Ryan,

ACL are a big pain in CIFS. I guess you should have a closer look at what "ls -lV" shows on the files. I have been battling my way through it myself.

First, when I created the file and change delete permission to deny
> delete permission from windows side.
but user still can delete the file.

Are you talking about a UNIX or Windows user can delete the file?

If Windows user then check you have created the right permissions on the home directory for the owner, since it works correctly for windows:

     owner@:rwxpd-aARWc--s:fd-----:allow
        - remove D - Delete subfolders and Files
        - remove C - Change Permissions
        - remove o - Take Ownership     

If Solaris User, then you seem to be right. It looks like the ACL is being ignored in favour of the UNIX permissions

Is this what you get after adding deny!

# ls -lV DonotDELETE
-rwxr-xr-xr-x+  1 andrew staff  0 Jan 11 12:45 DonotDELETE
                 owner@:----d---------:-------:deny
                 owner@:rwxpd-aARWc--s:fd-----:allow
            group:staff:r-x---a-R-c--s:fd-----:allow
                 group@:r-x---a-R-c--s:fd-----:allow
              everyone@:r-x---a-R-c--s:fd-----:allow

I guess this is a bug?

Andrew

--
Andrew Watkins * Birkbeck College
http://notallmicrosoft.blogspot.com/


On 01/11/11 10:29 AM, Ryan Park wrote:
Hello all,

First I like to thank you for the help. Thank you.

I have created smb share on opensolaris 134.
joined windows 2008 active directory and map the share to the system.

I have couple acl access permission problem.

First, when I created the file and change delete permission to deny delete 
permission from windows side.
but user still can delete the file.

Second, I have taken the snapshot and restored from windows folder/file 
property-->previous version tab
When I delete the file and restores is using different user account.
that account has access to the file.

Please give me light to guide throught this problem

Thank you

Ryan
_______________________________________________
opensolaris-discuss mailing list
opensolaris-discuss@opensolaris.org

Reply via email to