[Samba] ACL issue in samba 4.0.7

2013-08-28 Thread Kandukuru, Suresh SK
Hi samba team, , We have recently moved samba to 4.0.7 since then acl are not working when we try to set any deny permission from windows hosts. The error is as shown below in log.smbd >> [2013/08/21 02:49:36.322907, 0] ../source3/smbd/posix_acls.c:1814(add_current_ace_to_acl) add_current_

Re: [Samba] ACL defaults and masks

2013-05-03 Thread Andrew Bartlett
On Tue, 2013-04-30 at 15:56 +0400, Александр Свиридов wrote: > Hello! > > In samba 3 we used create mask , force create.. to set file > permisions. In samba 4 as I understand those options are ignored and > default acls are used instead. But, is it possible to set by default > different permi

[Samba] ACL defaults and masks

2013-04-30 Thread Александр Свиридов
Hello! In samba 3 we used create mask , force create..   to set file permisions. In samba 4 as I understand those options are  ignored and default acls are used instead. But, is it possible to set  by default different permisions on files and folders?  For example   on folders rwx, and on file

[Samba] ACL not working on g+s shares

2013-03-29 Thread steve
Version 4.0.5-GIT-9ec44d4 Single DC and fileserver running the samba binary. Hi I have a share called shared: [shared] path = /home/shared read only = No I set the ACL: setfacl -R -m g:staff:rw,d:g:staff:rw /home/shared This is what it looks like: getfacl shared # file: shared #

Re: [Samba] ACL problem with Samba > 3.4.x on GPFS

2013-02-21 Thread Jonathan Buzzard
On Mon, 2013-02-18 at 13:52 +0100, Alexander Födisch wrote: > When a file is created with samba 3.5.x or 3.6.x, it is created effective > read-only: > > ~ # getfacl Microsoft\ Word-Dokument\ \(neu\).docx > # file: Microsoft\040Word-Dokument\040(neu).docx > # owner: root > # group: 11816 > user::r

[Samba] ACL problem with Samba > 3.4.x on GPFS

2013-02-18 Thread Alexander Födisch
When a file is created with samba 3.5.x or 3.6.x, it is created effective read-only: ~ # getfacl Microsoft\ Word-Dokument\ \(neu\).docx # file: Microsoft\040Word-Dokument\040(neu).docx # owner: root # group: 11816 user::rwx user:11582:rwx#effective:r-- group::rwx#

Re: [Samba] ACL on GPO directory does not match expected value from GPO object. AGAIN.

2013-01-10 Thread Hleb Valoshka
On 1/10/13, Alex Matthews wrote: > Comparing the two ACLs > > O:LAG:DUD:P(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;EA)(A;OICIIO;0x001f01ff;;;CO)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;SY)(A;OICI;0x001200a9;;;AU)(A;OICI;0x001200a9;;;ED) > O:DAG:DUD:P(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01f

[Samba] ACL on GPO directory does not match expected value from GPO object. AGAIN.

2013-01-10 Thread Alex Matthews
Hi all, Some (then all) of our workstations were complaining about incorrect ACLs on GPOs and were unable to read the gpt.ini to apply the GPOs. So I did a sysvolcheck and sure enough I'd lost the ACLs when I moved our sysvol share to a new location on the server (whoops, mea culpa). I ran a

Re: [Samba] Samba + acl,user_xattr

2011-12-19 Thread Dmitry Mordovin
At first, has your file system already enabled xattr? For example, are following commands successfull? # touch test.txt # setfattr -n user.test -v test test.txt # setfattr -n security.test -v test2 test.txt # getfattr -d test.txt # getfattr -n security.test -d test.txt And your Samba

Re: [Samba] Samba + acl,user_xattr

2011-12-18 Thread TAKAHASHI Motonobu
From: Dmitry Mordovin Date: Fri, 16 Dec 2011 10:39:44 +0400 > Now, when I try to Apply hidden attribute, popup message - Error change > file attributes. Access Denied. At first, has your file system already enabled xattr? For example, are following commands successfull? # touch test.txt # se

Re: [Samba] Samba + acl,user_xattr

2011-12-15 Thread Dmitry Mordovin
Hello Jeremy! You are right! I don't want to store Windows ACLs, need only DOS attrs (hidden file attr). What Is enough to add to my smb.conf? 'store dos attributes (S) or 'map hidden (S)' or together or else? I use: store dos attributes = yes map readonly = no map system = no

Re: [Samba] Samba + acl,user_xattr

2011-12-15 Thread Jeremy Allison
On Thu, Dec 15, 2011 at 12:17:21PM +0400, Dmitry Mordovin wrote: > > >>Added to global section > >> > >>vfs objects = acl_xattr > >> > >> > >>No changes. Still dont store DOS attr. > >You only need acl_xattr is you want to store Windows ACLs, not DOS attrs. > > > >Have you tried using setfattr on

Re: [Samba] Samba + acl,user_xattr

2011-12-15 Thread Dmitry Mordovin
Added to global section vfs objects = acl_xattr No changes. Still dont store DOS attr. You only need acl_xattr is you want to store Windows ACLs, not DOS attrs. Have you tried using setfattr on that filesystem ? Does it work ? Jeremy. Hello Jeremy! You are right! I don't want to store

Re: [Samba] Samba + acl,user_xattr

2011-12-14 Thread Jeremy Allison
On Fri, Dec 09, 2011 at 04:36:51PM +0400, Dmitry Mordovin wrote: > On 12/09/2011 04:26 PM, Jonathan Buzzard wrote: > >On Fri, 2011-12-09 at 16:05 +0400, Dmitry Mordovin wrote: > > > >[SNIP] > > > >>Samba config: > >> > >>[global] > >>workgroup = HOME > >>security = share > >>max log size = 1024 > >

Re: [Samba] Samba + acl,user_xattr

2011-12-09 Thread Dmitry Mordovin
On 12/09/2011 04:26 PM, Jonathan Buzzard wrote: On Fri, 2011-12-09 at 16:05 +0400, Dmitry Mordovin wrote: [SNIP] Samba config: [global] workgroup = HOME security = share max log size = 1024 store dos attributes = yes map archive = no map read only = no map hidden = no map system = no create m

Re: [Samba] Samba + acl,user_xattr

2011-12-09 Thread Jonathan Buzzard
On Fri, 2011-12-09 at 16:05 +0400, Dmitry Mordovin wrote: [SNIP] > Samba config: > > [global] > workgroup = HOME > security = share > max log size = 1024 > store dos attributes = yes > map archive = no > map read only = no > map hidden = no > map system = no > create mode = 777 > directory mode

[Samba] Samba + acl,user_xattr

2011-12-09 Thread Dmitry Mordovin
Hello All! Can't make Samba use acl and extended user attributes to save DOS file attributes. Please, help me configure properly. My steps on Windows XP: 1 - Open share 2 - Open property of file 1122/22.bmp 3 - Check file attribute: hidden 4 - Click Apply 5 - Click Close 6 - Open property ag

[Samba] ACL with ActiveDirectory@Groups **UP**

2011-10-25 Thread darkyz
I added : acl check permissions = False veto oplock files = /*.doc/*.docx/*.xls/*.xlsx/*.pptx/*.ppsx/*.ppt/*.pps but still doesn't work. * > Dear All, > > I have problem with this smb.conf share section > (I'm not samba admin, but I know this configuration) > > smb.con

Re: [Samba] ACL with ActiveDirectory@Groups

2011-10-14 Thread darkyz
> Auftrag von alberto.atz...@ext.jrc.ec.europa.eu > Gesendet: Freitag, 14. Oktober 2011 10:37 > An: samba@lists.samba.org > Betreff: [Samba] ACL with ActiveDirectory@Groups > > > > Dear All, > > I'm new on this group.Greetings to all. > I have problem with thi

Re: [Samba] ACL with ActiveDirectory@Groups

2011-10-14 Thread Daniel Müller
--- -Ursprüngliche Nachricht- Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im Auftrag von alberto.atz...@ext.jrc.ec.europa.eu Gesendet: Freitag, 14. Oktober 2011 10:37 An: samba@lists.samba.org Betreff: [Samba] ACL with

[Samba] ACL with ActiveDirectory@Groups

2011-10-14 Thread alberto . atzori
Dear All, I'm new on this group.Greetings to all. I have problem with this smb.conf share section (I'm not samba admin, but I know this configuration) smb.conf 3.5.8 ### [AD-test-acl] comment = AD-test-acl path = /fs-e/AD/group/AD-test-acl read only = No

Re: [Samba] Samba + ACL + Linux Client

2011-06-04 Thread TAKAHASHI Motonobu
From: Oliver Guerino Date: Wed, 1 Jun 2011 13:29:44 -0300 > What happened is the following: > My network has windows and linux clients, the permissions described above > operates normally with the windows client, but when I try to connect > with the linux client does not operates. As far as I ex

[Samba] Samba + ACL + Linux Client

2011-06-02 Thread Oliver Guerino
Hello, I'm Oliver and I need help for a experiment. I have a sharing with Samba version 3.2.5, my distribution Linux is Debian(Lenny) and the acl version is 2.2.47. Below my configurations files: #/etc/fstab /dev/sda3 /shared reiserfs defaults,acl 0 1 #smb.conf [data] comment

