Samba 3.X on ZFS with acl_xattr / acl_tdb

[Hafeez Bana]

Some more info.

I know I pointed out the github link - but ZFS on linux doesn't support
posix acls. So for example setfacl methods don't work (but getfacls do) -
could this be the culprit?

If so any workarounds?

Thx.
Hafeez



On Wed, Oct 9, 2013 at 12:13 PM, Hafeez Bana <hafeez.bana at gmail.com> wrote:

> Hi,
>
> I have had level 10 debug enabled and the strange thing is there are no
> errors in the log file.
>
> Even stranger - this morning I tried the following:
>
> Used acl_xattr
> then I set the owner and group of the folder in question to hb and domain
> users respectively.
>
> Altering existing permissions works...I can see the security.NTACL attrib
> being modified.
>
> However when I try to add a new user or group, I get the error above. The
> exact error message is 'An error occurred while applying security
> information to <path> : Access Denied'
>
> My feeling is while windows is displaying the above error. I suspect
> something it's not entirely true. That said, the security.NTACL attribs
> look unmodified when adding a new user/group.
>
> Any suggestions for next steps...
>
> Thx.
> hb
>
>
>
> On Tue, Oct 8, 2013 at 2:26 PM, Richard Sharpe <
> realrichardsharpe at gmail.com> wrote:
>
>> On Tue, Oct 8, 2013 at 5:27 AM, Hafeez Bana <hafeez.bana at gmail.com>
>> wrote:
>> > Hi Everyone,
>> >
>> > I've been trialling ZFS with Samba 3.x (Ubuntu 12.04) and everything
>> works
>> > OK except when you try to assign permissions using Windows 7 and using
>> the
>> > acl_xattr or acl_tdb scheme.
>> >
>> > One keeps getting 'Access Denied'.
>>
>> Have you tried getting a level-10 debug log to see why you are getting
>> access denied? You might want a capture as well so you can find the
>> exact point at which you are getting the EACCESS.
>>
>> > the same config except on an EXT4 system works flawlessly.  ZFS already
>> > supports xattrs so I am not sure what else ZFS needs to support for
>> Samba
>> > with acl_xattr to work.
>> >
>> > It's strange that acl_tdb also exhibits the same error because one would
>> > have thought the acls would be written to a tdb file.
>> >
>> > Any insights would be appreciated. The only thread I have been able to
>> find
>> > is this one https://github.com/zfsonlinux/zfs/issues/170
>> >
>> > But again I fail to understand how that has an impact, particularly when
>> > using acl_tdb
>> >
>> > Thx.
>> > Hafeez
>>
>>
>>
>> --
>> Regards,
>> Richard Sharpe
>> (何以解憂？唯有杜康。--曹操)
>>
>
>