[Samba] howto achieve 'hide unreadable' for msdfs symlinks

[Jeremy Allison]

On Tue, Apr 16, 2024 at 04:21:29PM +0200, Konrad Jacobi via samba wrote:
>As dfs-symlinks are resolved by the client, the linked share's rights 
>could only be checked after resolving and accessing the symlinked 
>share by the client. To hide the symlink from the client, the server 
>would have to resolve the symlink or evaluate some ACL on the symlink 
>before (as mentioned above).
>
>I'd be grateful for ideas

Me too :-). This is a difficult problem. Server resolving
the symlink would only be possible for DFS links that 
resolve to the local system. It's also probably a bad
idea. Having a local ACL is more interesting, but I'm
not sure if this is supported ?