similar to: Unknown NFSv4 ACL permission

On Fri, Dec 04, 2015 at 01:37:33PM -0700, Nick Couchman wrote: > ----- Original Message ----- > > From: "Jeremy Allison" <jra at samba.org> > > To: "Nick E Couchman" <nick.couchman at seakr.com> > > Cc: samba at lists.samba.org > > Sent: Friday, December 4, 2015 1:22:06 PM > > Subject: Re: [Samba] Linux & NFSv4 ACLs > >

----- Original Message ----- > From: "Jeremy Allison" <jra at samba.org> > To: "Nick E Couchman" <nick.couchman at seakr.com> > Cc: samba at lists.samba.org > Sent: Friday, December 4, 2015 1:22:06 PM > Subject: Re: [Samba] Linux & NFSv4 ACLs > On Thu, Dec 03, 2015 at 07:31:36PM -0700, Nick Couchman wrote: >> >> Try these pages (U

Ok, i clarify a bit more. \\servername.internal.domain.tld\users2\%username% is used in my AD for the home folder of the users. %username% translates to the username. I tried 2 setups now, windows acl base setup and posix based setup. Both fail for me. THE SERVER with the shares ( and is nfs server) The samba/windows part. ( postix rights setup ) On the server this is /home/samba/users2

----- Original Message ----- > From: "Jeremy Allison" <jra at samba.org> > To: "Nick E Couchman" <nick.couchman at seakr.com> > Cc: samba at lists.samba.org > Sent: Thursday, December 3, 2015 6:13:51 PM > Subject: Re: [Samba] Linux & NFSv4 ACLs > On Thu, Dec 03, 2015 at 06:03:39PM -0700, Nick Couchman wrote: >> >> > On Dec 3,

Thank you. Basically our problem are not the ACLs or their support per se, but that we have to manage a huge number of individual ACLS (several hundred users in more than hundred projects) in multi-petabyte filesystem and still have to keep overview and control. Our problem is more the management side. Effectively we are looking for a tool that helps us manage these permissions and we

On Thu, Dec 03, 2015 at 06:03:39PM -0700, Nick Couchman wrote: > > > On Dec 3, 2015, at 17:24, Jeremy Allison <jra at samba.org> wrote: > > > >> On Thu, Dec 03, 2015 at 03:54:21PM -0700, Nick Couchman wrote: > >> I have a situation where I need to share, via Samba, a filesystem mounted via NFSv4. I'm struggling with the best way to make Samba see the

> On Dec 3, 2015, at 17:24, Jeremy Allison <jra at samba.org> wrote: > >> On Thu, Dec 03, 2015 at 03:54:21PM -0700, Nick Couchman wrote: >> I have a situation where I need to share, via Samba, a filesystem mounted via NFSv4. I'm struggling with the best way to make Samba see the NFSv4 ACLs and enumerate them to provide the proper SMB/CIFS access to the files, instead

Hi, would someone please clarify the behavior of -X --filter='some_filter' to me? I was trying to copy a file on a NFS4 mount and some extended attributes get transferred only when run as a normal user with --super but not as root. If I have a file on nfs4 mount and I set some extended attributes like this: #rsync --version rsync? version 3.1.3? protocol version 31 Copyright (C)

> Samba provides the "nfs4acl_xattr" vfs module precisely for that. I am not an expert in Windows ACL, but where do you see that the nfs4acl_xattr vfs module provides the support for "manage the ACLs on the OS of the Samba host directly?" From the Wiki page, https://wiki.samba.org/index.php/NFS4_ACL_overview, it implies the following four operation modes are possible.

I have a situation where I need to share, via Samba, a filesystem mounted via NFSv4. I'm struggling with the best way to make Samba see the NFSv4 ACLs and enumerate them to provide the proper SMB/CIFS access to the files, instead of "Access Denied" errors that I currently get. Looking at the Samba source, the only obvious NFSv4 stuff appears to be the following: - zfsacl, available

On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > Hi All > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > per strace output of nfs4_setfacl is system.nfs4_acl. > > The source code has defined it as > > #define

How can I best handle file & directory permissions & inheritance when accessing the same data on a remote server from Windows clients through a CIFS share and Linux clients through an NFS export? I have Samba AD working and I believe Winbind is working because when I check permissions from the command line, whether locally on the server or a remote Linux client, with ls, getfacl,

On Wed, Mar 18, 2015 at 01:17:34PM -0400, Kevin Taylor wrote: > I know this was discussed a lot a few years ago, but my google searches aren't quite getting me where I'm confident in the answer, so I figure I'd just ask again here if that's ok. > > Here's what we have, and what we'd like to do: > > Storage is a Netapp (cluster mode CDOT 8.2 I believe),

On 17/11/16 13:15, Reinald Gfuellner via samba wrote: > I try to set up a Samba4-based Fileserver in an Samba3-DC enviroment. > Filesystem is ext4, CIFS + NFS4 should be provided. The same ACLs should > be used over both protocols. > > With Samba 3 this was possible (using POSIX 1003.1e DRAFT 17 ACLs only) > . How can I do the same with Samba 4 ? > > Posix-ACLs set on

On Fri, Apr 06, 2018 at 09:22:17PM +0200, Ralph Böhme wrote: > On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > Hi All > > > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > > per strace output of nfs4_setfacl is

On Fri, Apr 06, 2018 at 09:28:16PM +0200, Ralph Böhme wrote: > On Fri, Apr 06, 2018 at 12:40:31PM -0700, Jeremy Allison wrote: > > On Fri, Apr 06, 2018 at 09:22:17PM +0200, Ralph Böhme wrote: > > > On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > > > > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > > > Hi

I have an NFS4 server exporting a folder, and a Samba server importing that folder which it then turns around and shares over Samba. I would like Windows machines accessing this folder and its sub folders to be properly restricted according to ACLs. The NFS4 server is running CentOS 5.7 and is NFS exporting an EXT4 folder. The Samba server is running CentOS 6.0, and Samba 3.5.4-68.el6_0.2. On the

I try to set up a Samba4-based Fileserver in an Samba3-DC enviroment. Filesystem is ext4, CIFS + NFS4 should be provided. The same ACLs should be used over both protocols. With Samba 3 this was possible (using POSIX 1003.1e DRAFT 17 ACLs only) . How can I do the same with Samba 4 ? Posix-ACLs set on the server with setfacl are recogniced on a windows-client. But every change I do on a

On Fri, Apr 06, 2018 at 12:40:31PM -0700, Jeremy Allison wrote: > On Fri, Apr 06, 2018 at 09:22:17PM +0200, Ralph Böhme wrote: > > On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > > > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > > Hi All > > > > > > > > I found there is one bug in the plugin. The

Hai marcel, Im using nfsv4 kerberos based host/client. This is the line of the cat /proc/mounts nfs4 rw,relatime,vers=4.0,rsize=131072,wsize=131072,namlen=255,hard,proto=tcp,port=0,timeo=600,retrans=2,sec=krb5,clientaddr=192.168.xx.xx,local_lock=none,addr=192.168.xxx.xxx 0 0 fstab only contains : nfs4 sec=krb5 Yes, i did see the nfs4-acl-tools, seen that, hoped that helped a bit, But i did