+ Post New Thread
Results 1 to 5 of 5
*nix Thread, Sticky ACL's samba in Technical; Hi All. Is it possible to implement acls' recursively in samba ? I set up a test directory for students. ...
  1. #1


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339

    Sticky ACL's samba

    Hi All.
    Is it possible to implement acls' recursively in samba ?

    I set up a test directory for students.

    Code:
    ls -l /home/DOMAIN
    drwsrws---+ 5 DOMAIN\teststudent00       DOMAIN\domain^admins 4096 2008-07-21 09:36 teststudent00
    I have acl setup so that DOMAIN^teachers have read only access:

    Code:
    getfacl /home/DOMAIN/teststudent00/
    getfacl: Removing leading '/' from absolute path names
    # file: home/DOMAIN/teststudent00
    # owner: DOMAIN\134teststudent00
    # group: DOMAIN\134domain^admins
    user::rwx
    group::rwx
    group:DOMAIN\134teachers:r-x
    mask::rwx
    other::---
    but the ACL is not sticky - when the teststudent creates an new directory within his homedrive, the DOMAIN\teachers permissions do not propagate through.
    is this possible to achieve ?

    the relevant samba share is here:
    Code:
    [homes]
    	comment = Home Directories
    	path = /home/%D/%U
    	valid users = %D\%S
    	read only = No
    	create mask = 0770
    	directory mask = 0770

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    In your global section, do you have the following options set?

    Code:
    map acl inherit = yes
    nt acl support = yes
    ea support = yes
    store dos attributes = yes
    I believe the key one for what you want is 'map acl inherit'. Of course this will only work if your using a filesystem that supports extended attributes and you have enabled it.

  3. Thanks to Geoff from:

    CyberNerd (21st July 2008)

  4. #3


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339
    At first it didn't work, I needed to also set:
    Code:
       inherit permissions = yes

  5. Thanks to CyberNerd from:

    Geoff (21st July 2008)

  6. #4

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    yep, good catch.

    Also watch out. If you start messing about with permissions with setfacl you may break things on the windows side of stuff. So be careful and/or backup your permissions settings before fiddling. :P

  7. #5

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Oh and finally, you may also want to enable 'inherit owner'. Especially if your using quotas.

    Code:
    inherit owner = yes

  8. Thanks to Geoff from:

    CyberNerd (21st July 2008)

SHARE:
+ Post New Thread

Similar Threads

  1. Blocking Sticky Keys
    By sLiDeR in forum Network and Classroom Management
    Replies: 8
    Last Post: 15th August 2007, 12:26 PM
  2. WDS Sticky
    By Gatt in forum Comments and Suggestions
    Replies: 3
    Last Post: 19th March 2007, 07:36 PM
  3. sticky notes in adobe reader ?
    By mac_shinobi in forum Windows
    Replies: 0
    Last Post: 17th January 2007, 12:44 PM
  4. Disable sticky/filter keys
    By UnknownStuntman in forum Windows
    Replies: 2
    Last Post: 20th September 2006, 09:56 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •