Re: [Samba] Samba + acl,user_xattr

2011-12-19 Thread Dmitry Mordovin
At first, has your file system already enabled xattr? For example, are following commands successfull? # touch test.txt # setfattr -n user.test -v test test.txt # setfattr -n security.test -v test2 test.txt # getfattr -d test.txt # getfattr -n security.test -d test.txt And your

Re: [Samba] Samba + acl,user_xattr

2011-12-18 Thread TAKAHASHI Motonobu
From: Dmitry Mordovin d.mordo...@dwide.com Date: Fri, 16 Dec 2011 10:39:44 +0400 Now, when I try to Apply hidden attribute, popup message - Error change file attributes. Access Denied. At first, has your file system already enabled xattr? For example, are following commands successfull? #

Re: [Samba] Samba + acl,user_xattr

2011-12-15 Thread Dmitry Mordovin
Added to global section vfs objects = acl_xattr No changes. Still dont store DOS attr. You only need acl_xattr is you want to store Windows ACLs, not DOS attrs. Have you tried using setfattr on that filesystem ? Does it work ? Jeremy. Hello Jeremy! You are right! I don't want to store

Re: [Samba] Samba + acl,user_xattr

2011-12-15 Thread Jeremy Allison
On Thu, Dec 15, 2011 at 12:17:21PM +0400, Dmitry Mordovin wrote: Added to global section vfs objects = acl_xattr No changes. Still dont store DOS attr. You only need acl_xattr is you want to store Windows ACLs, not DOS attrs. Have you tried using setfattr on that filesystem ? Does

Re: [Samba] Samba + acl,user_xattr

2011-12-15 Thread Dmitry Mordovin
Hello Jeremy! You are right! I don't want to store Windows ACLs, need only DOS attrs (hidden file attr). What Is enough to add to my smb.conf? 'store dos attributes (S) or 'map hidden (S)' or together or else? I use: store dos attributes = yes map readonly = no map system = no

Re: [Samba] Samba + acl,user_xattr

2011-12-14 Thread Jeremy Allison
On Fri, Dec 09, 2011 at 04:36:51PM +0400, Dmitry Mordovin wrote: On 12/09/2011 04:26 PM, Jonathan Buzzard wrote: On Fri, 2011-12-09 at 16:05 +0400, Dmitry Mordovin wrote: [SNIP] Samba config: [global] workgroup = HOME security = share max log size = 1024 store dos attributes = yes

Re: [Samba] Samba + acl,user_xattr

2011-12-09 Thread Jonathan Buzzard
On Fri, 2011-12-09 at 16:05 +0400, Dmitry Mordovin wrote: [SNIP] Samba config: [global] workgroup = HOME security = share max log size = 1024 store dos attributes = yes map archive = no map read only = no map hidden = no map system = no create mode = 777 directory mode = 777

Re: [Samba] Samba + acl,user_xattr

2011-12-09 Thread Dmitry Mordovin
On 12/09/2011 04:26 PM, Jonathan Buzzard wrote: On Fri, 2011-12-09 at 16:05 +0400, Dmitry Mordovin wrote: [SNIP] Samba config: [global] workgroup = HOME security = share max log size = 1024 store dos attributes = yes map archive = no map read only = no map hidden = no map system = no create

Re: [Samba] Samba + ACL + Linux Client

2011-06-05 Thread TAKAHASHI Motonobu
From: Oliver Guerino oguer...@gmail.com Date: Wed, 1 Jun 2011 13:29:44 -0300 What happened is the following: My network has windows and linux clients, the permissions described above operates normally with the windows client, but when I try to connect with the linux client does not operates.

