[Samba] Access Denied when changing ACLs from W2000 client

[Freeman, Peter (ERHS)]

Hi all

I'm having some problems trying to configure ACLs from a Win2000 SP3
client.  I'm running Samba 2.2.5 on kernel 2.4.18 (with acl + ext attr),
Samba is compiled with acl support etc.

Samba is configured with security=domain, and is running with local 
groups etc rather than thru winbind, I haven't been game enough to tread
those waters yet.

With the debug level set to 5 I'm getting the following errors in my 
client machine log after trying to add an extra group into the permissions
via folder properties on the W2k client.

Can anyone shed some light on this, I've played around with the security
mode
settings etc on this share, almost certainly this is where I'm going wrong,
but
I can't see where. 

The share excerpt from smb.conf is listed before the log entries.

TIA

-------
[Shared]
	comment = Shared Workgroup Area
	path = /home/samba/shared
	valid users = @g-users
	admin users = @g-itstaff
	read only = No
	inherit permissions = no
	inherit acls = yes
	guest ok = No
	security mask = 0777
	force security mode = 00
	directory security mask = 0777
	force directory security mode = 00
	vfs object = /usr/lib/samba/recycle.so
	vfs options = /etc/samba/recycle.conf

-------
[2002/08/20 18:01:06, 5] rpc_parse/parse_prs.c:prs_uint8(500)
                      00ab id_auth[5] : 05
[2002/08/20 18:01:06, 5] rpc_parse/parse_prs.c:prs_uint32s(785)
                      00ac sub_auths : 00000015 78e3081a b5b9d1db f95de5a2
000003e8 
[2002/08/20 18:01:06, 5] smbd/posix_acls.c:unpack_nt_owners(433)
  unpack_nt_owners: validating owner_sids.
[2002/08/20 18:01:06, 5] smbd/posix_acls.c:unpack_nt_owners(474)
  unpack_nt_owners: owner_sids validated.
[2002/08/20 18:01:06, 3] smbd/dosmode.c:unix_mode(111)
  unix_mode(TestACL) returning 0760
[2002/08/20 18:01:06, 3]
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(1809)
  convert_canon_ace_to_posix_perms: Too many ACE entries for file TestACL to
convert to posix perms.
[2002/08/20 18:01:06, 3] smbd/posix_acls.c:set_nt_acl(2242)
  set_nt_acl: failed to convert file acl to posix permissions for file
TestACL.
[2002/08/20 18:01:06, 3] smbd/error.c:error_packet(91)
  error string = Function not implemented
[2002/08/20 18:01:06, 3] smbd/error.c:error_packet(106)
  error packet at smbd/nttrans.c(1714) cmd=160 (SMBnttrans)
NT_STATUS_ACCESS_DENIED