Samba 3.X on ZFS with acl_xattr / acl_tdb
hafeez.bana at gmail.com
Wed Oct 9 05:48:15 MDT 2013
Some more info.
I know I pointed out the github link - but ZFS on linux doesn't support
posix acls. So for example setfacl methods don't work (but getfacls do) -
could this be the culprit?
If so any workarounds?
On Wed, Oct 9, 2013 at 12:13 PM, Hafeez Bana <hafeez.bana at gmail.com> wrote:
> I have had level 10 debug enabled and the strange thing is there are no
> errors in the log file.
> Even stranger - this morning I tried the following:
> Used acl_xattr
> then I set the owner and group of the folder in question to hb and domain
> users respectively.
> Altering existing permissions works...I can see the security.NTACL attrib
> being modified.
> However when I try to add a new user or group, I get the error above. The
> exact error message is 'An error occurred while applying security
> information to <path> : Access Denied'
> My feeling is while windows is displaying the above error. I suspect
> something it's not entirely true. That said, the security.NTACL attribs
> look unmodified when adding a new user/group.
> Any suggestions for next steps...
> On Tue, Oct 8, 2013 at 2:26 PM, Richard Sharpe <
> realrichardsharpe at gmail.com> wrote:
>> On Tue, Oct 8, 2013 at 5:27 AM, Hafeez Bana <hafeez.bana at gmail.com>
>> > Hi Everyone,
>> > I've been trialling ZFS with Samba 3.x (Ubuntu 12.04) and everything
>> > OK except when you try to assign permissions using Windows 7 and using
>> > acl_xattr or acl_tdb scheme.
>> > One keeps getting 'Access Denied'.
>> Have you tried getting a level-10 debug log to see why you are getting
>> access denied? You might want a capture as well so you can find the
>> exact point at which you are getting the EACCESS.
>> > the same config except on an EXT4 system works flawlessly. ZFS already
>> > supports xattrs so I am not sure what else ZFS needs to support for
>> > with acl_xattr to work.
>> > It's strange that acl_tdb also exhibits the same error because one would
>> > have thought the acls would be written to a tdb file.
>> > Any insights would be appreciated. The only thread I have been able to
>> > is this one https://github.com/zfsonlinux/zfs/issues/170
>> > But again I fail to understand how that has an impact, particularly when
>> > using acl_tdb
>> > Thx.
>> > Hafeez
>> Richard Sharpe
More information about the samba-technical