search for: zfsacl

...= Home Directories read only = No create mask = 0640 directory mask = 0751 force directory mode = 0751 directory security mask = 0750 inherit owner = Yes browseable = No browsable = No level2 oplocks = No vfs objects = zfsacl nfs4:mode = special [projects] comment = Project space path = /XKA1/projects read only = No create mask = 0775 directory mask = 02771 inherit permissions = Yes inherit acls = Yes vfs objects = zfsacl nfs4:mode = specia...

I am looking for where zfsacl settings such as, zfsacl: acesort = dontcare , are documented. Do I need NFS settings such as, nfs4: mode = simple , if I am not using NFS? If I do, where are they documented? Thanks

Looking to see if any one else is having this issue. Running 3.4.5 on solaris 10 with ZFS file system. When I add the vfs objects = zfsacl, Windows clients seem to fine but all my Mac OS X clients can no longer access folders on the share. They can mount the share fine but permissions are not being followed for Mac clients. "The folder "Name" could not be opened because you do not have sufficient access privilege...

...ble = no veto files = /.snapshot/.windows/.mac/.zfs/ writeable = yes browseable = yes shadow:snapdir = .zfs/snapshot shadow:sort = desc shadow:localtime = yes shadow:format = auto-%Y%m%d.%H%M-1w shadow:snapdirseverywhere = yes vfs objects = shadow_copy2 zfs_space zfsacl aio_pthread streams_xattr hide dot files = yes guest ok = no nfs4:mode = special nfs4:acedup = merge nfs4:chown = true zfsacl:acesort = dontcare veto oplock files = /*.dbf/*.DBF/*.ndx/*.NDX/ [deploy] path = /mnt/trunk/MM/deploy printable = no veto files = /...

...XAMPLE-user EXAMPLE-admin @"EXAMPLE-domain admins" # ZFS stuff read only = no inherit permissions = Yes # allow ZFS to handle inheritance inherit acls = No inherit owner = Yes force unknown acl user = No store dos attributes = yes map read only = no map acl inherit = yes vfs objects = zfsacl acl_xattr audit netatalk nfs4:mode = special nfs4:acedup = merge nfs4:chown = yes #============================ Share Definitions ============================== # Share - man smb.conf for details [public] comment = test share # this share resides on an UFS filesystem! path = /zdata/pu...

I'm using zfsacl on samba 4.6.6 on FreeBSD. File system ACLs work correctly, and Computer Management allows me to set share permissions (permissions are updated and displayed back correctly), but access doesn't appear to honor the configured share permissions. For example, users with file level ACLs that grant...

...cle:versions = yes recycle:touch = yes recycle:directory_mode = 0777 recycle:subdir_mode = 0700 shadow:snapdir = .zfs/snapshot shadow:sort = desc shadow:localtime = yes shadow:format = auto-%Y%m%d.%H%M-2w shadow:snapdirseverywhere = yes vfs objects = shadow_copy2 zfsacl hide dot files = yes guest ok = no nfs4:mode = special nfs4:acedup = merge nfs4:chown = true zfsacl:acesort = dontcare [OPEN] path = /mnt/vol0/OPEN printable = no veto files = /.snapshot/.windows/.mac/.zfs/ writeable = yes browseable = yes recyc...

...ac/.zfs/ > writeable = yes > browseable = yes > shadow:snapdir = .zfs/snapshot > shadow:sort = desc > shadow:localtime = yes > shadow:format = auto-%Y%m%d.%H%M-1w > shadow:snapdirseverywhere = yes > vfs objects = shadow_copy2 zfs_space zfsacl aio_pthread streams_xattr > hide dot files = yes > guest ok = no > nfs4:mode = special > nfs4:acedup = merge > nfs4:chown = true > zfsacl:acesort = dontcare > veto oplock files = /*.dbf/*.DBF/*.ndx/*.NDX/ > > > [deploy] > path...

..., class=vfs] ../../source3/modules/vfs_default.c:1327(vfswrap_fsctl) FSCTL_GET_SHADOW_COPY_DATA: 0 volumes for path[Program Files]. The share configuration is done like so: [public] comment = Public path = /public read only = no public = yes vfs objects = zfsacl shadow_copy2 shadow:snapdir = .zfs/snapshot shadow:format = zrepl_%Y%m%d_%H%M%S_000 shadow:localtime = no shadow:sort = desc acl allow execute always = yes map acl inherit = yes store dos attributes = yes ie it is mounted at /public, and snap...

...0, Dante Colo wrote: > > If you add to vfs module to a share you also have to explicit add acl_xattr , that's what i do when i want to add another module and keep acl_xattr on the same share, if i'm not doing right way someone correct me . > I am already have 'vfs objects = zfsacl' set for my ZFS shares so acl_xattr does not help at all. acl_xattr adds two more entries to the Security Permissions list: CREATOR OWNER and CREATOR GROUP. With out acl_xattr I have only: root, wheel and Everyone. If seems full_audit/audit vfs works with acl_xattr and do not handle zfsa...

