1828724 Members
2714 Online
109984 Solutions
New Discussion

SAMBA/ACL/RH9

 
Nobody's Hero
Valued Contributor

SAMBA/ACL/RH9

Thanks for the previous link Claudio. WHile I have your ear and everyone's. I am running Samba under RH9 andI want to be able to control the file permissions from the NT side through server manager. I can control the 'share' permissions but I still can not control the file perms because I think I don't have acl support built into the kernel. So my question is, is there a precompiled kernel,or rpm file, that I can install that will give me acl support?
UNIX IS GOOD
2 REPLIES 2
Claudio Cilloni
Honored Contributor

Re: SAMBA/ACL/RH9

I'm not so expert about Samba... But it sounds me so strage that you cannot control the file permissions through it.
I don't know what acl is, but if it ins't compiled into kernel, usually you can load it as module (using 'insmod' command, but you need to know the name of the module).
Alternatively, you can recompile your own kernel.

There's a lot of samba experts here... wait for their voices :-)

Ciao
Claudio
Stuart Browne
Honored Contributor

Re: SAMBA/ACL/RH9

ACL's or "Access Control Lists" are what is used for permissions on an NT system.

Samba should support basic ACL , and has this flag to say what OS is goign to be managing it:

--- from man smb.conf ---
acl compatibility (G)
New in Samba 2.2.8 and above, this string parameter tells smbd if it should modify any Windows access control lists created from POSIX access control lists to remove features which are not supported by Windows 2000 but not supported by the Windows NT ACL edit. control.

By default this parameter is set automatically by detecting the client type and is set to "true" if the client is Windows NT.

Default: client detected

Example: acl compatibility = Win2k

Example: acl compatibility = winnt
--- end man page rip ---

Now, as for more details of what that does, I'd suggest poking the samba documentation to find out more. I'm a Linux/Unix guy, and don't let windows people try to amnage files on my boxen, so, I've never tried setting it up that direction. But it's a start.

Oh, there will be NO KERNEL things to do with regards to ACL's for shared file structures. It will be Samba configuration of some description.
One long-haired git at your service...