[Samba] need to check and read ntfs acls from nfs stack, looking for libraries to do so

Jeremy Allison jra at samba.org
Tue Oct 1 18:52:30 UTC 2019

On Tue, Oct 01, 2019 at 08:32:16AM -0500, Jerrad Bieno via samba wrote:
> I need to add the ability to check permissions against ntfs acls that are
> set and maintained by a samba server, in our nfs stack. The nfs stack
> currently doesn't have anything to deal with this. I was wondering if
> Samba's code for creating and checking permissions against the security
> descriptor and related structs is something provided by third party
> libraries, or did Samba implement that all specifically for Samba? I was
> hoping that since ntfs acls are a standard format for smb permissions that
> there would be some sort of libraries available for dealing with them but I
> am having a hard time finding anything.

It was all implemented specifically for Samba and isn't broken
out into a separate library. It's based on reading ndr-encoded
data strctures stored inside extended attributes.

If you want to look into making it a library, we'd welcome
patches along those lines.

More information about the samba mailing list