Samba + NFS + (not visible) ACLs

[Albert Fluegel]

Hi,

On Fri, Feb 15, 2013 at 10:19:55PM +1100, Andrew Bartlett wrote:
> On Fri, 2013-02-15 at 12:15 +0100, Albert Fluegel wrote:
> > ...
> > On Fri, Feb 15, 2013 at 09:24:59PM +1100, Andrew Bartlett wrote:
> > > ...
> > > Have you seen vfs_fake_perms.c, which is already in the tree?
> > yes, sure. It does different things. Probably it would make sense
> > to write a more general module for configurable manipulation of
> > permissions.
> I agree.  Clearly there is some (small) demand for these things. 
However, i wrote a more general version (please find attached), that
can be used instead of mod_fake_perms and mod_fake_full_access with
appriproate parameters (see docs file, hope, this XML file is correct,
did not find the time to test)

> 
> The only thing to be careful of is that Samba may choose to rely on the
> reported permissions, and may in turn honour those (using a root
> override in some specific cases) towards clients.  In your case that
> doesn't matter (the NFS server has the final say), and in the original
> use case I had this module on a read only share.
Hm, yes, probably some warnings should be written to the docs.

Thank you and with kind regards,
 Albert Fluegel

-- 
Albert Flügel
Lindwurmstraße 51
80337 München
Telefon: +49-89-2010895
Telefon: +49-170-5665444
E-Mail: af at muc.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vfs_mod_perms.c
Type: text/x-csrc
Size: 8648 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20130215/f4affa9a/attachment.c>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vfs_mod_perms.8.xml
Type: application/xml
Size: 6360 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20130215/f4affa9a/attachment.xml>