search for: setcifsacl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Time for another cifs-utils release! Most of the patches in this release are for cifs.idmap, getcifsacl and setcifsacl. There were many bugs in those tools, so anyone that's deploying or using them is highly encouraged to upgrade. Highlights: * NFS-style device names are being deprecated in 6.0. Anyone using that sort of device name should move to the UNC-style syntax that the manpage has always documente...

...ad a number of changes since the last release, and we have some other upcoming kernel changes that might require corresponding cifs-utils changes. So it's probably as good a time as any for a new release. Highlights: + fix for a minor security issue that can corrupt the mtab + new getcifsacl/setcifsacl tools that allow you to fetch and set raw Windows ACLs via an xattr. + a lot of manpage patches webpage: http://linux-cifs.samba.org/cifs-utils/ tarball: ftp://ftp.samba.org/pub/linux-cifs/cifs-utils/ git: git://git.samba.org/cifs-utils.git gitweb: http://git.samba.org/?p=cifs-...

...ACLs with two common tools depending on your preference. smbcacls (somewhat similar to using cacls.exe or icacls.exe in Windows but specifying the UNC name rather than a local path name). smbcacls sets up and tears down a network connection each time it is run and uses Samba user space code. or setcifsacl/getcifsacl (which calls cifs.ko to access the ACL from the SMB3 mount) I have run into a few problems in the past with smbcacls with Kerberos (I need to post more details on that on samba-technical or dive in and fix it), and am fixing a problem currently with running setcifsacl (get works fine) t...

...41AM -0800, Jeremy Allison via samba wrote: > > Check out the latest cifsfs code. I think Steve > and Aurelian and Ronnie added an ioctl for this. > > I'm here at Vault in Boston with Steve, I'll ask > him :-). Steve says there are two utilities in Linux, getcifsacl and setcifsacl that use a custom ioctl inside the Linux cifsfs kernel client to get/set SMB acls.

...ing on your preference. > > smbcacls (somewhat similar to using cacls.exe or icacls.exe in > Windows but specifying the UNC name rather than a local path name). > smbcacls sets up and tears down a network connection each time it is > run and uses Samba user space code. > > or setcifsacl/getcifsacl (which calls cifs.ko to access the ACL from > the SMB3 mount) > > I have run into a few problems in the past with smbcacls with Kerberos > (I need to post more details on that on samba-technical or dive in and > fix it), and am fixing a problem currently with running setci...

...experience by unlocking new features available in modern SMB3 servers: - smbinfo utility is added to query various kinds of information from the server (objectId, snapshots, different FileInfo* classes and other metadata) - server IP change is supported by expiring DNS key resolver entries - get/setcifsacl tools are improved to handle unexpected behavior - share snapshot are allowed to be specified by a GMT token or SMB 100-nanoseconds time - various new mount option are documented: bsize, handletimeout, handlecache, rdma, max_credits and others webpage: https://wiki.samba.org/index.php/LinuxCI...

Dear Jeremy, thanks for your instant reply. :-) Along with Linux native getfacl/fetfacl, I also tested getcifsacl/setcifsacl (for sure thoroughly ;-)). Unfortunately, these CIFS client tools seem to have been designed as part of the "old" CIFS Unix Extensions, working only for SMB/CIFS mounts, and are not supposed to work with SMB2/SMB3 mounts, as I guess. During my tests, the getcifsacl utility fails on SMB2...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Again, nothing earth-shattering in this release. Mostly some minor bugfixes and cleanups. Some highlights: - - setcifsacl can now work without a plugin - - systemd-ask-password is found using $PATH now - - cifs.upcall now works with KEYRING: credcaches Go forth and download! webpage: https://wiki.samba.org/index.php/LinuxCIFS_utils tarball: ftp://ftp.samba.org/pub/linux-cifs/cifs-utils/ git: git://gi...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Things have been relatively quiet lately. Time for a release! Highlights: * A lot of manpage updates, additions and corrections * cifs.idmap can now map uid/gid to SID in addition to the other way around * getcifsacl/setcifsacl are now installed by default in /usr/bin instead of /usr/sbin. The manpages are now in section 1. * cifs.upcall has a new scheme for picking the SPN on krb5 mounts. The hostname is now always lowercased. If we fail to get a ticket using an unqualified name, it now attempts to guess the domai...

...e the unneeded "prog" global variable since only the usage() function needs it. Signed-off-by: Jeff Layton <jlayton at samba.org> commit b4dc50798e6baf026d6101ff3775ffc0c3a0e2f2 Author: Jeff Layton <jlayton at samba.org> Date: Fri Dec 7 12:07:23 2012 -0500 setcifsacl: remove syslog goop setcifsacl doesn't use syslog, so no need to open a channel to it. Signed-off-by: Jeff Layton <jlayton at samba.org> commit d4f9df9159c5ac93b97c36b0f98ffbd318866e38 Author: Jeff Layton <jlayton at samba.org> Date: Thu Dec 13 08:58:54 2012 -05...

