[PATCH] loadparm: check for VFS modules required by AD DC role

[Rowland Penny]

On Tue, 27 Nov 2018 11:25:45 +0100
David Disseldorp via samba-technical <samba-technical at lists.samba.org>
wrote:

> On Tue, 27 Nov 2018 14:44:59 +0900, SATOH Fumiyasu wrote:
> [cc'ing list]
> 
> Hi,
> 
> > On Tue, 27 Nov 2018 03:36:19 +0900,
> > David Disseldorp via samba-technical wrote:
> > > When Samba is running as an AD compatible domain controller and
> > > the "vfs objects" parameter is not set, then the dfs_samba4 and
> > > acl_xattr modules are automatically enabled. However, if the "vfs
> > > objects" is defined, then the setting is left as-is.
> > > This means that attempts to us other VFS modules have the side
> > > effect of disabling the dfs_samba4 and acl_xattr modules, causing
> > > unexpected behaviour.  
> > 
> > All shares on Samba AD DC requires dfs_samba4 and acl_xattr modules?
> > Or only the "SYSVOL" share on Samba AD DC require it?
> 
> The modules are currently enabled by default for all AD DC shares, not
> just SYSVOL. Hopefully someone more familiar with the Samba AD DC role
> can answer your question as to whether or not that's really necessary.
> 
> Cheers, David
> 

Currently, Samba doesn't recommend using a DC as a fileserver and the
wiki says that if you do, you must use Windows ACLs.

Rowland