similar to: acl inherit

Hello, My samba drive works well on my XP machines and ACLs work fine as well. XP users can add new user permissions to files and folders and they are inherited for all NEW files and folders created in the future. But, adding a new permission on the security tab to a folder does not alter the EXISTING files/sub-folders like it does on a real windows network drive. I am running Samba

Hello List, I've observed the following missbehaivoure, while playing around with nc acl's. (see relevant configuration below): Working with Windows XP: Open acl enabled share Set default share permissions by right click on the explorer's top left clip control -> properties. Under security I remove the CREATOR-OWNER and CREATORUSER Group, as I already know, that these two

Hello dear list members I am not an experienced user of Samba, so I can be committing some basic mistake, but it seems to me that there is something wrong with the way Samba propagates ACLs. I tried versions 3.0.32 and 3.2.4 and the result is the same. This happens with "map acl inherit = yes" on smb.conf. I have a directory (dir) with the following ACLs: # file: dir USER Admin

Hi, I have a problem with the inheritance of ACLs, respectively the removal of the inherited ACLs in subdirectories. The following szenario: By default the access rights (including ACLs) should be inherited, but it should also be possible to remove the access rights from any subdirectory. Therefore I've set up the following configuration: [Finanzen] path = /shares/finanzen msdfs root =

Hello list! For some reason ACL inheritance is not working on my FS. Anytime anyone creates a folder/file under a share, the permissions are not inherited. My system is a 2DC + a FS running samba 4.10.10. Everything self compiled running on Debian Buster. Several shares were created according to https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs By adding the following lines

Hello I'm running Debian Etch with distro kernel & Samba package (2.6.18-5-686 & 3.0.24-6etch9). In my smb.conf I have : inherit owner = yes inherit permissions = yes inherit acls = yes I start with a dir test1 with no rights for group smb-Users, rx for group smb-Inf, and rwx for group smb-Bme-Fr : root@samba1:/mnt/temp # ll total 28 drwxr-xr-x 4 root root 4096 2008-01-04

We have the following share: [users] path = /home read only = No inherit acls = yes inherit permissions = yes inherit owner = yes the /home permissions are: drwxr-xr-x ... root root ... /home There are /home/user1, /home/user2, ... folders. When they are created their permissions are set like this: drwx--Sr-x ... user1 "Domain Users" ...

Look at the acl(5) man page and you'll see that the ACCESS CHECK ALGORITH starts: IF the effective user ID of the process matches the user ID of the file object owner ... ELSE IF the effective user ID of the process matches the qualifier of any entry of type ACL_USER, THEN IF the matching ACL_USER entry and the ACL_MASK entry contain the requested permissions, access is

Hi! We're using sernet-samba 3.0.28-21 on debian. (The smb.conf can be found below) There are 2 subfolders in root share directory "ponudbe" and "projects": srv03:/srv/data/test# getfacl * # file: ponudbe # owner: root # group: root user::rwx user:COMPANY+administrator:rwx group::r-x group:COMPANY+ponudbe_rw:rwx mask::rwx other::--- default:user::rwx

We are running a fileserver (Samba version 3.0.10-1.4E.9) on CentOS 4.4. No AD, clients are Windows XP and OS X. Linux acl's are used for access to directories and files. Each top-level folder belongs to a primary group with mode 2770. The acl's restrict access to lower level directories. We need to pass the acl's down the directory tree or else users may have unexpected access to

I have two users on my network, Mary and Bob, who work together in a shared share. They both belong to the group Accounting. Bob is a savvy Linux user who accesses the share via NFS4. Mary toils away using Windows accessing the share via the Samba server. Mary will create a directory on the share and dump a number of files in which Bob and Mary will split the load. Bob, being a LInux user, will

Hi All, I need to setup the following rights behavior trhough samba and I'm currently stuck after lots of unsuccessful tests. Maybe one of you has an idea or a solution to this problem... Here it comes: - A share must be available only to some users belonging to the "project" group. That's easy: valid users = @project - There are several administrator-created

I noticed that vfs_acl_xattr doesn't work unless all the inherit and map inherit acl parameters are set to yes. Which is fine but if I turn off inherit owner it completely breaks inheritance and security.NTACL never gets set for the file/directory that's created by the user. I want the uid of the user who's connected to be written and not the owner of the parent directory. Is there

Hi everyone, I've noticed a problem with Debian wheezy + samba 3.6.6 configured with acl_xattr in my configuration. The following test sequence causes Windows Explorer to report incorrectly ordered permission entries: 1) Map a share as with "admin" user credentials to a drive letter on a Windows client 2) Create a folder at the root of the share "rootfolder" 3) Create a

Hi, I have a problem with the removal of inheritance ACLs of subdirectories. It almost sounds like only adding ACLs work but removals of inheritance ACL's not. By default the access rights (including ACLs) should be inherited, but it should also be possible to remove the access rights from any subdirectory. This is what I am trying to do, I have a share called media with some users /

Hi, I have a share (testshare) where different unix groups (testgroup1, testgroup2) should have access to. But I want that new files are only created with 660 permissions. Here are the ACL's of testshare: # file: testshare # owner: ralfgro # group: ve user::rwx group::rwx group:testgroup1:rwx group:testgroup2:rwx mask::rwx other::--- default:user::rwx default:group::---

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, http://wiki.dovecot.org/ACL mentions: "Currently there is no ACL inheritance." However this applies to a folder inherit ACLs to existing subfolders; when you share a folder and a non-owner creates a sub-folder within, no ACLs are set, hence, the creator cannot access the new folder. Could the "create mailbox"-process

Hi list, while preparing for the changed ACL/mode_t mapping semantics coming with onnv-147 [1], I discovered that in onnv-134 on my system ACLs are not inherited when aclmode is set to passthrough for the filesystem. This very much puzzles me. Example: $ uname -a SunOS os 5.11 snv_134 i86pc i386 i86pc $ pwd /Volumes/ACLs/dir1 $ zfs list | grep /Volumes rpool/Volumes 7,00G 39,7G 6,84G

Morning all. I am reading trough https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html As I was curious what exactly 'map acl inherit' does. "This boolean parameter is only relevant for systems that do not support standardized NFS4 ACLs but only a POSIX draft implementation of ACLs. Linux is the only common UNIX system which does still not offer standardized NFS4 ACLs

I have just enabled user_xattr on the partition where my samba share is on. Now when I use getfattr I see the extended attribute user.SAMBA_PAI on my files. But ACL inheritance isn't taking place... When I (from within Windows) click on Properties > Security > Advanced an then enable "Allow inheritable permissions..." on a certain file, then the attribute user.SAMBA_PAI