[Samba] NT Acls

[Jason Stewart]

Hi Bill,

It wasn't really that easy to get ACL working on my machine. The first 
thing I did was to set an ACL on a file on the server using the setfacl 
command. It works, so I know that the ACL utilities and patches are working 
correctly. Next I checked my include/config.h file in the samba source 
directory to see if in fact that POSIX ACLs is defined. In your 
include/config.h file, you should see:

#define HAVE_POSIX_ACLS 1
#define HAVE_LIBACL 1

Both should be uncommented. I found that I had both of these, so the 
configure script found the ACL utilities that I had installed on my system. 
Next I checked the output of config.log to see if my binary was linked with 
libacl. Yup, it was and if there was a problem, the compiler would have 
spit out a link error.

Basically, everything looked good, and should have worked just fine (but it 
didn't), so I recompiled. I tried out the new binary, and that didn't work 
either. I am almost embarrassed to admit that the problem only arose out of 
my own absent-mindedness. I am so used to restarting the smdb daemon with 
-HUP that i forgot to kill the old binary and start the new one fresh. It 
came down to something as simple as that. Doh!

Good luck in your adventure,
Jason Stewart
Systems Administrator/Programmer
Right to Life of Michigan
Tel: (616)532-2300
Fax: (616)532-3461


At 03:26 PM 3/19/2002 -0800, you wrote:
>Jason-
>
>I am trying to get my ACLs to work on a Linux box too on the same config
>but for ext3.  I can modify pre-existing permissions but cannot add
>users and groups to the ACL.  Is there a trick that you know of?  Any
>insights?  Any help is much appreciated.
>
>As far as your question, click the Advanced button in the security tab.
>There you can select the [Inherit permissions from parent...] and the
>[Replace permissions...] check boxes.  This sets the default ACL in
>Linux and works for me.  Be warned I just started testing this server.
>
>Cheers,
>         -Bill
>
>
>
>List:     samba
>Subject:  [Samba] NT Acls
>From:     Jason Stewart <jstewart at rtl.org>
>Date:     2002-03-19 14:29:29
>
>Hello,
>
>I have NT ACLs enabled for the shares on my Samba server. I am able to
>log
>in as administrator on a W2k box and change ACLs for files and folders.
>I
>can do all of the usual stuff like add users and groups to the ACL,
>change
>permissions, blah, blah, blah....
>
>What does not seem to work is changing the ACL for the subfolders and/or
>
>files as well as the current folder from the W2k client. Everything
>works
>just fine from the Server side. Has anyone else combated this problem?
>If
>so, how did you fix it, or do we just live without the ability to modify
>
>ACLs recursively?
>
>My setup is this:
>Samba 2.2.3a
>Linux 2.2.18 with ACL patches
>FS: EXT2 with ACL patches
>ACL: ea-0.8.21, attr-2.0.5, acl-2.0.4, libacl, libattr from
>acl.betstbits.at
>
>
>Jason Stewart
>Systems Administrator/Programmer
>Right to Life of Michigan
>Tel: (616)532-2300
>Fax: (616)532-3461
>
>----
>Bill Town
>Kontiki, Inc.
>Voice: 650.625.3065
>Fax: 650.623.0142