similar to: NTFS ACL on database and vfs_acl_tdb

Il 19/03/2016 10:20, Volker Lendecke ha scritto: > On Fri, Mar 18, 2016 at 10:08:42AM -0700, Jeremy Allison wrote: >> On Wed, Mar 16, 2016 at 11:13:12AM +0100, Matteo Maretto wrote: >>> Hi, >>> we are migrating our fileserver from an old novell netware system to >>> a samba4 system. With netware all ACL were stored in a database, so >>> that it was

On Fri, Mar 18, 2016 at 10:08:42AM -0700, Jeremy Allison wrote: > On Wed, Mar 16, 2016 at 11:13:12AM +0100, Matteo Maretto wrote: > > Hi, > > we are migrating our fileserver from an old novell netware system to > > a samba4 system. With netware all ACL were stored in a database, so > > that it was possible to quickly find which files one user or group > > had

On Mon, Mar 21, 2016 at 01:28:44PM +0100, Matteo Maretto wrote: > Hi, > thanks for your question. > We have not investigated this matter yet, but we espect to find at least a > basic correspondence between the two. This would be enough for us. > On the Novell documentation we've read that the object rights are > essentially four: Browse, Create, Delete, Inheritance Control,

On Wed, Mar 16, 2016 at 11:13:12AM +0100, Matteo Maretto wrote: > Hi, > we are migrating our fileserver from an old novell netware system to > a samba4 system. With netware all ACL were stored in a database, so > that it was possible to quickly find which files one user or group > had access to. > I'm investigating the possibility of writing ntfs ACL on a database > with

Hi volks, i want to ask if the "fs_acl_xattr" and "vfs_acl_tdb" in samba 3.3 are now "stable" or if its planned to be stable in 3.4 What is the experience with this vfs modules in 3.3 ? Bye, Andy

HI , We have come up with a utility called smbxcals which is derived from smbcals, where we no need to establish the client connection to perform ACLs operations, by just giving the absolute path as a paratmeter can list and set ACLs as below, # smbxcacls /root/FOO/ REVISION:1 CONTROL:0x8404 OWNER:DEMOSP\Administrator GROUP:DEMOSP\Domain Users ACL:BUILTIN\Administrators:ALLOWED/OI|CI|I/FULL

Hi list, I have managed to grant a specific user access to a sub-folder (sub-level 3 from the share's entry point, I think) on a Samba 4 share he/she is not allowed and not able to access in total/general. I tried 2 different ways with one of them working. I'd like to discuss why that is. For the sake of an example, let's say the share is for teaching material (exam templates,

Hi, I'm hoping somebody can point me in the right direction. My samba version is samba-4.2.10-6.2.el7_2.x86_64. I have lots of daily core dumps (~20 on each machine daily) and I have no clear idea why. I'm including the stack trace below. It looks like the problem is related to "invalid lock_order". Any ideas? Thanks, Sergei #0 0x00007fc5a34945f7 in raise () from

On 2019-02-19, Pete Biggs <pete at biggs.org.uk> wrote: > On Tue, 2019-02-19 at 14:26 +0000, Pete Biggs wrote: >> >> It's not a web server port - elasticsearch is a database. > > Sorry, that was a bit abrupt - yes, it sort of looks like a web server. It's a bit of both. It is queryable like a database, but it answers requests using HTTP methods. --keith --

I use rsync for backing up windows. After a restore of Desktop.ini I recognize that the hidden attribut and the system attribut will not been restored. I know, this are no unix attributes. But is there a way to backup and restore the windows attributes too? Thanks Matthias -- Don't Panic

My organization is in the position of having to support full Windows ACLs on CIFS shares. We've been successfully utilizing Samba 3.5.10-125 and vfs_acl_tdb to accomplish that. However, the size of the resulting /var/lib/samba/state/file_ntacls.tdb[.unique-extension] file(s) has introduced some new problems for me to solve. In our environment, it seems on average each stored ACL causes

Hi! Could you explain what does mean 'Fix bugs with the full Windows ACL support' in samba 3.5.0pre2 release notes. I am asking because I know that samba 3 does not support full Windows ACL (Samba 4 will be supporting in user space). Best regards /Aleksey Konradov -- You Rock! Your E-Mail Should Too! Signup Now at Rock.com and get 250MB of Storage! http://webmail.rock.com/signup/

Hi, what mount ntfs file system? My centos return this error: mount: type file system ntfs not suported for kernel I need compile new kernel? thanks

Is the ?important" vfs objects parameter documented in a man page anywhere? It appears in the man pages of several vfs modules, but never fully documented that I could find. Apparently it once was from a now dead link https://www.samba.org/samba/docs/old/Samba3-HOWTO/smb.conf.5.html#VFSOBJECTS <https://www.samba.org/samba/docs/old/Samba3-HOWTO/smb.conf.5.html#VFSOBJECTS> . Todd

Hi, The security tab of Windows does not accept unix groupnames, although they do work in icacls.exe on the commandline. It displays existing group rights, and allows to modify them, but does not allow to add new rights for unix groups, and the search function also does not list unix groups. Is there a trick to make them work in the security tab? I don't have OUs or AD-groups, this is classic

> Hi, this is because when you use '--as-sddl', the python code does this: > > if as_sddl: > try: > domain_sid = security.dom_sid(samdb.domain_sid) > except: > raise CommandError("Unable to read domain SID from > configuration files") >

Hi, Is there any drawbacks of using "nt acl support = No" on a share ? I mean breaking applications ? I do not want users to change permissions from Windows. With nt acl support = No, icacls returns no permissions Users have Full Control. It's fine for me that Security tab disappears. Users can access Linux shell, and i only want users to modify permissions from Linux.

On Fri, Aug 26, 2016 at 06:33:26PM +0200, Ralph Böhme via samba wrote: > On Thu, Aug 25, 2016 at 12:14:00PM -0700, Jeremy Allison wrote: > > On Wed, Aug 24, 2016 at 04:06:42PM +0200, Ralph Böhme via samba wrote: > > > > > > Yeah, as much as I'd like to avoid adding a new option, I guess we > > > have to do something about it, my latest take on this is >

Hi, I need to set ACLs on a samba server, and are using icacls in Win7. It takes several hours to edit an ACL with inheritance, affecting a directory tree with 300,000 files. Server cpu > 70%, client cpu < 20%. Is there a way how I can speed this up? Using "setfattr -R" in Linux does it in approximately 2 minutes, but I want real Windows ACLs. There are 300.000 files in a

On Tue, 2019-02-19 at 14:17 +0000, Laack, Andrea P wrote: > Selinux will not allow connections on other than default http ports. > > semanage port -m -t http_port_t -p tcp 9200 It's not a web server port - elasticsearch is a database. P.