search for: rwxpddaarwccos

...st here the current permissions of the folder containing Maildir, of the Maildir itself, of its contents, and of the folder that appears empty when browsed with a client (Thunderbird). /tank/home/olaf $ ls -lV .. drwx------+ 16 olaf olaf 17 Sep 19 01:52 olaf user:olaf:rwxpdDaARWcCos:fd-----:allow group:2147483648:rwxpdDaARWcCos:fd-----:allow everyone@:rwxpdDaARWcCos:fd-----:deny /tank/home/olaf $ ls -lV drwxrwx--- 348 olaf olaf 359 Sep 19 01:51 Maildir owner@:rwxp--aARWcCos:-------:allow group@:rwxp--a-R-c...

...hrough, which I thought would result in the ACEs being just that - passed through without modification. In my test scenario, I am creating a folder, removing all ACEs and adding a single full access allow ACE with file and directory inheritance for one user: > mkdir test > chmod A=user:root:rwxpdDaARWcCos:fd----:allow test Permission check: > ls -dV test d---------+ 2 root root 2 Jan 6 21:17 test user:root:rwxpdDaARWcCos:fd----:allow Ok, that seems to be as I intended. Now I cd into the folder and create a file: > cd test > touch file Permission check: > ls...

On Mon, July 13, 2020 10:23, Andrea Venturoli wrote: > On 2020-07-13 15:06, James B. Byrne wrote: > >>> Just out of curiosity, are you also using vfs_zfsacl? >> >> Yes. > > But only on DC1, AFAICT! > I see no mention of it on DC2's smb.conf. > That could be the reason why you have two different behaviour. > > bye > av. > That appears to

...aining >> Maildir, of the Maildir itself, of its contents, and of the folder >> that appears empty when browsed with a client (Thunderbird). >> >> /tank/home/olaf $ ls -lV .. >> drwx------+ 16 olaf olaf 17 Sep 19 01:52 olaf >> user:olaf:rwxpdDaARWcCos:fd-----:allow >> group:2147483648:rwxpdDaARWcCos:fd-----:allow >> everyone@:rwxpdDaARWcCos:fd-----:deny >> >> /tank/home/olaf $ ls -lV >> drwxrwx--- 348 olaf olaf 359 Sep 19 01:51 Maildir >> owner@:rwxp--aARWcCos:...

...ions of the folder containing > Maildir, of the Maildir itself, of its contents, and of the folder > that appears empty when browsed with a client (Thunderbird). > > /tank/home/olaf $ ls -lV .. > drwx------+ 16 olaf olaf 17 Sep 19 01:52 olaf > user:olaf:rwxpdDaARWcCos:fd-----:allow > group:2147483648:rwxpdDaARWcCos:fd-----:allow > everyone@:rwxpdDaARWcCos:fd-----:deny > > /tank/home/olaf $ ls -lV > drwxrwx--- 348 olaf olaf 359 Sep 19 01:51 Maildir > owner@:rwxp--aARWcCos:-------:allow >...

Hello forum. I''m in the process of re-organizing my server and ACL-settings. I''ve seen so many different ways of doing ACL, which makes me wonder how I should do it myself. This is obviously the easiest way, only describing the positive permissions: /usr/bin/chmod -R A=\ group:sa:full_set:fd:allow,\ group:vk:read_set:fd:allow \ However, I''ve seen people split each

...rict locking = No vfs objects = zfsacl nfs4:chown = Yes nfs4:acedup = merge nfs4:mode = simple --- and, for example, with the directory "midterm/it": drwxrwx---+ 4 root it 6 Jul 30 12:07 it and its ACL: --- # file: it # owner: root # group: it owner@:rwxpDdaARWcCos:fd----:allow group@:rwxpDdaARWcCos:fd----:allow everyone@:------a-R-c--s:------:allow --- with this acl, I can't see this it directory while using my account which is part of the it group. If I add myself to the acl: --- # file: it # owner: root # group: it user:pjo...

...are both passthrough If userA creates a M$ word file on a directory with these ACLs (note: inheritance) ... drwxrwx---+ 2 userA group1 10 Nov 24 17:25 . owner@:rwxpdDaARWc--s:fd-----:allow group@:rwxpdDaARWc--s:fd-----:allow group:group2:rwxpdDaARWcCos:fd-----:allow ... the file gets properly created with these permissions (because the user's primary group is group3) -rwxrwx---+ 1 userA group3 79258 Nov 24 17:26 f.xlsx owner@:rwxpdDaARWc--s:-------:allow group@:rwxpdDaARWc--s:-------:allow...

Hi all, Running samba 3.5.5 in a Solaris non-global zone. I have created a folder (StudentJobApplications) on a share which I want to make accessible only to members of a Unix group (studempl). I have added myself to the group but when I or other group members try to access the folder via Windows Explorer I get the following: I:\StudentJobApplications is not accessible Access is denied Here

Here is a draft of the fast track to allow ZFS to inherit mode permission via owner@, group@ and everyone@ -Mark -------------- next part -------------- An embedded and charset-unspecified text was scrubbed... Name: aclinherit.fasttrack URL: <http://mail.opensolaris.org/pipermail/zfs-discuss/attachments/20080319/42e8ace7/attachment.ksh>

...ming with inheritance turned on and these perms are passed down to all files and subdirs below them. Is there a way to get the move error to be logged somewhere like syslog? bash-4.0$ /bin/ls -ladV /newsan/tmp drwxr-x---+ 42 me media 50 Jan 25 17:26 /newsan/tmp owner@:rwxpdDaARWcCos:fd-----:allow group@:r-x---a-R-c--s:-------:allow everyone@:------a-R-c--s:-------:allow bash-4.0$ /bin/ls -ladV /newsan/incoming drwxr-xr-x+ 11 me media 326 Jan 25 17:37 /newsan/incoming owner@:rwxpdDaARWcCos:fd-----:allow...

