[Samba] SaMBa 4.16.4 adds users to ACLs as groups

[Nick Couchman]

On Fri, Jun 16, 2023 at 7:33 AM Rowland Penny via samba
<samba at lists.samba.org> wrote:
>
>
>
> On 15/06/2023 16:18, Tamás Németh via samba wrote:
>
> Hi Tamas, I have been reviewing you numerous posts on this list about
> this project, are you aware that you have been posting for 6 months ?
>
> In your last post there was this:
>
> [quote]
> this "piling up" of ACL information doesn't happen either on a native
> Windows file server or with vfs_acl_xattr
> [/quote]
>
> Does this mean you do not have 'vfs objects = acl_xattr' in your smb.conf ?

I'll just add, here, that I've noticed the same thing on a file server
I have where I do _not_ have "vfs objects = acl_xattr" enabled on the
share. It's a pretty simple share, for Mac OS clients, and I didn't
need the full Windows ACL functionality, so I went without it. I see
users in the group section and groups in the user section when I use
"getfacl" from the command line.

>
> You also had this:
> [quote]
> this may be the reason why using POSIX ACLs with SaMBa is deprecated
> [/quote]
>
> As far as I am aware, using POSIX ACLs isn't deprecated, is it possible
> you can tell us where you found that information ?

Yeah, I've never seen anything about POSIX ACLs being deprecated in
Samba - this would be news to me, too.

>
> It might also be a good idea if we could see your present smb.conf, so
> please post the output of 'testparm -s' (sanitised if must).

I don't want to hijack the thread, but I can provide my (saniti[sz]ed)
config, too, if that would be helpful. I'm running Samba 4.16.4 on
Rocky 8.7.

-Nick