On 2008-11-04 14:59, Jeremy Allison wrote:
On Tue, Nov 04, 2008 at 02:16:24PM +0100, Peter Rindfuss wrote:
Hi,
Since 3.2.4 (maybe earlier, but I doubt it), one important feature does
not work anymore for me:
I cannot break ACL inheritance anymore in the Windows ACL editor. With
previous Samba versions, I entered the "Advanced" dialog of the Windows
ACL editor and unchecked the flag "Inherit from parent the permission
entries that apply to child objects. Include these with entries
explicitly defined here". Afterwards, I could remove or change ACLs as
needed. If I do this now, ACLs that exist on the next higher directory
level re-appear after having deleted them.
Are there changed configuration options or am I missing something else here?
Breaking inheritance is very important in our system as we often need to
restrict access to subdirectories.
At the moment, I can only try to modify ACLs on the Linux level in order
to get the desired behavior.
Can you help me determine when this behavior changed ?
3.2.3 has a small change here that might affect this,
but I'd be very interested to know if this was in 3.2.0,
3.2.1 or 3.2.3 (when it was introduced).
I'm travelling at the moment with no access to
Windows VM's to test this with, so if you need me
to reproduce it'll have to wait until next monday
(US Pacific time).
Sorry, not possible. 3.2.x was introduced here when upgrading from Suse
10.0 to OpenSuse 11.0. OpenSuse 11 comes with 3.2.0, I think, but when
we went to production use, we already had installed 3.2.4. That was 2
weeks ago.
The "(maybe earlier, but I doubt it)" in my original post makes no sense
as we did not test it with any earlier version than 3.2.4.
I found some possibly discussion at
http://webui.sourcelabs.com/samba/issues/5052
Best, Peter Rindfuss
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
