[Samba] windows acls

Ralph Boehme slow at samba.org
Tue Dec 20 20:30:08 UTC 2022

Does samba-tool show what's in the xattr? I tend to rely on smbcacls and 
so I keep forgetting what samba-tool does in which mode and whith which 
options. With smbcacls you'll get to see the ACL as seen by the client 
and also what the server uses when enforcing it. Whatever getfacl 
reports is up the kernel, but remember Samba enforces the ACL form the 
xattr when using the acl_xattr module.

Both the filesystem ACL and the ACL in the xattr should be insync and 
out-of-sync status should be detected and the module has self healing 
builtin, but maybe something is not quite working as intended in that area.


Ralph Boehme, Samba Team                 https://samba.org/
SerNet Samba Team Lead      https://sernet.de/en/team-samba

On 12/20/22 19:49, Peter Carlson via samba wrote:
> Done, same error
> root at filesvr:/data# chmod -R -t Ca****nt-Accounting
> root at filesvr:/data# ls -l
> total 3264
> drwxrwxrwx+ 36 root root    4096 Sep 30 08:07 Ca****nt-Accounting
> On 12/20/22 10:44, Rowland Penny via samba wrote:
>> On 20/12/2022 18:18, Peter Carlson via samba wrote:
>>> I am getting a permissions denied for my user "Peter" and I am lost 
>>> as to why
>>> root at filesvr:~# ls -l /data
>>> total 3264
>>> drwxrwxrwt+ 36 root root    4096 Sep 30 08:07 Ca****nt-Accounting
>> Try taking the 'sticky' bit off 'others'.
>> Rowland

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba/attachments/20221220/ad8cbf36/OpenPGP_signature.sig>

More information about the samba mailing list