[Samba] Group Permissions Not Working

Jeremy Allison jra at samba.org
Thu May 2 18:02:57 UTC 2019


On Tue, Apr 30, 2019 at 09:37:47PM +0200, Peter Eriksson via samba wrote:
> We have seen this problem - mishandling of group access on files/directories with just “unix permissions set” on ZFS filesystems on FreeBSD. Things work fine if you disable the ZFS ACL stuff, or set an ACL on the file system objects. 
> 
> Debugging this issue it seems to boil down to the fact that FreeBSD doesn’t support extended attributes, and when generating the “fake ACL” from the unix permissions it doesn’t set the “write to attributes allowed” bits (which is "correct”) - but since Windows thinks it needs group write access to attributes or it won’t attempt to write to the objects at all… 

The FreeBSD man pages seem to disagree with you (as does our code):

https://www.freebsd.org/cgi/man.cgi?query=extattr_get_file&sektion=2&apropos=0&manpath=FreeBSD+10.0-RELEASE

Do you mean ZFS on FreeBSD doesn't support EA's ?

Need more data.



More information about the samba mailing list