Hi all, I finally added the code to make POSIX ACLs inheritable, overriding Samba's normal way of setting permissions. It can be turned on on a per-share basis with the "inherit acls = yes" option (off by default). It's in the SAMBA_2_2 and HEAD branches so if people would like to test it and comment I'd appreciate it. Thanks, Jeremy.