Perhaps I should clear up the access pattern. On 2k->samba acl sets, If the tree looks like this:
/a/b/c/d/e (where e is a file, the rest are dirs) a set on /a which says "reset child permissions..." generates set_secdescs like this: /a/b/c/d/e /a/b/c/d/e /a/b/c/d /a/b/c/d/e /a/b/c/d /a/b/c /a/b/c/d/e /a/b/c/d /a/b/c /a/b /a/b/c/d/e /a/b/c/d /a/b/c/ /a/b /a /a/b/c/d/e /a/b/c/d /a/b/c/ /a/b /a The same thing happens to NT, but the final group of set's have different ACLs... ---------------------------- Jim McDonough IBM Linux Technology Center Samba Team 6 Minuteman Drive Scarborough, ME 04074 USA [EMAIL PROTECTED] [EMAIL PROTECTED] Phone: (207) 885-5565 IBM tie-line: 776-9984