similar to: Use ACL over NFS4

I know this was discussed a lot a few years ago, but my google searches aren't quite getting me where I'm confident in the answer, so I figure I'd just ask again here if that's ok. Here's what we have, and what we'd like to do: Storage is a Netapp (cluster mode CDOT 8.2 I believe), it's NFS exported to our linux system. Linux system is CentOS 6 and can NFS mount the

Hi everyone We're really struggling with nfs4 <--> windows acls. Scenario Samba4 share --> cifs --> win7. No problem Samba4 share --> nfs4 --> Linux. acls not inherited Neither is there inheritance vica versa. e.g. It is not possible to create files with group rw on a umask 0022 nfs4 share. nfs4_setfacl cannot override umask. Using POSIX or windows acls this works

Hi, would someone please clarify the behavior of -X --filter='some_filter' to me? I was trying to copy a file on a NFS4 mount and some extended attributes get transferred only when run as a normal user with --super but not as root. If I have a file on nfs4 mount and I set some extended attributes like this: #rsync --version rsync? version 3.1.3? protocol version 31 Copyright (C)

On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > Hi All > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > per strace output of nfs4_setfacl is system.nfs4_acl. > > The source code has defined it as > > #define

> On Dec 3, 2015, at 17:24, Jeremy Allison <jra at samba.org> wrote: > >> On Thu, Dec 03, 2015 at 03:54:21PM -0700, Nick Couchman wrote: >> I have a situation where I need to share, via Samba, a filesystem mounted via NFSv4. I'm struggling with the best way to make Samba see the NFSv4 ACLs and enumerate them to provide the proper SMB/CIFS access to the files, instead

On Wed, Mar 18, 2015 at 01:17:34PM -0400, Kevin Taylor wrote: > I know this was discussed a lot a few years ago, but my google searches aren't quite getting me where I'm confident in the answer, so I figure I'd just ask again here if that's ok. > > Here's what we have, and what we'd like to do: > > Storage is a Netapp (cluster mode CDOT 8.2 I believe),

Hi All I found there is one bug in the plugin. The name of the attribute for ACL as per strace output of nfs4_setfacl is *system.nfs4_acl.* The source code has defined it as #define NFS4ACL_XATTR_NAME ( "system.nfs4acl" ) Note there is missing underscore. After this, the EOPNOTSUPP error is not observed. Hope this helps Akash On Thu, Apr 5, 2018 at 11:43 PM, Jeremy Allison

On Fri, Apr 06, 2018 at 12:40:31PM -0700, Jeremy Allison wrote: > On Fri, Apr 06, 2018 at 09:22:17PM +0200, Ralph Böhme wrote: > > On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > > > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > > Hi All > > > > > > > > I found there is one bug in the plugin. The

> Date: Thu, 19 Mar 2015 11:59:47 +0100 > From: Volker.Lendecke at SerNet.DE > To: groucho.64738 at hotmail.com > CC: samba at lists.samba.org > Subject: Re: [Samba] NFS4 ACLs with samba 3 (or 4) > > On Wed, Mar 18, 2015 at 01:17:34PM -0400, Kevin Taylor wrote: > > I know this was discussed a lot a few years ago, but my google searches aren't quite getting me where

> Date: Thu, 19 Mar 2015 11:59:47 +0100 > From: Volker.Lendecke at SerNet.DE > To: groucho.64738 at hotmail.com > CC: samba at lists.samba.org > Subject: Re: [Samba] NFS4 ACLs with samba 3 (or 4) > > On Wed, Mar 18, 2015 at 01:17:34PM -0400, Kevin Taylor wrote: > > I know this was discussed a lot a few years ago, but my google searches aren't quite getting me where

Hai..   I need to have my home dirs shared over some of my servers. I did setup a nfs4 kerberos base Debian jessie, samba 4.1.17 and sernet samba 4.1.3 on these servers.   This works, i can mount without problems.   But because verything is created with the windows user tools, the owner/Group is root. Like this   Server:   ls -al drwxrwx---+  2 root  root 4096 Sep  4 13:17

----- Original Message ----- > From: "Jeremy Allison" <jra at samba.org> > To: "Nick E Couchman" <nick.couchman at seakr.com> > Cc: samba at lists.samba.org > Sent: Thursday, December 3, 2015 6:13:51 PM > Subject: Re: [Samba] Linux & NFSv4 ACLs > On Thu, Dec 03, 2015 at 06:03:39PM -0700, Nick Couchman wrote: >> >> > On Dec 3,

Hello Jeremy and Ralph Thanks for your suggestions. I compiled samba-4.8.0 and running it instead of samba-4.6.2. I saw the changes that you mentioned in the latest vfs_nfs4acl_xattr module. The operation not supported error is gone but it is now failing with access denied. Here is what I tried: *[root at test3 ajain]# net conf showshare local[local] path = /home/ajain/mount

----- Original Message ----- > From: "Rowland Penny" <rowlandpenny241155 at gmail.com> > To: samba at lists.samba.org > Sent: Wednesday, August 12, 2015 1:46:53 AM > Subject: Re: [Samba] ACLs on Samba share not preserved when copying with Windows Explorer > > >> > > Hi Rowland, > > > > This Samba 3 server is joined to a Samba 4 AD domain

Am 04.11.2015 um 17:33 schrieb buhorojo: > On 04/11/15 16:50, L.P.H. van Belle wrote: >>> However, I have two objections at first glance: >>> a) if you remove AD access for an AD user, this user can't mount samba >>> shares, because he won't get authenticated correctly (on the Samba file >>> server sharing the homes), no? >> Looks correct to me

Hi Ralph Thanks a lot. With xattr_tdb I could at least list the files getting rid of access denied error. I still do not see the exactly mapped ACEs in the Security Descriptor of a file in Windows Explorer but I will debug that little further and then come back with questions. I see only 1 entry of Everyone on Windows client side if there are added ACEs using nfs4_setfacl. Let me know if that

Hai marcel, Im using nfsv4 kerberos based host/client. This is the line of the cat /proc/mounts nfs4 rw,relatime,vers=4.0,rsize=131072,wsize=131072,namlen=255,hard,proto=tcp,port=0,timeo=600,retrans=2,sec=krb5,clientaddr=192.168.xx.xx,local_lock=none,addr=192.168.xxx.xxx 0 0 fstab only contains : nfs4 sec=krb5 Yes, i did see the nfs4-acl-tools, seen that, hoped that helped a bit, But i did

Hello All I am trying to use nfs4acl_xattr plugin from samba source code. https://www.samba.org/samba/docs/current/man-html/vfs_nfs4acl_xattr.8.html I mounted NFSv4 mount point locally and exported it through samba with vfs objects set to nfs4acl_xattr. *[root at test3 ajain]# net conf showshare local[local] path = /home/ajain/mount comment = local share guest ok =

I try to set up a Samba4-based Fileserver in an Samba3-DC enviroment. Filesystem is ext4, CIFS + NFS4 should be provided. The same ACLs should be used over both protocols. With Samba 3 this was possible (using POSIX 1003.1e DRAFT 17 ACLs only) . How can I do the same with Samba 4 ? Posix-ACLs set on the server with setfacl are recogniced on a windows-client. But every change I do on a

On Fri, Apr 06, 2018 at 09:22:17PM +0200, Ralph Böhme wrote: > On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > Hi All > > > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > > per strace output of nfs4_setfacl is