[Samba] Operation Not Supported error for GETXATTR when VFS plugin "nfs4acl_xattr" is used

[Akash Jain]

Hi Ralph

I do not think using xattr_tdb is the right thing to do for my purpose. We
do not wish to store/retrieve extended attributes to/from TDB file.

*<Ralph>*

*Iirc parsing NFSv4 ACLs would require extensions to the module to support
the string identifiers and mapping to ids.*
*</Ralph>*

Can you please elaborate more on which extensions you referred to?
What all basic things do we need to do to use nfs4acl_xattr module with
native NFS4 export mounted locally and shared through samba to get/set NT
ACLs?


Thanks
Akash


On Mon, Apr 9, 2018 at 11:11 PM, Akash Jain <akash.jain110683 at gmail.com>
wrote:

> Hi Ralph
>
> Thanks a lot. With xattr_tdb I could at least list the files getting rid
> of access denied error.
>
> I still do not see the exactly mapped ACEs in the Security Descriptor of a
> file in Windows Explorer but I will debug that little further and then come
> back with questions.
> I see only 1 entry of Everyone on Windows client side if there are added
> ACEs using nfs4_setfacl.
> Let me know if that works for you as expected.
>
>
> Thanks
> Akash
>
>
>
>
> On Mon, Apr 9, 2018 at 10:26 PM, Ralph Böhme <slow at samba.org> wrote:
>
>> On Mon, Apr 09, 2018 at 10:11:45PM +0530, Akash Jain wrote:
>> > There are not more than 4 ACEs on the root directory but we see naces =
>> 50.
>> > I feel that the encoding of ACL is not happening as expected.
>>
>> See my earlier mail about the encoding differences wrt to users and
>> groups in
>> the ACEs.
>>
>> Iirc parsing NFSv4 ACLs would require extensions to the module to support
>> the
>> string identifiers and mapping to ids.
>>
>> -slow
>>
>> --
>> Ralph Boehme, Samba Team       https://samba.org/
>> Samba Developer, SerNet GmbH   https://sernet.de/en/samba/
>> GPG Key Fingerprint:           FAE2 C608 8A24 2520 51C5
>>                                59E4 AA1E 9B71 2639 9E46
>>
>
>