[Samba] map acl inherit stopped working

[Peter Rindfuss]

On 2009-10-19 23:04, Jeremy Allison wrote:
> On Sat, Oct 17, 2009 at 12:40:10AM +0200, Peter Rindfuss wrote:
>> Hi,
>>
>> It seems that at some point "map acl inherit = yes" stopped working for
>> me. I now have Samba 3.4.2, but this problem started with an earlier
>> version, possibly some 3.2.x or 3.3.x. No SAMBA_PAI extended attributes
>> are created anymore, but existing ones are still honored.
>>
>> OS is Suse 11.0, file system is XFS.
>>
>> What could be wrong?
> 
> Not sure, can you log a bug and upload logs please ?
> 

Hi Jeremy,

I will file a bug, if necessary, but perhaps my further investigations 
can help.

My statement "no SAMBA_PAI extended attributes are created anymore" is 
wrong, I apologize. But it is interesting what really happens to SAMBA_PAI:

I looked at an old existing folder:
Windows security tab shows that rights are inherited from the folder 
above. SAMBA_PAI is
0x010003000300009a7500000151c3000002ffffffff009a7500000151c3000002ffffffff

When I remove and (try to) set inheritance again, SAMBA_PAI becomes
0x02048d0300030000009a750000000151c300000302ffffffff0b009a7500000b0151c300000302ffffffff
and inheritance is gone, same as if SAMBA_PAI were not there at all.

When I manually set SAMBA_PAI to the first value, inherited rights are 
back there again.

One more interesting observation:
The acl_xattr VFS module seems to work fine with respect to inheritance 
(on a test share). BTW, the SAMBA_PAI created with acl_xattr looks 
similar to the non-working one above.

Cheers, Peter