[Samba] map acl inherit stopped working

Peter Rindfuss rindfuss at wzb.eu
Wed Oct 21 08:12:58 MDT 2009

On 2009-10-19 23:04, Jeremy Allison wrote:
> On Sat, Oct 17, 2009 at 12:40:10AM +0200, Peter Rindfuss wrote:
>> Hi,
>> It seems that at some point "map acl inherit = yes" stopped working for
>> me. I now have Samba 3.4.2, but this problem started with an earlier
>> version, possibly some 3.2.x or 3.3.x. No SAMBA_PAI extended attributes
>> are created anymore, but existing ones are still honored.
>> OS is Suse 11.0, file system is XFS.
>> What could be wrong?
> Not sure, can you log a bug and upload logs please ?

Hi Jeremy,

I will file a bug, if necessary, but perhaps my further investigations 
can help.

My statement "no SAMBA_PAI extended attributes are created anymore" is 
wrong, I apologize. But it is interesting what really happens to SAMBA_PAI:

I looked at an old existing folder:
Windows security tab shows that rights are inherited from the folder 
above. SAMBA_PAI is

When I remove and (try to) set inheritance again, SAMBA_PAI becomes
and inheritance is gone, same as if SAMBA_PAI were not there at all.

When I manually set SAMBA_PAI to the first value, inherited rights are 
back there again.

One more interesting observation:
The acl_xattr VFS module seems to work fine with respect to inheritance 
(on a test share). BTW, the SAMBA_PAI created with acl_xattr looks 
similar to the non-working one above.

Cheers, Peter

More information about the samba mailing list