search for: vfs_acl_tdb

...our fileserver from an old novell netware system to a samba4 system. With netware all ACL were stored in a database, so that it was possible to quickly find which files one user or group had access to. I'm investigating the possibility of writing ntfs ACL on a database with samba. The module vfs_acl_tdb is able to do this, but values are hashed so that the db is not queryable. Does anyone knows of a way to achieve this? I've had a look at the code of the vfs_acl_tdb module and, for what I understood, the ACL are written both on a tdb and on the filesystem. What's the behaviour of the mo...

...old novell netware system to > a samba4 system. With netware all ACL were stored in a database, so > that it was possible to quickly find which files one user or group > had access to. > I'm investigating the possibility of writing ntfs ACL on a database > with samba. The module vfs_acl_tdb is able to do this, but values > are hashed so that the db is not queryable. > Does anyone knows of a way to achieve this? Hmmm. tdb is merely a key/value lookup store. Queries on non-keys have to be done by traversing the whole db I'm afraid. You could always change to a sqlite backend...

...t; a samba4 system. With netware all ACL were stored in a database, so >>> that it was possible to quickly find which files one user or group >>> had access to. >>> I'm investigating the possibility of writing ntfs ACL on a database >>> with samba. The module vfs_acl_tdb is able to do this, but values >>> are hashed so that the db is not queryable. >>> Does anyone knows of a way to achieve this? >> Hmmm. tdb is merely a key/value lookup store. Queries on non-keys >> have to be done by traversing the whole db I'm afraid. >> &g...

Hi volks, i want to ask if the "fs_acl_xattr" and "vfs_acl_tdb" in samba 3.3 are now "stable" or if its planned to be stable in 3.4 What is the experience with this vfs modules in 3.3 ? Bye, Andy

...m to > > a samba4 system. With netware all ACL were stored in a database, so > > that it was possible to quickly find which files one user or group > > had access to. > > I'm investigating the possibility of writing ntfs ACL on a database > > with samba. The module vfs_acl_tdb is able to do this, but values > > are hashed so that the db is not queryable. > > Does anyone knows of a way to achieve this? > > Hmmm. tdb is merely a key/value lookup store. Queries on non-keys > have to be done by traversing the whole db I'm afraid. > > You coul...

On Mon, Mar 21, 2016 at 01:28:44PM +0100, Matteo Maretto wrote: > Hi, > thanks for your question. > We have not investigated this matter yet, but we espect to find at least a > basic correspondence between the two. This would be enough for us. > On the Novell documentation we've read that the object rights are > essentially four: Browse, Create, Delete, Inheritance Control,

...rap.c:216 #7 0x00007fc5a191ba48 in dbwrap_fetch_locked (db=db at entry=0x7fc5a894eb20, mem_ctx=mem_ctx at entry=0x7fc5a893aaa0, key=...) at ../lib/dbwrap/dbwrap.c:235 #8 0x00007fc58d962855 in acl_tdb_lock (id=0x7ffd4d922300, db=0x7fc5a894eb20, mem_ctx=0x7fc5a893aaa0) at ../source3/modules/vfs_acl_tdb.c:106 #9 acl_tdb_delete (db=db at entry=0x7fc5a894eb20, psbuf=psbuf at entry=0x7fc5a895df68, handle=0x7fc5a8945100) at ../source3/modules/vfs_acl_tdb.c:122 #10 0x00007fc58d962fe3 in unlink_acl_tdb (handle=0x7fc5a8945100, smb_fname=<optimized out>) at ../source3/modules/vfs_acl_tdb.c:...

...191ba48 in dbwrap_fetch_locked > (db=db at entry=0x7fc5a894eb20, mem_ctx=mem_ctx at entry=0x7fc5a893aaa0, > key=...) at ../lib/dbwrap/dbwrap.c:235 > #8 0x00007fc58d962855 in acl_tdb_lock (id=0x7ffd4d922300, > db=0x7fc5a894eb20, mem_ctx=0x7fc5a893aaa0) > at ../source3/modules/vfs_acl_tdb.c:106 > #9 acl_tdb_delete (db=db at entry=0x7fc5a894eb20, > psbuf=psbuf at entry=0x7fc5a895df68, > handle=0x7fc5a8945100) > at ../source3/modules/vfs_acl_tdb.c:122 > #10 0x00007fc58d962fe3 in unlink_acl_tdb (handle=0x7fc5a8945100, > smb_fname=<optimized out>) > a...

My organization is in the position of having to support full Windows ACLs on CIFS shares. We've been successfully utilizing Samba 3.5.10-125 and vfs_acl_tdb to accomplish that. However, the size of the resulting /var/lib/samba/state/file_ntacls.tdb[.unique-extension] file(s) has introduced some new problems for me to solve. In our environment, it seems on average each stored ACL causes file_ntacls.tdb to grow by almost 1000 bytes. That's what I...