[Samba] Samba + ACL + Linux Client

2011-06-02 Thread Oliver Guerino
Hello, I'm Oliver and I need help for a experiment. I have a sharing with Samba version 3.2.5, my distribution Linux is Debian(Lenny) and the acl version is 2.2.47. Below my configurations files: #/etc/fstab /dev/sda3 /shared reiserfs defaults,acl 0 1 #smb.conf [data] comment

[Samba] ACL Lost and unable to set rights from explorer (xp)

2011-03-31 Thread L . P . H . van Belle
Hi all, I have 2 problems :-( Im running debian kernel 2.6.32 samba 3.5.6. i upgraded my samba from 3.2.4 to 3.5.6 now i have the following problems. When i want to set my rights on a folder i get "access denied" this was working ok with the 3.2.4 version. fstab has acl,user_xattr on the

[Samba] ACL not working

2011-03-22 Thread slan buas
Using Samba+winbind 3.3.8 as a fileserver on a Win2008 domain. getent and wbinfo is reporting correct informations about users. However, my groups directories are allowing people who shouldn't .. From the shell everything is working as expected, but not from samba.. What did I miss !? Exported sha

Re: [Samba] ACL and Replace all Child object permissions

2011-02-03 Thread TAKAHASHI Motonobu
2011/2/4 Zorg : > I have an issue with samba+acl and Windows checkbox "Replace all Child > object permissions"  . > > I have a folder with defaults ACLs : > > /default:user:user1:rwx, > default:user:user2:rwx > owned by user1/ > > On Windows if I'm c

[Samba] ACL and Replace all Child object permissions

2011-02-03 Thread Zorg
I have an issue with samba+acl and Windows checkbox "Replace all Child object permissions" . I have a folder with defaults ACLs : /default:user:user1:rwx, default:user:user2:rwx owned by user1/ On Windows if I'm checking "Replace all Child object permissions with inh

Re: [Samba] samba acl restore error

2011-01-27 Thread Jeremy Allison
On Thu, Jan 27, 2011 at 04:26:10AM -0500, suresh.kanduk...@emc.com wrote: > Dear Jeremy and samba team , > > This is suresh from EMC.I am having samba 3.4.8 on my NAS with posix acls > support. > > > > When a backup software backs up files and folders, it typically backs up the > securit

[Samba] samba acl restore error

2011-01-27 Thread suresh.kandukuru
Dear Jeremy and samba team , This is suresh from EMC.I am having samba 3.4.8 on my NAS with posix acls support. When a backup software backs up files and folders, it typically backs up the security settings on the files/folders too. Then during restore, the software will try to restore th

Re: [Samba] samba acl support

2011-01-08 Thread Nico Kadel-Garcia
On Thu, Jan 6, 2011 at 11:40 PM, Jeremy Allison wrote: > On Thu, Jan 06, 2011 at 10:58:27PM -0500, suresh.kanduk...@emc.com wrote: >> Hi jeremey , This is Suresh from EMC . what is minimum version of samba >> which got ACL ( posix) support?. it looks to me samba 3.0.32 also got that >> ACL suppo

Re: [Samba] samba acl support

2011-01-07 Thread Jeremy Allison
On Thu, Jan 06, 2011 at 11:52:46PM -0500, suresh.kanduk...@emc.com wrote: > Thanks this helps. Let me know if you really need the "first version with ACL support" and I'll track it down. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.sa

Re: [Samba] samba acl support

2011-01-06 Thread suresh.kandukuru
Thanks this helps. -Suresh -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Jeremy Allison Sent: Friday, January 07, 2011 10:10 AM To: Kandukuru, Suresh Cc: samba@lists.samba.org; j...@samba.org Subject: Re: [Samba] samba acl

Re: [Samba] samba acl support

2011-01-06 Thread Jeremy Allison
On Thu, Jan 06, 2011 at 10:58:27PM -0500, suresh.kanduk...@emc.com wrote: > Hi jeremey , This is Suresh from EMC . what is minimum version of samba which > got ACL ( posix) support?. it looks to me samba 3.0.32 also got that ACL > support. > > Can you please confirm on this?. Oh yes, we've had

[Samba] samba acl support

2011-01-06 Thread suresh.kandukuru
Hi jeremey , This is Suresh from EMC . what is minimum version of samba which got ACL ( posix) support?. it looks to me samba 3.0.32 also got that ACL support. Can you please confirm on this?. Thanks Suresh -- To unsubscribe from this list go to the following URL and read the instructions: ht

[Samba] ACL Problems with Samba and ADS Integration

2010-11-26 Thread Mike Theory
I am running a Samba Box as a Domain Member in a Windows ADS Domain (Windows Server 2003). The Box has joined the ADS domain and the kerberos authentication works, I can see "smbd" processes running with AD user accounts. But I can not set ACLs on the directories or the files located on the share

Re: [Samba] ACL from win2k doesn't work

2010-10-03 Thread Rashkae
On 10-10-01 05:56 AM, Mauro Destro - Impel Systems Srl wrote: I'm trying to setup a simple standalone Samba server in a win2k network without domain. I've followed some basic howto on the net, users can see shares and can save, modify and delete files and folders. My big problem is the secu

Re: [Samba] ACL from win2k doesn't work

2010-10-03 Thread Gaiseric Vandal
up assigned) 2. join your PC to the domain. -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Mauro Destro - Impel Systems Srl Sent: Friday, October 01, 2010 5:57 AM To: samba@lists.samba.org Subject: [Samba] ACL from win2k doesn'

[Samba] ACL from win2k doesn't work

2010-10-03 Thread Mauro Destro - Impel Systems Srl
I'm trying to setup a simple standalone Samba server in a win2k network without domain. I've followed some basic howto on the net, users can see shares and can save, modify and delete files and folders. My big problem is the security tab: i can't add any user because the screen where i can

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-09 Thread suresh.kandukuru
10 9:13 AM To: Kandukuru, Suresh Cc: smb...@chrissmith.org; samba@lists.samba.org Subject: Re: [Samba] samba acl - able to change permissions that contradict user security setting On Wed, Sep 08, 2010 at 11:14:40AM -0400, suresh.kanduk...@emc.com wrote: > Thanks smith for the quick reply. what

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-09 Thread suresh.kandukuru
Thanks Smith. This explains in detail. -Suresh -Original Message- From: Chris Smith [mailto:smb...@chrissmith.org] Sent: Thursday, September 09, 2010 8:19 AM To: Kandukuru, Suresh Cc: samba@lists.samba.org Subject: Re: [Samba] samba acl - able to change permissions that contradict user

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread Jeremy Allison
On Wed, Sep 08, 2010 at 11:14:40AM -0400, suresh.kanduk...@emc.com wrote: > Thanks smith for the quick reply. what I want to know is ,can not samba > source code prevent the changing setting rw access to "test_subfolder" user1 > , since he has only read only access on the share "test". The pro

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread Chris Smith
On Wed, Sep 8, 2010 at 10:04 PM, wrote: > it looks like code is not designed like this. > > if you don't mind , Can you please explain this , > > -- > - although you would be asking > it to restrict the admin's rights, which wouldn't be proper behavior. > Plus it then wouldn't work like a

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread suresh.kandukuru
sts.samba.org] On Behalf Of Chris Smith Sent: Wednesday, September 08, 2010 9:24 PM To: Kandukuru, Suresh Cc: samba@lists.samba.org Subject: Re: [Samba] samba acl - able to change permissions that contradict user security setting On Wed, Sep 8, 2010 at 11:14 AM, wrote: > Thanks smith for the q

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread Chris Smith
On Wed, Sep 8, 2010 at 11:14 AM, wrote: > Thanks smith for the quick reply. what I want to know is ,can not samba > source code  prevent the changing setting rw access to "test_subfolder" user1 > , since he has only read only access on  the share "test". I suppose you could patch it to do so -

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread suresh.kandukuru
ba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Chris Smith Sent: Wednesday, September 08, 2010 8:25 PM To: Kandukuru, Suresh Cc: samba@lists.samba.org Subject: Re: [Samba] samba acl - able to change permissions that contradict user security setting On Wed, Sep 8, 2010 at 1:43 AM,

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread Chris Smith
On Wed, Sep 8, 2010 at 10:55 AM, Chris Smith wrote: > Share level security will take precedence over > file level security when connected via the share. Sorry about that: more accurate would be to state that the most restrictive security permissions will be active. If share level permissions allo

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread Chris Smith
On Wed, Sep 8, 2010 at 1:43 AM, wrote: > 1) created share "test" given read and write access to the user "admin" and > read only access to user "user1". > > 2) from my windows PC logged into the samba share  "test " with "admin"  user > . created subfolder in that "test_subfolder". > > 3) on th

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread suresh.kandukuru
@lists.samba.org Subject: [Samba] samba acl - able to change permissions that contradict user security setting Dear friends, I am having following issue on my samba device . Please help me on this. 1) created share "test" given read and write access to the user "admin" and

[Samba] samba acl - able to change permissions that contradict user security setting

2010-09-07 Thread suresh.kandukuru
Dear friends, I am having following issue on my samba device . Please help me on this. 1) created share "test" given read and write access to the user "admin" and read only access to user "user1". 2) from my windows PC logged into the samba share "test " with "admin" user . created subfolder

