search for: smb_vfs_get_nt_acl

Hi all, On Thu, Apr 16, 2015 at 03:00:49PM -0700, Jeremy Allison wrote: > On Thu, Apr 16, 2015 at 08:42:48PM +0200, Ervin Heged?s wrote: > > Dear Samba users, > > > > here is an Ubuntu 14.04, with Samba 4 (4.1.6), and LDAP (slapd > > 2.4.31). The config came from a previous system (Debian Squeezy), > > which had been crashed (HW error - on this new machine,

Hello Ervin, ? On Sat, Apr 18, 2015 at 5:01 PM, Ervin Heged?s <airween at gmail.com> wrote: > > Why faster the Samba for users, who listed in "admin users" in > smb.conf? Hmm looks like earlier return for users with root permission, so admin users would not go through SMB_VFS_GET_NT_ACL(), which takes more time on permission checking.[1] Non-admin users would go through SMB_VFS_GET_NT_ACL(), and finally would reach getegid() and geteuid().[2] Hence strace said the top 2 records are getegid() and geteuid(). [1] code snippet: NTSTATUS smbd_check_access_rights(struct connection_s...

...PM, Ervin Heged?s <airween at gmail.com> wrote: > > > > > Why faster the Samba for users, who listed in "admin users" in > > smb.conf? > > > > Hmm looks like earlier return for users with root permission, > so admin users would not go through SMB_VFS_GET_NT_ACL(), > which takes more time on permission checking.[1] > > Non-admin users would go through SMB_VFS_GET_NT_ACL(), > and finally would reach getegid() and geteuid().[2] > > Hence strace said the top 2 records are getegid() and geteuid(). > > > [1] code snippet: > NTS...

Is behavior of ACLs under Samba 3.3.0 (Sernet) completely different from that under version 3.2.7? The release notes only talks about some "fixes". I installed version 3.3.0 and got completely different result with the same filesystem and the exact same samba configuration. The ACLs behaved strangely and appeared very different under Windows ACL editor. Users were now unable to