[Samba] vfs_recycle and permissions

[samba.20.andwin at spamgourmet.com]

Hi,

thanks for this suggestion! Unfortunately this is not applicable to
our system because we have users logging directly onto the AD member
server and thus we rely on the mapping from/to POSIX ACLs.

Best regards
Andreas

On Fri, Jun 13, 2014 at 11:22 AM, L.P.H. van Belle - belle at bazuin.nl
<samba.andwin.528d882de8.belle#bazuin.nl at ob.0sg.net> wrote:
> On my member server im using this on my shares ( the Windows only shares )
>
>    vfs objects = acl_xattr recycle
>    acl_xattr:ignore system acls = yes
>    recycle:keeptree = yes
>    recycle:versions = yes
>
>
> When set to yes, a best effort mapping from/to the POSIX ACL layer will not be done by this module
> see:  http://www.samba.org/samba/docs/man/manpages/vfs_acl_xattr.8.html
>
> Greetz,
>
> Louis
>
>
>>-----Oorspronkelijk bericht-----
>>Van: samba.20.andwin at spamgourmet.com
>>[mailto:samba-bounces at lists.samba.org] Namens
>>samba.20.andwin at spamgourmet.com
>>Verzonden: vrijdag 13 juni 2014 9:40
>>Aan: samba at lists.samba.org
>>Onderwerp: [Samba] vfs_recycle and permissions
>>
>>Hi,
>>
>>at our site we are using Samba 4.1.8 as an AD controller and on
>>another machine as member server and all is working fine so far. Now I
>>want to provide recycle repositories for some shares on the member
>>server, so I set
>>
>>vfs objects = acl_xattr recycle
>>recycle:keeptree = yes
>>
>>in the corresponding share sections in smb.conf on the member server.
>>The problem is that the subdirectories created in the repository seem
>>to receive arbitrary permissions (UNIX permissions, UNIX ACLs and NT
>>ACLs) regardless of the recycle:directory_mode and recycle:subdir_mode
>>settings, whereas the files which are moved to the recycle repository
>>keep their original permissions.
>>Ideally, also the directories in the recycle repository would keep the
>>original permissions.
>>Is there a way to configure the vfs_recycle module so that also the
>>directory tree in the recycle repository retains the original
>>permissions and ACLs?
>>How do other people deal with permissions in the recycle repository in
>>combination with NT ACLs?
>>
>>Best regards
>>Andreas
>>
>>--
>>To unsubscribe from this list go to the following URL and read the
>>instructions:  https://lists.samba.org/mailman/options/samba
>>
>>
>
>