[Samba] samba ACL problems in some of the Wokgroup PC's

2010-09-05 Thread suresh.kandukuru
Dear friends, I am facing the problem while adding the ACL user into subfolder security permissions from some of the WORKGROUPS PCs . While adding the ACL user itself it is asking for samba login credentials ( I did not notice this behavior in other PC's ) and after entering it, it is displ

[Samba] Samba ACL sub folder permission changes

2010-08-18 Thread suresh.kandukuru
Dear samba team, Please help me on the below issue. I have connected a samba share from my device to my windows XP machine . that samba share has ACL support enabled . 1) The shared folder names is "user1" and the user name I logged into samba share is also user1. 2) I have created

[Samba] ACL is invalid for set

2010-08-16 Thread Andreas Moroder
Hello, when I try to add a group to the list of groups that can access a director I get a message in windows and my samba log file contains this lines [2010/08/16 12:15:13.495938, 0] modules/vfs_posixacl.c:349(smb_acl_to_posix) smb_acl_to_posix: ACL is invalid for set (Das Argument ist u

Re: [Samba] ACL inheritance issue on homes directory

2010-05-10 Thread Andrew Masterson
> > I have recently commissioned a box running RHEL5.4 and samba sernet > > 3.5.2 that is AD integrated. > > > > The other shares on the box seem to obey the "inherit acls" and "inherit > > permissions" flags as well as "force create mode" and "force directory > > mode", but not on the _homes_ di

Re: [Samba] ACL inheritance issue on homes directory

2010-05-10 Thread Jeremy Allison
On Mon, May 10, 2010 at 10:37:37AM -0600, Andrew Masterson wrote: > I have recently commissioned a box running RHEL5.4 and samba sernet > 3.5.2 that is AD integrated. > > The other shares on the box seem to obey the "inherit acls" and "inherit > permissions" flags as well as "force create mode" a

[Samba] ACL inheritance issue on homes directory

2010-05-10 Thread Andrew Masterson
I have recently commissioned a box running RHEL5.4 and samba sernet 3.5.2 that is AD integrated. The other shares on the box seem to obey the "inherit acls" and "inherit permissions" flags as well as "force create mode" and "force directory mode", but not on the _homes_ directory. Has anyone exp

[Samba] ACL madness

2010-05-07 Thread big beer
Hello list, I'm having a "fun" time trying to figure out my ACL problems. I've gone through the default ACL settings and the mask settings on the filesystem to ensure that the user I am using does indeed have access to the filesystem that is being shared out. My issue is that I am unable to overwr

Re: [Samba] ACL problem after upgrade from 3.0.24 to 3.4.5

2010-04-03 Thread Quartexx
2010/4/3 grant little wrote: > Upgrade to 3.5.1 (or 2 real soon)... I tried sernet lenny 3.4 packages and no ACL bug. So it's something related to lenny-backports packages. > > On Fri, Apr 2, 2010 at 5:33 AM, Quartexx wrote: >> >> >After upgrading from Debian Etch with samba 3.0.24-6etch10 to

Re: [Samba] ACL problem after upgrade from 3.0.24 to 3.4.5

2010-04-02 Thread Quartexx
>After upgrading from Debian Etch with samba 3.0.24-6etch10 to Lenny >with a backport of 2:3.4.5~dfsg-1 (with libtalloc2 2.0.1-1), i get a >fully working service but with a strange ACL bug : people can >create/delete/rename files, but not modify them (error "espace >insuffisant pour traiter cette c

[Samba] ACL problem after upgrade from 3.0.24 to 3.4.5

2010-02-10 Thread Marc Dequènes
Hello, After upgrading from Debian Etch with samba 3.0.24-6etch10 to Lenny with a backport of 2:3.4.5~dfsg-1 (with libtalloc2 2.0.1-1), i get a fully working service but with a strange ACL bug : people can create/delete/rename files, but not modify them (error "espace insuffisant pour tra

[Samba] ACL

2009-09-29 Thread Luis Taboada
I'm trying to use samba to share some files with ACL. But when i create a new folder or file, I have to press F5 before I can see any change on the folder. For example: I create a new folder on a directory. But I can´t see it until i press F5 Someone knows how to fix it? Acabo de compartir una

Re: [Samba] samba ACL open-for-delete problem

2009-09-28 Thread Shaochun Wang
All my fault. I forget to execute "make clean" before compiling samba with ACL support. -- Shaochun Wang(王绍春) PH.D Candidate State Key Laboratory of Computer Science, Institute of Software, Chinese Academy of Sciences -- To unsubscribe from this list go to the following URL and read the instru

