[Samba] Win ACL share Perm and recycle bin

[Rowland Penny]

On Thu, 30 Nov 2023 11:07:52 +0100 (CET)
Fabrizio Rompani via samba <samba at lists.samba.org> wrote:

> Hi 
> I've set up a domain with 2 dc (samba 4.16.10 - debian 11) a
> fileserver ( 4.15.13 ubuntu 22) , and 50 windows client. fileserver
> has a few share with win ACL ( I follow [
> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs
> |
> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs
> ] ) . 
> 
> Everythings works fine and I can setup security access for that
> shares , from a windows client . ( main share has 2,5 MLN files and
> it tooks a couple of hrs... but I can deal whit this) But ......
> since I enabled recycle bin for that shares ( vfs objects = recycle)
> , I cannot setup security access anymore ( permission denied )
> Disable recycle bin ( and restart smbd ) works fine again . 
> 
> Any hint? 
> thanks 
> fab 
> 
> dc's smb.conf: 
> 
> 
> 
> fileserver :smb.conf: 
> 
> [global] 
	SNIP 
> vfs objects = acl_xattr 
	SNIP
> [SomeShare] 
> path = /dati/condivisioni/lavoro/ 
> read only = no 
> include = /etc/samba/cestino.conf 
> 
> cestino.conf 
> vfs objects = recycle 

I have removed most of the lines from your fileservers smb.conf,
leaving only what I believe to be the relevant lines.

You initial use vfs_acl_xattr in global, but your 'vfs obects' line in
your 'include' file seems to turn it off again, try:

vfs objects = recycle acl_xattr

in your 'include' file.

Rowland