Samba scalability?

[Cole, Timothy D.]

> -----Original Message-----
> From:	Gerald Carter [SMTP:gcarter at valinux.com]
> Sent:	Thursday, December 21, 2000 13:06
> To:	Kevin Colby
> Cc:	Shawn Wright; samba-ntdom at samba.org
> Subject:	Re: Samba scalability?
> 
> On Thu, 21 Dec 2000, Kevin Colby wrote:
> 
> > Shawn Wright wrote:
> > > 1. Lack of ACL support
> >
> > This is a big issue for us too.  Without full ACLs per file, we
> > simply cannot replace certain NT systems, and I haven't seen much
> > for Linux ACLs yet.  Of course, this is a Linux shortcoming, not
> > a Samba issue.
> 
> ACL support will be in Samba 2.2.  See
> http://www.samba.org/samba/development.html for a general roadmap of
> releases.
> 
	Note that Samba's is still (more or less necessarily) limited by
what the underlying OS can do ACL-wise -- there are some NT ACL features
that no Unix implements.

	Depending on what the NT in software question wants to do, that may
or may not be a problem.

	In particular, the ACLs exposed to the client are going to be
interpreted with native semantics, not NT ones -- this may cause
GetEffectiveRightsFromAcl() to yield different results from the actual
access granted (which again, may or may not be a problem, depending on what
you are going to do).  At least with winbindd, I believe the correct SIDs
will be reported now.

	But, as Shawn says, ultimately (given the ACL structure in Samba 2.2
is general enough to do it, in and of itself) this is an OS issue, not a
Samba one.