Bug 2870 - Modifying inherited ACL`s fails
Modifying inherited ACL`s fails
Status: ASSIGNED
Product: Samba 3.0
Classification: Unclassified
Component: File Services
3.0.20
x86 Windows XP
: P3 normal
: none
Assigned To: Samba Bugzilla Account
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2005-07-11 09:17 UTC by Alex Morozov
Modified: 2005-07-20 17:41 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Alex Morozov 2005-07-11 09:17:13 UTC
Suppose you have a folder named 'AAA'. Group 'Users' has read-execute
permissions on it. Now you create subfolder 'BBB', which, by default, inherits
'AAA' permissions. Then, you open ACLs dialog with Windows Explorer, and try to
revoke 'Users' access to 'BBB' by checking appropriate checkboxes. So, you set
them all and click 'Apply'. 
Dialog window hangs. After waiting for about 30 mins, I`ve killed it.
Permissions remained still the same.
A workaround: disable inheritance on folder 'BBB', then operation succeeds.
Is it a Samba bug? When I try to do the same on Windows drive, I have no such
problems.

Sorry for terrible English. Hope you`ll understand my post :).
Comment 1 Alex Morozov 2005-07-11 22:11:21 UTC
Forgot to post my smb.conf:

[global]
workgroup = DOMAIN
realm = DOMAIN
server string = test_cmp
guest account = guest
security = ads
password server = server
nt acl support = yes
encrypt passwords = yes
inherit acls = yes
inherit permissions = yes
map acl inherit = yes
store dos attributes = yes
idmap uid = 10000-20000
idmap gid = 10000-20000
load printers = no
local master = no
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
client schannel = no
admin users = DOMAIN\$ADMINS

[test_save]
comment = Data
path = /data
public = yes
writable = yes
Comment 2 Jeremy Allison 2005-07-20 17:41:59 UTC
I need to see the getfacl output for folder AAA, and for BBB and also need to
know what user you have logged in as and what groups they belong to. This will
help greatly in debugging this.
Thanks,
Jeremy.