search for: vfs_acl_common

...all commit messages. Sorry for > forgetting this in the previous version. Juuuusttt *one* leetle change, sorry :-). I was following the changes to the talloc heirarchy in the code and realized that adding the following change made it much clearer (at least to me). diff --git a/source3/modules/vfs_acl_common.c b/source3/modules/vfs_acl_common.c index 2163a75..870e6da 100644 --- a/source3/modules/vfs_acl_common.c +++ b/source3/modules/vfs_acl_common.c @@ -625,7 +625,7 @@ static NTSTATUS validate_nt_acl_blob(TALLOC_CTX *mem_ctx, vfs_handle_struct *handle,...

...ri, Aug 26, 2016 at 06:44:05PM +0200, Ralph Böhme wrote: > > > > > > Cheerio! > > > -slow > > > > Still reviewing this - but a few things that will need changing: > > > > When adding the validate_nt_acl_blob() function in > > [PATCH 06/12] vfs_acl_common: move the ACL blob validation to a helper function > > > > this makes some of the existing function names in debug statements > > incorrect. thanks for spotting this! > > > > Eg. validate_nt_acl_blob() has debug statements: > > How about adding this on top...

On Fri, Aug 26, 2016 at 06:44:05PM +0200, Ralph Böhme wrote: > > Cheerio! > -slow Still reviewing this - but a few things that will need changing: When adding the validate_nt_acl_blob() function in [PATCH 06/12] vfs_acl_common: move the ACL blob validation to a helper function this makes some of the existing function names in debug statements incorrect. Eg. validate_nt_acl_blob() has debug statements: 688 DEBUG(10, ("get_nt_acl_internal: ACL blob revision " 689 &q...

On Fri, Aug 26, 2016 at 06:33:26PM +0200, Ralph Böhme via samba wrote: > On Thu, Aug 25, 2016 at 12:14:00PM -0700, Jeremy Allison wrote: > > On Wed, Aug 24, 2016 at 04:06:42PM +0200, Ralph Böhme via samba wrote: > > > > > > Yeah, as much as I'd like to avoid adding a new option, I guess we > > > have to do something about it, my latest take on this is >

...SET_NT_ACL( fsp, security_info_sent, sd); - source3/include/vfs_macros.h:#define SMB_VFS_FSET_NT_ACL smb_vfs_call_fset_nt_acl - source3/smbd/vfs.c:NTSTATUS smb_vfs_call_fset_nt_acl [which calls fset_nt_acl_fn] - source3/modules/vfs_acl_xattr.c: .fset_nt_acl_fn = fset_nt_acl_common - source3/modules/vfs_acl_common.c:static NTSTATUS fset_nt_acl_common - source3/modules/vfs_acl_common.c: parse_acl_blob() [which seems to be where the error occurs] However it appears that I'm now trying to debug the VFS modules in Samba, which isn't quite where I thought I would end up when I started looking into this e...

Hi. We set up a samba domain with two DC ver. 4.7.3 and a file server ver. 4.7.1. Currently we have a problem setting ACLs from a Microsoft client. When we set an ACL the client shows the new ACL correctly, but on the fileserver the /getfacl/ command shows no changes. The filesystem is na ext4 with the options /rw,acl,user_xattr,usrquota,grpquota./ This is the share configuration:/ /

...rathi <partha at exablox.com> * BUG 11819: Fix the smb2_setinfo to handle FS info types and FSQUOTA infolevel. o Jorge Schrauwen <sjorge at blackdot.be> * BUG 11816: configure: Don't check for inotify on illumos. o Uri Simchoni <uri at samba.org> * BUG 11806: vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set. * BUG 11815: smbcquotas: print "NO LIMIT" only if returned quota value is 0. * BUG 11852: libads: Record session expiry for spnego sasl binds. o Hemanth Thummala <hemanth.thummala at nutanix.com> * B...

...rathi <partha at exablox.com> * BUG 11819: Fix the smb2_setinfo to handle FS info types and FSQUOTA infolevel. o Jorge Schrauwen <sjorge at blackdot.be> * BUG 11816: configure: Don't check for inotify on illumos. o Uri Simchoni <uri at samba.org> * BUG 11806: vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set. * BUG 11815: smbcquotas: print "NO LIMIT" only if returned quota value is 0. * BUG 11852: libads: Record session expiry for spnego sasl binds. o Hemanth Thummala <hemanth.thummala at nutanix.com> * B...

...ug_unix_user_token) > UNIX token of user 0 > > get_nt_acl_internal: blob hash does not match for file . - returning > file system SD mapping. > [2016/01/04 15:08:21.484342, 10, pid=10718, effective(110007232, > 110000513), real(110007232, 0), class=vfs] > ../source3/modules/vfs_acl_common.c:554(get_nt_acl_internal) > get_nt_acl_internal: acl for blob hash for . is: > [2016/01/04 15:08:21.484352, 1, pid=10718, effective(110007232, > 110000513), real(110007232, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) > pdesc_next: struct security_descriptor > re...

Hi, After making progress with my scripts for software installation (thanks, Rowland!) I am on a bit of a mission to get things working again. I found that permissions on my sysvol share were somehow incorrect (group ownership was root, etc.) so I ran 'samba-tool ntacl sysvolreset'.. however this now fails with the following error. (I'm on Samba 4.5.0) user at dc2:~ $ sudo

...)." > > A discussion about the subject can be found on the archives after this > post. > > Version 4.4.3 of Samba was the first one to receive this change of > behavior, as can be seen by its Release Notes: > > o Uri Simchoni <uri at samba.org> > * BUG 11806: vfs_acl_common: Avoid setting POSIX ACLs if "ignore > system acls" is set.

