RE: [Samba] Permissions not recursive on win2K?
On 20 Sep 2005 at 16:15, Shawn Wright wrote: > On 20 Sep 2005 at 17:02, Larry McElderry wrote: > > > There are probably other (better) methods, but one is: > > > > Pick a file on the file system in question and try the command > > attr -g aa FileName > > > > If EA's are support you'll get a message saying "No data found" (unless you > > actually have an attribute named aa), otherwise it will > > report "Operation not supported". > > > > You could also try xfsdump. For further reading: man -k xattr > > > > For samba to use them I believe you also have to have "ea support = Yes" in > > your smb.conf. > > I have confirmed EA support in the FS, and presumably the kernel, since I > get this when setting and getting an attr: > > [EMAIL PROTECTED] console]# attr -s test -V blah samba-3.0.14a.tar.gz > Attribute "test" set to a 4 byte value for samba-3.0.14a.tar.gz: > blah > [EMAIL PROTECTED] console]# attr -g test samba-3.0.14a.tar.gz > Attribute "test" had a 4 byte value for samba-3.0.14a.tar.gz: > blah > > I have added 'ea support=yes' to smb.conf, restarted samba, but still no > luck on either a Redhat SGI/XFS 7.2 system, or a Mandrake 10.1 XFS > system. The samba docs refer to a 'user_xattr' mount option, which > doesn't exist for XFS, but EAs are working with 'attr'. > > Can I narrow down the smb log searching with a specific debug class? I believe this problem has been tracked down to my using "inherit permissions" and "inherit ACLS" in a global setting, rather than a share setting where they are intended to be. After moving them to a share setting, things seem to be working as expected. Thanks. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Shawn Wright, I.T. Manager Shawnigan Lake School http://www.sls.bc.ca [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Permissions not recursive on win2K?
On 20 Sep 2005 at 16:15, Shawn Wright wrote: > On 20 Sep 2005 at 17:02, Larry McElderry wrote: > > > There are probably other (better) methods, but one is: > > > > Pick a file on the file system in question and try the command > > attr -g aa FileName > > > > If EA's are support you'll get a message saying "No data found" (unless you > > actually have an attribute named aa), otherwise it will > > report "Operation not supported". > > > > You could also try xfsdump. For further reading: man -k xattr > > > > For samba to use them I believe you also have to have "ea support = Yes" in > > your smb.conf. > > I have confirmed EA support in the FS, and presumably the kernel, since I > get this when setting and getting an attr: > > [EMAIL PROTECTED] console]# attr -s test -V blah samba-3.0.14a.tar.gz > Attribute "test" set to a 4 byte value for samba-3.0.14a.tar.gz: > blah > [EMAIL PROTECTED] console]# attr -g test samba-3.0.14a.tar.gz > Attribute "test" had a 4 byte value for samba-3.0.14a.tar.gz: > blah > > I have added 'ea support=yes' to smb.conf, restarted samba, but still no > luck on either a Redhat SGI/XFS 7.2 system, or a Mandrake 10.1 XFS > system. The samba docs refer to a 'user_xattr' mount option, which > doesn't exist for XFS, but EAs are working with 'attr'. > > Can I narrow down the smb log searching with a specific debug class? I have done some testing with an offline server with log level = 10 and cannot see anything related to EAs or ACLs in the log. Any hints as to what I should be watching for? Thanks. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Shawn Wright, I.T. Manager Shawnigan Lake School http://www.sls.bc.ca [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Permissions not recursive on win2K?
On 20 Sep 2005 at 17:02, Larry McElderry wrote: > There are probably other (better) methods, but one is: > > Pick a file on the file system in question and try the command > attr -g aa FileName > > If EA's are support you'll get a message saying "No data found" (unless you > actually have an attribute named aa), otherwise it will > report "Operation not supported". > > You could also try xfsdump. For further reading: man -k xattr > > For samba to use them I believe you also have to have "ea support = Yes" in > your smb.conf. I have confirmed EA support in the FS, and presumably the kernel, since I get this when setting and getting an attr: [EMAIL PROTECTED] console]# attr -s test -V blah samba-3.0.14a.tar.gz Attribute "test" set to a 4 byte value for samba-3.0.14a.tar.gz: blah [EMAIL PROTECTED] console]# attr -g test samba-3.0.14a.tar.gz Attribute "test" had a 4 byte value for samba-3.0.14a.tar.gz: blah I have added 'ea support=yes' to smb.conf, restarted samba, but still no luck on either a Redhat SGI/XFS 7.2 system, or a Mandrake 10.1 XFS system. The samba docs refer to a 'user_xattr' mount option, which doesn't exist for XFS, but EAs are working with 'attr'. Can I narrow down the smb log searching with a specific debug class? -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Shawn Wright, I.T. Manager Shawnigan Lake School http://www.sls.bc.ca [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Permissions not recursive on win2K?
