Bug 2870 - Modifying inherited ACL`s fails
Summary: Modifying inherited ACL`s fails
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: File Services (show other bugs)
Version: 3.0.20
Hardware: x86 Windows XP
: P3 normal
Target Milestone: none
Assignee: Samba Bugzilla Account
QA Contact: Samba QA Contact
Depends on:
Reported: 2005-07-11 09:17 UTC by Alex Morozov
Modified: 2020-05-17 22:35 UTC (History)
0 users

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description Alex Morozov 2005-07-11 09:17:13 UTC
Suppose you have a folder named 'AAA'. Group 'Users' has read-execute
permissions on it. Now you create subfolder 'BBB', which, by default, inherits
'AAA' permissions. Then, you open ACLs dialog with Windows Explorer, and try to
revoke 'Users' access to 'BBB' by checking appropriate checkboxes. So, you set
them all and click 'Apply'. 
Dialog window hangs. After waiting for about 30 mins, I`ve killed it.
Permissions remained still the same.
A workaround: disable inheritance on folder 'BBB', then operation succeeds.
Is it a Samba bug? When I try to do the same on Windows drive, I have no such

Sorry for terrible English. Hope you`ll understand my post :).
Comment 1 Alex Morozov 2005-07-11 22:11:21 UTC
Forgot to post my smb.conf:

workgroup = DOMAIN
realm = DOMAIN
server string = test_cmp
guest account = guest
security = ads
password server = server
nt acl support = yes
encrypt passwords = yes
inherit acls = yes
inherit permissions = yes
map acl inherit = yes
store dos attributes = yes
idmap uid = 10000-20000
idmap gid = 10000-20000
load printers = no
local master = no
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
client schannel = no
admin users = DOMAIN\$ADMINS

comment = Data
path = /data
public = yes
writable = yes
Comment 2 Jeremy Allison 2005-07-20 17:41:59 UTC
I need to see the getfacl output for folder AAA, and for BBB and also need to
know what user you have logged in as and what groups they belong to. This will
help greatly in debugging this.
Comment 3 Björn Jacke 2020-05-17 22:35:20 UTC
no feedback and probably it has been a more a support case, see https://www.samba.org/samba/support/