[zfs-discuss] Re: Samba and ZFS ACL Question
Hello, So I downloaded this module and integrated it into my samba 3.0.25 source directory, reconfigured, and did a clean build and install. Problem is, it doesn't appear that the zfsacl "plugin" was installed anywhere. Forgive me if this is a newbie question, but how do I get smbd to use that module? Thanks, Bill This message posted from opensolaris.org ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
Re: [zfs-discuss] Re: Samba and ZFS ACL Question
Leon Koll <[EMAIL PROTECTED]> wrote: > > May be this link could help you? > > > > http://www.nabble.com/VFS-module-handling-ACL-on-ZFS-t3730348.html > > > > Looks exactly what we need. It's strange it wasn't posted to zfs-discuss. SO > many people were waiting for this code. The NFSv4 ACLs are bitwise identical to NTFS, why is there a need to convert? Jörg -- EMail:[EMAIL PROTECTED] (home) Jörg Schilling D-13353 Berlin [EMAIL PROTECTED](uni) [EMAIL PROTECTED] (work) Blog: http://schily.blogspot.com/ URL: http://cdrecord.berlios.de/old/private/ ftp://ftp.berlios.de/pub/schily ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
[zfs-discuss] Re: Samba and ZFS ACL Question
> May be this link could help you? > > http://www.nabble.com/VFS-module-handling-ACL-on-ZFS-t3730348.html > Looks exactly what we need. It's strange it wasn't posted to zfs-discuss. SO many people were waiting for this code. Thanks, Dmitry. This message posted from opensolaris.org ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
[zfs-discuss] Re: Samba and ZFS ACL Question
May be this link could help you? http://www.nabble.com/VFS-module-handling-ACL-on-ZFS-t3730348.html This message posted from opensolaris.org ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
[zfs-discuss] Re: Samba and ZFS ACL Question
I hope it will be released soon. I asked Jiri about it and didn't get a negative reply so I am optimistic now. Steve This message posted from opensolaris.org ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
[zfs-discuss] Re: Samba and ZFS ACL Question
Hi Jiri, > 3.0.25rc1 was released 2 days ago so the "final > version" will be available soon. vfs_zfsacl.c module > was tested soon so I think it is a question of 2-3 > weeks. 3 weeks after you posted this...can I ask you to update the community about the availability of vfs_zfsacl.c module? Even the alpha version can help me a lot. Thanks in advance, Steve This message posted from opensolaris.org ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
[zfs-discuss] Re: Samba and ZFS ACL Question
Same here, needed ASAP. It's a shame Jiri can't release his work-in-progress code, I've asked for a prerelease (even untested) version several times. :( This message posted from opensolaris.org ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
[zfs-discuss] Re: Samba and ZFS ACL Question
> Have there been any new developments regarding the > availability of vfs_zfsacl.c? Jeb, were you able to > get a copy of Jiri's work-in-progress? I need this > ASAP (as I'm sure most everyone watching this thread > does)... me too... A.S.A.P.!!! [i]-- leon[/i] This message posted from opensolaris.org ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
[zfs-discuss] Re: Samba and ZFS ACL Question
Have there been any new developments regarding the availability of vfs_zfsacl.c? Jeb, were you able to get a copy of Jiri's work-in-progress? I need this ASAP (as I'm sure most everyone watching this thread does)... Thank you for your help. Roger Ripley [EMAIL PROTECTED] This message posted from opensolaris.org ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
[zfs-discuss] Re: Samba and ZFS ACL Question
Just so I'm clear: You are waiting on the release of Samba 3.0.25 which allows vfs_* modules for ACLS. Then you will release vfs_zfsacl.c for Samba 3.0.25+ which would allow ACLS to work? Also I would love to beta test if needed -- I've been running Samba 3.0.25 from subversion just to try and get ACLS working... Jeb [EMAIL PROTECTED] This message posted from opensolaris.org ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
[zfs-discuss] Re: Samba and ZFS ACL Question
3.0.25rc1 was released 2 days ago so the "final version" will be available soon. vfs_zfsacl.c module was tested soon so I think it is a question of 2-3 weeks. This message posted from opensolaris.org ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
[zfs-discuss] Re: Samba and ZFS ACL Question
Hi Jiri, > > Currently the samba-3.0.25 will introduce the modular > (.so) interface to plug the VFS modules handling the > ACLs according the FS used. Do you know - will the Samba/ZFS ACL be implemented in samba-3.0.26 ? Thanks, -- Leon This message posted from opensolaris.org ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
[zfs-discuss] Re: Samba and ZFS ACL Question
Root cause is in the acl(2) call. ZFS implementation team does not implemented backward compatibility of the SETACL/GETACL/GETACLCNT functions of this syscall. Only the extended functions ACE_SETACL/ACE_GETACL/ACE_GETACLCNT are implemented on ZFS. The old ones returns (errno == ENOTSUP) on ZFS (please see man page for details). Main reason for this extension is the fact the ZFS does not set ACLs as the masks of access rights but as the allow/deny-records list. Also the 4-th parameter of the acl(2) (syscall) is respects this fact. Because the bidirectional mapping between the masks and allow/deny lists is not mutually explicit only the correct way in samba is implement these new features on the level of conversion from/to the NTFS ACLs. NTFS ACLs are also the list of allow/deny records. For more details please see the IETF discussions concerning the NFSv4 (Solaris implementation of NFSv4 ACL is also simillar to ZFS ACL): http://www1.ietf.org/mail-archive/web/nfsv4/current/msg03268.html Currently the samba-3.0.25 will introduce the modular (.so) interface to plug the VFS modules handling the ACLs according the FS used. This message posted from opensolaris.org ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
[zfs-discuss] Re: Samba and ZFS ACL Question
New tidbit of information... I have a user account USER belonging to two groups GROUP1 and GROUP2. GROUP1 is the primary group. If the ZFS folder is owned by ROOT:GROUP1, I can create the file through Samba. If the folder is owned by ROOT:GROUP2, the create fails. This same problem occurs with an ACL granting write permissions on the folder. Samba doesn't seem to respect the ACL's or other group permissions. This message posted from opensolaris.org ___ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