There are probably other (better) methods, but one is: Pick a file on the file system in question and try the command attr -g aa FileName If EA's are support you'll get a message saying "No data found" (unless you actually have an attribute named aa), otherwise it will report "Operation not supported". You could also try xfsdump. For further reading: man -k xattr For samba to use them I believe you also have to have "ea support = Yes" in your smb.conf. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Shawn Wright Sent: Tuesday, September 20, 2005 4:11 PM To: samba@lists.samba.org Subject: Re: [Samba] Permissions not recursive on win2K? On 19 Sep 2005 at 12:02, Jeremy Allison wrote: > On Mon, Sep 19, 2005 at 11:32:22AM -0700, Shawn Wright wrote: > > Sorry for the report, but I got exactly zero replies, so I will try again: > > > > I am now running 3.0.14a, but the permissions recursion problem still > > exists. Each time I apply permissions to a tree using the Win2K GUI, the addition or removal of an> > n other words, if the tree is 4 levels deep, it will take 3 passes of the > > operation before the ACL change appears in the 4th level. This long > > standing problem is seriously limiting our migration to samba. Can > > someone please tell me if this has been fixed in 3.0.20? > > > > I have offered configs, debug, etc. and the offer still stands. I just want > > to > > see this problem fixed, and can't believe it is not affecting more users. > > > > For the record, here is the environment: > > Mandrake 10.1 with ACL support on XFS > > The share used for testing the issue is the "home" share. > > PDC is running NT4 SP6a > > Client used for setting ACLs running Win2K SP4, tested using GUI, cacls, > > and xcacls. > > Do you know if it's allowing EA's to be set on the filesystem ? > The inheritance code uses EA's. Ok, I've tried to find more info on this, but cannot find any specific resources for determing if I am supporting EAs correctly. Is there something specific I can look for in samba error logs at a certain debug level? I have this issue on two production servers running Mandrake 10.1 with XFS, so if I had an idea what to look for in the logs, it would be helpful. Thanks. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Shawn Wright, I.T. Manager Shawnigan Lake School http://www.sls.bc.ca [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Permissions not recursive on win2K?
On 19 Sep 2005 at 12:02, Jeremy Allison wrote: > On Mon, Sep 19, 2005 at 11:32:22AM -0700, Shawn Wright wrote: > > Sorry for the report, but I got exactly zero replies, so I will try again: > > > > I am now running 3.0.14a, but the permissions recursion problem still > > exists. Each time I apply permissions to a tree using the Win2K GUI, the > > addition or removal of an> > n other words, if the tree is 4 levels deep, > > it will take 3 passes of the > > operation before the ACL change appears in the 4th level. This long > > standing problem is seriously limiting our migration to samba. Can > > someone please tell me if this has been fixed in 3.0.20? > > > > I have offered configs, debug, etc. and the offer still stands. I just want > > to > > see this problem fixed, and can't believe it is not affecting more users. > > > > For the record, here is the environment: > > Mandrake 10.1 with ACL support on XFS > > The share used for testing the issue is the "home" share. > > PDC is running NT4 SP6a > > Client used for setting ACLs running Win2K SP4, tested using GUI, cacls, > > and xcacls. > > Do you know if it's allowing EA's to be set on the filesystem ? > The inheritance code uses EA's. Ok, I've tried to find more info on this, but cannot find any specific resources for determing if I am supporting EAs correctly. Is there something specific I can look for in samba error logs at a certain debug level? I have this issue on two production servers running Mandrake 10.1 with XFS, so if I had an idea what to look for in the logs, it would be helpful. Thanks. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Shawn Wright, I.T. Manager Shawnigan Lake School http://www.sls.bc.ca [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Permissions not recursive on win2K?
