[Samba] acl_xattr does not apply to the root shared folder

Павел Маринин marininpa at mail.ru
Mon Jan 2 20:03:42 UTC 2023


> 
>> 
>>>
>>>> read-only = none
>>>
>>>Where did you get 'none' from ? It should be 'no' or yes or true or false.
>>>
>>>>
>>>> 1. I have the following problem: acl_xattr only apply to subfolders in "/srv/samba/tmpdir" and do not apply to the folder /srv/samba/tmpdir. Is this correct?
>>>
>>>Yes
>>>
>>>> 2. When I add the parameter "acl_xattr: ignore system settings = yes" to the config, only UNIX ACL begin to apply to the folder "/srv/samba/tmpdir", i.e. only the owner and the group. Is this correct?
>>>
>>>Well, yes and no :-D
>>>
>>>Yes, if you have that line, the Unix acls are ignored by Samba when
>>>setting the EA's. No, anyone connecting via Samba will get the ACL's set
>>>in the EA's (the permissions set from Windows), but anyone connecting
>>>locally will get the permissions set locally (ugo). It basically boils
>>>down to (and this is Samba best practice) not connecting locally if
>>>using Samba. just connect to the share.
>>>
>>>Rowland
>>>
>>>
>>> 
>>>  Where did you get 'none' from ? It should be 'no' or yes or true or false
>>Sorry, in the config, the value is "no", I made a mistake
>> 
>>>just connect to the share
>>I'm looking at permissions with share. 
>>Do I understand correctly, when the parameter "acl_xattr: ignore system settings = yes" is activated, can I grant permissions to the root folder "/srv/samba/tmpdir" only for one group and one user?  And I can use Windows ACL only on subfolders?
>> 
>>I can change the rights to the root folder "/srv/samba/tmpdir" only from locally, there is no access to change the rights to the folder "/srv/samba/tmpdir" via share. I can change permissions via share only on subfolders.
>> 
>> 
>>--
>>Pavel
>> 


More information about the samba mailing list