Re: [Samba] File permissions getting destroyed with M$ software on ZFS

2010-10-05 Thread RegioGis
Hi, Thanks for your input. B.t.w., I use security = ADS I tried hundreds of combinations of configurations and options, but it just won't work. It works rather ok if you limit it to the Unix permissions ( plain user and group permissions ) , but as soon as you try to put an ace referring to an

Re: [Samba] File permissions getting destroyed with M$ software on ZFS

2010-10-04 Thread RegioGis
Please ignore previous message. I messed up some testing results I'm trying to clear out things straight first. -- View this message in context: http://samba.2283325.n4.nabble.com/File-permissions-getting-destroyed-with-M-software-on-ZFS-tp2915766p2954213.html Sent from the Samba -

Re: [Samba] File permissions getting destroyed with M$ software on ZFS

2010-10-04 Thread RegioGis
Hi, I see you use samba with zfs. But how on earth do you prevent the 'deny' aces from being the first in the ACL, and thus denying all access to the resource ? I'm able to add permissions via the MS UI ( I added an AD group 'regio-users' ) When I then create a file or folder via Samba, I get

Re: [Samba] File permissions getting destroyed with M$ software on ZFS

2010-10-04 Thread Gaiseric Vandal
I had a lot of problems with this as well.I found it hard to find much documentation on the zfs module in samba from either samba or sun. (PS- A big thumbs down to Sun and the OpenSolaris crowd for apparently abandoning samba.) I am running Samba 3.0.x from Sun on two servers and samba

[Samba] File permissions getting destroyed with M$ software on ZFS

2010-10-01 Thread CJ Keist
All, Running Samba 3.5.4 on Solaris 10 with ZFS file system. I have issues where we have shared group folders. In these folders a userA in GroupA create file just fine with the correct inherited permissions 660. Problem is when userB in GroupA reads and modifies that file, with M$

Re: [Samba] File permissions getting destroyed with M$ software on ZFS

2010-10-01 Thread CJ Keist
Well, I think I got it fixed, but not sure if it is the correct way. This is what my share ens looks like now: [ens] comment = ENS Groups path = /XKA2/admin/ENS valid users = +admin force group = admin read only = No create mask = 0770 force create mode = 0770