...ifier in open_cred_file. Reported-by: "Mantas M." <grawity at gmail.com> Signed-off-by: Jeff Layton <jlayton at samba.org> commit fb9999a9d20495719f3fa323401b087ebef60a0d Author: Jeff Layton <jlayton at samba.org> Date: Mon Jan 28 21:38:12 2013 -0500 setcifsacl: fix infinite loop in getnumcaces Jian pointed out that this loop can cycle infinitely when the string contains a ','. Also, fix typo in manpage that shows a trailing ',' in one example. Reported-by: Jian Li <jiali at redhat.com> Signed-off-b...

...e: Tue Oct 8 21:13:41 2013 -0400 autoconf: set release to 6.2.1 for interim builds Signed-off-by: Jeff Layton <jlayton at samba.org> commit 99d2a5a4517216a63cfdeef3ee30656938b3a98e Author: Jeff Layton <jlayton at samba.org> Date: Tue Oct 8 21:07:24 2013 -0400 get/setcifsacl: fix bad bit-shifts A Coverity scan turned up this warning: 1. cifs-utils-6.2/setcifsacl.c:578:result_independent_of_operands ? "(x & 0xff0000000000ULL) >> 48" is 0 regardless of the values of its operands. This occurs as the operand of assignment. ......

...0 mount.cifs: Trivial comment fixes Two trivial comment fixes. Signed-off-by: Scott Lovenberg <scott.lovenberg at gmail.com> commit 21b5bdcb354bc113473347af5e4995fae2285b58 Author: Peng Haitao <penght at cn.fujitsu.com> Date: Fri Apr 12 16:58:49 2013 +0800 setcifsacl.c: fix a bug of goto setcifsacl_facenum_ret setcifsacl_facenum_ret: is called only if attrlen is equal to -1. Signed-off-by: Peng Haitao <penght at cn.fujitsu.com> commit 76dacff50330dcc55ad5c08bf8610e0d7e3ca2ec Author: Peng Haitao <penght at cn.fujitsu.com> Date: F...

I would like to be able to use SID's in linux so as to have ACL's identical to windows. Example usage why: Say I have an ntfs partitioned disk that I share with a co-worker that uses windows. Currently I am connected to the domain using rfc2307 and that allows me to authenticate using AD and on the nfs through the Isilon the windows users see files correctly permissioned but when I share

Thanks for the first reply, Jeremy. What about the (future) implementation of RichACL? Will there be any native Linux Client support along with the SMB2/SMB3 protocol? I know, there is a native implemenation for RichACLs in ext4 FS. Unfortunately, smbcals is not a native Linux ACL Tool and has a very unhandy syntax. I just tested some days ago. ;-) I am looking for a solution that allows the

...cy" username parsing has gone away. Signed-off-by: Jeff Layton <jlayton at samba.org> commit 377898e63a8689b0e8c5c656ce9cfa98223cf74b Author: Jeff Layton <jlayton at samba.org> Date: Tue Aug 21 15:18:54 2012 -0400 cifs-utils: fix up references to getcifsacl and setcifsacl files When I moved the manpages for this to section 1, I missed some references to them. Also, get rid of the unneeded clean-local-aclprogs makefile target. Signed-off-by: Jeff Layton <jlayton at samba.org> commit d006986221b7f1aad50e894851dc573650b7611c Author: Nalin D...

...| 1 + Makefile.am | 16 +++ bash-completion/smbinfo | 44 +++++++++ configure.ac | 8 +- getcifsacl.c | 106 +++++++++++++------- getcifsacl.rst.in | 3 + mount.cifs.c | 76 ++++++++------ mount.cifs.rst | 18 ++-- setcifsacl.c | 4 +- smb2-quota | 190 +++++++++++++++++++++++++++++++++++ smb2-quota.rst | 70 +++++++++++++ smb2-secdesc | 436 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ smbinfo.c | 174 +++++++++++++++++++++...

...will make the configure script fail if pod2man is not installed. Signed-off-by: Aurelien Aptel <aaptel at suse.com> commit 48d88f946e72a3a8618498524e61f9053bb565f4 Author: Shirish Pargaonkar <shirishpargaonkar at gmail.com> Date: Wed Aug 30 06:29:52 2017 -0500 cifs: setcifsacl - Send the actual (security descriptor) buffer size instead of the pre-allocated size Some SMB servers such as HDS HNAS (Hitachi NAS) return error NT Status: STATUS_INVALID_SECURITY_DESCR (0xc0000079) during set cifs acl operation. This happens due to mismatch in the size of...

...r. This version sets the path to the upcall programs based on the configure options. Signed-off-by: Jeff Layton <jlayton at samba.org> commit cee919c2f3fb7b96518b800680664a15a6551d93 Author: Jeff Layton <jlayton at samba.org> Date: Tue Jan 10 18:30:56 2012 -0500 get/setcifsacl: don't link in -lkeyutils These binaries don't use keys API at all. There's no need to link in the keys library. Reported-by: Fr?d?ric L. W. Meunier <fredlwm at fredlwm.net> Signed-off-by: Jeff Layton <jlayton at samba.org> Acked-by: Shirish Pa...

Hi Jeremy, Hi Steve, Hi Ronnie, thanks for your replies and the profound discussion. I think, it's best to demonstrate my problem case along an real world example: The following log of a console sesssion shows how I am doing the mounts on behalf Linux Kernel CIFS-FS Module on the client side against a Samba 4.5 file server (both running on Debian Stretch 9.8) via SMB/CIFS resp. SMB2 protocol: