Quoting Josip Rodin (j...@debbugs.entuzijast.net): > At this point I'm completely dazzled by the amount of conflicting ACL > systems Samba is involved with :) one thing seems certain - it's pretty > confusing for us users.
Correct. The main general problem behind this is that it's impossible to entirely map NT ACLs to POSIX ACLs. Which is why vfs_acl_tdb is being developed now. From my understanding of Jeremy Allison's talk about it at SambaXP, if you want a full implementation of ACLs, you'll want this VFS module. In such case ACLs will be stored in a TDB file without trying to use the filesystem's ACLs.
signature.asc
Description: Digital signature