similar to: Speed of smbcacls?

Hi all, Well, I'm getting somewhere I think, I now have both ACL support and domain login basically working. However I'm at a bit of a loss as to how to proceed. Basically I want to copy over a large number of files and directories (~300k files, ~60Gb total) from an existing W2k server to a Samba server. These files have existing ACLs set, so I need to preserve them somehow. I can

It sounds like smbd isn't linking to the acl libs-have you run ldd against winbindd to see if it is linking to libacl.so.1? I recently had very similar symptoms running 2.2.7 under Debian and I found that I wasn't compiling against the acl libs. Make sure you have the line (this might work best if you put this line before --with-msdfs) --with-acl-support in debian/rules, Plus you have to

Hi all, I'm using the latest alpha version (the one that comes with Debian unstable) in domain mode, setting up a member file server, with domain clients authenticating to a W2k machine. I'm trying to use the "add user script" option to create new users automagically, but it never seems to run. The script in this case is a handwritten perl script, and I've added a

Hi all, I'm having trouble making Samba recognise ACLs properly - a W2k client isn't using them fully. I have patched the kernel, recompiled Samba, etc. I've gotten it working to the point where the kernel-side of things seems to work fine (with getfacl, etc). Also, the W2k machine (via Samba) can see the ACL settings that are applied to a file. The problem arises when I try

I had a similar issue on my Debian box. It seemed that setfacl didn't care for special characters. I changed the separator character to - (dash) instead of + or \ and it worked fine. Good luck! Tom Hallewell Radio Free Asia Washington DC USA > > (offlist replies discontinued due to increasing large number of people > involved) > > Gareth Davies wrote: > >

You should be able to find the server in W2K's server manager and confirm that it is a trusted member of the Domain. It sounds like smbd isn't linking to the acl libs-have you run ldd to see if you are linking to libacl.so.1? My recent problem was similar and I found that I wasn't compiling against the acl libs. Make sure you have the line (Max said you should have this before

Hi all, I'm trying to use xcopy /o to copy files from a W2k file server to a Samba 2.2.7 box (Samba manually compiled with ACLs). I'm coming up with Access Denied, as documented here: http://lists.samba.org/pipermail/samba/2002-June/074548.html I gather that the "force unknown acl users" config option is supposed to fix that, although I haven't had a chance to try it out

Hi all, The two problems I'm having with ACLs on a W2k domain are still no closer to a solution. To wit, they were: (a) Users accessing the ACL properties dialog on W2k can modify and remove existing ACLs on a given file, but they cannot add new ones (that can only be done with setfacl on the cmdline; the changes are then recognised); (b) In said ACL properties dialog, the usernames

Hi all, I have a 2.2.7a member server (on Debian unstable), acting as a file server for a W2k domain (which also has some NT4 clients, ie. mixed mode). I'm also using ACLs. Imagine I have a file on the server with an ownership of DOMAIN+foo (full permission - rwx). I also have a user ACL on that file of DOMAIN+bar, also rwx. This all works fine. I was initially running into a problem

if i understand correctly, only the owner, and root, can change attributes of a file? thus, even though group members may be given permissions to write, and delete, a file, they cannot change attributes, without the workaround of copying and replacing the file? and do i understand correctly that on winnt and successors, permission to change attributes (eg 'everything' permission) can be

On Thu, Jun 08, 2017 at 09:23:50AM -0700, Andy Qian via samba wrote: > Hi, all, > > we run smbcacls tool from linux machine to set file permissions on > windows server. > > here is our environment: > > > Linux machine: Ubuntu 14.04 LTS, kernel version 3.13.0-112-generic > > Samba version: 4.3.11 > > Windows machine: Windows server 2012 > > >

(Is this the right place to post such question?) I can't seem to grasp the right syntax for smbcacls This is a 306rc2, security=user system w/ passwords set via smbpasswd, and smbclient gives expected r/w behavior.I've seen the same on a 302a security=domain or ads system (I believe), which is why I think I'm misinterpreting something (or is smbcacls broken??) -- or what

On Thu, Jun 08, 2017 at 02:40:49PM -0700, Jeremy Allison wrote: > On Thu, Jun 08, 2017 at 06:43:34PM +0200, Ralph Böhme via samba wrote: > > Hi Andy, > > > > On Thu, Jun 08, 2017 at 09:23:50AM -0700, Andy Qian via samba wrote: > > > The smbcacls cmd worked before till recently. Due to the recent Windows > > > patch which disables SMB v1, we have to add the

Hi, all, we run smbcacls tool from linux machine to set file permissions on windows server. here is our environment: Linux machine: Ubuntu 14.04 LTS, kernel version 3.13.0-112-generic Samba version: 4.3.11 Windows machine: Windows server 2012 the cmd we run is something like following: /usr/bin/smbcacls -U 'Domain\Administrator'%'pwd' '//win_server/testshare'

I have installed Samba 3.5.2 and setup the service as a Domain member server, NT-4 style. Everything appears to be working just fine (NSS winbind is installed). The only problem is that the output from smbcacls when contacting this Samba server does not include the domain to which the server is joined. When I use smbcacls to test out an existing Windows server, the domain name is appended in

I am able to change owner from User1 to Administrator at Domain Controller/active-directory machine. And after that from linux box, using smbcacls -C DOMAIN\\User1 ...... command I am able to change owner from Administrator --> User1. But changing owner from User1 to Administrator using smbcacls is not working.   User1 is in Domain admins, Administrators , backup operators

hi. sorry for the "dumb" question, but I'm failing to figure out where the information printed by smbcacls come from. I have a 3.4.x server with basic settings, few shares and not much more. Share's access is controlled by unix file permissions. Filesystem has "acl" enabled, but no acl set up, so the standard unix permissions are being used. Still I have problem for a

On Thu, Jun 08, 2017 at 06:43:34PM +0200, Ralph Böhme via samba wrote: > Hi Andy, > > On Thu, Jun 08, 2017 at 09:23:50AM -0700, Andy Qian via samba wrote: > > The smbcacls cmd worked before till recently. Due to the recent Windows > > patch which disables SMB v1, we have to add the following line into the > > [global] section in smb.conf file on Linux machine so that

I want to get ACLs (output similar to that of smbcacls) for a *lot* of files (potentially millions). I can only process about 10 files per second when running the command (`smbcacls -U ...` via a Python wrapper), I'm looking for a faster way. Does anyone know any libraries or other commands that could help me? Failing that, I assume that much of the time taken is spent on authenticating

I'm trying to set up a Samba server with ACLS. Versions: - xfs in kernel-2.4.20. - samba-2.2.7a compiled with ACL support I'm trying first with smbcacls. But I can't manage to guess the syntax of the ACL command. I want the user "frankie" could RWX a file owned by "javi" #smbcacls //localhost/public te1st.txt -A ACL:frankie:0/0/RWX -U javi Failed to parse ACL