On 2009-10-19 23:04, Jeremy Allison wrote:
On Sat, Oct 17, 2009 at 12:40:10AM +0200, Peter Rindfuss wrote:
Hi,
It seems that at some point "map acl inherit = yes" stopped working for
me. I now have Samba 3.4.2, but this problem started with an earlier
version, possibly some 3.2.x or 3.3.x. No SAMBA_PAI extended attributes
are created anymore, but existing ones are still honored.
OS is Suse 11.0, file system is XFS.
What could be wrong?
Not sure, can you log a bug and upload logs please ?
Hi Jeremy,
I will file a bug, if necessary, but perhaps my further investigations
can help.
My statement "no SAMBA_PAI extended attributes are created anymore" is
wrong, I apologize. But it is interesting what really happens to SAMBA_PAI:
I looked at an old existing folder:
Windows security tab shows that rights are inherited from the folder
above. SAMBA_PAI is
0x010003000300009a7500000151c3000002ffffffff009a7500000151c3000002ffffffff
When I remove and (try to) set inheritance again, SAMBA_PAI becomes
0x02048d0300030000009a750000000151c300000302ffffffff0b009a7500000b0151c300000302ffffffff
and inheritance is gone, same as if SAMBA_PAI were not there at all.
When I manually set SAMBA_PAI to the first value, inherited rights are
back there again.
One more interesting observation:
The acl_xattr VFS module seems to work fine with respect to inheritance
(on a test share). BTW, the SAMBA_PAI created with acl_xattr looks
similar to the non-working one above.
Cheers, Peter
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
