Perfect, thanks - that puts my mind at ease :-)

A relevant question, for backups of the file server:
Besides "zfs send | ssh ... ", are there any other backup mechanisms that
store these "special" smb-generated ACLs? Preferably, some that offer
individual file retrieval possibility (like tar - which again according to
Google, doesn't save them for ZFS)?

Thanassis.

On Mon, Nov 23, 2009 at 11:10 AM, Jordan Brown <[email protected]> wrote:

> Thanassis Tsiodras wrote:
>
>> If I use the share from a Windows PC, where a domain user has logged in,
>> the generated folders/files indeed seem to belong to the same user (when
>> reviewed from another machine). The ACLs appear to survive reboots...
>>
>> Do they? i.e. is this guaranteed?
>>
>
> Yes, it is guaranteed.
>
>
>  The idmap documentation I read seems to suggest that even though idmap
>> attempts to retain the same ephemeral UID for the same Windows SID, this is
>> not guaranteed... the UID might change after a reboot of OpenSolaris.
>>
>
> It actually makes no attempt whatsoever to retain the same ephemeral UID
> across reboots.  The ephemeral UID is unimportant... ephemeral.  It is
> never, ever written to disk.  What's stored on the disk is the Windows-style
> SID for the user, not a UNIX-style UID.  The ephemeral ID is used only
> momentarily, as the user's identity is passed up and down through layers
> that know only how to handle UIDs.
>
> I'm sure there's a white paper or blog entry somewhere describing the whole
> architecture, but I don't immediately know where.  If you're interested I'll
> see if I can dig it up.
>



-- 
What I gave, I have; what I spent, I had; what I kept, I lost. -Old Epitaph
_______________________________________________
cifs-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/cifs-discuss

Reply via email to