[Samba] samba acl it

[L.P.H. van Belle]

Good morning Rowland,

.. 
> 
> I don't have to, I know, 'acl' is installed automatically, you have to
> manually install 'attr'.
So good to know that then there is no difference in the debian <-> Duvean base. 

I noticed : attr or xattr ? 
https://packages.debian.org/stretch/attr
https://packages.debian.org/stretch/xattr

Whats the difference here? I dont know. except one is missing the x. for the smartasses..  ;-) 
Debian shows :  https://packages.debian.org/stretch/samba   recommends : attr

And quick check on my systems shows something different. 
Some have both attr and xattr installed
Some only xattr, i found that these servers are only using winbind with nfs homedirs, so just used for ssh logins. 
  But this tells me i've stuggled also with this.
Some only attr, but all servers with shares have attr installed. 

Small test .. On a member.  
xattr -l /home/users/username/Nieuw\ tekstdocument.txt
Traceback (most recent call last):
  File "/usr/bin/xattr", line 11, in <module>
    load_entry_point('xattr==0.9.1', 'console_scripts', 'xattr')()
  File "/usr/lib/python3/dist-packages/xattr/tool.py", line 188, in main
    attr_value = attr_value.decode('utf-8')
UnicodeDecodeError: 'utf-8' codec can't decode byte 0xff in position 8: invalid start byte

attr -l /home/users/username/Nieuw\ tekstdocument.txt
Attribute "DOSATTRIB" has a 56 byte value for /home/users/username/Nieuw tekstdocument.txt
Attribute "SAMBA_PAI" has a 55 byte value for /home/users/username/Nieuw tekstdocument.txt
Attribute "NTACL" has a 408 byte value for /home/users/username/Nieuw tekstdocument.txt


And test one of my DCs.
xattr /home/samba/sysvol/internal.domain.tld/Policies/\{CANAF3B18-5777-491E-8F3E-2FBD663AE7B9\}/GPT.INI
-su: xattr: command not found

attr -l /home/samba/sysvol/internal.domain.tld/Policies/\{CANAF3B18-5777-491E-8F3E-2FBD663AE7B9\}/GPT.INI
Attribute "DOSATTRIB" has a 56 byte value for /home/samba/sysvol/internal.domain.tld/Policies/{CANAF3B18-5777-491E-8F3E-2FBD663AE7B9}/GPT.INI
Attribute "NTACL" has a 308 byte value for /home/samba/sysvol/internal.domain.tld/Policies/{CANAF3B18-5777-491E-8F3E-2FBD663AE7B9}/GPT.INI

My questions are ? 
What is SAMBA_PAI ? And why dont i see that on the DC? 
And what is the diffence between attr and xattr? 

The wiki says (https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs) 
( Samba does not support using POSIX ACLs on a DC. You must use Windows ACLs. ) 

File System Support : The file system, the share will be created on, must support: 
user and system xattr name spaces. 
extended access control lists (ACL).

The confusing thing here the tekst "system xattr name spaces"
And then  vfs objects = acl_xattr  ( in smb.conf ) 
So what do people expect ... Xattr 

While we should install/use always :  attr ( as package ) or am i making base asumptions here. 
I think its wise to add attr as oblgated to the samba packages. ( at least for my packages ) 
Suggestions? 


Greetz, 

Loius