...t;> > > > >> o Jorge Schrauwen <sjorge at blackdot.be> > > > >> * BUG 11816: configure: Don't check for inotify on illumos. > > > >> > > > >> o Uri Simchoni <uri at samba.org> > > > >> * BUG 11806: vfs_acl_common: Avoid setting POSIX ACLs if "ignore > system > > > >> acls" > > > >> is set. > > > >> * BUG 11815: smbcquotas: print "NO LIMIT" only if returned quota > value > > > >> is 0. > > > >> * B...

...erflow. o Hanno Böck <hanno at hboeck.de> * BUG 12746: lib: debug: Avoid negative array access. * BUG 12748: cleanupdb: Fix a memory read error. o Ralph Boehme <slow at samba.org> * BUG 11961: idmap_autorid allocates ids for unknown SIDs from other backends. * BUG 12562: vfs_acl_common should force "create mask = 0777". * BUG 12565: vfs_fruit: resource fork open request with flags=O_CREAT|O_RDONLY. * BUG 12727: Lookup-domain for well-known SIDs on a DC. * BUG 12728: winbindd: Fix error handling in rpc_lookup_sids(). * BUG 12729: winbindd: Trigger possib...

...erflow. o Hanno Böck <hanno at hboeck.de> * BUG 12746: lib: debug: Avoid negative array access. * BUG 12748: cleanupdb: Fix a memory read error. o Ralph Boehme <slow at samba.org> * BUG 11961: idmap_autorid allocates ids for unknown SIDs from other backends. * BUG 12562: vfs_acl_common should force "create mask = 0777". * BUG 12565: vfs_fruit: resource fork open request with flags=O_CREAT|O_RDONLY. * BUG 12727: Lookup-domain for well-known SIDs on a DC. * BUG 12728: winbindd: Fix error handling in rpc_lookup_sids(). * BUG 12729: winbindd: Trigger possib...

...BUG 12005: smbd: Ignore ctdb tombstone records in fetch_share_mode_unlocked_parser(). * BUG 12016: cleanupd terminates main smbd on exit. * BUG 12028: vfs_acl_xattr: Objects without NT ACL xattr. * BUG 12105: async_req: Make async_connect_send() "reentrant". * BUG 12177: vfs_acl_common: Fix unexpected synthesized default ACL from vfs_acl_xattr. * BUG 12181: vfs_acl_xattr|tdb: Enforced settings when "ignore system acls = yes". o Günther Deschner <gd at samba.org> * BUG 12285: s3-spoolss: Fix winreg_printer_ver_to_qword. o Amitay Isaacs <amita...

...BUG 12005: smbd: Ignore ctdb tombstone records in fetch_share_mode_unlocked_parser(). * BUG 12016: cleanupd terminates main smbd on exit. * BUG 12028: vfs_acl_xattr: Objects without NT ACL xattr. * BUG 12105: async_req: Make async_connect_send() "reentrant". * BUG 12177: vfs_acl_common: Fix unexpected synthesized default ACL from vfs_acl_xattr. * BUG 12181: vfs_acl_xattr|tdb: Enforced settings when "ignore system acls = yes". o Günther Deschner <gd at samba.org> * BUG 12285: s3-spoolss: Fix winreg_printer_ver_to_qword. o Amitay Isaacs <amita...

...rust parameters when listing trusts. * BUG 11753: smbd: Ignore SVHDX create context. * BUG 11763: passdb: Add linefeed to debug message. * BUG 11788: build: Fix disk-free quota support on Solaris 10. * BUG 11798: build: Fix build when '--without-quota' specified. * BUG 11806: vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set. * BUG 11852: libads: Record session expiry for spnego sasl binds. o Hemanth Thummala <hemanth.thummala at nutanix.com> * BUG 11740: Real memory leak(buildup) issue in loadparm. * BUG 11840: Mask general purpos...

...rust parameters when listing trusts. * BUG 11753: smbd: Ignore SVHDX create context. * BUG 11763: passdb: Add linefeed to debug message. * BUG 11788: build: Fix disk-free quota support on Solaris 10. * BUG 11798: build: Fix build when '--without-quota' specified. * BUG 11806: vfs_acl_common: Avoid setting POSIX ACLs if "ignore system acls" is set. * BUG 11852: libads: Record session expiry for spnego sasl binds. o Hemanth Thummala <hemanth.thummala at nutanix.com> * BUG 11740: Real memory leak(buildup) issue in loadparm. * BUG 11840: Mask general purpos...

...gt;>> >>> get_nt_acl_internal: blob hash does not match for file . - returning >>> file system SD mapping. >>> [2016/01/04 15:08:21.484342, 10, pid=10718, effective(110007232, >>> 110000513), real(110007232, 0), class=vfs] >>> ../source3/modules/vfs_acl_common.c:554(get_nt_acl_internal) >>> get_nt_acl_internal: acl for blob hash for . is: >>> [2016/01/04 15:08:21.484352, 1, pid=10718, effective(110007232, >>> 110000513), real(110007232, 0)] ../librpc/ndr/ndr.c:296(ndr_print_debug) >>> pdesc_next: struct sec...

...UG 11819: Fix the smb2_setinfo to handle FS info types and FSQUOTA >      infolevel. > > o  Jorge Schrauwen <sjorge at blackdot.be> >    * BUG 11816: configure: Don't check for inotify on illumos. > > o  Uri Simchoni <uri at samba.org> >    * BUG 11806: vfs_acl_common: Avoid setting POSIX ACLs if "ignore system > acls" >      is set. >    * BUG 11815: smbcquotas: print "NO LIMIT" only if returned quota value > is 0. >    * BUG 11852: libads: Record session expiry for spnego sasl binds. > > o  Hemanth Thummala <...