NFSv4 ACLs for the AD DC

Andrew Bartlett abartlet at
Wed May 16 01:07:07 UTC 2018

On Wed, 2018-05-16 at 02:56 +0200, Timur I. Bakeyev wrote:
> We have some hacks around to make thing work as desired, but for the proper patch it would be nice to have
> the idea how it should fit into the rest of the code.
> ATM vfs_posixacl is hard-coded for all ACL operations and vfs_acl_xattr is hard-coded for sysvol and netlogon shares.
> We had the idea to check the FS type and based on that load appropriate vfs objects, but as such an approach isn't
> used yet, there must be reasons for that. 

I wouldn't assume that.  You certainly could check at provision time and write in an option or flag that changes the vfs objects. 

Loadparm shouldn't be auto-detecting at runtime, but a vfs module could. 

Andrew Bartlett

Andrew Bartlett
Authentication Developer, Samba Team
Samba Development and Support, Catalyst IT

More information about the samba-technical mailing list