[Samba] acl

[Alexey Lobanov]

Hi.

On 3 Sep 2003 at 9:34, Jarabe wrote:

> ......... <CLIP>.........
> checking whether to support ACLs... checking for getxattr in -lattr...
> no
> checking for acl_get_file in -lacl... no
> checking for ACL support... no

So, your Samba does not see POSIX ACL and operates in conventional user-group-world 
model.

Try to edit "configure" script and replace "-lacl" with "-lacl -lattr" in all (two) 
places. Other question is if you have the "acl development" and "extended attributes 
development" headers and libs at your machine; look in the installed package list. No 
idea how do they call it in RH.

Alexey

> 
> 
> I am assuming these are also important in the acl support function. 
> Just for curiosity i ran find . -name "*acl*" in the source directory
> from the rpm and found:
> 
> ./include/smb_acls.h
> ./lib/sysacls.c
> ./smbd/posix_acls.c
> ./utils/smbcacls.c
> ./aclocal.m4
> 
> Is that all I need to get ACLS working.?
> 
> Thanks Again Alexey....
> 
> 
> -------------------
> > Hello.
> > 
> > On 3 Sep 2003 at 8:57, Jarabe wrote:
> > 
> > > I ran ldd /usr/sbin/smbd and I didnt see any libacl.so or
> libattr.so.
> > > 
> > > I used the SRPMS that Gerry put out on the ftp site yesterday. I
> > > installed the SRPM and edited the samba3.spec and added
> > > --with-acl-support at the bottom. And yes I did add a \ to the
> line
> > > above.
> > > 
> > > What can I do to ensure acl support is compiled into samba??
> > 
> > I believe, you have ensured that acl support is NOT compiled in your
> Samba. Maybe, the 
> > reason is the mentioned bug in "configure" script. You can also look
> again at "configure" 
> > script output: it should say "checking for ACL support... (cached)
> yes" nearby to end.
> > 
> > However, I am not expert in those SRPM's.
> > 
> > Alexey
> > 
> > > 
> > > Spencer
> > > 
> > > 
> > > -------------------
> > > > Hello.
> > > > 
> > > > On 3 Sep 2003 at 8:14, Jarabe wrote:
> > > > 
> > > > Date sent:      	Wed, 03 Sep 2003 08:14:06 -0600
> > > > Subject:        	Re: [Samba] acl
> > > > To:             	samba at lists.samba.org
> > > > From:           	Jarabe <jarabe at wasatchnet.net>
> > > > 
> > > > > I have the same problem.  I did everything that bluelightning
> > > suggests
> > > > > . Using the secuity tab in windows if I change the attributes
> on
> > > > > people that are already there, namely root, everyone, or
> myself it
> > > > > works.  If I try to add a new user it fails saying:
> > > > > 
> > > > > Unable to save permissions on file.
> > > > > Access is denied.
> > > > 
> > > > Is your Samba compiled with ACL? Does `ldd smbd` show libacl.so
> and
> > > libattr.so?
> > > > 
> > > > The "configure" script has a known bug. At least in Debian you
> > > should manually add "-
> > > > lattr" nearby each "-lacl"; without it the ACL support tests are
> > > always negative.
> > > > 
> > > > Alexey
> > > > 
> > > > 
> > > > > 
> > > > > I know acls work. I can use setfacl -m u:username:rw <file>
> and it
> > > > > adds it just fine in a shell prompt.  
> > > > > 
> > > > > Anyone have any ideas or know what log file I should look
> through.
> > > > > 
> > > > > Spencer
> > > > > 
> > > > > 
> > > > > 
> > > > > WARNING: Unsanitized content follows.
> > > > > -----BEGIN PGP SIGNED MESSAGE-----
> > > > > Hash: SHA1
> > > > > 
> > > > > I'd check out Paul's unofficial howto at
> > > > > 
> > > > > http://www.bluelightning.org/linux/samba_acl_howto
> > > > > 
> > > > > Hope this helps.
> > > > > 
> > > > > - -Tom
> > > > > 
> > > > > Collen wrote:
> > > > > | G'day just haveing some probs regarding the acl.
> > > > > |
> > > > > | I have installed the acl from bestbite at my linux box.
> > > > > | in a bash shell it works fine, so no worry it's corrected
> > > installed
> > > > > here...
> > > > > | i can alter the acl's with setfacl & getfacl ...
> > > > > |
> > > > > | but after compiling --with-acl-support it doesn;'t pop up in
> a
> > > > > wind*s box.
> > > > > | at the security tab of file prem. it still shows
> 1usr/1grp/world
> > > > > | I already added groups and users to the acl, but the latest
> > > version
> > > > > | doesn't shows it.
> > > > > | even adding a user or group gives an error back ..?
> > > > > |
> > > > > | What's up with the acl support? gues i do something wrong
> here.!
> > > > > | (i was hard to find anny resources about in on the net)
> > > > > |
> > > > > | It's acting as a PDC file server.
> > > > > | i defined the domain groups, and the rest look's to work
> fine
> > > > > (little
> > > > > | slow here and there..)
> > > > > | do i need special parameters in the smb.conf or so ?
> > > > > |
> > > > > | L8r..
> > > > > |
> > > > > | Collen
> > > > > |
> > > > > |
> > > > > -----BEGIN PGP SIGNATURE-----
> > > > > Version: GnuPG v1.2.1 (GNU/Linux)
> > > > > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> > > > > 
> > > > >
> iD8DBQE/VYXQRliD/69byygRAiKEAJ9QDJ5Ewbe8Xi+RcXuiXHF32sXRswCfcYeI
> > > > > WVhAjfbd/pqmMU29k/xyRO0=
> > > > > =m8wm
> > > > > -----END PGP SIGNATURE-----
> > > > > 
> > > > > -- 
> > > > > To unsubscribe from this list go to the following URL and read
> the
> > > > > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > > > 
> > > > 
> > > > 
> > > > 
> > > 
> > 
> > 
> > 
> > 
>