[Samba]NT ACLs and backup.

Greg Freemyer freemyer-ml at NorcrossGroup.com
Tue Jan 29 11:39:33 GMT 2002


David,

I'm at the conceptual stage.  I have a dedicated Redhat 7.2 box setup for =
testing, but I can change the config/filesystems as required.

I want to build a dedicated "SMB storage and backup" server for our office.  =
Sort of a NAS device with tape capability.

My goal is to have this box do 3 things:

1) Serve SMB shares with full NT/2000 ACL support.
2) Be able to backup/restore the above on a file by file basis and have the ACL =
metadata maintained.
3) Use smbclient with the tar option to backup other SMB servers, and again be =
able to maintain the ACL metadata.

For 2) above, I need to understand where the ACL metadata is stored, and which =
backup technology will allow it to be restored correctly.

I gather from you comment below, that some Linux filesystems support Linux =
ACLs, and with those Samba uses this space to hold the NT ACLs.

Could you tell me which Linux Filesystems do this, and which backup tools =
correctly handle the Linux ACL metadata.  (I always use standard permissions =
under UNIX/Linux, so I have never had to do worry about them.)

For 3) above, I tried the smbclient from Samba V2.2.1, but when I did the =
restore, it did not restore the ACL metadata.  I'm hoping that I either did =
something wrong, or that there is a different backup/restore tool that supports =
this feature.

Thanks for your help,

Greg Freemyer
Internet Engineer
Deployment and Integration Specialist
The Norcross Group
www.NorcrossGroup.com


>>  Are you using an ACL-enabled filesystem, or just letting Samba map ACLs
>>  onto
>>  standard UNIX privilages?

>>  If it's the latter, any UNIX backup tool should back them up.  If it's the
>>  former, you'll need a tool that understands the filesystem ACLs.

>>  -----Original Message-----
>>  From: Greg Freemyer [mailto:freemyer at NorcrossGroup.com]
>>  Sent: Monday, January 28, 2002 7:05 PM
>>  To: samba at lists.samba.org
>>  Subject: [Samba]NT ACLs and backup.


>>  Hi,

>>  I new to Samba and I have a couple of questions about how it handles NT
>>  ACLs
>>  (Access Control Lists).

>>  I tried searching the archives but couldn't find anything relevant.  If
>>  this
>>  is documented somewhere, please point me at the relevant docs.

>>  I'm pretty sure Samba allows a NT client to set the security ACLs.

>>  My question is what happens if:
>>  I setup an entire Linux Volume to be an SMB share
>>  I backup my Linux based SMB folder to tape via tar, cpio, or whatever
>>  I do a "rm -rf" on the Linux Volume
>>  I restore my backup from tape.

>>  Will I get the NT ACLs restored.  (I'd be surprised if the answer is no.)

>>  Now I delete just a single file, and then I do a single file restore.

>>  Do I get it's ACL info restored?  It seems unlikely to me, but I don't
>>  know
>>  where this metadata is stored.

>>  =3D=3D=3D
>>  New scenario.

>>  I use smbclient to create a tar backup of an externally served SMB share.

>>  When I do a restore, do I get the ACLs restored?

>>  (I tried this with V2.2.1, but I did not get them.  Maybe I did something
>>  wrong.)

>>  Thanks for any clarification regarding the above.

>>  Greg Freemyer
>>  Internet Engineer
>>  Deployment and Integration Specialist
>>  The Norcross Group
>>  www.NorcrossGroup.com


>>  --=20
>>  To unsubscribe from this list go to the following URL and read the
>>  instructions:  http://lists.samba.org/mailman/listinfo/samba

>>  --=20
>>  To unsubscribe from this list go to the following URL and read the
>>  instructions:  http://lists.samba.org/mailman/listinfo/samba











More information about the samba mailing list