Re: [Samba] samba acl restore error

2011-01-27 Thread Jeremy Allison
On Thu, Jan 27, 2011 at 04:26:10AM -0500, suresh.kanduk...@emc.com wrote: Dear Jeremy and samba team , This is suresh from EMC.I am having samba 3.4.8 on my NAS with posix acls support. When a backup software backs up files and folders, it typically backs up the security

Re: [Samba] samba acl support

2011-01-08 Thread Nico Kadel-Garcia
On Thu, Jan 6, 2011 at 11:40 PM, Jeremy Allison j...@samba.org wrote: On Thu, Jan 06, 2011 at 10:58:27PM -0500, suresh.kanduk...@emc.com wrote: Hi jeremey , This is Suresh from EMC . what is minimum version of samba which got ACL ( posix) support?. it looks to me samba 3.0.32 also got that

Re: [Samba] samba acl support

2011-01-07 Thread Jeremy Allison
On Thu, Jan 06, 2011 at 11:52:46PM -0500, suresh.kanduk...@emc.com wrote: Thanks this helps. Let me know if you really need the first version with ACL support and I'll track it down. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions:

Re: [Samba] samba acl support

2011-01-06 Thread Jeremy Allison
On Thu, Jan 06, 2011 at 10:58:27PM -0500, suresh.kanduk...@emc.com wrote: Hi jeremey , This is Suresh from EMC . what is minimum version of samba which got ACL ( posix) support?. it looks to me samba 3.0.32 also got that ACL support. Can you please confirm on this?. Oh yes, we've had

Re: [Samba] samba acl support

2011-01-06 Thread suresh.kandukuru
Thanks this helps. -Suresh -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of Jeremy Allison Sent: Friday, January 07, 2011 10:10 AM To: Kandukuru, Suresh Cc: samba@lists.samba.org; j...@samba.org Subject: Re: [Samba] samba acl

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-09 Thread suresh.kandukuru
Thanks Smith. This explains in detail. -Suresh -Original Message- From: Chris Smith [mailto:smb...@chrissmith.org] Sent: Thursday, September 09, 2010 8:19 AM To: Kandukuru, Suresh Cc: samba@lists.samba.org Subject: Re: [Samba] samba acl - able to change permissions that contradict user

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-09 Thread suresh.kandukuru
...@chrissmith.org; samba@lists.samba.org Subject: Re: [Samba] samba acl - able to change permissions that contradict user security setting On Wed, Sep 08, 2010 at 11:14:40AM -0400, suresh.kanduk...@emc.com wrote: Thanks smith for the quick reply. what I want to know is ,can not samba source code

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread suresh.kandukuru
Did not get the response . bumping it. friends , Please help me on the below issue. Thanks Suresh -Original Message- From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On Behalf Of suresh.kanduk...@emc.com Sent: Wednesday, September 08, 2010 11:13 AM To:

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread Chris Smith
On Wed, Sep 8, 2010 at 1:43 AM, suresh.kanduk...@emc.com wrote: 1) created share test given read and write access to the user admin and read only access to user user1. 2) from my windows PC logged into the samba share  test with admin  user . created subfolder in that test_subfolder. 3)

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread Chris Smith
On Wed, Sep 8, 2010 at 10:55 AM, Chris Smith smb...@chrissmith.org wrote: Share level security will take precedence over file level security when connected via the share. Sorry about that: more accurate would be to state that the most restrictive security permissions will be active. If share

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread suresh.kandukuru
-boun...@lists.samba.org] On Behalf Of Chris Smith Sent: Wednesday, September 08, 2010 8:25 PM To: Kandukuru, Suresh Cc: samba@lists.samba.org Subject: Re: [Samba] samba acl - able to change permissions that contradict user security setting On Wed, Sep 8, 2010 at 1:43 AM, suresh.kanduk...@emc.com

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread Chris Smith
On Wed, Sep 8, 2010 at 11:14 AM, suresh.kanduk...@emc.com wrote: Thanks smith for the quick reply. what I want to know is ,can not samba source code  prevent the changing setting rw access to test_subfolder user1 , since he has only read only access on  the share test. I suppose you could

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread suresh.kandukuru
PM To: Kandukuru, Suresh Cc: samba@lists.samba.org Subject: Re: [Samba] samba acl - able to change permissions that contradict user security setting On Wed, Sep 8, 2010 at 11:14 AM, suresh.kanduk...@emc.com wrote: Thanks smith for the quick reply. what I want to know is ,can not samba source

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread Chris Smith
On Wed, Sep 8, 2010 at 10:04 PM, suresh.kanduk...@emc.com wrote: it looks like code is not designed like this. if you don't mind , Can you please explain this , -- - although you would be asking it to restrict the admin's rights, which wouldn't be proper behavior. Plus it then

