ACL inheritance mess with win2k clients...

jra at dp.samba.org jra at dp.samba.org
Wed Oct 2 20:16:00 GMT 2002


On Wed, Oct 02, 2002 at 04:05:45PM -0400, Eric Lee Steadle wrote:
> >Ok - so how does the W2K client "know" it's talking to a W2K or NT
> >server ? Any idea what criteria a W2K client uses to check ?
> 
> 
> Well, I'm pretty sure it (the client) checks for one or more w2k specific
> flags: SE_DACL_AUTO_INHERITED, or perhaps SE_DACL_PROTECTED. Jim said that the
> client sets the SE_DACL_AUTO_INHERITED flag, (which is not honored by Samba,
> nor would it be by NT4) then it queries for those flags again. I'd bet a
> quarter that it (the client) is trying to determine what ACL inheritence
> mechanism is being used by the server.

You'd lose that quarter.... Samba never sets any of these flags, so
the client cannot be using their presense to determine if we support
W2K or NT ACLs.

Jeremy.



More information about the samba-technical mailing list