[Samba] Samba stat() returning POSIX mode bits when NT ACLs are authoritative

Itifix osm347 at proton.me
Fri Jan 30 22:20:53 UTC 2026


My test share configurations look like this, and unfortunately it doesn't work as you described:

[test]
path = /test
csc policy = disable
hide dot files = No
posix locking = No
read only = No
writable = yes
vfs objects = streams_xattr acl_xattr
acl_xattr:default acl style = windows
acl_xattr:ignore system acl = yes
force create mode = 0777
force directory mode = 0777
#create mask = 0777
#directory mask = 0777

and

[test]
path = /test
csc policy = disable
hide dot files = No
posix locking = No
read only = No
writable = yes
vfs objects = streams_xattr acl_xattr
acl_xattr:default acl style = windows
acl_xattr:ignore system acl = yes
#force create mode = 0777
#force directory mode = 0777
create mask = 0777
directory mask = 0777

He's still writing the POSIX ACLs for new files, just to test a possible solution.

------
Hi!

This sounds like "acl_xattr:ignore system acls = yes" is probably what 
you're looking for.

Note that when enabling this on existing data, you have to wipe existing 
POSIX ACLs and set the mode to 0777/0666 for everything. For new files 
and dirs this happens automatically.

-slow

-- 
Join us for the 25th sambaXP 2026 conference
April 20th & 21th, 2026 at Hotel Freizeit In
sponsored by TranquilIT & Microsoft & SerNet
Ticketing & more Info at https://sambaxp.org

SerNet Samba Team Lead  https://sernet.de/
Samba Team PLC          https://samba.org/
Support and Development https://samba.plus/services/
SAMBA+ packages         https://samba.plus/products/samba




More information about the samba mailing list