Re: [Samba] samba acl - able to change permissions that contradict user security setting

2010-09-08 Thread Jeremy Allison
On Wed, Sep 08, 2010 at 11:14:40AM -0400, suresh.kanduk...@emc.com wrote: Thanks smith for the quick reply. what I want to know is ,can not samba source code prevent the changing setting rw access to test_subfolder user1 , since he has only read only access on the share test. The

Re: [Samba] samba ACL open-for-delete problem

2009-09-28 Thread Shaochun Wang
All my fault. I forget to execute make clean before compiling samba with ACL support. -- Shaochun Wang(王绍春) scw...@ios.ac.cn PH.D Candidate State Key Laboratory of Computer Science, Institute of Software, Chinese Academy of Sciences -- To unsubscribe from this list go to the following URL and

Re: [Samba] Samba ACL and Office 2007

2009-04-28 Thread David Vaz
Harry Jede wrote: Am Montag, 27. April 2009 15:33 schrieb David Vaz: I am using samba 3.3.2-1 in a debian squeze installation, using ext3 with acl support. The problem I am experiencing is easy to replicate as I have tried it in different machines. In a given share, user A is the owner

Re: [Samba] Samba ACL and Office 2007

2009-04-27 Thread Harry Jede
Am Montag, 27. April 2009 15:33 schrieb David Vaz: I am using samba 3.3.2-1 in a debian squeze installation, using ext3 with acl support. The problem I am experiencing is easy to replicate as I have tried it in different machines. In a given share, user A is the owner of the folder test,

Re: [Samba] Samba+acl problem on OSX

2009-02-19 Thread Eero Volotinen
Is that the only option? We've noticed the same behavior of osx clients recently, but we also have linux clients connecting and I don't wish to degrade the experience by disabling unix extensions. What is effect of disabling unix extensions? At least with it acls work on OSX too. -- Eero

Re: [Samba] Samba+acl problem on OSX

2009-02-18 Thread Christian McHugh
On Tuesday 17 February 2009 16:19:19 James Peach wrote: 2009/2/17 Eero Volotinen eero.voloti...@iki.fi: I have problem using samba+acl (ext3+acl) on OSX client. Access rights works fine on Linux and Windows series, but OSX Leopard says access denied to every directory that is using acl.

Re: [Samba] Samba+acl problem on OSX

2009-02-17 Thread James Peach
2009/2/17 Eero Volotinen eero.voloti...@iki.fi: I have problem using samba+acl (ext3+acl) on OSX client. Access rights works fine on Linux and Windows series, but OSX Leopard says access denied to every directory that is using acl. Is OSX cifs client too stripped that it cannot use acl or is

Re: [Samba] Samba / ACL / File System Permissions Active Directory winbind

2008-07-30 Thread Jeremy Allison
On Wed, Jul 30, 2008 at 11:17:10PM +0100, Keith Sudbury wrote: Hi Guys, I have a windows 2003 SBS handling domain logins, I also have an Ubuntu machine being used as a file server this is using winbind and is on the domain I can chown dirs etc with Active Directory users. However I have

Re: [Samba] Samba+ACL+w2k domain

2008-02-13 Thread nix_kot
Hi, nix. I have set up samba as a member of w2k the domain, has made Share with ACL support. I distribute the rights through Windows ticks sucsessfully. But I can not be remove them - windows says that You can not remove the user because this object is inheriting permission from his

Re: [Samba] samba acl + winxp, win2000 server

2007-09-27 Thread Vadim Vatlin
Vadim Vatlin wrote: Hi there. I need help. I installed samba + nt acl. I switched on acl on the filesystem, added users in the /etc/passwd and in the tdb database samba, using tdbedit. When I logged in the share, I created a test file, clicked on the right mouse button, chose

Re: [Samba] Samba ACL bug?

