search for: nfsv4acl

.../sys/GENERIC *** Error code 1 Stop. make[1]: stopped in /usr/src *** Error code 1 Stop. make: stopped in /usr/src root at els1:/usr/src # ll /boot lrwxr-xr-x 1 root wheel 13 Oct 26 14:33 /boot@ -> bootpool/boot root at els1:/usr/src # mount zroot/bootenv/default on / (zfs, local, noatime, nfsv4acls) devfs on /dev (devfs, local, multilabel) zroot/tmp on /tmp (zfs, local, noatime, nosuid, nfsv4acls) zroot/usr/home on /usr/home (zfs, local, noatime, nosuid, nfsv4acls) zroot/usr/local on /usr/local (zfs, local, noatime, nfsv4acls) zroot/usr/obj on /usr/obj (zfs, local, noatime, nfsv4acls) zroot/...

I have samba 4.3 running on FreeBSD 10.2 on ZFS and I am unable to create new GPOs, getting "invalid Parameter" response.Log files indicate ACL issues. Domain was provisioned with --use-ntvfs option.Filesystem is mounted with this options:zroot/ROOT/default on / (zfs, local, noatime, nfsv4acls) acl options on zfs are this:zroot/ROOT/default aclmode passthrough inherited from zrootzroot/ROOT/default aclinherit passthrough inherited from zroot samba-tool ntacl sysvolcheck returns errors: ERROR(<type 'exceptions.TypeError'>): uncaught exception - (87, 'Attribute...

Hi all, I have an issue for setting windows acl using smbcacls command under NFS mount folder, but smbcacls seems to not work. And the error was showed by ERROR: security descriptor set failed: NT_STATUS_NOT_SUPPORTED. I wonder to know if other ways to set security.NTACL attribute in NFS. Thank you, Jeremy

On Mon, May 11, 2020 15:27, Rowland penny wrote: > >> > If you want my advice (for what it is worth), try jumping OS, Use the > latest Debian (or Devuan) with ext4 for the filesystem, this is > guaranteed to work. Using FreeBSD as a Samba AD DC has always been a > problem because of the filesystem. Not an option here. > > You may be able to get it working on ZFS, but I

On Tue, May 12, 2020 09:46, Rowland penny wrote: > One problem is that ZFS uses NFSv4ACLS and a Samba AD doesn't, it > expects POSIX ACLS, there also is a possibility that xattr may be > another problem. > > Try reading this: > > https://bugzilla.samba.org/show_bug.cgi?id=12912 > I have worked with Timur on this very problem in the past. And he has produced i...

On Wed, Feb 15, 2023 at 08:06:28PM +0100, Conor Armstrong wrote: > Rowland & Jeremy - thanks for this! > I built a copy of the latest version from github 4.19 and same issue > arises. ? > I will have a look at the wireshark trace and see if I can spot anything > obvious there. > I'm not an expert on this, but as far?as I know NFS isn't fully POSIX >

...share. > On Wed, Feb 15, 2023 at 08:28:47PM +0000, Rowland Penny via samba wrote: > >>>>>>*NFS has no real idea about user authentication and uses > *>>>*ipaddresses, > *>>>>*True for NFSv3, not for NFSv4. > *>>*But then wont it be using NFSv4acls ? > * > This is authentication, not authorization. NFSv4 can be configured > to use krb5 auth, so then it's not ipaddess based and is as secure > as Samba for initial connection and can be as secure as SMB3 > (signing, sealing etc). > > >>>*in other words, you are...

I have abandoned trying to get an existing AD-DC on a FreeBSD host using UFS to replicate successfully to a FreeBSD host on ZFS. I am now in the process of provisioning a new domain on the ZFS host. The domain is created on a FreeBSD thick jail using IOcage as the jail manager; probably should be called the warden but I digress. I have successfully provisioned a new domain but I see an issue

...the basis of this patch would be accepted. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.samba.org/pipermail/rsync/attachments/20120609/729c8ee4/attachment.html> -------------- next part -------------- A non-text attachment was scrubbed... Name: nfsv4acl-1.patch Type: application/octet-stream Size: 16024 bytes Desc: not available URL: <http://lists.samba.org/pipermail/rsync/attachments/20120609/729c8ee4/attachment.obj>