[Samba] smaba 2.2.5 and acls on XFS

[Greg Freemyer]

Do you know if the ./configure line had --with_acl_support set or not.

If this is from a rpm, maybe you can get a specfile for it and look in there.

FYI: I have ACLs working with a SuSE distribution, but it did NOT work in there =
release, I had to get the source RPM and re-compile is with the appropriate =
flags.  I also had to install the ACL related dependancies prior to the =
compile.


Greg Freemyer
Internet Engineer
Deployment and Integration Specialist
Compaq ASE - Tru64 v4, v5
Compaq Master ASE - SAN Architect
The Norcross Group
www.NorcrossGroup.com

 >>  Hi

 >>  i have a question concerning the acl supoprt of samba, i have a mandrake9
 >>  (2.4.19) with a xfs partition installed
 >>  locally i can get and set acls on the xfs parition

 >>  snip

 >>  [root at aclsmb data]# getfacl samba/
 >>  # file: samba
 >>  # owner: root
 >>  # group: root
 >>  user::rwx
 >>  group::r-x
 >>  other::r-x

 >>  [root at aclsmb data]# setfacl -m u:smalchow:rwx samba/
 >>  [root at aclsmb data]# getfacl samba/
 >>  # file: samba
 >>  # owner: root
 >>  # group: root
 >>  user::rwx
 >>  user:smalchow:rwx
 >>  group::r-x
 >>  mask::rwx
 >>  other::r-x

 >>  [root at aclsmb data]#


 >>  but i can't modify acls from within the native windows security dialog.

 >>  the samba machine is joined to the domain and i am trying to authenticate
 >>  via winbind

 >>  this is the relevant smb.conf  =20

 >>  workgroup =3D CTS-IO
 >>  server string =3D Samba Server %v

 >>  security =3D domain
 >>  password server =3D *
 >>  encrypt passwords =3D yes
 >>  smb passwd file =3D /etc/samba/smbpasswd
 >>  winbind uid =3D 10000-20000
 >>  winbind gid =3D 10000-20000
 >>  winbind separator =3D \
 >>  winbind use default domain =3D yes
 >>  template homedir =3D /home/%D/%U
 >>  obey pam restrictions =3D yes

 >>  [data]
 >>  comment =3D whatever
 >>  path =3D /data/samba
 >>  read only =3D no
 >>  public =3D yes

 >>  #smb.conf end

 >>  # this is the /etc/pam.d/samba

 >>  auth            required        /lib/security/pam_securetty.so
 >>  auth            required        /lib/security/pam_nologin.so
 >>  auth            sufficient      /lib/security/pam_winbind.so
 >>  auth            required        /lib/security/pam_pwdb.so user_first_pass
 >>  shadow nullok
 >>  account         required        /lib/security/pam_winbind.so
 >>  session         required        /lib/security/pam_stack.so
 >>  service=3Dsystem-auth-winbind
 >>  password        required        /lib/security/pam_stack.so
 >>  service=3Dsystem-auth-winbind

 >>  Can anyone please give me a hint how to get ACLs running

 >>  Soeren




 >>  __________________________________________________________________________
 >>  ____
 >>  Die clevere Geldreserve: der DiBa-Privatkredit. Funktioniert wie ein
 >>  Dispo,=20
 >>  ist aber viel gunstiger! Alle Infos: http://diba.web.de/?mc=3D021104

 >>  --=20
 >>  To unsubscribe from this list go to the following URL and read the
 >>  instructions:  http://lists.samba.org/mailman/listinfo/samba