2007-02-12 Thread H.Kitagawa
? - Original Message - From: Gerald (Jerry) Carter [EMAIL PROTECTED] To: H.Kitagawa [EMAIL PROTECTED] Cc: samba@lists.samba.org Sent: Tuesday, January 30, 2007 2:05 PM Subject: Re: [Samba] Samba ACL bug? -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hiro, [EMAIL PROTECTED] pub

Re: [Samba] Samba ACL bug?

2007-01-29 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hiro, [EMAIL PROTECTED] pub]# getfacl testfolder # file: testfolder # owner: [EMAIL PROTECTED] # group: [EMAIL PROTECTED] user::rwx mask::rwx mask::rwx other::--- Any idea why the mask listed twice here. What file system is this?

Re: [Samba] Samba ACL bug?

2007-01-29 Thread H.Kitagawa
Hi Jerrry - Original Message - From: Gerald (Jerry) Carter [EMAIL PROTECTED] To: H.Kitagawa [EMAIL PROTECTED] Cc: samba@lists.samba.org Sent: Tuesday, January 30, 2007 2:05 PM Subject: Re: [Samba] Samba ACL bug? -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hiro, [EMAIL

Re: [Samba] samba ACL questions

2006-09-27 Thread Aaron Kincer
David, I think you'll find this document helpful. I do not know for certain if the permissions are the same on Linux, but it _should_ be. http://docs.hp.com/en/B8725-90101/ch03s04.html On 9/27/06, Graham, David [EMAIL PROTECTED] wrote: Greetings, I seem to have Samba+AD+ACL's working on a

Re: [Samba] Samba ACL and '+' on a 'ls - l'

2005-07-28 Thread Arnold . O . Andrews
Dear Guys, I have noticed that one of our domain users folder in /var/lib/samba/profiles has a '+' on the end of their username folder and all the files in their profile too. I know this is to do with ACL's and I know Samba can translate Windows ACL's to filesystem acls, but where can I

Re: [Samba] Samba + ACL, rights are disappearing ?

2005-06-16 Thread Holger Wesser
Maybe this helps: http://lists.samba.org/archive/samba/2005-May/105227.html Greets, Holger Am Donnerstag, 16. Juni 2005 16:10 schrieb [EMAIL PROTECTED]: Hi, I'm running Samba 3.0.14a on Debian Sarge, The Samba server is member of a windows2000 Domain, named NT1 Problem that I have is

Re: [Samba] Samba + ACL cosmetic improvement?

2004-07-15 Thread Tom Dickson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hmmm. Silly SNAP systems do what I want (squash everyone if it is - ---). Anyone know what modifications they make to Samba? I'm using GuardianOS 3.0.099, and it seems to have some extended ACLs that I don't recognize. user::rwxdpo user:admin:rwxdpo

Re: [Samba] Samba + ACL cosmetic improvement?

2004-07-13 Thread rruegner
Hi, you got the same problem, many win admins have, removing group everyone happens everywhere( in this group is everyone g )in big windows hosting active dir companies, this makes their helpdesks crazy *g. Also deny permissions functions are simply a hoax by ms I know windows book writers which

Re: [Samba] Samba + ACL

2004-07-02 Thread Matthias Spork
Marco Gavaldo schrieb: I wish to realize a file-server with SAMBA integrated in my network domain (Windows NT4 PDC). To manage the user access for each share in the Samba file-server, I would use Active Control Lists. ACCESS Control Lists Anyone can tell me - what type and version of Linux is

RE: [Samba] Samba + ACL

2004-07-02 Thread Mark Lidstone
Hi Marco, Here's what I've learned over the past few days setting something similar up: 1) The 2.6 series kernel supports ACLs on ext3, xfs and other filing systems. 2.4 can support them if you install the bestbits patches. 2) Samba 3 seems to work pretty well with ACLs, but

RE: [Samba] Samba + ACL

2004-07-02 Thread Simon Oliver
If you're interested, my setup is Samba 3.0.4 on Fedora Core 2 using yum to update the kernel and it works fine. yum? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba + ACL - Heading OT

2004-07-02 Thread Mark Lidstone
- From: Simon Oliver [mailto:[EMAIL PROTECTED] Sent: 02 July 2004 14:09 To: Mark Lidstone Cc: [EMAIL PROTECTED] Subject: RE: [Samba] Samba + ACL If you're interested, my setup is Samba 3.0.4 on Fedora Core 2 using yum to update the kernel and it works fine. yum? -- To unsubscribe from this list