On 19 Sep 2005 at 12:02, Jeremy Allison wrote: > On Mon, Sep 19, 2005 at 11:32:22AM -0700, Shawn Wright wrote: > > Sorry for the report, but I got exactly zero replies, so I will try again: > > > > I am now running 3.0.14a, but the permissions recursion problem still > > exists. Each time I apply permissions to a tree using the Win2K GUI, the > > addition or removal of an> > n other words, if the tree is 4 levels deep, > > it will take 3 passes of the > > operation before the ACL change appears in the 4th level. This long > > standing problem is seriously limiting our migration to samba. Can > > someone please tell me if this has been fixed in 3.0.20? > > > > I have offered configs, debug, etc. and the offer still stands. I just want > > to > > see this problem fixed, and can't believe it is not affecting more users. > > > > For the record, here is the environment: > > Mandrake 10.1 with ACL support on XFS > > The share used for testing the issue is the "home" share. > > PDC is running NT4 SP6a > > Client used for setting ACLs running Win2K SP4, tested using GUI, cacls, > > and xcacls. > > Do you know if it's allowing EA's to be set on the filesystem ? > The inheritance code uses EA's. Sorry for my ignorance, but how would I check this? Thanks. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Shawn Wright, I.T. Manager Shawnigan Lake School http://www.sls.bc.ca [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Permissions not recursive on win2K?
On Mon, Sep 19, 2005 at 11:32:22AM -0700, Shawn Wright wrote: > Sorry for the report, but I got exactly zero replies, so I will try again: > > I am now running 3.0.14a, but the permissions recursion problem still exists. > Each time I apply permissions to a tree using the Win2K GUI, the addition or > removal of an ACL will move exactly one level deeper than before. I > n other words, if the tree is 4 levels deep, it will take 3 passes of the > operation before the ACL change appears in the 4th level. This long > standing problem is seriously limiting our migration to samba. Can > someone please tell me if this has been fixed in 3.0.20? > > I have offered configs, debug, etc. and the offer still stands. I just want > to > see this problem fixed, and can't believe it is not affecting more users. > > For the record, here is the environment: > Mandrake 10.1 with ACL support on XFS > The share used for testing the issue is the "home" share. > PDC is running NT4 SP6a > Client used for setting ACLs running Win2K SP4, tested using GUI, cacls, > and xcacls. Do you know if it's allowing EA's to be set on the filesystem ? The inheritance code uses EA's. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Permissions not recursive on win2K?
Sorry for the report, but I got exactly zero replies, so I will try again: Way back on Mar 10 2004, I wrote this: > > == > Perhaps this is a known problem, and if so, hopefully it is fixed > in 3.x: > > Win2K SP4 clients, Samba 2.2.8a servers on Linux using ACL > support with > XFS filesystem (Redhat SGI-XFS build, and Mandrake 9.2). > > Adding/editing an ACL for an NT domain group (or user) to a > folder on samba, and > attempting to apply permissions to all subdirs and files only > goes one > level deep when using the win2k standard gui tool. ie: Only > ACLS for the > selected folder and files in top level are touched. Problem does > not occur > when using an NT4 client. Interestingly, using the NT4 security > dialog on > win2k (by way of the RSHXMENU powertoy for NT) works fine > on win2K. > > Is this a known issue? I can provide conf and debug output if > necessary, > but I assumed someone else must have seen this already (and > fixed it? :-) > == > > Then, I got this reply: > > >On 24 Mar 2004 at 9:13, Gerald (Jerry) Carter wrote: > > > > Yup. It is fixed in 3.0 what what I remember. Jeremy worked > on it. > > Eventually I got around to upgrading the affected servers to > 3.0.11, but the problem persists, and I didn't have time to dig > into it. Now I need to replace two samba servers, and would > like to resolve this issue. I've now read the release notes from > 3.0.12 to 3.0.20RC2 and couldn't find mention of a fix. I am now running 3.0.14a, but the permissions recursion problem still exists. Each time I apply permissions to a tree using the Win2K GUI, the addition or removal of an ACL will move exactly one level deeper than before. I n other words, if the tree is 4 levels deep, it will take 3 passes of the operation before the ACL change appears in the 4th level. This long standing problem is seriously limiting our migration to samba. Can someone please tell me if this has been fixed in 3.0.20? I have offered configs, debug, etc. and the offer still stands. I just want to see this problem fixed, and can't believe it is not affecting more users. For the record, here is the