Hi! Could you explain what does mean 'Fix bugs with the full Windows ACL support' in samba 3.5.0pre2 release notes. I am asking because I know that samba 3 does not support full Windows ACL (Samba 4 will be supporting in user space). Best regards /Aleksey Konradov -- You Rock! Your E-Mail Should Too! Signup Now at Rock.com and get 250MB of Storage! http://webmail.rock.com/signup/

Is the ?important" vfs objects parameter documented in a man page anywhere? It appears in the man pages of several vfs modules, but never fully documented that I could find. Apparently it once was from a now dead link https://www.samba.org/samba/docs/old/Samba3-HOWTO/smb.conf.5.html#VFSOBJECTS <https://www.samba.org/samba/docs/old/Samba3-HOWTO/smb.conf.5.html#VFSOBJECTS> . Todd

...its over all returned SMB2 replies. * BUG 8631: POSIX ACE x permission becomes rx following mapping to and from a DACL. * BUG 8636: When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field. * BUG 8644: vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL. * BUG 8663: Fix deleting a symlink if the symlink target is outside of * the share. * BUG 8664: Fix renaming a symlink if the symlink target is outside of the share. * BUG 8673: Fix NT ACL iss...

...its over all returned SMB2 replies. * BUG 8631: POSIX ACE x permission becomes rx following mapping to and from a DACL. * BUG 8636: When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field. * BUG 8644: vfs_acl_xattr and vfs_acl_tdb modules can fail to add inheritable entries on a directory with no stored ACL. * BUG 8663: Fix deleting a symlink if the symlink target is outside of * the share. * BUG 8664: Fix renaming a symlink if the symlink target is outside of the share. * BUG 8673: Fix NT ACL iss...

...- TALLOC_FREE(sys_acl_blob.data); > return status; > } > > -- > 2.7.4 > > > From 9a9795133dfc713dd5008eb8705d5b7f72ae1f91 Mon Sep 17 00:00:00 2001 > From: Ralph Boehme <slow at samba.org> > Date: Wed, 24 Aug 2016 10:01:17 +0200 > Subject: [PATCH 07/12] vfs_acl_tdb|xattr: use a config handle > > Better for performance and a subsequent commit will add one more option > where this will pay off. > > Signed-off-by: Ralph Boehme <slow at samba.org> > --- > source3/modules/vfs_acl_common.c | 50 ++++++++++++++++++++++++++++++++--------...

On Fri, Aug 26, 2016 at 06:33:26PM +0200, Ralph Böhme via samba wrote: > On Thu, Aug 25, 2016 at 12:14:00PM -0700, Jeremy Allison wrote: > > On Wed, Aug 24, 2016 at 04:06:42PM +0200, Ralph Böhme via samba wrote: > > > > > > Yeah, as much as I'd like to avoid adding a new option, I guess we > > > have to do something about it, my latest take on this is >

...BUG 8561: Fully observe password change settings. * BUG 8631: Fix POSIX ACE x permission mapping to and from a DACL. * BUG 8636: When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field. * BUG 8644: Make sure that vfs_acl_xattr and vfs_acl_tdb modules add inheritable entries on a directory with no stored ACL. * BUG 8663: Fix deleting a symlink if the symlink target is outside of the * share. * BUG 8664: Fix renaming a symlink if the symlink target is outside of the share. * BUG 8673: Fix NT ACL issue. * BU...

...BUG 8561: Fully observe password change settings. * BUG 8631: Fix POSIX ACE x permission mapping to and from a DACL. * BUG 8636: When returning an ACL without SECINFO_DACL requested, we still set SEC_DESC_DACL_PRESENT in the type field. * BUG 8644: Make sure that vfs_acl_xattr and vfs_acl_tdb modules add inheritable entries on a directory with no stored ACL. * BUG 8663: Fix deleting a symlink if the symlink target is outside of the * share. * BUG 8664: Fix renaming a symlink if the symlink target is outside of the share. * BUG 8673: Fix NT ACL issue. * BU...

...- TALLOC_FREE(sys_acl_blob.data); > return status; > } > > -- > 2.7.4 > > > From 69cd4f376d0a287719eadf96ca3324e76317ab66 Mon Sep 17 00:00:00 2001 > From: Ralph Boehme <slow at samba.org> > Date: Wed, 24 Aug 2016 10:01:17 +0200 > Subject: [PATCH 07/13] vfs_acl_tdb|xattr: use a config handle > > Better for performance and a subsequent commit will add one more option > where this will pay off. > > Bug: https://bugzilla.samba.org/show_bug.cgi?id=12177 > > Signed-off-by: Ralph Boehme <slow at samba.org> > --- > source3/module...

On Fri, Aug 26, 2016 at 04:03:49PM -0700, Jeremy Allison wrote: > On Fri, Aug 26, 2016 at 02:46:19PM -0700, Jeremy Allison via samba wrote: > > On Fri, Aug 26, 2016 at 06:44:05PM +0200, Ralph Böhme wrote: > > > > > > Cheerio! > > > -slow > > > > Still reviewing this - but a few things that will need changing: > > > > When adding the

...[/quote] > Does this mean you do not have 'vfs objects = acl_xattr' in your smb.conf ? Yes, it means that. I don't have vfs_acl_xattr enabled on our infamous production server, however, I conducted some experiments on a server cloned from it, where I enabled either vfs_acl_xattr or vfs_acl_tdb. I noticed that SaMBa behaves differently in all three scenarios (1. no VFS backend, 2. acl_xattr, 3. acl_tdb). This mail contains the details: https://lists.samba.org/archive/samba/2023-June/245479.html Of the three scenarios, vfs_acl_xattr (plus its option "ignore system acls = yes") se...