Migrate from TDB file to native permissions

[Andrew Bartlett]

On Sat, 2012-04-28 at 10:28 -0700, Matthieu Patou wrote:
> On 04/28/2012 05:25 AM, titantoppler at gmail.com wrote:
> > Hi list,
> >
> > When deploying Samba 4 alpha 12, my filesystem (reiserfs) did not support
> > extended attributes, and so I had to use the posix:eadb option instead.
> >
> > I have migrated those files to an ext4 system which supports user_xattr,
> > and want to know how I can stop using the posix:eadb option in my smb.conf
> > and use the native permissioning instead.
> >
> > Any help is much appreciated.
> >
> > Cheers!
> Nothing has been done yet, but we are thinking of doing it.
> Maybe you can do a simple script that dump the acl from the tdb (using 
> samba-tool ntacl get --as-sddl), modify the smb.conf to comment the 
> posix:eadb option and then put them back (but in the xattr) with samba-tool.
> 
> Extra points if you manage to do it inside samba-tool.

The python layer should make this fairly easy, we have deliberately
built python modules for reading and writing all 3 ACL formats
(posix:eadb, xattr_tdb:file as used in Samba3, and the S4 native Xattr
format, which can be read by smbd also).  

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org