[Samba] Need SDDL Format Security Descriptor (using libsmbclient.so)

Nirmit Kansal nirmit.kansal at veritas.com
Wed Jan 8 13:04:48 UTC 2025


I am using smbc_getxattr() function (in libsmbclient.so) with the "system.nt_sec_desc" attribute to retrieve the security descriptor, but this is not providing the descriptor information in SDDL format.
Also, I am not able to find any attribute in smbc_getxattr() which can provide SDDL format.

I need to use the ACLs information extracted from smbc_getxattr() into windows SDK APIs such as ConvertStringSecurityDescriptorToSecurityDescriptorW() / ConvertStringSecurityDescriptorToSecurityDescriptorA(), for which SDDL is required as input.

So, I am struggling to get SDDL format security descriptor using smbc_getxattr() APIs. Is there any known resolution to this? Do we have any API available in libsmbclient.so which can convert output value received from smbc_getxattr() into SDDL format?

Any help is highly appreciated.

Thanks,
Nirmit



More information about the samba mailing list