[Samba] ZFS ACL Support

Bill Corcoran wcorcor at siue.edu
Thu Feb 14 20:47:11 GMT 2008


Hello,

I am running Samba 3.0.28 on a Solaris 10 8/07 x86_64 machine.
Directory services and authentication are provided by MS Active
Directory's LDAP and Kerberos.

My problem is that, when attempting to add an ACE to a file from Windows
(XP, SP2), I get an error saying "Access Denied".  The share is a
directory on a ZFS filesystem (NFSv4 ACLs).  Below is the share definition:

[sambatest]
        comment = Test Samba Share
        path = /zfs-filesystem/smbtest
        read only = No
        nfs4:acedup = merge
        nfs4:chown = yes
        nfs4:mode = special

smbd -i -d 3 generates the following:

wcorcor opened file JXv3.2_install_windows.exe read=No write=No (numopen=3)
Transaction 368 of length 232
switch message SMBnttrans (pid 5197) conn 0x83d8860
call_nt_transact_set_security_desc: file = JXv3.2_install_windows.exe,
sent 0x4
fetch sid from uid cache (UID) -> (SID)
fetch uid from cache (UID) -> (SID)
fetch uid from cache (UID2) -> (SID2)
unix_mode(JXv3.2_install_windows.exe) returning 0744
set_canon_ace_list: sys_acl_set_file type file failed for file
JXv3.2_install_windows.exe (Operation not applicable).
convert_canon_ace_to_posix_perms: Too many ACE entries for file
JXv3.2_install_windows.exe to convert to posix perms.
set_nt_acl: failed to convert file acl to posix permissions for file
JXv3.2_install_windows.exe.
error packet at smbd/nttrans.c(2207) cmd=160 (SMBnttrans)
NT_STATUS_ACCESS_DENIED
Transaction 369 of length 45
switch message SMBclose (pid 5197) conn 0x83d8860
close fd=-1 fnum=6372 (numopen=3)
DOMAIN\wcorcor closed file JXv3.2_install_windows.exe (numopen=2)

What could I be doing wrong?

-- 
Bill Corcoran <wcorcor at siue.edu>



More information about the samba mailing list