[Samba] Fetching ACL data from extended attributes

[pisymbol .]

On Tue, Mar 8, 2016 at 4:00 PM, Steve Tice <stic6021 at yahoo.com> wrote:
> A Samba server I've configured uses the VFS acl_xattr module to support Windows ACLs. I'd like to view the ACL data, in as raw a state as possible, but also in a human readable format. Is there an existing utility that does that? If not, and I need to write an application to accomplish it, which APIs would you recommend (and on which attributes)?

Steve, `smbcacls` dumps ACLs on a per file/directory basis and
`rpcclient -c 'netshareenum 502' <server>` dumps security descriptors
of a share.

I've always felt that returning the RAW SD should be an option for the
standard samba tools (for applications that need it).

-aps