...acility = LOCAL7 full_audit:priority = NOTICE aio read size = 1 aio write size =1 [homes] path = /pool1/home/%S read only = no browseable = no create mask = 0640 directory mask = 0750 ea support = yes store dos attributes = yes vfs objects = shadow_copy2 fruit streams_xattr zfsacl full_audit nt acl support = yes inherit acls = no [group] read only = no path = /pool1/group hide unreadable = yes comment = Group spaces of %U create mask = 0660 directory mask = 0770 force create mode = 0660 force directory mode = 0770 ea support = yes store dos attribute...

...ST printable = no veto files = /.snap/.windows/.zfs/ writeable = yes browseable = yes recycle:repository = .recycle/%U recycle:keeptree = yes recycle:versions = yes recycle:touch = yes recycle:directory_mode = 0777 recycle:subdir_mode = 0700 vfs objects = zfsacl streams_xattr aio_pthread hide dot files = yes guest ok = no nfs4:mode = special nfs4:acedup = merge nfs4:chown = yes zfsacl:acesort = dontcare [TESTME1] path = /mnt/vol0/TESTME1 printable = no veto files = /.snap/.windows/.zfs/ writeable = yes brow...

...= yes >> browseable = yes >> shadow:snapdir = .zfs/snapshot >> shadow:sort = desc >> shadow:localtime = yes >> shadow:format = auto-%Y%m%d.%H%M-1w >> shadow:snapdirseverywhere = yes >> vfs objects = shadow_copy2 zfs_space zfsacl aio_pthread >> streams_xattr >> hide dot files = yes >> guest ok = no >> nfs4:mode = special >> nfs4:acedup = merge >> nfs4:chown = true >> zfsacl:acesort = dontcare >> veto oplock files = /*.dbf/*.DBF/*.ndx/*.NDX/ &...

> The workaround may be to have the client log out and log back in after > making the changes. :-)  I just tested on a FreeBSD system. The permissions > work as expected once the client establishes a fresh connection. It appears that when a user has SeDiskOperatorPrivilege​ they always have full access regardless of the share permissions. When I attempt access using credentials

Does anyone know how to get vfs modules - specifically zfsacl and/or nfs4acl - with samba? When I didn’t find it in 16.04, 18.04 or 19.04 ubuntu versions I decided to look elsewhere - Launchpad - but it wasn’t in that build either. So I decided to build from source thinking that there must be an option for it during build time but the Samba build options pag...

...s dos charset = CP437 unix charset = UTF-8 log level = 1 [homes] valid users = %U path = /mnt/volume1/homes/%U comment = Home Directories printable = no veto files = /.snapshot/.windows/.mac/.zfs/ writeable = yes browseable = yes vfs objects = zfs_space zfsacl aio_pthread streams_xattr hide dot files = yes guest ok = no nfs4:mode = special nfs4:acedup = merge nfs4:chown = true zfsacl:acesort = dontcare [Archive] path = /mnt/volume1/Archive printable = no veto files = /.snapshot/.windows/.mac/.zfs/ writeable = yes...

...>> [homes] >> path = /pool1/home/%S >> read only = no >> browseable = no >> create mask = 0640 >> directory mask = 0750 >> ea support = yes >> store dos attributes = yes >> >> vfs objects = shadow_copy2 fruit streams_xattr zfsacl full_audit >> nt acl support = yes >> inherit acls = no >> >> [group] >> read only = no >> path = /pool1/group >> hide unreadable = yes >> comment = Group spaces of %U >> create mask = 0660 >> directory mask = 0770 >&gt...

...ng this and some online help, but am stuck. I'm currently using samba 3.3.9; I've had the same problem with 3.3.7. samba is compiled and running as an Active Directory member server (compiled with ldap and kerberos). The zfs disk is local. I'm not using winbind. I compiled with zfsacl module. Permissions appear just fine in solaris. Plus I can read/write with notepad and use other applications such as acrobat. However, Microsoft Office 2007 won't open or save files. I haven't tried other versions of Office; they're not handy. The following is the configuratio...

I've recently attempted to migrate some windows server files over to samba 4 hosted on a FreeNAS server. Using robocopy with the /copyall switch, I expected everything, including ACL's and ownership information to transfer over. For the most part they have. The one problem I've ran into however, is that I'm getting errors any time I or robocopy attempt to change the ownership to

On Mon, July 13, 2020 10:23, Andrea Venturoli wrote: > On 2020-07-13 15:06, James B. Byrne wrote: > >>> Just out of curiosity, are you also using vfs_zfsacl? >> >> Yes. > > But only on DC1, AFAICT! > I see no mention of it on DC2's smb.conf. > That could be the reason why you have two different behaviour. > > bye > av. > That appears to make no difference: [root at smb4-1 ~ (master)]# grep acl /usr/local/etc...