Win2K08 does not like the order in which we add inheritable ACEs in modules/vfs_acl_common.c:add_acl_inheritable_components

[Richard Sharpe]

On 3/30/12, Christopher R. Hertel <crh at samba.org> wrote:
> On 03/30/2012 04:26 PM, Richard Sharpe wrote:
>> Hi,
>>
>> I have found that Win2K08 claims that placing the inheritable
>> components last is wrong.
>>
>> It is happy if they come first in the list.
>
> The ordering of ACEs is important at a lot of levels.  I don't know details
> but I have worked with commercial vendors who have reported similar issues.
>
> Worth digging into the docs and, if the answers are not there, asking for
> details from MS.

>From observing what W2K08 does and having tweaked the code, it seems
pretty clear that the inheritable entries added should come first.

I still have to test that W2K03 is happy, though, and should probably
look at Win7.

-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)