similar to: security.NTACL Not Being Set Using LXC Containers

Can I use a command like this to clone an NT ACL? getfattr -n security.NTACL templateFile | sed -e 's/templateFile/realFile/' | sudo setfattr --restore=- I can see that the attribute gets copied over but when I view the ACL in Windows security tab it's not the same ACL, it's much bigger and includes all kinds of default-like stuff. I'm trying to find a way to update

OK, thanks, I've seen such an attribute correlation list elsewhere. So what does the 65 character string mean? user.DOSATTRIB=0sMHgyMAAAAwADAAAAEQAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPnD7jBHStABAAAAAAAAAAA= Obviously this isn't a bunch of 0x1's and 0x2s bit fields (or are they?). These attributes are from a file on the Redirected Folders directory hosted on the Samba4 AD/DC. I

I have the following attributes for a typical file on my redirected folders residing on my Samba4 AD/DC: $ getfattr -d "Newletters/Newsletter 2013-09.docx" # file: Newletters/Newsletter 2013-09.docx user.DOSATTRIB=0sMHgyMAAAAwADAAAAEQAAACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPnD7jBHStABAAAAAAAAAAA= What do these characters mean? I'm searching for a particular attribute. I have found

https://bugzilla.samba.org/show_bug.cgi?id=6590 Summary: [sender] could not find xattr #1 for home/jdoe/TheFresh Product: rsync Version: 3.0.5 Platform: Other OS/Version: Linux Status: NEW Severity: normal Priority: P3 Component: core AssignedTo: wayned at samba.org ReportedBy: stlman at

Hi Sambalist, maybe someone with some glusterfs experience can help me. I have a running samba4 installation here. Now i tried to get glusterfs configured so I can use glusterfs as an additional storagesystem. The setup of glusterfs worked pretty easy. I tried multiple configurations with up to 4 virtual machines (Virtual Box). The bricks are xfs-filesystems. Mounting glusterfs (mount -t

On 03/24/2018 08:20 PM, Ken McDonald via samba wrote: > Can I use a command like this to clone an NT ACL? > > getfattr -n security.NTACL templateFile | sed -e > 's/templateFile/realFile/' | sudo setfattr --restore=- > > I can see that the attribute gets copied over but when I view the ACL > in Windows security tab it's not the same ACL, it's much bigger and

Hai, This is al about samba ea ( extended attibutes ) support. Samba can map attibutes in two ways: Mapping DOS file attributes to UNIX permissions Storing the DOS attributes in extended file attributes The user.DOSATTRIB extended attribute contains a bit field indicating the state of each DOS attribute: Read-Only = 0x1 Hidden = 0x2 System = 0x4 Archive = 0x20 and in smb.conf related

Hi all, Is there a way to control the default DOS attributes stored in the user.DOSATTRIB value? I'm using a QNAP NAS device (running Samba) that seems to create files that have the 'hidden' DOS attribute set by the user.DOSATTRIB value as a default. The NAS device's smb.conf has the 'store dos attributes' option set to yes and each of the 'map hidden',

https://bugzilla.samba.org/show_bug.cgi?id=5298 Summary: xattrs and acls do not work well together along with fake-super, even worse on XFS Product: rsync Version: 3.0.0 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P3 Component: core AssignedTo:

I came back on this topic. As just depicted on: https://lists.samba.org/archive/samba/2019-December/227626.html there's no way to run samba AD DC on a unprivileged LXC container, because samba need the XATTR SYSTEM namespace that is reserved on container. Could be doable 'offloading' all XATTR from filesystem with a module like xattr_tdb?

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I notice that there are a few registry updates required for Windows 7 when using Samba as a AD DC (according to the Samba wiki). However I've been able to join a Windows 7 workstation to my Samba4 domain without using any registry tweaks; am I likely to encounter problems? What I've read suggests that these settings are required to

I imagine we can save some space on our file server by cleaning up all the files that are saved multiple times by different people. There is already the fdupes command in linux that will scan a directory tree and report what files have duplicates. This could be easily scripted to turn those duplicate files into symlinks to one file. The problem is see, then, is what would happen if someone

Everyone, I have finally resolved the new heartburn 3.0.24 on Ubuntu Feisty was giving me and have stumbled upon some information that might help others out there. I was seeing problems with ACL entries getting mangled and disappearing, Excel making files read only and extended attributes doing bizarre things. The solution revolved around what appears to be a change in how ACLs are managed.

Hi, I have a question regarding permissions at the top of a share as seen from a Windows 10 client. We are using Samba 4.10.6-Debian (van Belle) on Debian 10 (Buster) with one AD controller and one file server. The top directory of our main share on the file server has, on the Linux level, these permissions reported by getfacl: # file: ... # owner: root # group: domain\040users # flags: ---

On 28.01.2014 12:46, Daniel P. Berrange wrote: > On Tue, Jan 28, 2014 at 12:32:41PM +0100, Jan Olszak wrote: >> Hi there! >> >> I am trying to turn on user namespace by adding following lines to the >> config: >> >> >> >> <idmap> >> >> <uid start='0' target='0' count='100000'/> >>

I cannot access home samba share from windows. Windows client displays a permission denied error. The problem is not Linux permissions for the user directory, permission is still denied when permissions are to 777. I don't think the problem is selinux, because no denials appear in any logs. I don't think it's an extended attributes issue from xfs, because I don't see any attributes

Hi, I read several articles on the internet, but I fail to understand how ACL storage technically works. Of course in almost any case, ACL should not only be stored but also evaluated, and for this this Samba server needs to be a member of the AD domain. I think I understand this, but I have a different use case. I hope someone can help and possibly has a link or such. I have a samba instance

> On 29 Jul 2015, at 10:02, Ralph Böhme <rb at sernet.de> wrote: > Hm, works for me: > > mac$ mount | grep smb > //ralph at 10.10.11.100 <mailto:ralph at 10.10.11.100>/AAPL on /Volumes/AAPL (smbfs, nodev, nosuid, mounted by ralph) > mac$ touch /Volumes/AAPL/test > mac$ xattr -w foo bar /Volumes/AAPL/test > mac$ xattr -l /Volumes/AAPL/test > foo: bar >

Dear all, The system is Ubuntu 12.04 (latest beta as of yesterday) Bind 9.81 (12.04 standard) Samba 4, also git-cloned yesterday. I've imported a zpool created on another ubuntu system with the same version of zfs-linux (RC-8) http://zfsonlinux.org/ The zpool is working perfectly well; responsive, no errors reported, scrubbed. Samba can see the zpool as part of the greater file system and

Am 2019-08-26 um 16:35 schrieb Rowland penny via samba: > On 26/08/2019 15:20, ? Peter Rindfuss via samba wrote: >> Hi, >> >> I have a question regarding permissions at the top of a share as seen >> from a Windows 10 client. >> >> We are using Samba 4.10.6-Debian (van Belle) on Debian 10 (Buster) with >> one AD controller and one file server. >>