[Samba] samba acl it

[L. van Belle]

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Andrew Bartlett via samba
> Verzonden: dinsdag 19 februari 2019 18:40
> Aan: Rowland Penny; samba at lists.samba.org
> Onderwerp: Re: [Samba] samba acl it
> 
> On Tue, 2019-02-19 at 17:29 +0000, Rowland Penny wrote:
> > On Wed, 20 Feb 2019 06:15:17 +1300
> > Andrew Bartlett via samba <samba at lists.samba.org> wrote:
> > 
> > > 
> > > On Tue, 2019-02-19 at 13:34 +0100, marco pirola via samba wrote:
> > > > 
> > > > I apologize for all emails sent to resolve the acl problem. The
> > > > instructions I followed to make an exact domain member 
> erase; the
> > > > problem is that the samba release used by debian 9 was buggy; I
> > > > switched
> > > > to devuan (which I start to love) and I went through the whole
> > > > procedure: now everything is ok
> > > Have you filed a bug with Debian, so at least it can be tracked?
> > > 
> > > What were the different versions you used between Debian and
> > > Devuan?
> > > 
> > > Thanks,
> > > 
> > > Andrew Bartlett
> > > 
> > This is the strange thing, unless he used Louis's repo, he 
> would have
> > used the same packages, Devuan just rebuilds a limited number of
> > packages and then just to remove systemd, Samba isn't one of them.
> 
> That's what I thought, so I think there is more to this.

Exactly, this was still a user configuration problem. 
I did review all Marco's post, you did your best here Marco.
But there were some points that shows config problem which you inherited
later on. 
I did only see a few of these post because i was out snowboardig a few days.

So i mostly skiped the threads. 

My observation here, 
As Rowland also notice here :
https://lists.samba.org/archive/samba/2019-January/220811.html 
/etc/hosts /etc/resolv.conf dont match up. 

Then later on, the subject switches. "[Samba] error on the modificed
permission" 
Again not thing against Marco, everybody needs to learn from some time.. 
This post :  https://www.spinics.net/lists/samba/msg155117.html 
Tell's me he is not on a domain joined machine and/or not logged in as
administrator. 
Possible, but not handy when your debugging this. 

Later we check the rights..  And. acl & xattr packages installed ? 

So what tell all is telling and what can be inproved here. 
Marco did a good first attempt of setting up but missed a few parts. It
happens.. 
I just did read his post as from jan 6. it shows his movements working on
this and where he has problems with the install.
In my opinion, where most have, the acls. 
Due to some config problems in the begining, things went wrong, and here
Marco did the best thing, start over. 
Wise choise, good for the learning process and less problems. 

Maybe somewhere in the debian package there is missing dependecy and not.
>From wiki, 
https://wiki.samba.org/index.php/Package_Dependencies_Required_to_Build_Samb
a 
These 2. 
acl : Required only on Samba Active Directory domain controllers and member
servers using Windows ACLs. 
xattr : Required only on Samba Active Directory domain controllers and
member servers using Windows ACLs.

And i point to " Required only .... using Windows ACLs"

Because if this the acl and xattr package are not installed by default if
you install samba.
By as far i know, by Debian policy. It suggests acl and xattr not
recommends.
I'll check that tomorrow, maybe its better to have this set always required.

I cant hardly think of a samba setup where the windows acls are'nt used. 

Rowland, can you check on a clean Duvean install if you install samba, are
acl and xattr installed? 
and before, just double check. 

All thought's here.. 
And Marco, keep asking things, we all are learning here.. ;-) 
Lots of Italian Marco's lately :-)) 


Good night.. Zzz.. 

Louis