similar to: samba 3.3.x vfs_acl_xattr support

A Samba server I've configured uses the VFS acl_xattr module to support Windows ACLs. I'd like to view the ACL data, in as raw a state as possible, but also in a human readable format. Is there an existing utility that does that? If not, and I need to write an application to accomplish it, which APIs would you recommend (and on which attributes)? Thanks,Steve Tice

> it may make sense to build others which you really use on every > machine statically to not need to add them in your smb.conf That's what I expected, too. Since then I made some experiences. I built samba 4.3.6 with a static vfs_acl_xattr module. It is builtin alright, it is listed under "Builtin modules" at the output of "smbd -b". Then: -- Comment"vfs

> i would give the same device for *any* type of software since the > whole operating system including the kernel itself these days is built > with shared modules and you hardly gain anything measureable just > because one piece of your system is statically compiled > > when it's mostly interesting on very slow embedded devices where it > makes a small difference in

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland Penny via samba > Verzonden: vrijdag 21 september 2018 10:11 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] [SOLVED] Samba 4: 'Access denied' > error when accessing user profile during logon > > On Fri, 21 Sep 2018 09:35:13 +0200 >

I noticed that vfs_acl_xattr doesn't work unless all the inherit and map inherit acl parameters are set to yes. Which is fine but if I turn off inherit owner it completely breaks inheritance and security.NTACL never gets set for the file/directory that's created by the user. I want the uid of the user who's connected to be written and not the owner of the parent directory. Is there

Hi Ralph > On 8/18/23 09:55, Sebastian Neustein via samba wrote: >> With the default settings of vfs_acl_xattr samba takes posix acls >> into account when delivering data - how can I activate >> "acl_xattr:ignore system acls = yes" >> without loosing the information saved in posix acls? Background: our >> future file system won't be able to support

On 8/21/23 18:20, Sebastian Neustein wrote: > The storage has come a long way with various changes of the smb.conf. It > is possible that at the time of creation of a file/directory > vfs_acl_xattr was not active. This could mean that the directory does > not have any extended attributes written to it and ACLs are only defined > with POSIX ACLs. In this case I would need a

Hai, Now, i did not know you used the DC for the profiles here but yes it looks good. Small comment on point 3 and 4. 3) Its good, you might notice a few more rights there compaired to what i posted, thats because you have your profiles on the DC but the settings are good. 4) yes, the security is ok, i like the higher security setting and try to mimic the windows settings as much as

On 8/18/23 09:55, Sebastian Neustein via samba wrote: > With the default settings of vfs_acl_xattr samba takes posix acls into > account when delivering data - how can I activate > "acl_xattr:ignore system acls = yes" > without loosing the information saved in posix acls? Background: our > future file system won't be able to support acls. Sorry, but this is

Am 07.09.18 um 12:45 schrieb Rowland Penny via samba: > On Fri, 7 Sep 2018 11:22:36 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> >> At a customer server (gentoo linux, so far only Samba version 4.7.7) >> we tried to use Windows ACLs and failed: >> >> no security tab in Windows ... for local C: yes, not on

Hello, We've been using samba 3.3.9 with vfs_acl_xattr for some time now, and we do have one issue - when someone moves a file from one place to another (in Windows), it keeps the old ACLs instead of inheriting the new ones. I understand why this is happening (moving as opposed to copying, which actually makes a new file, and thus attains new ACLs as well), so I would just like to know if

Sebastian Neustein wrote: > I have to migrate our data from one old samba server to a new one. Due > to various reasons we had to change some settings. Now I struggle to > get the acls right. > ?Previously the acls were stored via posix and extended attributes, > now they are stored only in extended attributes With the default settings of vfs_acl_xattr samba takes posix acls

Dear all, this is the first public announcement of scannedonly. Scannedonly is a samba VFS module that ensures that only files that have been scanned for viruses are visible and accessible to the end user. Scannedonly was developed because of scalability problems with samba-vscan: high server loads when (the same) files were requested often, and timeouts when large zip files were requested.

Am 2019-08-26 um 16:35 schrieb Rowland penny via samba: > On 26/08/2019 15:20, ? Peter Rindfuss via samba wrote: >> Hi, >> >> I have a question regarding permissions at the top of a share as seen >> from a Windows 10 client. >> >> We are using Samba 4.10.6-Debian (van Belle) on Debian 10 (Buster) with >> one AD controller and one file server. >>

On Thu, 14 Jun 2018 09:39:46 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > And i did read the Comment to for Rowland below, > On debian you need : > libnss-winbind libpam-winbind to be installed. > I think you miss one of these. They are the glue that connects Samba to nsswitch and allows 'getent passwd username' to work. Without

On Thu, 14 Jun 2018 16:03:35 -0400 Mark Foley via samba <samba at lists.samba.org> wrote: > Nevertheless, 'ls' does give names though I don't seem to have either > libnss-winbind or libpam-winbind files on my AD/DC. I keep forgetting that you use slackware, I suppose it uses something different, but do you have any file like: libnss_winbind.so.2 > > Circling back

Hi. I'm testing samba 4.2.0 vfs_fruit on Fedora Server 22-alpha. I confirmed that ResourceFork and FinderInfo are compatible with Netatalk 3.1.7. However, EAs are incompatible. The character ":" in EA name is wrong. The EAs are not seen from clients. smb.conf: [test2] path = /export/test2 writable = yes vfs objects = catia fruit streams_xattr fruit:locking =

Hi, I have a question regarding permissions at the top of a share as seen from a Windows 10 client. We are using Samba 4.10.6-Debian (van Belle) on Debian 10 (Buster) with one AD controller and one file server. The top directory of our main share on the file server has, on the Linux level, these permissions reported by getfacl: # file: ... # owner: root # group: domain\040users # flags: ---

=================================================================== "Originality is the fine art of remembering what you hear but forgetting where you heard it." Laurence J. Peter ================================================================== Release Announcements ===================== This is the latest stable release of Samba 3.6. Major enhancements in Samba

=================================================================== "Originality is the fine art of remembering what you hear but forgetting where you heard it." Laurence J. Peter ================================================================== Release Announcements ===================== This is the latest stable release of Samba 3.6. Major enhancements in Samba