similar to: any news about rsync and acl's?

Hi Ralph I do not think using xattr_tdb is the right thing to do for my purpose. We do not wish to store/retrieve extended attributes to/from TDB file. *<Ralph>* *Iirc parsing NFSv4 ACLs would require extensions to the module to support the string identifiers and mapping to ids.* *</Ralph>* Can you please elaborate more on which extensions you referred to? What all basic things do

Hi Ralph Thanks a lot. With xattr_tdb I could at least list the files getting rid of access denied error. I still do not see the exactly mapped ACEs in the Security Descriptor of a file in Windows Explorer but I will debug that little further and then come back with questions. I see only 1 entry of Everyone on Windows client side if there are added ACEs using nfs4_setfacl. Let me know if that

Good morning, folks. I'm involved in a project to enforce NFSv4 ACL's across a variety of storage platforms, in particular NetApps sharing NFS. That works fiine with the NetApp NFS qtrees, but we'd like to share those with CIFS clients as well. This works, and restricts access the way we expect NFSv4 ACL's to work, but the Windows clients cannot view any of the security settings

Hello Jeremy and Ralph Thanks for your suggestions. I compiled samba-4.8.0 and running it instead of samba-4.6.2. I saw the changes that you mentioned in the latest vfs_nfs4acl_xattr module. The operation not supported error is gone but it is now failing with access denied. Here is what I tried: *[root at test3 ajain]# net conf showshare local[local] path = /home/ajain/mount

Hi all. Several years ago, Linux's CIFS kernel driver has implemented two little-known options, "idsfromsid" and "modefromsid" for Unix permission emulation. When both options are enabled, the Unix file user, group, and permissions are stored as SMB ACL entries, and is translated from, to, and checked as Unix permissions by the Linux client itself, without server

Hi, I am looking for a method of syncing NFS directories (Netapp qtrees) that contains NFSv4 ACLs. We copy qtrees (millions of files, xx TB) from one qutree into another one. The only tool we currently use is (netapp internal) ndmpcopy, it preserves ACLs but is slow. Netapp "xcopy" tool is also not aware of NFSv4 ACLs. rsync that is aware of NFSV4 ACLs would be a smart solution for

I am running a test system with Solaris 10u6 and I am somewhat confused as to how ACE inheritance works. I''ve read through http://opensolaris.org/os/community/zfs/docs/zfsadmin.pdf but it doesn''t seem to cover what I am experiencing. The ZFS file system that I am working on has both aclmode and aclinherit set to passthrough, which I thought would result in the ACEs being just

I'm running the latest FreeBSD 10.0-CURRENT with samba 3.6.5. I'm sharing some folders from a ZFS file system properties of the zfs filesystem: tank/users aclmode passthrough inherited from tank tank/users aclinherit passthrough received When I create a file via a windows client on the shared volume following ACL is applied: getfacl

On 1 September 2016 at 13:15, Rowland Penny via samba <samba at lists.samba.org > wrote: > On Thu, 1 Sep 2016 12:24:38 +0100 > Cameron Murdoch via samba <samba at lists.samba.org> wrote: > > > Hi, > > > > I'm having the following issue when trying to switch from > > samba_internal to bind9_dlz. I have been following the procedure here: > >

On Fri, Mar 17, 2017 at 1:54 PM, Volker Lendecke <vl at samba.org> wrote: > On Thu, Mar 16, 2017 at 05:38:57PM +0100, Christoph Kleineweber wrote: > > I am wondering if there is a way to bypass Samba's ACL checks and > delegate > > access control completely to the underlying file system. > > > > My problem arises from the following scenario: Our file system

On Thu, 1 Sep 2016 13:31:57 +0100 Cameron Murdoch via samba <samba at lists.samba.org> wrote: > On 1 September 2016 at 13:15, Rowland Penny via samba > <samba at lists.samba.org > > wrote: > > > On Thu, 1 Sep 2016 12:24:38 +0100 > > Cameron Murdoch via samba <samba at lists.samba.org> wrote: > > > > > Hi, > > > > > >

Hi people, I'm testing Samba 4.0.17 running as classic pdc mode under FreeBSD 10 and 9.2 , all shares are on ZFS volumes, i would like to use UFS instead of ZFS , but according the wiki page https://wiki.freebsd.org/NFSv4_ACLs nfsv4 inheritance flags works only with ZFS , i tried the parameters inherit acls and inherit permissions with module vfs_zfsacl on the UFS shares but got no success

I''m currently prototyping a Solaris file server that will dish out user home directories and group project directories via NFSv4 and Samba. I have samba configured and integrated into our local active directory, with ACL mapping working. I''m a little confused as to the behavior of the ZFS ACL though. on a brand-new filesystem, touching a file results in: -rw-r--r-- 1 root

On Thu, Dec 03, 2015 at 03:54:21PM -0700, Nick Couchman wrote: > I have a situation where I need to share, via Samba, a filesystem mounted via NFSv4. I'm struggling with the best way to make Samba see the NFSv4 ACLs and enumerate them to provide the proper SMB/CIFS access to the files, instead of "Access Denied" errors that I currently get. > > Looking at the Samba source,

On Thu, Dec 03, 2015 at 06:03:39PM -0700, Nick Couchman wrote: > > > On Dec 3, 2015, at 17:24, Jeremy Allison <jra at samba.org> wrote: > > > >> On Thu, Dec 03, 2015 at 03:54:21PM -0700, Nick Couchman wrote: > >> I have a situation where I need to share, via Samba, a filesystem mounted via NFSv4. I'm struggling with the best way to make Samba see the

Hello, long time lurker, first time writer.... We have the following set up ITSP | | Internet | | Cisco 2600 | | Switch----Asterisk Server running 1.0.9(has public ip) | | Cisco 515e Pix Firewall running Pix OS 5.3(run's a class c 1-to-1 nat and pat) | | Grandstream GXP-2000(run latest fw from grandstream site 1.0.1.9) The grandstream registers with the public asterisk server fine. I even

Hello, I am running Samba 3.0.28 on a Solaris 10 8/07 x86_64 machine. Directory services and authentication are provided by MS Active Directory's LDAP and Kerberos. My problem is that, when attempting to add an ACE to a file from Windows (XP, SP2), I get an error saying "Access Denied". The share is a directory on a ZFS filesystem (NFSv4 ACLs). Below is the share definition:

Hi, We are running into a problem with a Samba setup and would like to know if a current fix or workaround is at all possible. Our setup is a NetApp filer serving NFS v4 that is mounted by Solaris and Linux servers. On those servers we are using Samba to create shares of those NFSv4 mounted filesystems. We are migrating to this NFSv4 setup from an existing Solaris NFSv3+Posix ACL setup that also

hi there - is it possible to share a directory via samba and (kernel-)nfsv4 in parallel and make samba use (ie.: read, write and enforce) nfsv4 acls to implement winnt-acls? i know that using nfs3 and posix acls is working halfway okay, but couldn't find anything useful for nfsv4 and the associated acls - sorry if i missed something obvious. i played around with the nfs4acl_xattr and

----- Original Message ----- > From: "Jeremy Allison" <jra at samba.org> > To: "Nick E Couchman" <nick.couchman at seakr.com> > Cc: samba at lists.samba.org > Sent: Thursday, December 3, 2015 6:13:51 PM > Subject: Re: [Samba] Linux & NFSv4 ACLs > On Thu, Dec 03, 2015 at 06:03:39PM -0700, Nick Couchman wrote: >> >> > On Dec 3,