[Samba] acl_xattr access denied when adding permissions for another user

[Volker Lendecke]

On Tue, Apr 05, 2011 at 12:40:12PM +0200, Thomas Nau wrote:
> We run Samba 3.5.8 on a Solaris 11 box on top of ZFS We got the
> impression that the VFS module acl_xattr provides the best way
> of keeping Windows ACLs. We don't have concurrent NFS or local users
> so it's Windows only.

ZFS does NFSv4 ACLs which are quite close, albeit not
perfect. There's a zfs_acl module for Solaris, you might
also give that a try.

> The clients as well as the Samba server are members of an AD domain.
> Creating files/directories works as expected and also manipulating
> permissions for the initial user/group does not raise any problem.
> Trying to add permissions for an additional user (looked up in AD)
> fails with the Windows XP client side "permission denied" pop-up box.

Does "acl_xattr : ignore system acls"  help?

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen