Bug 3194 - Incorrectly handling AFS ACLs
Incorrectly handling AFS ACLs
Status: RESOLVED FIXED
Product: Samba 3.0
Classification: Unclassified
Component: File Services
3.0.14a
x86 All
: P3 normal
: none
Assigned To: Volker Lendecke
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2005-10-19 09:33 UTC by Derek Harkness
Modified: 2005-10-24 09:13 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Derek Harkness 2005-10-19 09:33:28 UTC
Samba is enforcing unix permissions on AFS shares.  If I attempt to create/modify/delete files on an AFS 
share through samba I get "Cannot delete Document: Access is denied." error message.  If I attempt to 
delete the file through unix it works fine.

Samba is generating my AFS token correctly, I have the ACLs configured so no one but me has access my 
test directory.

If I change the directory ownership or unix permission then I can modify the directory.

This setup did work in earlier samba version such as 3.0.11.
Comment 1 Jeremy Allison 2005-10-19 09:58:09 UTC
Can you try setting "acl check permissions = False". This may fix this specific
problem.
Jeremy.
Comment 2 Volker Lendecke 2005-10-19 10:15:23 UTC
Please try to set 'vfs objects = afsacl' in your afs share.

Volker
Comment 3 Derek Harkness 2005-10-19 10:25:48 UTC
I will upgrade to 3.0.20b and try the acl check permissions = false which sounds like it might do what I 
need.

I did add the afsacl module and it reports the correct information, but still doesn't give me correct 
access to the files.

Thanks!
Comment 4 Derek Harkness 2005-10-24 09:13:21 UTC
3.0.20b with the acl check permission = false works great.  Thanks!