I am deploying a new file server using Samba+ZFS running on Solaris 10 8/07 
which play as a membership of our existing MS-2003_R2 Ads context. This is my 
environment:

# uname -a
SunOS Solaris.keynet.com.cn 5.10 Generic_127112-10 i86pc i386 i86pc

# /usr/sfw/sbin/smbd -V
Version 3.0.28

I applied the 119758-12 patch so Samba upgraded to Version 3.0.28

I followed [u]http://blogs.sun.com/jurasek/[/u] and all what I want works fine 
except for the zfs part. I prepare a zpool named tank and create a 
directory(Not a zfs) named /tank/test and chown it to my MS-2003 ads user:group 
like this:
# chown -R "KEYNET+user_a":"KEYNET+gpc" /tank/test
# chmod -R 775 /tank/test

This is my smb.conf:
...
[test]
path = /tank/weihuziliao
read only = no
browseable = yes
user = @"KEYNET+gpc"
vfs objects = zfsacl
nfs4: mode = special
...

When "KEYNET+user_a" create a new Excel file, it look like this:
-rwxrw-r--   1 KEYNET+user_a KEYNET+gpc   13824 Mar 21 16:15 text.xls
            owner@:rwxp---A-W-Co-:------:allow
            group@:--x-----------:------:deny
            group@:rw-p----------:------:allow
         everyone@:-wxp---A-W-Co-:------:deny
         everyone@:r-----a-R-c--s:------:allow

That's right but after another user in this group, e.g user_b modify text.xls, 
it look like this:
-r--rw-r--+  1 KEYNET+user_b KEYNET+gpc   13824 Mar 21 16:23 text.xls
    user:KEYNET+user_a:rwxp---A-W-Co-:------:allow
            group@:--x-----------:------:deny
            group@:rw-p----------:------:allow
         everyone@:-wxp---A-W-Co-:------:deny
         everyone@:r-----a-R-c--s:------:allow

I noticed that:
1. File owner changed, I know that MS-Office would delete original file after 
save changes and create a new file which name is the same as before. I think I 
can not change this behavor.
2. Neither user_a nor user_b can write on this file any more even if the group 
permission is writeable.
3. A non-trivial ACE was created but that's not effective: user_a can not write 
on this file.
4. Where is the [EMAIL PROTECTED]

I hope that group members can write even though I can not hold owner for these 
OFFICE files so I added two lines:
force create mode = 0664
force directory mode = 0775

to that share but nothing different, then I issued:
zfs set aclinherit=discard tank
zfs set aclmode=discard tank

No lucky too.

Then I tested notepad text file, all things seem fine, no owner change, no 
non-trivial ACE, group member can write... all that what I'd hope.

I'm not sure if this is a bug? If so, it's MS-Office or ZFS or Samba?
 
 
This message posted from opensolaris.org
_______________________________________________
zfs-discuss mailing list
zfs-discuss@opensolaris.org
http://mail.opensolaris.org/mailman/listinfo/zfs-discuss

Reply via email to