When "map acl inherit" is set to no Samba does not store ACL inheritence information in an xattr. But when getting an nt acl for a file it ignores this setting when setting the SE_DESC_DACL_PROTECTED flag. On a server which has always had set "map acl inherit = no" this means the SE_DESC_DACL_PROTECTED flag is never set for acls returned by get_nt_acl in smbd/posix_acls.c. The result is that the ACL shows up as inherited in the Windows XP GUI even though it is not inherited.
Created attachment 809 [details] This should fix it.
Always turn on this flag if "map acl inherit" is turned off. Should fix this. Jeremy.
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.