[Samba] samba 3.5.5 and ACL mod

[John Drescher]

On Tue, Sep 28, 2010 at 12:14 PM,  <Sebastian.Perkins at swisscom.com> wrote:
> Hello,
>
> We are in the middle of testing debian squeeze 64 bits with samba 3.5.5 and are running into some questions:
>
> 1) Is this solution OK with windows 7 "out of the box" (ie no hacking/modifications to do on the pc) ? I have tested it seems so but I would like a confirmation.

You still need the registry change from here:
http://wiki.samba.org/index.php/Windows7

>
> 2) Despite massive googling, I have not found a correct smb.conf configuration to change ACL statuses on shares (or even subfolders/files) via a windows based mmc (xp or vista). Yes, the IT people are not into SWAT or Webmin. It is stated possible. Are there any pointers or special issues I have missed with this version?
>
You need idmap to work for acls to even begin to work as you expect.
You also need either acls enabled in the host filesystem and / or use
the  acl_xattr module.

John