[Samba] CIFS/ACLs

[Thilo Rees, Continum]

Hi,

I am using CIFS 2.01.01 on HPUX11V2. CIFS is running in ADS 
security-mode. Winbind is used to map the userers from the W2K3-Domain 
(german) to an tdb-file. The user mapping works fine, but I have 
problems with the ACLS: setting the ACLS to a file or folder from 
windows leads in "access denied". I'm the owner of the object and have 
full access. The really crazy thing is, that it works sometimes, but 
later the ACLs are gone (showing standard permissions) and I can't 
modify them (Access denied). "getacls" form Unix side displays the 
formerly configured ACLS ....
The logfile (loglevel=2) shows:

log.smbd:
open_sockets_smbd: accept: No buffer space available

<host>.log
[2005/05/30 11:22:29, 1] smbd/service.c:make_connection_snum(648)
 192.168.200.11 (192.168.200.11) connect to service tmp initially as 
user FRHAWIN\Administrator (uid=10000, gid=10000) (pid 9429)
[2005/05/30 11:29:37, 1] smbd/service.c:close_cnum(835)
 192.168.200.11 (192.168.200.11) closed connection to service tmp
[2005/05/30 11:30:17, 2] smbd/server.c:main(893)
 Changed root to /
[2005/05/30 11:30:17, 2] smbd/sesssetup.c:setup_new_vc_session(608)
 setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2005/05/30 11:30:19, 1] smbd/service.c:make_connection_snum(648)
 192.168.200.11 (192.168.200.11) connect to service tmp initially as 
user FRHAWIN\Administrator (uid=10000, gid=10000) (pid 9553)
[2005/05/30 11:30:36, 2] smbd/posix_acls.c:set_canon_ace_list(2422)
 set_canon_ace_list: sys_acl_set_file type file failed for file ACLStest 
(Invalid argument).

my smb.conf is simple:

[global]
       display charset = UTF-8
       workgroup = FRHAWIN
       realm = YYYYY.YYYYY.YYY
       netbios name = FSERV0
       server string = CIFS_HP_UX
       security = ADS
       password server = xxxx.xxxxx.xxxx.xxx
       log level = 2
       log file = /var/opt/samba/log.%m
       max log size = 1000
       host msdfs = Yes
       idmap uid = 10000-20000
       idmap gid = 10000-20000
       winbind use default domain = Yes

[tmp]
       comment = Temporary file space
       path = /tmp
       read only = No

Any suggestions?

Regards: Thilo


-- 

Thilo Rees
Continum AG, Technik
Wentzingerstr. 7a
D-79106 Freiburg i. Br.
http://www.continum.net
Tel.:  +49 761 479409-60
Fax.:  +49 761 479409-33
mail: thilo.rees at continum.net