[Samba] Problems with ACLs

[Marcio Demetrio Bacci]

Hi,

I have tried the following:

 vfs objects = acl_xattr  -> Don't work

 vfs objects = nfs4acl_xattr -> Don't work

Both Commented -> Don't work
#vfs objects = nfs4acl_xattr
#vfs objects = acl_xattr


I configured the ACLs for posixacl on zfs pool, but it didn't work either.

zfs set acltype=posixacl ARQUIVOS


In /var/log/samba/192.168.1.134.log (my samba4 fileserver) there is the
following entry:

[2020/03/16 10:37:40.578954,  3]
../../source3/smbd/smb2_server.c:3256(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
status[NT_STATUS_ACCESS_DENIED] || at ../../source3/smbd/smb2_setinfo.c:136


Do you have any other idea?

Regards,

Márcio Bacci

Em seg., 16 de mar. de 2020 às 11:09, Ralph Boehme via samba <
samba at lists.samba.org> escreveu:

> Am 3/16/20 um 3:04 PM schrieb Ralph Boehme via samba:
> > Am 3/16/20 um 2:59 PM schrieb Rowland penny via samba:
> >> On 16/03/2020 13:50, Marcio Demetrio Bacci wrote:
> >>> Hi,
> >>>
> >>>> Is this the machine that you cannot set the permissions on ?
> >>> Yes.
> >>>
> >>>> If so, what is the filesystem ?
> >>> Ext4 for SO and Ext4 for shared files, but I have created a pool ZFS
> >>> on this last filesystem (/dev/vdb1).
> >>>
> >> If zfs is involved in any way, you will have problems, zfs uses
> >> nfs4acls, you could try adding 'nfs4acl_xattr' to the 'vfs objects'
> line.
> >
> > this goes in the right direction, but it's zfsacl for ZFS. :)
>
> oh, no, hold on, this is about ZFS on Linux I guess?
>
> In that case, iirc ZoL uses POSIX ACls and doesn't support NFS4 ACLs, so
> you shouldn't need any extra VFS modules for ACLs -- POSIX ACLs work out
> of the box.
>
> Sorry for the confusion! :)
> -slow
>
> --
> Ralph Boehme, Samba Team                https://samba.org/
> Samba Developer, SerNet GmbH   https://sernet.de/en/samba/
> GPG-Fingerprint   FAE2C6088A24252051C559E4AA1E9B7126399E46
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>