[Samba] Win ACL share Perm and recycle bin

[Fabrizio Rompani]

thank' s Roland, it works !
fab

----- Messaggio originale -----
Da: "Rowland Penny via samba" <samba at lists.samba.org>
A: "samba" <samba at lists.samba.org>
Cc: "Rowland Penny" <rpenny at samba.org>
Inviato: Giovedì, 30 novembre 2023 11:45:54
Oggetto: Re: [Samba] Win ACL share Perm and recycle bin

On Thu, 30 Nov 2023 11:07:52 +0100 (CET)
Fabrizio Rompani via samba <samba at lists.samba.org> wrote:

> Hi 
> I've set up a domain with 2 dc (samba 4.16.10 - debian 11) a
> fileserver ( 4.15.13 ubuntu 22) , and 50 windows client. fileserver
> has a few share with win ACL ( I follow [
> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs
> |
> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs
> ] ) . 
> 
> Everythings works fine and I can setup security access for that
> shares , from a windows client . ( main share has 2,5 MLN files and
> it tooks a couple of hrs... but I can deal whit this) But ......
> since I enabled recycle bin for that shares ( vfs objects = recycle)
> , I cannot setup security access anymore ( permission denied )
> Disable recycle bin ( and restart smbd ) works fine again . 
> 
> Any hint? 
> thanks 
> fab 
> 
> dc's smb.conf: 
> 
> 
> 
> fileserver :smb.conf: 
> 
> [global] 
	SNIP 
> vfs objects = acl_xattr 
	SNIP
> [SomeShare] 
> path = /dati/condivisioni/lavoro/ 
> read only = no 
> include = /etc/samba/cestino.conf 
> 
> cestino.conf 
> vfs objects = recycle 

I have removed most of the lines from your fileservers smb.conf,
leaving only what I believe to be the relevant lines.

You initial use vfs_acl_xattr in global, but your 'vfs obects' line in
your 'include' file seems to turn it off again, try:

vfs objects = recycle acl_xattr

in your 'include' file.

Rowland


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Corso Martiri della Liberazione 114 - 23900 Lecco - ITALY - | 4801 Glenwood Avenue - Suite 200 - Raleigh, NC 27612 - USA -
Tel +39 0341 220 205 - info.it at yetopen.com  | Phone +1 919-817-8106 - info.us at yetopen.com

Think green - Non stampare questa e-mail se non necessario / Don't print this email unless necessary

-------- D.Lgs. 196/2003 e GDPR 679/2016 --------
Tutte le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario.
Tutte le informazioni ivi contenute, compresi eventuali allegati, sono da ritenere confidenziali e riservate secondo i termini
del vigente D.Lgs. 196/2003 in materia di privacy e del Regolamento europeo 679/2016 - GDPR - e quindi ne e' proibita l'utilizzazione ulteriore non autorizzata.
Nel caso in cui questo messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo, stamparlo, a non inoltrarlo a terzi e ad avvertirci non appena possibile.
Grazie.

Confidentiality notice: this email message including any attachment is for the sole use of the intended recipient and may contain confidential and privileged information;
pursuant to Legislative Decree 196/2003 and the European General Data Protection Regulation 679/2016 - GDPR - any unauthorized review, use, disclosure or distribution
is prohibited. If you are not the intended recepient please delete this message without copying, printing or forwarding it to others, and alert us as soon as possible.
Thank you.