[Samba] samba ACL open-for-delete problem

2009-09-27 Thread Shaochun Wang
Hi, all It seems that samba-3.4.1 still has something wrong with ACL for open-for-delete operation. I give a group of users full access, which means rwx permission, to a directory and make this as the default ACL for this directory. Then I found that I can do anthing as a member of that group but

Re: [Samba] ACL misbehavior moving from POSIX ACL -> acl_xattr

2009-09-18 Thread Wes Deviers
On Friday 18 September 2009 02:06:41 pm Miguel Medalha wrote: > Please pardon me if I insist, but I am doing it with the interest of the > community in mind, not just bitching about it. > > > > I really don't see why this could not be implemented. Perhaps it goes > somewhat against established

Re: [Samba] ACL misbehavior moving from POSIX ACL -> acl_xattr

2009-09-18 Thread Miguel Medalha
Please pardon me if I insist, but I am doing it with the interest of the community in mind, not just bitching about it. I understand that if you address the problem of full compatibility with Windows ACLs you risk to break compatibility with other clients, such as NFS clients. Yet, in numerous

Re: [Samba] ACL misbehavior moving from POSIX ACL -> acl_xattr

2009-09-17 Thread Jeremy Allison
On Wed, Sep 16, 2009 at 11:01:21PM +0100, Miguel Medalha wrote: > >>> All files/dirs are 666 or 777. According to my reading, since there >>> are no POSIX extended ACLs, if the VFS layer "passes" an access, then >>> it only should be compared against the standard UGO permissions. >>> >> >>

Re: [Samba] ACL misbehavior moving from POSIX ACL -> acl_xattr

2009-09-17 Thread Wes Deviers
On Wednesday 16 September 2009 06:01:21 pm Miguel Medalha wrote: > > I am ignorant enough on these low-level matters. I "almost" understand > your statement. But... consider the following: > > - At the filesystem level ALL the permissions are 666 or 777 > - The above are ONLY seen by the VFS lay

Re: [Samba] ACL misbehavior moving from POSIX ACL -> acl_xattr

2009-09-16 Thread Miguel Medalha
All files/dirs are 666 or 777. According to my reading, since there are no POSIX extended ACLs, if the VFS layer "passes" an access, then it only should be compared against the standard UGO permissions. That's correct - but the problem isn't access, it's when the incoming ACL is "set" o

Re: [Samba] ACL misbehavior moving from POSIX ACL -> acl_xattr

2009-09-16 Thread Jeremy Allison
On Wed, Sep 16, 2009 at 07:20:11PM +0100, Miguel Medalha wrote: > > All files/dirs are 666 or 777. According to my reading, since there are > no POSIX extended ACLs, if the VFS layer "passes" an access, then it only > should be compared against the standard UGO permissions. That's correct - but

Re: [Samba] ACL misbehavior moving from POSIX ACL -> acl_xattr

2009-09-16 Thread Miguel Medalha
Dear Jeremy Since I once thought about doing the same, I would like to know your views on the method that Wes describes. I quote: » What I've been doing, which is dangerous but effective, is setting file creation mode to 666 and letting the Samba VFS ACL layer take care of everything. That

Re: [Samba] ACL misbehavior moving from POSIX ACL -> acl_xattr

2009-09-16 Thread Jeremy Allison
On Wed, Sep 16, 2009 at 01:38:13PM -0400, Wes Deviers wrote: > > Or, alternately, "Does Samba, with vfs object = acl_xattr, store ACLs both as > a user_xattr AND an ext3 ACL at the same time?" My limited testing shows > that > *not* to be the case, but I'm certainly not the expert. Yes it doe

Re: [Samba] ACL misbehavior moving from POSIX ACL -> acl_xattr

2009-09-16 Thread Wes Deviers
I'm clear through this part. Where I'm confused is that on a machine that I do have working, there is no POSIX ACL support, but the Samba VFS layer works brilliantly. Inheritance, take ownership, everything works on the VFS layer without needing any POSIX ACLs. On the "old" serve

Re: [Samba] ACL misbehavior moving from POSIX ACL -> acl_xattr

2009-09-16 Thread Jeremy Allison
On Wed, Sep 16, 2009 at 11:18:58AM -0400, Wes Deviers wrote: > List, > > I had Samba 3.0 running on Debian Lenny configured to use POSIX ACLs on ext3. > > They worked fine, or at least as fine as NT -> POSIX mapping ever did. After > testing 3.3 with acl_xattr on using a different machine, I

[Samba] ACL misbehavior moving from POSIX ACL -> acl_xattr

2009-09-16 Thread Wes Deviers
List, I had Samba 3.0 running on Debian Lenny configured to use POSIX ACLs on ext3. They worked fine, or at least as fine as NT -> POSIX mapping ever did. After testing 3.3 with acl_xattr on using a different machine, I decided to give it a whirl on the production server. And yes, I know it'

