The branch, v3-4-ctdb has been updated via 2ee19049594f20fbacf4c0db89be1d454f54c838 (commit) from 6c9d35c50e86066a335ab083da420c239d330029 (commit)
http://gitweb.samba.org/?p=obnox/samba-ctdb.git;a=shortlog;h=v3-4-ctdb - Log ----------------------------------------------------------------- commit 2ee19049594f20fbacf4c0db89be1d454f54c838 Author: Volker Lendecke <v...@samba.org> Date: Thu Aug 13 06:33:16 2009 +0200 Make refusal of SEC_DESC_DACL_PROTECTED configurable This adds a parameter "gpfs:refuse_dacl_protected" that defaults to false. GPFS has no place to store the SEC_DESC_DACL_PROTECTED ACL bit. With this parameter we give customers an option to either ignore this bit or refuse setting an ACL with it. ----------------------------------------------------------------------- Summary of changes: source3/modules/vfs_gpfs.c | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source3/modules/vfs_gpfs.c b/source3/modules/vfs_gpfs.c index 3e13d45..a3088a9 100644 --- a/source3/modules/vfs_gpfs.c +++ b/source3/modules/vfs_gpfs.c @@ -445,7 +445,9 @@ static NTSTATUS gpfsacl_set_nt_acl_internal(files_struct *fsp, uint32 security_i if (acl->acl_version&GPFS_ACL_VERSION_NFS4) { - if ((psd->type&SEC_DESC_DACL_PROTECTED)) { + if (lp_parm_bool(fsp->conn->params->service, "gpfs", + "refuse_dacl_protected", false) + && (psd->type&SEC_DESC_DACL_PROTECTED)) { DEBUG(2, ("Rejecting unsupported ACL with DACL_PROTECTED bit set\n")); return NT_STATUS_NOT_SUPPORTED; } -- SAMBA-CTDB repository