[PATCH] Re: s3fs and group policy acls
Andrew Bartlett
abartlet at samba.org
Tue Aug 21 21:37:50 MDT 2012
On Mon, 2012-08-13 at 10:36 +0200, Gémes Géza wrote:
> Hi Ricky,
> > Geza, make sure you have the right mount options in fstab and also the
> > right headers for ACL's I had a similar problem initially, but once I
> > got those fixed up, all went well. See the samba4 howto wiki for more
> > info on this.
> >
> > Good luck,
> > Ricky
> >
> Thanks for the answer, but I'm afraid that doesn't help me (I'we chose
> xfs as the file system for the partition holding /usr/local/samba
> especially to avoid acl related problems on sysvol) and I'm able to set
> some ACLs from windows, but if I try to make some policies applicable to
> Domain Admins as well it complains about inability to set access rights
> (a device connected doesn't work) on the folder containing the policy
> ({...}).
>
> BTW. my attempt to use ntvfs wasn't successful either, it seems that it
> doesn't understand at all the acls set by s3fs.
That is correct.
An implementation of provision with (I hope) correct setting of group
policy acls is in my posix-acl-provision-wip branch.
https://git.samba.org/abartlet/samba.git/?p=abartlet/samba.git/.git;a=shortlog;h=refs/heads/posix-acl-provision-wip
Please test it out (requires a fresh provision run) and let me know if
you can now modify ACLs as non-administrator, using s3fs.
I'll write a tool to fix existing installations shortly.
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
More information about the samba-technical
mailing list