[Samba] [OT?] VM or Container for an AD DC?

[L.P.H. van Belle]

Hai marco, 

Is the vm running on ZFS. 
Then you could try this :
https://morph027.gitlab.io/post/zfs-on-linux-and-samba4-acl/ 

Greetz, 

Louis
 

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Marco Gaiarin via samba
> Verzonden: woensdag 20 september 2017 12:54
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] [OT?] VM or Container for an AD DC?
> 
> Mandi! Andrew Bartlett via samba
>   In chel di` si favelave...
> 
> > tdb ACLs are a good idea for production use.   I really should make
> > this more clear. 
> > The TDB approach creates a dev/inode indexed DB, rather 
> than using the 
> > file system.  This is prone to inode re-use issues, and 
> while we have 
> > defences for the ACL side of that (we hash the POSIX ACL on 
> the file), 
> > there is no such defence for other extended attributes that 
> might also 
> > be stored there.
> 
> ?! samba-tools does not seem to agree with you, print:
> 
>  You are not root or your system do not support xattr, using 
> tdb backend for attributes.
>  not using extended attributes to store ACLs and other 
> metadata. If you intend to use this provision in production, 
> rerun the script as root on a system supporting xattrs.
> 
> -- 
> dott. Marco Gaiarin				        GNUPG 
> Key ID: 240A3D66
>   Associazione ``La Nostra Famiglia''          
> http://www.lanostrafamiglia.it/
>   Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al 
> Tagliamento (PN)
>   marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   
> f +39-0434-842797
> 
> 		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
>       http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
> 	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>