[Samba] Error: Too many ACE entries for file xxx.txt to convert to
posix perms.
Keith.Cowan at urs.org
Keith.Cowan at urs.org
Tue Nov 23 23:29:06 GMT 2004
When setting permission on a file or folder through Windows XP on a Samba
share, I am not able to add additional Active Directory user ID's or groups
to the ACL permissions. When I attempt to apply the setting I get a message
"Unable to save permission changes on xxxx.file, access denied".
I am receiving error "Too many ACE entries for file New Text Document.txt
to convert to posix perms., which I think is related to my problem of
adding additional Domain ID's or Groups to the permissions of a file.
I can set additional ACL permission's to the file or folder using SETFACL,
but even if I add additional ACL's to a file, when I view the file through
Windows XP security, I do not see the additional ACL's that I have added.
I am using Samba version 3.0.9. This is the first time I have installed
Samba. Samba see's all objects in the Active Directory Domain and as far as
I can tell everything else is functioning properly.
I could use any help, thanks.
I am running Suse Linux on s390 VM:
Linux version 2.6.5-7.111-s390 (geeko at buildhost) (gcc version 3.3.3 (SuSE
Linux)
Here are the options I used to compile Samba:
./configure --prefix=/usr --with-ads --with-winbind --with-pam-winbind
--with-pa
m --with-quotas --with-smbmount --with-acl-support --with-automount
--with-confi
gdir=/etc/samba --with-krb5=/usr/lib --with-libsmbclient --with-msdfs
--with-pam
_smbpass --with-smbwrapper
Here are the errors I'm receiving in log.smbd:
[2004/11/23 15:19:53, 3] smbd/dosmode.c:unix_mode(111)
unix_mode(New Text Document.txt) returning 0766
[2004/11/23 15:19:53, 3]
smbd/posix_acls.c:convert_canon_ace_to_posix_perms(2498
)
convert_canon_ace_to_posix_perms: Too many ACE entries for file New Text
Docum
ent.txt to convert to posix perms.
[2004/11/23 15:19:53, 3] smbd/posix_acls.c:set_nt_acl(3139)
set_nt_acl: failed to convert file acl to posix permissions for file New
Text
Document.txt.
[2004/11/23 15:19:53, 3] smbd/error.c:error_packet(105)
error string = Function not implemented
[2004/11/23 15:19:53, 3] smbd/error.c:error_packet(129)
error packet at smbd/nttrans.c(2026) cmd=160 (SMBnttrans)
NT_STATUS_ACCESS_DEN
IED
Here is my smb.conf:
testparm -v
Load smb config files from /etc/samba/smb.conf
Processing section "[everyone]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions
# Global parameters
[global]
dos charset = CP850
unix charset = UTF-8
display charset = LOCALE
workgroup = PROD
realm = DOMAIN.ORG
netbios name = Server1
netbios aliases =
netbios scope =
server string = Samba 3.0.9
interfaces =
bind interfaces only = No
security = DOMAIN
auth methods =
encrypt passwords = Yes
update encrypted = No
client schannel = Auto
server schannel = Auto
allow trusted domains = Yes
hosts equiv =
min password length = 5
map to guest = Never
null passwords = No
obey pam restrictions = No
password server = xxxxxxxx.Domain.org
smb passwd file = /usr/private/smbpasswd
private dir = /usr/private
passdb backend = smbpasswd
algorithmic rid base = 1000
root directory =
guest account = nobody
pam password change = No
passwd program =
passwd chat = *new*password* %n\n *new*password* %n\n *changed*
passwd chat debug = No
passwd chat timeout = 2
check password script =
username map = /etc/samba/smbusers
password level = 0
username level = 0
unix password sync = No
restrict anonymous = 0
lanman auth = Yes
ntlm auth = Yes
client NTLMv2 auth = No
client lanman auth = Yes
client plaintext auth = Yes
preload modules =
use kerberos keytab = No
log level = 3
syslog = 1
syslog only = No
log file =
max log size = 5000
debug timestamp = Yes
debug hires timestamp = No
debug pid = No
debug uid = No
smb ports = 445 139
large readwrite = Yes
max protocol = NT1
min protocol = CORE
read bmpx = No
read raw = Yes
write raw = Yes
disable netbios = No
acl compatibility =
defer sharing violations = Yes
nt pipe support = Yes
nt status support = Yes
announce version = 4.9
announce as = NT
max mux = 50
max xmit = 16644
name resolve order = lmhosts wins host bcast
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = No
unix extensions = Yes
use spnego = Yes
client signing = auto
server signing = No
client use spnego = Yes
change notify timeout = 60
deadtime = 0
getwd cache = Yes
keepalive = 300
kernel change notify = Yes
lpq cache time = 10
max smbd processes = 0
