Samba

NAVIGATION
CATEGORIES
REFERRENCE
LINKS
  • ACL set up yet Security Properties not sticking.

    5 answers - 880 bytes - related search similar search Add To My Delicious Add To My Stumble Upon Add To My Google Mark Add To My Facebook Add To My Digg Add To My Reddit

    greg (AT) fqdn (DOT) com wrote:
    Hi,
    a windows client if I attempt to modify the permissions on a file which
    resides on a linux server, when I hit "apply or ok" my changes are lost.
    Doing it from the unix cli (using setfacl) works as expected and the
    changes are not lost.
    Yet on windows if I right click - properties - Security. select add, add
    a user or group, hit Apply and the user/group I just added is removed.
    ACL support is properly configured as far as I am aware on the linux file
    server.
    any one with any idea as to what I should look at, that would be great,
    thanks!
    It has been a bummer modifying all the permission change requests by hand.
    What version of kernel are you using?
    There is a patch to 2.4.x kernel tree here:
    ;a=commitdiff;;
    This could be the problem.
    James Kosin
  • No.1 | | 1418 bytes | |

    Its actualy a 2.6 kernel James, but thanks for the quick reply.

    Have a great day,
    greg

    Linux exec 2.6.5-7.191-default #1 Tue Jun 28 14:58:56 UTC 2005 i686 i686
    i386 GNU/Linux

    greg (AT) fqdn (DOT) com wrote:
    >Hi,
    >>

    >a windows client if I attempt to modify the permissions on a file
    >which
    >resides on a linux server, when I hit "apply or ok" my changes are
    >lost.
    >>

    >Doing it from the unix cli (using setfacl) works as expected and the
    >changes are not lost.
    >>

    >Yet on windows if I right click - properties - Security. select add,
    >add
    >a user or group, hit Apply and the user/group I just added is removed.
    >>

    >ACL support is properly configured as far as I am aware on the linux
    >file
    >server.
    >>

    >any one with any idea as to what I should look at, that would be
    >great,
    >thanks!
    >>

    >It has been a bummer modifying all the permission change requests by
    >hand.
    >

    What version of kernel are you using?

    There is a patch to 2.4.x kernel tree here:
    ;a=commitdiff;;

    This could be the problem.

    James Kosin
    --
  • No.2 | | 340 bytes | |

    greg (AT) fqdn (DOT) com wrote:
    Its actualy a 2.6 kernel James, but thanks for the quick reply.

    Have a great day,
    greg

    Linux exec 2.6.5-7.191-default #1 Tue Jun 28 14:58:56 UTC 2005 i686 i686
    i386 GNU/Linux

    Greg,

    The same patch applies to the 2.6.x kernel tree.

    ;a=commitdiff;;

    James Kosin
  • No.3 | | 1128 bytes | |

    thanks again James!

    I'm downloading the 2.6.15-git12 source/patch and will give it a go as the
    changelog shows this patch was rolled in.

    Not being a developer, this may be a stupid question and I woudln't know
    it , can I take proc.c from the page you supplied, replace the existing
    one in, and recompile my 2.6.5-7.191 kernel from source? I guess what
    i'm asking is if it is version sensitive. I ask as this is a sles9 box
    under support; I'd rather try and keep things as much the way it was
    shipped as possible.

    thanks james for your help,
    greg

    --
    greg (AT) fqdn (DOT) com wrote:
    >Its actualy a 2.6 kernel James, but thanks for the quick reply.
    >>

    >Have a great day,
    >greg
    >>

    >Linux exec 2.6.5-7.191-default #1 Tue Jun 28 14:58:56 UTC 2005 i686 i686
    >i386 GNU/Linux
    >>

    >
    >

    Greg,

    The same patch applies to the 2.6.x kernel tree.

    ;a=commitdiff;;

    James Kosin
  • No.4 | | 1128 bytes | |

    greg (AT) fqdn (DOT) com wrote:
    thanks again James!

    I'm downloading the 2.6.15-git12 source/patch and will give it a go as the
    changelog shows this patch was rolled in.

    Not being a developer, this may be a stupid question and I woudln't know
    it , can I take proc.c from the page you supplied, replace the existing
    one in, and recompile my 2.6.5-7.191 kernel from source? I guess what
    i'm asking is if it is version sensitive. I ask as this is a sles9 box
    under support; I'd rather try and keep things as much the way it was
    shipped as possible.

    thanks james for your help,
    greg

    Greg,

    It appears the patch is across all versions. You should be able to
    patch your current kernel, if you have the source.

    I'm also not sure if this is the exact problem. I build my own kernel
    from the 2.4.x source tree frequently and update my RPMs by hand, so I
    try to keep track of the patches. This one sticks out; because it
    involves the smb file sharing and possible corruption with the file
    permissions.

    Good Luck,
    James Kosin
  • No.5 | | 1376 bytes | |

    In your smb.conf write:

    inherit acls
    map acl inherit

    You need a extended attributed filesystem.

    2006/1/16, James Kosin <jkosin (AT) intcomgrp (DOT) com>:
    >
    >
    >

    greg (AT) fqdn (DOT) com wrote:
    thanks again James!

    I'm downloading the 2.6.15-git12 source/patch and will give it a go as
    the
    changelog shows this patch was rolled in.

    Not being a developer, this may be a stupid question and I woudln't
    know
    it , can I take proc.c from the page you supplied, replace the
    existing
    one in, and recompile my 2.6.5-7.191 kernel from source? I guess what
    i'm asking is if it is version sensitive. I ask as this is a sles9 box
    under support; I'd rather try and keep things as much the way it was
    shipped as possible.

    thanks james for your help,
    greg
    --
    Greg,

    It appears the patch is across all versions. You should be able to
    patch your current kernel, if you have the source.

    I'm also not sure if this is the exact problem. I build my own kernel
    from the 2.4.x source tree frequently and update my RPMs by hand, so I
    try to keep track of the patches. This one sticks out; because it
    involves the smb file sharing and possible corruption with the file
    permissions.

    Good Luck,
    James Kosin

Re: ACL set up yet Security Properties not sticking.


max 4000 letters.
Your nickname that display:
In order to stop the spam: 6 + 5 =
QUESTION ON "Samba"

EMSDN.COM