environment: Mandrake 10.1 with ACL support on XFS The share used for testing the issue is the "home" share. PDC is running NT4 SP6a Client used for setting ACLs running Win2K SP4, tested using GUI, cacls, and xcacls. Build options: ./configure --with-winbind --with-acl-support --with-quotas -- sbindir=/usr/sbin --bindir=/usr/bin --localstatedir=/var/log/samba --with- swatdir=/usr/share/swat --with-lockdir=/var/cache/samba --with- configdir=/etc/samba --with-piddir=/var/run conf file: [global] workgroup = SHAWNIGAN netbios name = ADMIN3 server string = ADMIN3 Server winbind uid = 1-2 winbind enum users = yes winbind gid = 1-2 winbind separator = + winbind enum groups = yes disable spoolss = yes unix password sync = no max xmit = 65535 hosts allow = 10. 72.2.0. dns proxy = no oplocks = yes inherit permissions = yes debug level = 1 security = domain getwd cache = yes log level = 3 read raw = yes write raw = yes socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=16384 SO_SNDBUF=16384 wins server = 72.2.0.5 72.2.0.4 create mask = 0700 domain master = no map to guest = never null passwords = no encrypt passwords = yes template shell = /bin/false dead time = 0 password level = 0 password server = * directory mask = 0700 preferred master = no [homes] comment = Staff Home Directories browseable = no writable = yes available = yes public = no create mask = 2700 inherit permissions = yes nt acl support = no force group = "shawnigan+domain users" force security mode = 0777 path = /home/staff/%U [home] comment = Homes browseable = yes writable = yes available = yes public = no only user = no path=/home valid users = @"shawnigan+domain admins" admin users = @"shawnigan+domain admins" [sysroot] comment = sysroot valid users = @"shawnigan+domain admins" admin users = @"shawnigan+domain admins" writeable = yes path = / hosts allow =10.4. 72.2.0. [staffhome] comment = Staff Homes - Web Access browseable = yes writable = yes available = yes public = no only user = no path=/home/staff valid users = @"shawnigan+domain admins","shawnigan+Apache- Internal" admin users = @"shawnigan+domain admins" -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Shawn Wright, I.T. Manager Shawnigan Lake School http://www.sls.bc.ca [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://l
Re: [Samba] Permissions not recursive on win2K?
On 11 Aug 2005 at 14:40, samba@lists.samba.org wrote: > Way back on Mar 10 2004, I wrote this: > > == > Perhaps this is a known problem, and if so, hopefully it is fixed > in 3.x: > > Win2K SP4 clients, Samba 2.2.8a servers on Linux using ACL > support with > XFS filesystem (Redhat SGI-XFS build, and Mandrake 9.2). > > Adding/editing an ACL for an NT domain group (or user) to a > folder on samba, and > attempting to apply permissions to all subdirs and files only > goes one > level deep when using the win2k standard gui tool. ie: Only > ACLS for the > selected folder and files in top level are touched. Problem does > not occur > when using an NT4 client. Interestingly, using the NT4 security > dialog on > win2k (by way of the RSHXMENU powertoy for NT) works fine > on win2K. > > Is this a known issue? I can provide conf and debug output if > necessary, > but I assumed someone else must have seen this already (and > fixed it? :-) > == > > Then, I got this reply: > > >On 24 Mar 2004 at 9:13, Gerald (Jerry) Carter wrote: > > > > Yup. It is fixed in 3.0 what what I remember. Jeremy worked > on it. > > Eventually I got around to upgrading the affected servers to > 3.0.11, but the problem persists, and I didn't have time to dig > into it. Now I need to replace two samba servers, and would > like to resolve this issue. I've now read the release notes from > 3.0.12 to 3.0.20RC2 and couldn't find mention of a fix. I am now running 3.0.14a, but the permissions recursion problem still exists. Each time I apply permissions to a tree using the Win2K GUI, the addition or removal of an ACL will move exactly one level deeper than before. I n other words, if the tree is 4 levels deep, it will take 3 passes of the operation before the ACL change appears in the 4th level. This long standing problem is seriously limiting our migration to samba. Can someone please tell me if this has been fixed in 3.0.20? I have offered configs, debug, etc. and the offer still stands. I just want to see this problem fixed, and can't believe it is not affecting more users. For the record, here is the environment: Mandrake 10.1 with ACL support on XFS The share used for testing the issue is the "home" share. PDC is running NT4 SP6a Client used for setting ACLs running Win2K SP4, tested using GUI, cacls, and xcacls. Build options: ./configure --with-winbind --with-acl-support --with-quotas -- sbindir=/usr/sbin --bindir=/usr/bin --localstatedir=/var/log/samba --with- swatdir=/usr/share/swat --with-lockdir=/var/cache/samba --with- configdir=/etc/samba --with-piddir=/var/run conf file: [global] workgroup = SHAWNIGAN netbios name = ADMIN3 server string = ADMIN3 Server winbind uid = 1-2 winbind enum users = yes winbind gid = 1-2 winbind separator = + winbind enum groups = yes disable spoolss = yes unix password sync = no max xmit = 65535 hosts allow = 10. 