[Samba] ACL doesn't work

[Gémes Géza]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Lancsár Roland írta:
| Hi all,
|
| linux:/var/log/samba # cat /etc/fstab | grep acl
| /dev/sda2            /shared              ext3       defaults,acl
      0
| 0
|
|>From XP I connect to my server and try to set permission for my user's
home
| directory, but when I click apply the checked checkboxs set back
unchecked.
| :(
|
| linux:/var/log/samba # cat log.smbd
| [2004/03/29 16:06:31, 1] smbd/service.c:make_connection_snum(705)
|   dnalor (10.1.1.10) connect to service roland initially as user roland
| (uid=500, gid=100) (pid 1119)
| [2004/03/29 16:06:31, 0] smbd/service.c:make_connection(857)
|   dnalor (10.1.1.10) couldn't find service rolan
| [2004/03/29 16:06:33, 0] rpc_server/srv_util.c:get_domain_user_groups(372)
|   get_domain_user_groups: primary gid of user [roland] is not a Domain
group
| !
|   get_domain_user_groups: You should fix it, NT doesn't like that
| [2004/03/29 16:06:42, 1] smbd/service.c:close_cnum(887)
|   dnalor (10.1.1.10) closed connection to service roland
|
| drwxr-xr-x    3 root     root         4096 Feb 25 22:36 .
| drwxr-xr-x   21 root     root         4096 Mar 29 16:02 ..
| drwxrwxrwx    7 roland   users        4096 Feb 25 22:36 roland
|
| Ok, I try it from workgroup, but I don't understand why it does not work.
|
| Can anyone help me?
|
| Regards, Roland
|
|
These are two separate problems:

1. The acl problem:
- -Check if you have commands setfacl, getfacl, setfattr, getfattr
- -Check if they do work
- -Check if your smbd was compiled with acl support:
ldd /path/to/your/smbd
you should got libacl and libattr entries. If not then please install
libacl-devel, and libattr-devel (or something like that) and rebuild
your Samba.

2. You should take care, that all of your groups, which ever would be
involved with Samba have been mapped to NT groups: see net groupmap
modify, net groupmap add.

Cheers,

Geza
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAaEkh/PxuIn+i1pIRAjy1AKCavJNG94NOmnFHqbfEzWQj1GVH7wCcDH7D
//pLje/9i9hhcSEzg7LlAQs=
=ESZH
-----END PGP SIGNATURE-----