similar to: Operation Not Supported error for GETXATTR when VFS plugin "nfs4acl_xattr" is used

On Fri, Apr 06, 2018 at 12:40:31PM -0700, Jeremy Allison wrote: > On Fri, Apr 06, 2018 at 09:22:17PM +0200, Ralph Böhme wrote: > > On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > > > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > > Hi All > > > > > > > > I found there is one bug in the plugin. The

Hello Jeremy and Ralph Thanks for your suggestions. I compiled samba-4.8.0 and running it instead of samba-4.6.2. I saw the changes that you mentioned in the latest vfs_nfs4acl_xattr module. The operation not supported error is gone but it is now failing with access denied. Here is what I tried: *[root at test3 ajain]# net conf showshare local[local] path = /home/ajain/mount

Hi All I found there is one bug in the plugin. The name of the attribute for ACL as per strace output of nfs4_setfacl is *system.nfs4_acl.* The source code has defined it as #define NFS4ACL_XATTR_NAME ( "system.nfs4acl" ) Note there is missing underscore. After this, the EOPNOTSUPP error is not observed. Hope this helps Akash On Thu, Apr 5, 2018 at 11:43 PM, Jeremy Allison

On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > Hi All > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > per strace output of nfs4_setfacl is system.nfs4_acl. > > The source code has defined it as > > #define

On Tue, Apr 10, 2018 at 04:28:10PM +0530, Akash Jain wrote: > Can you please elaborate more on which extensions you referred to? > What all basic things do we need to do to use nfs4acl_xattr module with > native NFS4 export mounted locally and shared through samba to get/set NT > ACLs? I guess you have to patch the code, or find someone who does it for you. Iirc currently the module

Hi Ralph Thanks a lot. With xattr_tdb I could at least list the files getting rid of access denied error. I still do not see the exactly mapped ACEs in the Security Descriptor of a file in Windows Explorer but I will debug that little further and then come back with questions. I see only 1 entry of Everyone on Windows client side if there are added ACEs using nfs4_setfacl. Let me know if that

Hi Ralph I do not think using xattr_tdb is the right thing to do for my purpose. We do not wish to store/retrieve extended attributes to/from TDB file. *<Ralph>* *Iirc parsing NFSv4 ACLs would require extensions to the module to support the string identifiers and mapping to ids.* *</Ralph>* Can you please elaborate more on which extensions you referred to? What all basic things do

On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > Hi All > > I found there is one bug in the plugin. The name of the attribute for ACL as > per strace output of nfs4_setfacl is system.nfs4_acl. > The source code has defined it as > #define NFS4ACL_XATTR_NAME      ( "system.nfs4acl" ) > > Note there is missing underscore. > > After this, the

On Fri, Apr 06, 2018 at 09:22:17PM +0200, Ralph Böhme wrote: > On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > Hi All > > > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > > per strace output of nfs4_setfacl is

On Fri, Apr 06, 2018 at 09:28:16PM +0200, Ralph Böhme wrote: > On Fri, Apr 06, 2018 at 12:40:31PM -0700, Jeremy Allison wrote: > > On Fri, Apr 06, 2018 at 09:22:17PM +0200, Ralph Böhme wrote: > > > On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > > > > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > > > Hi

Is nfs4acl_xattr available in any version of samba? I just upgraded to 4.9.6 but it doesn’t seem to be baked in.

hi there - is it possible to share a directory via samba and (kernel-)nfsv4 in parallel and make samba use (ie.: read, write and enforce) nfsv4 acls to implement winnt-acls? i know that using nfs3 and posix acls is working halfway okay, but couldn't find anything useful for nfsv4 and the associated acls - sorry if i missed something obvious. i played around with the nfs4acl_xattr and

On 27/12/2019 12:59, Chris via samba wrote: > On 25/12/2019 20:04, Rowland penny via samba wrote: > >> On 25/12/2019 16:46, Chris via samba wrote: >>> Hello, >> Merry Christmas > Thanks Rowland! Hope you had a Merry Christmas too >>> The shares of the file server are on the ZFS of the host and mapped >>> via bind-mount. >> >> Ah, that

On 14/05/2019 16:10, Banks, David (db2d) wrote: > Where is Louis’ repo? > / > -------------------------------/ > */Dav Banks > /*School of Architecture > University of Virginia > Campbell Hall, Rm 138 > (o) 434.243.8883 > (e) dav.banks at virginia.edu <x-msg://236/davbanks at virginia.edu> > >> On May 14, 2019, at 11:02 AM, Rowland penny via samba

Hello, I'm running a PDC and a secondary DC in privilegded lxc containers and try to setup a fileserver in an unprivileged lxc container. The shares of the file server are on the ZFS of the host and mapped via bind-mount. I've got the problem, that I get error messages when setting the ACLs of a samba share either via the Windows explorer or using the smbcacls command. On Windows

On 25/12/2019 20:04, Rowland penny via samba wrote: > On 25/12/2019 16:46, Chris via samba wrote: >> Hello, > Merry Christmas Thanks Rowland! Hope you had a Merry Christmas too >> The shares of the file server are on the ZFS of the host and mapped >> via bind-mount. > > Ah, that could be a problem, ZFS uses NFSv4 ACLs >> > Try 'nfs4acl_xattr'

On Wed, 10 Oct 2018 09:25:16 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > Hai, > > Hmm.. Bummer.. > I just discovered the debian package dont have the vfs_nfs4acl > include in the build. > > And because of that it's not in my packages. I'll have a look into > it, see what i can make of it. > That is odd, it

On Fri, Mar 17, 2017 at 1:54 PM, Volker Lendecke <vl at samba.org> wrote: > On Thu, Mar 16, 2017 at 05:38:57PM +0100, Christoph Kleineweber wrote: > > I am wondering if there is a way to bypass Samba's ACL checks and > delegate > > access control completely to the underlying file system. > > > > My problem arises from the following scenario: Our file system

On 16/03/2020 13:50, Marcio Demetrio Bacci wrote: > Hi, > > >Is this the machine that you cannot set the permissions on ? > Yes. > > >If so, what is the filesystem ? > Ext4 for SO and Ext4 for shared files, but I have created a pool ZFS > on this last filesystem (/dev/vdb1). > If zfs is involved in any way, you will have problems, zfs uses nfs4acls, you could try

Am 3/16/20 um 3:04 PM schrieb Ralph Boehme via samba: > Am 3/16/20 um 2:59 PM schrieb Rowland penny via samba: >> On 16/03/2020 13:50, Marcio Demetrio Bacci wrote: >>> Hi, >>> >>>> Is this the machine that you cannot set the permissions on ? >>> Yes. >>> >>>> If so, what is the filesystem ? >>> Ext4 for SO and Ext4 for