[Samba] VFS ACL modules - question to developers

adrian.berlin adrian.berlin at o2.pl
Tue Nov 29 01:19:16 MST 2011


Hi!

Do you have any update? 

Best regards
/Adrian Berlin

Dnia 24 listopada 2011 12:43 adrian.berlin <adrian.berlin at o2.pl> napisał(a):

> Hi!
>  
> 1. To check acl_tdb limits I used this script (on Windows):
> 
> @echo off
> for /l %%i in (1,1,100000) do ( 
> icacls.exe \\IP_address\smb_share\folder /grant user%%i:F
> 
> 
> I could write only 22 entries.
>  
> 2. Please see document on scribd http://www.scribd.com/doc/73654474/vfs-acls
>  
> Cheers
> /Adrian Berlin
> 
> 
> 
> 
> > Dnia 23 listopada 2011 21:39 Jeremy Allison <jra at samba.org> napisał(a):
> > 
> > > On Wed, Nov 23, 2011 at 01:15:46PM +0100, adrian.berlin wrote:
> > > > Hi!
> > > > 
> > > > I have few question to developers of VFS ACL modules (acl_tdb and acl_xattr):
> > > > 1. Do you plan to extend quantity of entries in acl_tdb
> > > > (now I can write 22 user ACLs plus CREATOR OWNER, CREATOR GROUP, domain users and everyone)
> > > 
> > > I don't see any limits in acl_tdb. Where are you getting this
> > > limit from ?
> > > 
> > > > 2. Do you plan to fix few ACLs eg. Traverse folder / Execute file (to traverse
> > > > I need to enable additional permission List folder / read data to traverse through
> > > > folder), Read attributes seems to be always enabled, Read Extended Attributes seems
> > > > to be always disabled, the same behaviour is with Write Attributes and Write Extended
> > > > Attributes, Delete subfolder and files permission works only on files - I cannot remove subfolder.
> > > 
> > > Can you expand on this more ? I need to know what specific
> > > bugs you're seeing here.
> > > 
> > > Thanks,
> > > 
> > > Jeremy.
> > > 
> 


More information about the samba mailing list