[SCM] SAMBA-CTDB repository - branch v3-2-ctdb updated - build_3.2.11_ctdb_62-2-g1542d47

Michael Adam obnox at samba.org
Wed Aug 19 05:12:48 MDT 2009


The branch, v3-2-ctdb has been updated
       via  1542d479c617349285fb4bbc875b62a1e7ae8d6f (commit)
      from  ebd709c5b8e62b3e27cdeeeed4aa0975f992399e (commit)

http://gitweb.samba.org/?p=obnox/samba-ctdb.git;a=shortlog;h=v3-2-ctdb


- Log -----------------------------------------------------------------
commit 1542d479c617349285fb4bbc875b62a1e7ae8d6f
Author: Volker Lendecke <vl at samba.org>
Date:   Thu Aug 13 06:33:16 2009 +0200

    Make refusal of SEC_DESC_DACL_PROTECTED configurable
    
    This adds a parameter "gpfs:refuse_dacl_protected" that defaults to false.
    
    GPFS has no place to store the SEC_DESC_DACL_PROTECTED ACL bit. With this
    parameter we give customers an option to either ignore this bit or refuse
    setting an ACL with it.

-----------------------------------------------------------------------

Summary of changes:
 source/modules/vfs_gpfs.c |    4 +++-
 1 files changed, 3 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/modules/vfs_gpfs.c b/source/modules/vfs_gpfs.c
index 6d1441c..0b1f52c 100644
--- a/source/modules/vfs_gpfs.c
+++ b/source/modules/vfs_gpfs.c
@@ -445,7 +445,9 @@ static NTSTATUS gpfsacl_set_nt_acl_internal(files_struct *fsp, uint32 security_i
 
 	if (acl->acl_version&GPFS_ACL_VERSION_NFS4)
 	{
-		if ((psd->type&SEC_DESC_DACL_PROTECTED)) {
+		if (lp_parm_bool(fsp->conn->params->service, "gpfs",
+				 "refuse_dacl_protected", false)
+		    && (psd->type&SEC_DESC_DACL_PROTECTED)) {
 			DEBUG(2, ("Rejecting unsupported ACL with DACL_PROTECTED bit set\n"));
 			return NT_STATUS_NOT_SUPPORTED;
 		}


-- 
SAMBA-CTDB repository


More information about the samba-cvs mailing list