is system.nfs4_acl. > > > The source code has defined it as > > > #define NFS4ACL_XATTR_NAME      ( "system.nfs4acl" ) > > > > > > Note there is missing underscore. > > > > > > After this, the EOPNOTSUPP error is not observed. > > > > > > Hope this helps > > > > Hmmm. This has been changed for Samba 4.8.0...

...> > > > > > > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > > > > per strace output of nfs4_setfacl is system.nfs4_acl. > > > > > The source code has defined it as > > > > > #define NFS4ACL_XATTR_NAME      ( "system.nfs4acl" ) > > > > > > > > > > Note there is missing underscore. > > > > > > > > > > After this, the EOPNOTSUPP error is not observed. > > > > > > > > > > Hope this helps >...

...46, Chris via samba wrote: >> Hello, > Merry Christmas Thanks Rowland! Hope you had a Merry Christmas too >> The shares of the file server are on the ZFS of the host and mapped >> via bind-mount. > > Ah, that could be a problem, ZFS uses NFSv4 ACLs >> > Try 'nfs4acl_xattr' instead, see 'man vfs_nfs4acl_xattr' I tried to set in the [users] share. The result in the log.smbd looks like this: ------ root at svr-002:/# tail -f /var/log/samba/log.smbd [2019/12/27 13:39:51.454236,? 0] ../source3/smbd/service.c:631(make_connection_snum) ? make_connection_s...

...n Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > Hi All > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > per strace output of nfs4_setfacl is system.nfs4_acl. > > The source code has defined it as > > #define NFS4ACL_XATTR_NAME      ( "system.nfs4acl" ) > > > > Note there is missing underscore. > > > > After this, the EOPNOTSUPP error is not observed. > > > > Hope this helps > > Hmmm. This has been changed for Samba 4.8.0 and above, > with commit df99ac27106d...

Hi All I found there is one bug in the plugin. The name of the attribute for ACL as per strace output of nfs4_setfacl is *system.nfs4_acl.* The source code has defined it as #define NFS4ACL_XATTR_NAME ( "system.nfs4acl" ) Note there is missing underscore. After this, the EOPNOTSUPP error is not observed. Hope this helps Akash On Thu, Apr 5, 2018 at 11:43 PM, Jeremy Allison <jra at samba.org> wrote: > On Thu, Apr 05, 2018 at 04:09:26PM +0530, Akash Jain via samb...

...the permissions on ? > Yes. > > >If so, what is the filesystem ? > Ext4 for SO and Ext4 for shared files, but I have created a pool ZFS > on this last filesystem (/dev/vdb1). > If zfs is involved in any way, you will have problems, zfs uses nfs4acls, you could try adding 'nfs4acl_xattr' to the 'vfs objects' line. Rowland

...> If so, what is the filesystem ? >>> Ext4 for SO and Ext4 for shared files, but I have created a pool ZFS >>> on this last filesystem (/dev/vdb1). >>> >> If zfs is involved in any way, you will have problems, zfs uses >> nfs4acls, you could try adding 'nfs4acl_xattr' to the 'vfs objects' line. > > this goes in the right direction, but it's zfsacl for ZFS. :) oh, no, hold on, this is about ZFS on Linux I guess? In that case, iirc ZoL uses POSIX ACls and doesn't support NFS4 ACLs, so you shouldn't need any extra VFS modules for A...

...d everything" ACL in the get_nt_acl call. > It would of course be much better to get a proper mapping. What do > your ACLs look like? > Thanks for clarifying. We use NFSv4 compliant ACLs that can be accessed via the nfs4-acl-tools. I found the existing NFSv4 ACL VFS module in Samba (nfs4acl_xattr), which seems to be build on a different implementation. The referenced website ( http://www.suse.de/~agruen/nfs4acl/) does not exist anymore and the xattr to access ACLs is different (system.nfs4acl for nfs4acl_xattr and system.nfs4_acl for nfs4-acl-tools). Is this a known issue? Kind regards, Ch...