72.2.0. dns proxy = no oplocks = yes inherit permissions = yes debug level = 1 security = domain getwd cache = yes log level = 3 read raw = yes write raw = yes socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=16384 SO_SNDBUF=16384 wins server = 72.2.0.5 72.2.0.4 create mask = 0700 domain master = no map to guest = never null passwords = no encrypt passwords = yes template shell = /bin/false dead time = 0 password level = 0 password server = * directory mask = 0700 preferred master = no [homes] comment = Staff Home Directories browseable = no writable = yes available = yes public = no create mask = 2700 inherit permissions = yes nt acl support = no force group = "shawnigan+domain users" force security mode = 0777 path = /home/staff/%U [home] comment = Homes browseable = yes writable = yes available = yes public = no only user = no path=/home valid users = @"shawnigan+domain admins" admin users = @"shawnigan+domain admins" [sysroot] comment = sysroot valid users = @"shawnigan+domain admins" admin users = @"shawnigan+domain admins" writeable = yes path = / hosts allow =10.4. 72.2.0. [staffhome] comment = Staff Homes - Web Access browseable = yes writable = yes available = yes public = no only user = no path=/home/staff valid users = @"shawnigan+domain admins","shawnigan+Apache- Internal" admin users = @"shawnigan+domain admins" -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Shawn Wright, I.T. Manager Shawnigan Lake School http://www.sls.bc.ca [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mail
Re: [Samba] Permissions not recursive on win2K?
Way back on Mar 10 2004, I wrote this: == Perhaps this is a known problem, and if so, hopefully it is fixed in 3.x: Win2K SP4 clients, Samba 2.2.8a servers on Linux using ACL support with XFS filesystem (Redhat SGI-XFS build, and Mandrake 9.2). Adding/editing an ACL for an NT domain group (or user) to a folder on samba, and attempting to apply permissions to all subdirs and files only goes one level deep when using the win2k standard gui tool. ie: Only ACLS for the selected folder and files in top level are touched. Problem does not occur when using an NT4 client. Interestingly, using the NT4 security dialog on win2k (by way of the RSHXMENU powertoy for NT) works fine on win2K. Is this a known issue? I can provide conf and debug output if necessary, but I assumed someone else must have seen this already (and fixed it? :-) == Then, I got this reply: >On 24 Mar 2004 at 9:13, Gerald (Jerry) Carter wrote: > > Yup. It is fixed in 3.0 what what I remember. Jeremy worked on it. Eventually I got around to upgrading the affected servers to 3.0.11, but the problem persists, and I didn't have time to dig into it. Now I need to replace two samba servers, and would like to resolve this issue. I've now read the release notes from 3.0.12 to 3.0.20RC2 and couldn't find mention of a fix. Any ideas? Shawn Wright, I.T. Manager Shawnigan Lake School [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Permissions not recursive on win2K?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 10 Mar 2004, Shawn Wright wrote: > Perhaps this is a known problem, and if so, hopefully it is fixed in > 3.x: Yup. It is fixed in 3.0 what what I remember. Jeremy worked on it. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQFAYaWhIR7qMdg1EfYRAoSJAKDHCdivrf2+hGd7pmsvqCtFXR5UNgCguuwq lwHyAzeAd1AQ886pYDKO4N8= =sxd4 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Permissions not recursive on win2K?
Perhaps this is a known problem, and if so, hopefully it is fixed in 3.x: Win2K SP4 clients, Samba 2.2.8a servers on Linux using ACL support with XFS filesystem (Redhat SGI-XFS build, and Mandrake 9.2). Adding/editing an ACL for an NT domain group to a folder on samba, and attempting to apply permissions to all subdirs and files only goes one level deep when using the win2k standard gui tool. ie: Only ACLS for the selected folder and files in top level are touched. Problem does not occur when using an NT4 client. Interestingly, using the NT4 security dialog on win2k (by way of the RSHXMENU powertoy for NT) works fine on win2K. Is this a known issue? I can provide conf and debug output if necessary, but I assumed someone else must have seen this already (and fixed it? :-) Thanks.-- Shawn Wright http://Zuiko.sls.bc.ca/swright ~This message sent by Pegasus Mail, the safe E-Mail alternative~ "Friends don't let friends use Outlook" -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
