Current approaches to ACL handling

[simo]

On Mon, 2012-10-01 at 11:52 -0700, Jeremy Allison wrote:
> On Mon, Oct 01, 2012 at 02:42:51PM -0400, simo wrote:
> > On Mon, 2012-10-01 at 13:28 -0500, Christopher R. Hertel wrote:
> > > What are the current best practices for ACL handling?
> > > 
> > > To my knowledge, it's using EAs to store the ACLs.  Is there any in-depth 
> > > documentation on this implementation?  Are there any other mechanisms in use?
> > 
> > We store the Windows ACL in an EA and a matching posix ACL translation
> > on the file, plus a sha hash of the ACL so we can be sure they are in
> > sync.
> > 
> > I am not aware of any other doc beyond the code.
> 
> Well there are some SambaXP talks on it I did a while ago :-).

Indeed here is the archive page from 2009:
http://sambaxp.org/index.php?id=41

Search for: Jeremy Allison (Samba Team, Google): 
Native Windows ACLs in Samba 3

There are both slides and ogg file with audio

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer <simo at samba.org>
Principal Software Engineer at Red Hat, Inc. <simo at redhat.com>