zfs discuss - Mar 2009 - [cifs-discuss] CIFS accessing ZFS, workgroup mode, ACL problems

On Mon, March 16, 2009 06:10, Tobs wrote:
> There''s a share with this A=everyboy@:full_set:fd:allow
folder_name
> permission set, but it seems that people didn''t get identified the
right
> way.
>
> For example, its not possible to start Portable Thunderbird from this cifs
> share.
>
> Did you used the idmap command to configure Windows/UNIX mappings
> manually?
I believe that applies only to domain membership, not workgroups.  In any
case, I didn''t do anything with it.

-- 
David Dyer-Bennet, dd-b at dd-b.net; http://dd-b.net/
Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/
Photos: http://dd-b.net/photography/gallery/
Dragaera: http://dragaera.info

On Sun, March 15, 2009 15:37, Ross wrote:
> Not sure if this is what you mean, but I always start CIFS shares by
> granting everybody full permissions, and then set the rest from windows.
> I find otherwise deny permissions cause all kinds of problems since
> they''re implemented differently on windows.
Oh, is THAT what they were saying?  I saw many suggestions that setting
everything to full permissions would fix the problem, but no indication
that that was just an interim measure until they set the real permissions
from the windows side.  Since it''s obviously horrible for security, I
was
ignoring it.

Hmmm; but then I read a post or email from somebody last night telling me
that setting ACLs from Windows wasn''t currently supported?  And indeed
my
experiments, while they claimed to succeed, didn''t actually change the
permissions.

-- 
David Dyer-Bennet, dd-b at dd-b.net; http://dd-b.net/
Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/
Photos: http://dd-b.net/photography/gallery/
Dragaera: http://dragaera.info