I previously submitted a patch to smbcacls here:

http://lists.samba.org/archive/samba-technical/2003-June/029814.html 

My motivation (coped from that post) was:

  Though I have WriteOwner right to the directory in question, the Win2K
  server in question won't let me "change" the owner - even if I'm trying to
  set it to the same SID that it already is - as the particular SID in
  question isn't in my access token.  From previous experiments, I think this
  is normal behaviour on the part of MS servers.

...

  main() calls cacl_set() which calls cli_set_secdesc() which will try to set
  the owner and group if the security descriptor it's passed has those fields.
  Perhaps the right fix is then to not initialise the owner and group fields
  in the security descriptor that's passed in

Jeremy kindly applied my patch here:

http://cvs.samba.org/cgi-bin/cvsweb/samba/source/utils/smbcacls.c.diff?r1=1.66.2.15&r2=1.66.2.16&f=h


This was merged into the CVS MAIN branch here:

http://cvs.samba.org/cgi-bin/cvsweb/samba/source/utils/smbcacls.c.diff?r1=1.89&r2=1.90


It is still in the CVS HEAD here:

http://cvs.samba.org/cgi-bin/cvsweb/samba/source/utils/smbcacls.c?annotate=1.93 

It's also in the latest revision on the SAMBA_3_0_RELEASE CVS branch here:

http://cvs.samba.org/cgi-bin/cvsweb/samba/source/utils/smbcacls.c?annotate=1.89.2.4 

Most of the patch is in the most recent SVN revision here:

http://websvn.samba.org/cgi-bin/viewcvs.cgi/trunk/source/utils/smbcacls.c?rev=4090&view=markup

Part of it was effectively backed out and an additional change was made in order
to fix another problem (https://bugzilla.samba.org/show_bug.cgi?id=404 and
https://bugzilla.samba.org/show_bug.cgi?id=2076) here:

http://websvn.samba.org/cgi-bin/viewcvs.cgi?rev=3918&view=rev 

This has caused my problem to recur.

I think I've understood the reason for the additional change and I've come up
with a patch which fixes my problem and, I think, should preserve the fix for
the #404 and #2076.  Looking at bugzilla, I think this may be the cause of
https://bugzilla.samba.org/show_bug.cgi?id=2111 but it's difficult to be sure,
so I thought it might be better to raise a separate bug.  Sadly, the svn
protocol won't go through our corporate firewall at present (I have a ticket to
get that addressed), so I used rsync to get the "unpacked" source from the head
of the tree.  I made my changes under the "samba" directory.  I hope that was
the right choice.

I'll attach the patch when bugzilla gives me the option which I think will be
when I've hit Commit.

Here's my test file before trying any changes:

martind@duezer:~/download/samba.org/samba/source$ ./bin/smbcacls -U
'TERASTACK\devtest' //mdorey.terastack.bluearc.com/root /test/smbcacls.txt
params.c:OpenConfFile() - Unable to open configuration file
"/usr/local/samba/lib/smb.conf":
	No such file or directory
creating lame upcase table
creating lame lowcase table
Password: 
REVISION:1
OWNER:BUILTIN\Administrators
GROUP:TERASTACK\Domain Users
ACL:\Everyone:ALLOWED/0/FULL
martind@duezer:~/download/samba.org/samba/source$

Here's where I test the code prior to my patch to see whether a user who should
be able to overwrite the ACL but not the owner can add an ACE, modify the ACL or
delete an ACE:

martind@duezer:~/download/samba.org/samba/source$ ./bin/smbcacls -U
'TERASTACK\devtest' -a 'ACL:\Everyone:ALLOWED/0/FULL'
//mdorey.terastack.bluearc.com/root /test/smbcacls.txt
params.c:OpenConfFile() - Unable to open configuration file
"/usr/local/samba/lib/smb.conf":
	No such file or directory
creating lame upcase table
creating lame lowcase table
Password: 
NT_TRANSACT_SET_SECURITY_DESC failed
ERROR: secdesc set failed: NT_STATUS_ACCESS_DENIED
martind@duezer:~/download/samba.org/samba/source$ ./bin/smbcacls -U
'TERASTACK\devtest' -M 'ACL:\Everyone:ALLOWED/0/FULL'
//mdorey.terastack.bluearc.com/root /test/smbcacls.txt
params.c:OpenConfFile() - Unable to open configuration file
"/usr/local/samba/lib/smb.conf":
	No such file or directory
creating lame upcase table
creating lame lowcase table
Password: 
NT_TRANSACT_SET_SECURITY_DESC failed
ERROR: secdesc set failed: NT_STATUS_ACCESS_DENIED
martind@duezer:~/download/samba.org/samba/source$ ./bin/smbcacls -U
'TERASTACK\devtest' -D 'ACL:\Everyone:ALLOWED/0/FULL'
//mdorey.terastack.bluearc.com/root /test/smbcacls.txt
params.c:OpenConfFile() - Unable to open configuration file
"/usr/local/samba/lib/smb.conf":
	No such file or directory
creating lame upcase table
creating lame lowcase table
Password: 
NT_TRANSACT_SET_SECURITY_DESC failed
ERROR: secdesc set failed: NT_STATUS_ACCESS_DENIED
martind@duezer:~/download/samba.org/samba/source$

Then I made the changes and repeated the tests:

martind@duezer:~/download/samba.org/samba/source$ make bin/smbcacls
Compiling utils/smbcacls.c
Linking bin/smbcacls
martind@duezer:~/download/samba.org/samba/source$ ./bin/smbcacls -U
'TERASTACK\devtest' -M 'ACL:\Everyone:ALLOWED/0/FULL'
//mdorey.terastack.bluearc.com/root /test/smbcacls.txt
params.c:OpenConfFile() - Unable to open configuration file
"/usr/local/samba/lib/smb.conf":
	No such file or directory
creating lame upcase table
creating lame lowcase table
Password: 
martind@duezer:~/download/samba.org/samba/source$ ./bin/smbcacls -U
'TERASTACK\devtest' -a 'ACL:\Everyone:ALLOWED/0/FULL'
//mdorey.terastack.bluearc.com/root /test/smbcacls.txt
params.c:OpenConfFile() - Unable to open configuration file
"/usr/local/samba/lib/smb.conf":
	No such file or directory
creating lame upcase table
creating lame lowcase table
Password: 
martind@duezer:~/download/samba.org/samba/source$ ./bin/smbcacls -U
'TERASTACK\devtest' -D 'ACL:\Everyone:ALLOWED/0/FULL'
//mdorey.terastack.bluearc.com/root /test/smbcacls.txt
params.c:OpenConfFile() - Unable to open configuration file
"/usr/local/samba/lib/smb.conf":
	No such file or directory
creating lame upcase table
creating lame lowcase table
Password: 
martind@duezer:~/download/samba.org/samba/source$