Max number of ACEs in an SD ...

Scott Lovenberg scott.lovenberg at gmail.com
Fri May 24 08:41:19 MDT 2013


On Fri, May 24, 2013 at 9:57 AM, Richard Sharpe <realrichardsharpe at gmail.com
> wrote:

> On Fri, May 24, 2013 at 5:19 AM, Simo <idra at samba.org> wrote:
> > On 05/23/2013 11:49 PM, Richard Sharpe wrote:
> >> Hi folks,
> >>
> >> It seems that the IDL for SDs limits the number of ACEs to 1,000. It
> >> also seems that Windows maxes out at around 1,820 ACEs.
> >>
> >> That is a ridiculous number of ACEs, but has anyone tried anything
> >> larger than 1,000?
> >>
> > Keep in mind number of ACEs is also often limited by the size of xattrs
> > on Linux (many file systems have only 4k xattrs, some have 64k xattrs)
>
> Yes, that is true, however, 1,000 ACEs is around 28kiB of XATTR space.
> We don't have that limitation in ZFS. We can go up to 128kiB.
>

As I understand it, Windows will only allow up to 64KB (or KiB if you're
into that) of ACEs per ACL.  I'm not sure if Windows clients would truncate
the entries after that.


-- 
Peace and Blessings,
-Scott.


More information about the samba-technical mailing list