On Tue, May 12, 2020 09:46, Rowland penny wrote: > One problem is that ZFS uses NFSv4ACLS and a Samba AD doesn't, it > expects POSIX ACLS, there also is a possibility that xattr may be > another problem. > > Try reading this: > > https://bugzilla.samba.org/show_bug.cgi?id=12912 > I have worked with Timur on this very problem in the past. And he has produced in

...le to foo: Permission denied % rm file rm: file: override protection 0 (yes/no)? y rm: file not removed: Permission denied So far, so good. But then I can do this: % chmod A=owner@:full_set:allow file % ls -V file -rwx------+ 1 abalfour root 1474560 May 11 18:43 file owner@:rwxpdDaARWcCos:-------:allow % rm file % I''ve tried this with all the aclmode values on the filesystem, and it''s always the same behavior. Am I missing something? Does the owner always have the ability to change the ACL to whatever they want? Thanks, Drew -------------- next part -----------...

Following the wiki replication guide precisely I got to this step. [root at smb4-2 ~ (master)]# rsync -XAavz --delete-after smb4-1.brockley.harte-lyne.ca:/var/db/samba4/sysvol/ /var/db/samba4/sysvol/ receiving file list ... done ./ brockley.harte-lyne.ca/ . . . brockley.harte-lyne.ca/scripts/ sent 142 bytes received 1,683 bytes 3,650.00 bytes/sec total size is 182 speedup is 0.10 [root at

...map hidden = no map archive = no map system = no vfs objects = recycle zfsacl nfs4:acedup = merge nfs4:chown = yes nfs4:mode = special zfsacl:acesort = dontcare Permissions for a /var/www/test: # getfacl /var/www/test # file: /var/www/test # owner: root # group: wheel group:domain users:rwxpDdaARWcCos:fd----:allow owner@:rwxpDdaARWcCos:fd----:allow group@:r-x---a-R-c--s:------:allow everyone@:r-x---a-R-c--s:------:allow Suppose I put file on this share, and mount it via SMB on same server on /mnt/smb2 (using user tatjana), thus I should be able to access the fil...

...sue, now getent passwd works. I just have one remaining issue, it seems the ACL doesn't work. As an example when I set ACL with full permission for user andrea: # /usr/bin/ls -ldV /cache/testsamba/ d---------+  3 root     root           5 Jun 19 19:40 /cache/testsamba/             user:andrea:rwxpdDaARWcCos:fd-----:allow the user andrea can't mount the share. I have added the following entry in smb.conf for ACL:     vfs objects = acl_xattr     map acl inherit = Yes     store dos attributes = Yes and the directory is shared as follow: [testsamba] available = yes browsable = yes path = /cache...

On Sat, July 11, 2020 04:32, Andrea Venturoli wrote: > On 2020-07-10 14:47, James B. Byrne wrote: >> FreeBSD-12.1p6 IOCage thick jails on ZFS, samba-4.10.15: > > Can you post the smb.conf of both DCs? > > Just out of curiosity, are you also using vfs_zfsacl? Yes. smb.confs DC1 and DC2: /zroot/iocage/jails/smb4-1a/root/usr/local/etc/smb4.conf [root at vhost04 ~ (master)]#

...ot;passtrough" When using rsync without any the following flags : --perms, --executability, --chmod, the default zfs ACLs are not applied. here is an example : I have a directory with the following acls : drwxr-xr-x+181 shamu staff 225 May 20 01:24 Folder user:shamu:rwxpdDaARWcCos:fd-----:allow everyone@:r-x---a-R-c---:fd-----:allow When I create or copy a regular file to this folder, the new file's alcs look like this : -rw-r--r--+ 1 shamu staff 0 May 20 01:30 file user:shamu:rw-pdDaARWcCos:------I:allow everyone@:...

...me to time this SID receives a different GID mapping: 30027. Following are the result of service commands, which demonstrates a real problem: NSS is always works correctly: [root at dynamo ~]# getfacl /zfsmount/svn/svn1 # file: /zfsmount/svn/svn1 # owner: www # group: www group:DYNAMO\samba_svn1:rwxpDdaARWcCos:fd----:allow owner@:rwxp--aARWcCos:------:allow group@:------a-R-c--s:------:allow everyone@:------a-R-c--s:------:allow [root at dynamo ~]# getent group samba_svn1 DYNAMO\samba_svn1:x:30025 [root at dynamo ~]# wbinfo --sid-to-gid S-1-5-21-3743722752-3344840800-2...

Hello, I'm trying to setup an omnios system as a Samba DC member, and I need AD backend for consistent IDs on all Samba clients. The AD join is successful, the wbinfo shows the AD users # /opt/samba/bin/wbinfo -n andrea S-1-5-21-2680195940-2267646359-3814218302-1109 SID_USER (1) however, " getent passwd ..." returns nothing for the user (all the AD user) I have enabled debugging