paranoid server security = Yes
max disk size = 0
max open files = 10000
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
use mmap = Yes
hostname lookups = No
name cache timeout = 660
load printers = Yes
printcap cache time = 0
printcap name = /etc/printcap
cups server =
disable spoolss = No
enumports command =
addprinter command =
deleteprinter command =
show add printer wizard = Yes
os2 driver map =
mangling method = hash2
mangle prefix = 1
stat cache = Yes
machine password timeout = 604800
add user script =
delete user script =
add group script =
delete group script =
add user to group script =
delete user from group script =
set primary group script =
add machine script =
shutdown script =
abort shutdown script =
logon script =
logon path = \\%N\%U\profile
logon drive =
logon home = \\%N\%U
domain logons = No
os level = 20
lm announce = Auto
lm interval = 60
preferred master = Auto
local master = Yes
domain master = Auto
browse list = Yes
enhanced browsing = Yes
dns proxy = Yes
wins proxy = No
wins server = 10.31.10.2
wins support = No
wins hook =
wins partners =
kernel oplocks = Yes
lock spin count = 3
lock spin time = 10
oplock break wait time = 0
ldap admin dn =
ldap delete dn = No
ldap filter = (uid=%u)
ldap group suffix =
ldap idmap suffix =
ldap machine suffix =
ldap passwd sync = no
ldap replication sleep = 1000
ldap suffix =
ldap ssl =
ldap timeout = 15
ldap user suffix =
add share command =
change share command =
delete share command =
config file =
preload =
lock directory = /usr/var/locks
pid directory = /usr/var/locks
utmp directory =
wtmp directory =
utmp = No
default service =
message command =
dfree command =
get quota command =
set quota command =
remote announce =
remote browse sync =
socket address = 0.0.0.0
homedir map = auto.home
afs username map =
time offset = 0
NIS homedir = No
panic action =
host msdfs = No
enable rid algorithm = Yes
idmap backend =
idmap uid = 15000-20000
idmap gid = 15000-20000
template primary group = nobody
template homedir = /home/%D/%U
template shell = /bin/false
winbind separator = .
winbind cache time = 300
winbind enable local accounts = No
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind trusted domains only = No
winbind nested groups = No
comment =
path =
username =
invalid users =
valid users =
admin users =
read list =
write list =
printer admin =
force user =
force group =
read only = Yes
create mask = 0744
force create mode = 00
security mask = 0777
force security mode = 00
directory mask = 0755
force directory mode = 00
directory security mask = 0777
force directory security mode = 00
force unknown acl user = No
inherit permissions = No
inherit acls = No
guest only = No
guest ok = No
only user = No
hosts allow =
hosts deny =
ea support = No
nt acl support = Yes
profile acls = No
map acl inherit = No
afs share = No
block size = 1024
max connections = 0
min print space = 0
strict allocate = No
strict sync = No
sync always = No
use sendfile = No
write cache size = 0
max reported print jobs = 0
max print jobs = 1000
printable = No
printing = bsd
cups options =
print command = lpr -r -P'%p' %s
lpq command = lpq -P'%p'
lprm command = lprm -P'%p' %j
lppause command =
lpresume command =
queuepause command =
queueresume command =
printer name =
use client driver = No
default devmode = No
force printername = No
default case = lower
case sensitive = Auto
preserve case = Yes
short preserve case = Yes
mangling char = ~
hide dot files = Yes
hide special files = No
hide unreadable = No
hide unwriteable files = No
delete veto files = No
veto files =
hide files =
veto oplock files =
map system = No
map hidden = No
map archive = Yes
mangled names = Yes
mangled map =
store dos attributes = No
browseable = Yes
blocking locks = Yes
csc policy = manual
fake oplocks = No
locking = Yes
oplocks = Yes
level2 oplocks = Yes
oplock contention limit = 2
posix locking = Yes
strict locking = Yes
share modes = Yes
copy =
include =
preexec =
preexec close = No
postexec =
root preexec =
root preexec close = No
root postexec =
available = Yes
volume =
fstype = NTFS
set directory = No
wide links = Yes
follow symlinks = Yes
dont descend =
magic script =
magic output =
delete readonly = No
dos filemode = No
dos filetimes = No
dos filetime resolution = No
fake directory create times = No
vfs objects =
msdfs root = No
msdfs proxy =
[everyone]
path = /urs/everyone
read only = No
More information about the samba
mailing list