similar to: "ea support = yes" and "map acl inherit = yes"

Morning all. I am reading trough https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html As I was curious what exactly 'map acl inherit' does. "This boolean parameter is only relevant for systems that do not support standardized NFS4 ACLs but only a POSIX draft implementation of ACLs. Linux is the only common UNIX system which does still not offer standardized NFS4 ACLs

Hey, hoping I can get some guidance on how this works. I've got a running samba standalone setup. On one of my shares, I want to preserve the ACL of files as they come from the client (Win 7), in essence acting as a file backup. My setup for this share is currently: valid users = @wheel public = no writeable = yes vfs objects = btrfs acl_xattr # acl_xattr: ignore system acls = yes # map

interesting warning - is that not implicit and why? uses vfs_fruit, but that requires \"ea support = yes\" Apr 23 21:32:27 srv-rhsoft ark: kf5.kio.core: We got some errors while running testparm "Load smb config files from /etc/samba/smb.conf\nLoaded services file OK.\nERROR: Service \"filesharing\" uses vfs_fruit, but that requires \"ea support =

I have just enabled user_xattr on the partition where my samba share is on. Now when I use getfattr I see the extended attribute user.SAMBA_PAI on my files. But ACL inheritance isn't taking place... When I (from within Windows) click on Properties > Security > Advanced an then enable "Allow inheritable permissions..." on a certain file, then the attribute user.SAMBA_PAI

This might be more inclusive if I said, Linux Permissions vs POSIX ACLs vs vfs_xattr. I have recently begun to discover the power and flexibility of using POSIX ACLs (by mounting my EXT3/4 filesystems with the acl option). This solved alot of security permissions issues between Samba and Linux groups of users. As I have delved into this deeper and begun using the VFS object, vfs_xattr, things

Am 2018-02-19 um 17:39 schrieb Rowland Penny via samba: > On Mon, 19 Feb 2018 17:03:31 +0100 > Matthias Leopold via samba <samba at lists.samba.org> wrote: > >> Hi, >> >> i'm trying to setup Samba 4.6 on CentOS 7.4 as a Domain Member of a >> Windows 2012R2 Domain Controller with AD. To administer share >> security i have to use the "username

Hi, I have a question regarding permissions at the top of a share as seen from a Windows 10 client. We are using Samba 4.10.6-Debian (van Belle) on Debian 10 (Buster) with one AD controller and one file server. The top directory of our main share on the file server has, on the Linux level, these permissions reported by getfacl: # file: ... # owner: root # group: domain\040users # flags: ---

I noticed that vfs_acl_xattr doesn't work unless all the inherit and map inherit acl parameters are set to yes. Which is fine but if I turn off inherit owner it completely breaks inheritance and security.NTACL never gets set for the file/directory that's created by the user. I want the uid of the user who's connected to be written and not the owner of the parent directory. Is there

Am 2019-08-26 um 16:35 schrieb Rowland penny via samba: > On 26/08/2019 15:20, ? Peter Rindfuss via samba wrote: >> Hi, >> >> I have a question regarding permissions at the top of a share as seen >> from a Windows 10 client. >> >> We are using Samba 4.10.6-Debian (van Belle) on Debian 10 (Buster) with >> one AD controller and one file server. >>

Am 07.09.18 um 12:45 schrieb Rowland Penny via samba: > On Fri, 7 Sep 2018 11:22:36 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> >> At a customer server (gentoo linux, so far only Samba version 4.7.7) >> we tried to use Windows ACLs and failed: >> >> no security tab in Windows ... for local C: yes, not on

At a customer server (gentoo linux, so far only Samba version 4.7.7) we tried to use Windows ACLs and failed: no security tab in Windows ... for local C: yes, not on samba shares Yes, I followed https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs and have the vfs module enabled etc - Now I consider that the kernel doesn't have the necessary flags set. I get #

Hi, i have setup an ad dc with samba 4.8, and then rigorously followed wiki tutorial at : https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs However, when following the last part (File System ACLs in the Back End), I don't get the expected results : [root at mydc ~]# getfattr -d /srv/samba/Demo/ doesn't yield anything and getfacl /srv/samba/Demo/ getfacl : suppression

Please can someone clarify the purpose of the "ea support = yes" option in smb.conf? According to the man page, it's there to allow _clients_ to attempt to store OS/2 style extended attributes. As long as the underlying server filesystem supports EAs, this will work. However, I've seen a number of references to setting "ea support = yes" when people just want to store

Hello list, I have problems with my PDC Samba Servers and all file servers. All DC Server have a compiled Samba 4.4.5. File servers have Samba Debian packages. In all shared folders, the ACL has the group "Everyone" and I can't remove it. The biggest problem concern SYSVOL, I can't modify GPO, I have an error in MMC. I have tried to resolv the problem with the

Hi everybody. One month ago me migrated from samba 3.6 classic domain to samba4. After solving some minor problems, we have found ourselves with a ACL corruption and we don't know how to deal with this. When accesing to our sysvol shared (for example, \\domain.local\sysvol) from both Samba or Windows clients, we are refused to connect. Domain=[VECTORSF] OS=[Unix] Server=[Samba 4.1.4]

Jerry, Jeremy, Whilst fixing bug 2445, I stumbled across NFSv4 ACLs with EA version 2 capability. This is only supported on filesystems that are created JFS2 with Extended Attribute Version 2 support which is part of the NFSv4 ACL support native to JFS2 in AIX 5.3. This is new in AIX 5.3 and I'd like to get to work implementing it as an addition to Linux and IRIX EA support. Are the any

Hi, I'm a n00b, but I was hoping you could help me with EA Download Manager. From what I understand, some have gotten it partially working, and others may have gotten it working completely. This is what I get: [Image: http://img25.imageshack.us/img25/4113/screenshoterrorz.png ] It's supposed to look more like this: [Image: http://screenshots.en.softonic.com/en/scrn/62000/62174/3_ea3.jpg

OK, now i've to start to move the big part of my users from my old NT-like domains to my new AD domain. I've setup roaming profile in the new domain following the wiki (https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles, 'using windows ACL') and for new profiles works like a charm. But i've tried to move/copy old profile to the new domain, and seems work, with

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Andrew Bartlett via samba > Verzonden: dinsdag 19 februari 2019 18:40 > Aan: Rowland Penny; samba at lists.samba.org > Onderwerp: Re: [Samba] samba acl it > > On Tue, 2019-02-19 at 17:29 +0000, Rowland Penny wrote: > > On Wed, 20 Feb 2019 06:15:17 +1300 > >

Yes, I have. But nothing change... Kevin Le 26/11/2016 à 12:08, Rowland Penny via samba a écrit : > On Sat, 26 Nov 2016 11:44:50 +0100 > Kévin GUERINEAU via samba <samba at lists.samba.org> wrote: > >> Hello list, >> >> I have problems with my PDC Samba Servers and all file servers. >> All DC Server have a compiled Samba 4.4.5. File servers have Samba