[Samba] ...or howto change vfs_acl_xattr options inplace without changing access rights

[Sebastian Neustein]

Ralph Boehme wrote:
> On 8/21/23 18:20, Sebastian Neustein wrote:
>> The storage has come a long way with various changes of the smb.conf. 
>> It is possible that at the time of creation of a file/directory 
>> vfs_acl_xattr was not active. This could mean that the directory does 
>> not have any extended attributes written to it and ACLs are only 
>> defined with POSIX ACLs. In this case I would need a trigger to write 
>> the information stored in POSIX ACLs into the extended attributes. Is 
>> there anything like this?
>
> ah, I see. Well, iirc there's no existing *efficient* tool to read the 
> ACL and then write it again, to make sure the storage is consistent. I 
> would look into expanding samba-tool ntacl ... a bit to do the work a 
> guess, but I'd have to take a closer look and do some more tinkering.

I always thought that samba-tools is for DCs only... But it sounds like 
a reasonable tool for this task.