[Samba] ACL special permission

2009-07-01 Thread Davy Stoffel
Hello everybody, I'm currently using samba with complete ACL support and windows domain integration. This work fine, but i've a question regarding "special permission". On windows, when you take a look to the security tab for a directory (not file), you see all effective permission trough "special

Re: [Samba] Samba ACL and Office 2007

2009-04-28 Thread David Vaz
Harry Jede wrote: > Am Montag, 27. April 2009 15:33 schrieb David Vaz: > >> I am using samba 3.3.2-1 in a debian squeze installation, using ext3 >> with acl support. >> >> The problem I am experiencing is easy to replicate as I have tried it >> in different machines. >> >> In a given share, user

Re: [Samba] ACL problem under FC9

2009-04-28 Thread Christos Karaviotis
On Fri, March 13, 2009 11:07, Christos Karaviotis wrote: > On Wed, March 11, 2009 14:26, Adam Tauno Williams wrote: >>> I am running Samba for some years now (3 years) and had absolutely no >>> problems. For the last month on one of the machines the NT ACL stopped >>> working and everyone have ful

Re: [Samba] Samba ACL and Office 2007

2009-04-27 Thread Harry Jede
Am Montag, 27. April 2009 15:33 schrieb David Vaz: > I am using samba 3.3.2-1 in a debian squeze installation, using ext3 > with acl support. > > The problem I am experiencing is easy to replicate as I have tried it > in different machines. > > In a given share, user "A" is the owner of the folder

[Samba] Samba ACL and Office 2007

2009-04-27 Thread David Vaz
I am using samba 3.3.2-1 in a debian squeze installation, using ext3 with acl support. The problem I am experiencing is easy to replicate as I have tried it in different machines. In a given share, user "A" is the owner of the folder "test", inside this folder there is a office file "test.doc" fo

Re: [Samba] ACL problem under FC9

2009-03-13 Thread Christos Karaviotis
On Wed, March 11, 2009 14:26, Adam Tauno Williams wrote: >> I am running Samba for some years now (3 years) and had absolutely no >> problems. For the last month on one of the machines the NT ACL stopped >> working and everyone have full access everywhere even if they are not in >> the acl. >> If

Re: [Samba] ACL problem under FC9

2009-03-11 Thread Adam Tauno Williams
> I am running Samba for some years now (3 years) and had absolutely no > problems. For the last month on one of the machines the NT ACL stopped > working and everyone have full access everywhere even if they are not in > the acl. > If I try to add them and restrict them only to read and execute t

[Samba] ACL problem under FC9

2009-03-11 Thread Christos Karaviotis
Hi list, This is my first post and I hope I will not make people mad as this may have been answered before. Here it goes. I am running Samba for some years now (3 years) and had absolutely no problems. For the last month on one of the machines the NT ACL stopped working and everyone have full a

Re: [Samba] Samba+acl problem on OSX

2009-02-19 Thread Eero Volotinen
Is that the only option? We've noticed the same behavior of osx clients recently, but we also have linux clients connecting and I don't wish to degrade the experience by disabling unix extensions. What is effect of disabling unix extensions? At least with it acls work on OSX too. -- Eero

Re: [Samba] Samba+acl problem on OSX

2009-02-18 Thread Christian McHugh
On Tuesday 17 February 2009 16:19:19 James Peach wrote: > 2009/2/17 Eero Volotinen : > > I have problem using samba+acl (ext3+acl) on OSX client. > > > > Access rights works fine on Linux and Windows series, but OSX Leopard > > says access denied to every directory th

Re: [Samba] Samba+acl problem on OSX

2009-02-17 Thread James Peach
2009/2/17 Eero Volotinen : > I have problem using samba+acl (ext3+acl) on OSX client. > > Access rights works fine on Linux and Windows series, but OSX Leopard says > access denied to every directory that is using acl. > > Is OSX cifs client too stripped that it cannot use acl

[Samba] Samba+acl problem on OSX

2009-02-17 Thread Eero Volotinen
I have problem using samba+acl (ext3+acl) on OSX client. Access rights works fine on Linux and Windows series, but OSX Leopard says access denied to every directory that is using acl. Is OSX cifs client too stripped that it cannot use acl or is this OSX bug? Is there any solution on OSX that

RE: [Samba] ACL

2009-01-30 Thread Clinton Mills
[mailto:samba-bounces+clinton=hitcents@lists.samba.org] On Behalf Of Collen Blijenberg Sent: Friday, January 30, 2009 3:01 AM To: samba@lists.samba.org Subject: Re: [Samba] ACL Did you also setup ACL in your fstab ?? the mounted partition needs acl to make samba use it. Cheers, Collen Clinton

