[Samba] Can't see or change ACLs on Windows

[Eric Diven]

I added nt acl support = yes to the config file and restarted with no
effect.  The manpage for smb.conf said yes is the default, so I had been
omitting it, but I suppose it can't hurt.  The share is on a UFS volume
on Solaris, I couldn't find a documented acl option, so I tried doing a
remount with it anyway, but mount just issued a warning saying it was
ignoring it.  On the Linux box, I remounted with acl, and it also didn't
have any effect.  I still can't see or set acls on either from windows.
I can set the acls from the command line in either with setfacl, and see
them with getfacl.

~Eric

-----Original Message-----
From: Stas [mailto:narezatel at gmail.com] 
Sent: Wednesday, October 17, 2007 5:05 PM
To: Eric Diven
Cc: samba at lists.samba.org
Subject: Re: [Samba] Can't see or change ACLs on Windows

do you have " nt acl support = yes" in smb.conf ?
i'm not sure , but seems you have to mount the volume that contains
shared files with "-o acl" ..
check it out.



On 10/17/07, Eric Diven <eric.diven at edsiohio.com> wrote:
> I've tested this on CentOS 4.3 and am seeing the same issue.  It seems

> like it's probably a configuration problem, but I'll be damned if I 
> can figure it out.
>
> ~Eric
>
> -----Original Message-----
> From: samba-bounces+eric.diven=edsiohio.com at lists.samba.org
> [mailto:samba-bounces+eric.diven=edsiohio.com at lists.samba.org] On 
> Behalf Of Eric Diven
> Sent: Wednesday, October 17, 2007 4:30 PM
> To: samba at lists.samba.org
> Subject: [Samba] Can't see or change ACLs on Windows
>
> I have samba server joined to a domain that I'm trying to use ads 
> security and acls on.  I can set acls on the Unix file system, and 
> access from a windows client seems to honor them.  I can't view the 
> acls under the security tab, all I see are the standard Unix 
> permissions instead.  If I try to add an entry to the acl, I get an 
> access denied error, even if the user is on the list of admin users.  
> Samba version is 3.0.24, OS is Solars 10.  Winbind works smoothly, I 
> can set an entry in an ACL to a domain user or group using setfacl on 
> the unix side, and I see it correctly with getfacl.  Any ideas please?
>
> ~Eric
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> man/listinfo/samba
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>