Re: [Samba] Samba + ACL - OT

2004-07-02 Thread Paul Gienger
Malte Woelky wrote: Hallo, Friday, July 2, 2004, 3:09:26 PM, you wrote: If you're interested, my setup is Samba 3.0.4 on Fedora Core 2 using yum to update the kernel and it works fine. SO yum? Yellowdog Update Manager - Fedora update tool Actually, that's 'Yellow dog Updater,

Re: [Samba] Samba + ACL backup solution

2004-06-15 Thread Stephen Kuhn
On Tue, 2004-06-15 at 21:42, Hamish wrote: Hello all I am looking for a good backup solution for samba shares, I do not mean to start a jihad between rival backup religions, but I would appreciate any suggestions. I have tried star and love it, unfortunately there does not seem to be a

Re: [Samba] Samba + ACL backup solution

2004-06-15 Thread Hamish
I did not know that webmin had a module to backup files as well as ACLs (all i could find was a dump module), could you give me a url to get the module from pls? Stephen Kuhn wrote: On Tue, 2004-06-15 at 21:42, Hamish wrote: Hello all I am looking for a good backup solution for samba shares,

Re: [Samba] Samba ACL

2002-12-11 Thread Kip Cartwright
Waider, Would you mind commenting further on what you had to do to get RedHat 8.0 support ACLs. Thanks K.C. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba ACL

2002-12-11 Thread Ronan Waide
On December 11, [EMAIL PROTECTED] said: Waider, Would you mind commenting further on what you had to do to get RedHat 8.0 support ACLs. Thanks K.C. Sure: * Download kernel SRPM * Modify patches[1] * Spend several hours rebuilding kernel packages [1] is obviously the tricky bit. I'm

Re: [Samba] Samba ACL

2002-12-08 Thread Ronan Waide
On December 7, [EMAIL PROTECTED] said: No, the option/s/ are all enabled in the kernel. What's missing, I think, is all the rest of the support: libacl, libattr, patched fileutils, etc. I'm currently rebuilding various bits and pieces to see if I can make it work without too much grief. Okay,

Re: [Samba] Samba ACL

2002-12-07 Thread Ronan Waide
On December 3, [EMAIL PROTECTED] said: So it looks like the option is turned on in the kernel config, but the patch is not actually in the kernel. No, the option/s/ are all enabled in the kernel. What's missing, I think, is all the rest of the support: libacl, libattr, patched fileutils,

Re: [Samba] Samba ACL

2002-12-04 Thread Klein, Stefan
On Tue, 3 Dec 2002 19:14:01 + Ronan Waide [EMAIL PROTECTED] wrote: On December 3, [EMAIL PROTECTED] said: acls can work with ext2/ext3 but you have to apply the patches from bestbits. xfs is a better choice and has the acl stuff built in. Actually, RedHat's recent precompiled

Re: [Samba] Samba ACL

2002-12-04 Thread Ronan Waide
On December 4, [EMAIL PROTECTED] said: Actually, RedHat's recent precompiled kernels appear to have acls enabled by default. I installed RedHat 8.0 and acl on ext2/3 didn't work, with the precompiled Kernel from SGI and xfs acl work fine. Yup, this is why I said appear to have rather

Re: [Samba] Samba ACL

2002-12-03 Thread Ronan Waide
On December 3, [EMAIL PROTECTED] said: acls can work with ext2/ext3 but you have to apply the patches from bestbits. xfs is a better choice and has the acl stuff built in. Actually, RedHat's recent precompiled kernels appear to have acls enabled by default. Cheers, Waider. -- [EMAIL

Re: [Samba] Samba ACL

2002-12-03 Thread James S. Martin
I'm not so sure about this... but looking at the changelog for Red Hat's 2.4.18-18.7.x kernel says (for RH 7.2) : grep -B 2 -i acl kernel-2.4.spec * Mon Aug 12 2002 Arjan van de Ven [EMAIL PROTECTED] - ACLs removed for now because of stability and correctness problem If you grep the config