[Samba] Standalone server and POSIX ACL issue

[Yvan Masson]

Hi,

First, thanks for all people that continuously giving great advice on 
this list!

I am setting up a standalone server (Debian 10, Samba 4.9.5+dfsg-5 from 
Debian). The following directory is shared and contains two directories:
/home/eleve/partage/
├── Documents
└── Travail

I want user "eleve" to be able to modify everything, and guest users to 
have read access on "Documents/" and write access on "Travail/". 
Everything works as expected when accessing files locally, but not when 
mounting the share from a Linux client:
- when logged in as guest, I can read everything but have no write 
access in "Travail/"
- when logged in as "eleve", I can not write inside "Documents/"

I suppose I am missing something simple, but can not find what (I have 
read https://wiki.samba.org/index.php/Setting_up_a_Share_Using_POSIX_ACLs).

$ getfacl partage/*
# file: partage/Documents
# owner: eleve
# group: eleve
user::rwx
user:eleve:rwx
user:nobody:r-x
group::r-x
mask::rwx
other::r-x
default:user::rwx
default:user:eleve:rwx
default:user:nobody:r-x
default:group::r-x
default:mask::rwx
default:other::r-x

# file: partage/Travail
# owner: eleve
# group: eleve
user::rwx
user:eleve:rwx
user:nobody:rwx
group::r-x
mask::rwx
other::r-x
default:user::rwx
default:user:eleve:rwx
default:user:nobody:rwx
default:group::r-x
default:mask::rwx
default:other::r-x

And here is my smb.conf:

[global]
workgroup = AYN
log file = /var/log/samba/log.%m
logging = file syslog at 1
server role = standalone server
map to guest = Bad User
guest account = nobody
vfs objects = acl_xattr

[Documents]
path = /home/eleve/partage
guest ok = yes
writable = yes
inherit acls = yes

Thanks,
Yvan