Re: [Samba] ACL

2009-01-30 Thread Collen Blijenberg
over and cannot find clear instructions on how to set ACL up in a user environment. If you could point me to one of these documents that would be very helpful. We currently have Samba setup to work without a domain. I have read on other websites that this is not a good idea: One problem

[Samba] ACL

2009-01-29 Thread Clinton Mills
be very helpful. We currently have Samba setup to work without a domain. I have read on other websites that this is not a good idea: One problem with Samba ACL support is that listing users to use for access control entries (ACEs) within ACLs can be troublesome. Specifically, if you'

[Samba] ACL execute bits always set

2008-11-18 Thread Juraj Hrubša
Hello I have a problem with POSIX ACLs. I have created a directory with these ACLs: > getfacl . # file: . # owner: testuser # group: tls user::rwx group::rwx group:ptls:r-x mask::rwx other::--- default:user::rwx default:group::rwx default:group:tls:rwx default:group:ptls:r-x default:mask::rwx def

[Samba] acl owner

2008-09-21 Thread vishesh kumar
dear all i am using winbind for samba authentication. I just want to know does acl permission can be reset only by root and owner of file/folder ?. does any way to allow domain admins to reset acl of any file/folder. -- To unsubscribe from this list go to the following URL and read the instruct

[Samba] acl reset

2008-09-19 Thread vishesh kumar
dear all i am using samba 3.0.28-0 on EL5.2 with winbind that get users and group window 2003 active directory (native mode). i implemented acl for user and group permission. What i want that regardless of file/folder group owner, member of AD 'domain admins ' can change acl of any file/folder. T

[Samba] samba + acl

2008-08-18 Thread bikrish
Hello I am using samba 3.2.1 version on centos 5.2 with ldap. Everything is working fine as i expected. I have shared a share , say , NOA on samba server. Now i log into windows and access the share and tried to give rights on share by right click > properties > security . I want to give a grou

[Samba] ACL howto that works with windows explorer security tab

2008-08-14 Thread Keith Sudbury
Does anyone have a guide / howto that allows the setup of ACL's the works with the windows security tab. Or any advice on the above, am I wasting my time trying to make it work with the security tab in windows explorer? Many Thanks Keith -- To unsubscribe from this list go to the following

Re: [Samba] ACL -Manage with Windows security tab?

2008-08-08 Thread John Drescher
> > security = ads > passdb backend = tdbsam > > > password server = server01.mydomain.local > realm = MYDOMAIN.LOCAL > idmap uid = 16777216-33554431 > idmap gid = 16777216-33554431 > template shell = /bin/bash > winbind use default domain = yes > winbind enum users = yes > obey pam restric

Re: [Samba] ACL -Manage with Windows security tab?

2008-08-08 Thread Keith Sudbury
John Drescher wrote: On Thu, Aug 7, 2008 at 8:10 PM, Keith Sudbury <[EMAIL PROTECTED]> wrote: Hi Guys, I am attempting to configure AC:L's I have enabled it in smb.conf for my share and remounted my fs with acl enabled. However if I attempt to edit security permissions for the group "Domain

Re: [Samba] ACL -Manage with Windows security tab?

2008-08-07 Thread John Drescher
On Thu, Aug 7, 2008 at 8:10 PM, Keith Sudbury <[EMAIL PROTECTED]> wrote: > Hi Guys, > > I am attempting to configure AC:L's I have enabled it in smb.conf for my > share and remounted my fs with acl enabled. However if I attempt to edit > security permissions for the group "Domain Users" it creates

[Samba] ACL -Manage with Windows security tab?

2008-08-07 Thread Keith Sudbury
Hi Guys, I am attempting to configure AC:L's I have enabled it in smb.conf for my share and remounted my fs with acl enabled. However if I attempt to edit security permissions for the group "Domain Users" it creates two more group "CREATOR GROUP" and "CREATOR OWNER" and refreshes the security

[Samba] [acl] setting user/group permissions from windows

2008-08-07 Thread Heiko Harders
Hello, I've setup a samba PDC (3.0.31) and I am using Windows Vista clients. Logging on works fine using roaming profiles and folder redirections. I am also able to write to shares, etc. Now I am trying to get the advanced permissions on files to work. So on my share: [share] comment = S

Re: [Samba] Samba / ACL / File System Permissions Active Directory & winbind

2008-07-30 Thread Jeremy Allison
On Wed, Jul 30, 2008 at 11:17:10PM +0100, Keith Sudbury wrote: > Hi Guys, > > I have a windows 2003 SBS handling domain logins, I also have an Ubuntu > machine being used as a file server this is using winbind and is on the > domain I can chown dirs etc with Active Directory users. > > However

  1   2   3   4   5   >