similar to: VFS ACL modules - question to developers

Hi, I had issues using"vfs objects = acl_xattr" (possibly too old version [Version 4.13.13-Debian] for the needed "acl_xattr:security_acl_name = user.samba" option needed if running in a non-priv container). So I tried "vfs objects = acl_tdb" and found it working. In https://wiki.samba.org/index.php/File_System_Support I found: File systems without xattr support

Hello, When I am using module acl_tdb and I am trying to get access to directory I am getting call trace in log.ip Best regards! /Adrian Berlin =============================================================== [2010/03/24 13:54:05.295901, 0] lib/fault.c:47(fault_report) INTERNAL ERROR: Signal 11 in pid 15556 (3.5.1) Please read the Trouble-Shooting section of the Samba3-HOWTO [2010/03/24

My organization is in the position of having to support full Windows ACLs on CIFS shares. We've been successfully utilizing Samba 3.5.10-125 and vfs_acl_tdb to accomplish that. However, the size of the resulting /var/lib/samba/state/file_ntacls.tdb[.unique-extension] file(s) has introduced some new problems for me to solve. In our environment, it seems on average each stored ACL causes

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I'm trying to setup a CTDB-Cluster together with GLusterFS. GlusterFS is running great. CTDB can connect to the gluster-volume. I can store files, using Windows or Linux, and set new acls on the commandline of the cluster. BUT as soon as I try to set permissions via windows it fails with "the request is not supported" I use

Hi Rowland, Thanks for taking the time to look at this. I will post the log 10 output a bit later. Btw, what logs with log level 10 are you interested in? Here’s my samba config with sensitive info replaced with placeholders: [global] access based share enum = yes browseable = yes comment = <COMMENT> create mask = 0660 directory mask =

Hello, Does anyone test ZFS on Linux and ACLs? I can't setup POSIX ACLs and any extended even using acl_xattr or acl_tdb. Is any way to use ACLs with ZFS on Linux (Samba 3 or 4)? Best regards /Adrian Berlin --

Hi list, I have managed to grant a specific user access to a sub-folder (sub-level 3 from the share's entry point, I think) on a Samba 4 share he/she is not allowed and not able to access in total/general. I tried 2 different ways with one of them working. I'd like to discuss why that is. For the sake of an example, let's say the share is for teaching material (exam templates,

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 To show what we did here the entry in /etc/fstab: knoten-01:/gv0 /glusterfs glusterfs defaults,_netdev,acl,selinux 0 0 Am 17.11.2015 um 18:22 schrieb Michael Adam: > We just analyzed the situation together, and the solution is that > in order to access security.FOOBAR xattrs on the gluster fuse > mount, you have to specify the

Hello, How to manage acl from command line when using acl_tdb module?

Hello all I am now experimenting with samba 3.3.0 and acl_xattr. I can see that there is another method of storing Windows ACLs: acl_tdb. Can someone here tell me something about the relative merits and demerits of those two methods? I am using CenttOS with an ext3 filesystem. Thank you!

Hello, What is simplest way to backup/restore acl's if using acl_tdb module? Thanks.

Yes On Mon, Jan 9, 2017 at 9:57 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Mon, 9 Jan 2017 09:35:08 -0600 > Sergei Gerasenko <sgerasenko74 at gmail.com> wrote: > > > Ok, reviewing the configs I posted before, I screwed up big time by > > posting the example share config into the global config. So sorry > > about that. > > >

Hi, we are migrating our fileserver from an old novell netware system to a samba4 system. With netware all ACL were stored in a database, so that it was possible to quickly find which files one user or group had access to. I'm investigating the possibility of writing ntfs ACL on a database with samba. The module vfs_acl_tdb is able to do this, but values are hashed so that the db is not

We are using SAMBA 3.6.6 on Centos 5 with the acl_tdb VFS module. Our share is backed by storage on a SAN devices that does not support ACLs or extended attributes ... so we're trying the acl_tdb module as a mechanism to support Windows ACLs. We have verified that samba has ACL support enabled, and ACL support works find if we export the share from the local EXT4 filesystem. When trying to

HI , We have come up with a utility called smbxcals which is derived from smbcals, where we no need to establish the client connection to perform ACLs operations, by just giving the absolute path as a paratmeter can list and set ACLs as below, # smbxcacls /root/FOO/ REVISION:1 CONTROL:0x8404 OWNER:DEMOSP\Administrator GROUP:DEMOSP\Domain Users ACL:BUILTIN\Administrators:ALLOWED/OI|CI|I/FULL

Solaris OS has ZFS as primary filesystem, that has own implementation of ACL (NFS v4 ACL). Samba uses zfsacl and acl_xattr modules for converting NT ACL to ZFS ACL and extended attributes of file in this OS. ZfsOnLinux team ported ZFS as a number of kernel-linked modules to Linux OS, so ZFS on Linux supports NFS ACL, deduplication, compresson and other features of Solaris ZFS v.28. But NFS ACL is

I have ACLs working for files with the following set in my share definitions: inherit permissions = yes inherit acls=yes map acl inherit=yes vfs_objects = acl_tdb While testing my Samba configuration, I found that permissions are being set to 'special' for directories being copied from Windows instead of the ACL being fully populated. Does Samba 3.6 fully implement ACLS, or are

On Fri, Mar 18, 2016 at 10:08:42AM -0700, Jeremy Allison wrote: > On Wed, Mar 16, 2016 at 11:13:12AM +0100, Matteo Maretto wrote: > > Hi, > > we are migrating our fileserver from an old novell netware system to > > a samba4 system. With netware all ACL were stored in a database, so > > that it was possible to quickly find which files one user or group > > had

Good morning people, I try to create a master file on a samba share (Linux server, serving files via the Samba protocol). I have write-access on the folder and saving a 'normal' revit file works perfectly. However, when I try to save a master file (checking the checkbox in options), I get the error: Unable to write, it is read only or opened by somebody else. "Encountered

Hi, Is there any drawbacks of using "nt acl support = No" on a share ? I mean breaking applications ? I do not want users to change permissions from Windows. With nt acl support = No, icacls returns no permissions Users have Full Control. It's fine for me that Security tab disappears. Users can access Linux shell, and i only want users to modify permissions from Linux.