Win2K08 does not like the order in which we add inheritable ACEs in modules/vfs_acl_common.c:add_acl_inheritable_components

Richard Sharpe realrichardsharpe at
Fri Mar 30 16:20:28 MDT 2012

On 3/30/12, Christopher R. Hertel <crh at> wrote:
> On 03/30/2012 04:26 PM, Richard Sharpe wrote:
>> Hi,
>> I have found that Win2K08 claims that placing the inheritable
>> components last is wrong.
>> It is happy if they come first in the list.
> The ordering of ACEs is important at a lot of levels.  I don't know details
> but I have worked with commercial vendors who have reported similar issues.
> Worth digging into the docs and, if the answers are not there, asking for
> details from MS.

>From observing what W2K08 does and having tweaked the code, it seems
pretty clear that the inheritable entries added should come first.

I still have to test that W2K03 is happy, though, and should probably
look at Win7.

Richard Sharpe

More information about the samba-technical mailing list