A tool to delete all Pathworks ACEs ?

[Jeremy Begg]

Hi all, lots of answers overnight I see!

Comments, in no particular order ...

Hoff - deleting the entire ACL is not an option, most of them were carefully crafted (although I see the example I supplied was not!)

David - I'll have another go at your program, thanks.

Jon & Jan - it seems that no amount of privilege allows a Hidden ACE to be deleted from the ACL (unless the entire ACL is being deleted). This is possibly a bug in VMS.

Jess - thanks for the heads-up on PWRK$DELETEACE. So far I've had no response to my request to HP for an Itanium version of this program, so I guess I won't be trying it.

Mike & John - SET SECURITY/LIKE works quite nicely, so at least I now have two ways to set a good ACL on these files (/LIKE and /DEFAULT).

[Jeremy Begg]

I now have TWO programs for cleaning up these Pathworks ACEs.

CIFS Engineering has ported the PWRK$DELETEACE program, which I have tested in conjunction with John Gillings' procedure.

I have also compiled David Jones' DELPATHWORKS program and it seems to work too.

Thanks!
Jeremy Begg

[Paul Nunez]

For others who may need it, the Itanium version of the pwrk$deleteace utility can be downloaded from:

$ ftp hprc.external.hp.com
Username: pathwork
Password: support
cd tools

(ftp://pathwork:support@hprc.external.hp.com/tools/)

bin
get samba_ia64_delete_pwrkace.zip
quit

$ unzip samba_ia64_delete_pwrkace.zip
$ backup SAMBA_DELETE_PWRKACE.BCK/save *

Define a foreign command for SAMBA$DELETE_PWRKACE.EXE. It's a direct port from the Alpha version so the interface is the same (so don't shoot the porting engineer :O).

Regards,

Paul

[Brad McCusker]

Regarding DELETEACE - it's been a while since I was chastised over that one - reading Jess Goodman's note brought back memories.

To shed some light on the history of that utility...

DELETEACE was originally for PW-V5 to PW-V6 upgrades, to be used to get rid of the old PW-V5 aces. If I recall correctly it was some midnight oil that took some LanManager code (from Microsoft) and hacked it to work on VMS ACEs. It never was formally productized, but, it was used as if it was. We always wanted to clean it up and make it more VMS like, but, well, you guys know the story...

It's a tool that should have been part of the CIFS kit from the start. I'm suprised it hasn't come up before now. I'm glad CIFS engineering made the executable avaialble. I was afraid I was going to have to fire up an old machine I've got in a corner here ;^)

Brad McCusker
Software Concepts International
www.sciinc.com

[David Jones_21]

I seem to recall that the reason I wrote my program was specifically because deleteace didn't preserve the revision dates on the target files. Does the current deleteace address that issue?

[Paul Nunez]

Hi,

I doubt the ported version is any way different.

That being said, a new utility is being written for inclusion with CIFS (since the current utility cannot be included for legal reasons), so I'll ask the engineer to consider this feature enhancement.

Any others (not already mentioned in this thread)?

Paul

[Jeremy Begg]

Hi Paul,

>Any other requests?

Fixing CIFS so that it ignored the Pathworks ACEs would remove most of the need for the program! ;-)

More constructively ... the new program should look much like any other VMS file utility, i.e. it should accept the usual qualifiers /BACKUP /BEFORE /BY_OWNER /CONFIRM /CREATED /EXCLUDE /EXPIRED /LOG /MODIFIED /SINCE /STYLE and take a comma-separated list of file specifications (with wildcards and related file processing).

As to how you might invoke this utility, you could make it an option on the SET SECURITY command, e.g.

$ SET SECURITY/ACL/DELETE=PATHWORKS file

Thanks,
Jeremy Begg

[Jon Pinkley]

RE:"As to how you might invoke this utility, you could make it an option on the SET SECURITY command, e.g.

$ SET SECURITY/ACL/DELETE=PATHWORKS file"

------

And add /notouch or some other qualifier that will tell it not to change the modification date of the files.