similar to: Skip ACL checks

On Fri, Mar 17, 2017 at 1:54 PM, Volker Lendecke <vl at samba.org> wrote: > On Thu, Mar 16, 2017 at 05:38:57PM +0100, Christoph Kleineweber wrote: > > I am wondering if there is a way to bypass Samba's ACL checks and > delegate > > access control completely to the underlying file system. > > > > My problem arises from the following scenario: Our file system

Hi all, I am wondering if there is a way to bypass Samba's ACL checks and delegate access control completely to the underlying file system. My problem arises from the following scenario: Our file system implements ACLs that are to the best of my knowledge currently not readable by any of the existing VFS modules. When trying to access a file with an ACL going beyond the file's POSIX

On Mon, Mar 20, 2017 at 3:29 PM, Volker Lendecke <vl at samba.org> wrote: > On Mon, Mar 20, 2017 at 03:23:47PM +0100, Christoph Kleineweber wrote: > > The nfs4-acl-tools make also use of xattrs to access ACLs. The ACL itself > > is XDR encoded, so access could be done directly by a VFS module and does > > not require the executable. > > This sounds as if it would

On Mon, 2017-03-20 at 10:57 +0100, Christoph Kleineweber via samba wrote: > On Fri, Mar 17, 2017 at 1:54 PM, Volker Lendecke <vl at samba.org> > wrote: > > > On Thu, Mar 16, 2017 at 05:38:57PM +0100, Christoph Kleineweber > > wrote: > > > I am wondering if there is a way to bypass Samba's ACL checks and > > > > delegate > > > access

I need help interpeting this issue, thanks in advance. A file was created by user nli on windows 7, that user can manipulate the file at will. If user jpyeron tries to manipulate the file on XPx64 the below happens. # smbd -V Version 3.0.33-3.40.el5_10 [2015/02/02 18:34:15, 8] smbd/dosmode.c:dos_mode_from_sbuf(188) dos_mode_from_sbuf returning [2015/02/02 18:34:15, 8]

Hi, Hoping you can help. I've updated my samba server (PDC) from 3.0.10 to 3.0.14a as part of updating from FC3 to FC4. I now find I cant see inside any of the shares, even though I can see the share names themselves and the directories are quite readable to Linux processes. So, e.g. I can see that I have a share "Users", but not the contents of it. With one exception all shares

Hello, i habe an Sama 3 Server with some shares. If I access these shares from Windows and if I generate new files or dirs with german umlaute everythink is OK. I can open theses files and I can open the directory. If I want do delete or rename the files or dirs with german umlaute I got an error message. "I can not read the file from source". creating new dirptr 256 for path

Hello everybody! Currently, dovecot just kills itself if it detects that time has moved backwards more than a hardcoded number of seconds. I accept the reasons, but I do not like to restart dovecot manually after waiting for time to move forward again. A cron job would not help, because time might still be wrong when it restarts dovecot. All our systems run ntpd, but they might be offline

Hi All, Could anyone please shed some light on the below too errors (and how to fix them). The first one seems the more serious Error 1 p 21 07:40:48 server smbd[8528]: [2004/09/21 07:40:48, 0] lib/util_sock.c:write_socket(412) Sep 21 07:40:48 server smbd[8528]: write_socket: Error writing 5 bytes to socket 16: ERRNO = Connection reset by peer Sep 21 07:40:48 server smbd[8528]: [2004/09/21

I am certainly not an expert on Samba, so I apologize in advance for this question if I should know the answer. A week ago our main file server crashed and had to be replaced. Our new server is running Fedora Core 8 and Samba 3.0.26a-6 but has been very unstable. We are running a small network of Windows XP Pro and Home clients accessing the server (10 clients). ERROR ONE: I am getting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear list Our environment uses Samba to store user directories. I recently upgraded Samba from 3.0.14a to 3.0.23d. After this, we discovered that Dreamweaver MX had trouble writing to an existing file; a file could be created and saved, but saving again after changes produced a "Permission denied" error. There was a similar problem

Hello all, I have a Fedora 2 server running as a file server. Security = DOMAIN and using winbindd successfully (so I think). Also the shared partitions are formated using XFS so acls should be good to go. However, whenever I use a windows machine and try to view the ACL permissions on a file/folder, the windows dialog box say "Unable to display security information". Then I

Having dsync to make backups from existing mail-spaces, it would be nice to make dsync syncing the sieve-dirs too. -Otherweise backups aren't complete... Peer -- Heinlein Professional Linux Support GmbH Linux: Akademie - Support - Hosting http://www.heinlein-support.de Tel: 030 / 40 50 51 - 0 Fax: 030 / 40 50 51 - 19 Zwangsangaben lt. ?35a GmbHG: HRB 93818 B / Amtsgericht

hello, so today i started setting up a puppet server and client and am already having a problem (even before i started). the client tries to talk to the server for the first time to get a certificate. debug: Calling puppetca.getcert that is what it says as last line on the client. tcpdump says there are four packages transmitted between the hosts.. all coming from the client and going to the

Hi, I thought about changing the RPM package the guys of Redhat created, because I wanted an Init Script for SLES10 built-in. I started documenting the steps I took. Maybe it''s useful for someone else, although in German.. but the basic steps should be useable. My little Installating puppet Howto: http://wiki.njh.eu/Konfigurationsmanagement#Installation_3 The Init Script for SLES10:

Hi, I have a complicated SQL backend with stored procedures to generate passdb/userdb queries. This result have the proxy-attribute set and it's very complicated to change that procedures. On one system I tried to override/delete the proxy attribute: passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext override_fields = proxy=n } Looks like that doesn't work.

Hi, I'm trying to make Syslinux, OSTree and Qemu work together. So I've made an image, installed Syslinux v. 6.0.3 on it with extlinux and try to boot it. Unfortunately it stops on the stage of loading the kernel with Loading /boot/ostree/agl-17980142f6d5ef5e82153aa533ffb9775181f93248e62a4821f925cdf1b81c34/vmlinuz... failed: I/O error The vmlinuz file is just a normal bzImage (v.

Hi, in seldom cirumstances it's possible that the imap-process is crashing without write something usefule into the logfile. a) User foo exists, is happy and everything's alright b) He had a shared folder given from bar c) In our setup we have mailforwarding adresses without a valid $home in LDAP c) if user bar is changed from a user with into a mailforwarding adress, the user foo

Having > 10 TByte mailstore filesystem-checks takes too much time. At the moment we have four different partitions, but I don't like to set symlinks or LDAP-flags to sort customers and their domains to there individual mount-point. I'd like to work with mdbox:/mail/%d/%n to calculate the path automatically. How do you handle >> 10 TB mailstore? I'm very interested in the

Hello, I hope this has not been discussed very often previously, but I do not know how to search the archives, so I cannot prevent posting this. I installed puppet (and removed it andf installed it again, which gave me these error messages: when removing: puppetmaster: unknown service error: %preun(puppet-server-0.22.1-1.i386) scriptlet failed, exit status 1 when installing: puppet: unknown