Bug 3194 - Incorrectly handling AFS ACLs
Summary: Incorrectly handling AFS ACLs
Status: RESOLVED FIXED
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: File Services (show other bugs)
Version: 3.0.14a
Hardware: x86 All
: P3 normal
Target Milestone: none
Assignee: Volker Lendecke
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-10-19 09:33 UTC by Derek Harkness
Modified: 2005-10-24 09:13 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Derek Harkness 2005-10-19 09:33:28 UTC 
Samba is enforcing unix permissions on AFS shares.  If I attempt to create/modify/delete files on an AFS 
share through samba I get "Cannot delete Document: Access is denied." error message.  If I attempt to 
delete the file through unix it works fine.

Samba is generating my AFS token correctly, I have the ACLs configured so no one but me has access my 
test directory.

If I change the directory ownership or unix permission then I can modify the directory.

This setup did work in earlier samba version such as 3.0.11.
Comment 1 Jeremy Allison 2005-10-19 09:58:09 UTC 
Can you try setting "acl check permissions = False". This may fix this specific
problem.
Jeremy.
Comment 2 Volker Lendecke 2005-10-19 10:15:23 UTC 
Please try to set 'vfs objects = afsacl' in your afs share.

Volker
Comment 3 Derek Harkness 2005-10-19 10:25:48 UTC 
I will upgrade to 3.0.20b and try the acl check permissions = false which sounds like it might do what I 
need.

I did add the afsacl module and it reports the correct information, but still doesn't give me correct 
access to the files.

Thanks!
Comment 4 Derek Harkness 2005-10-24 09:13:21 UTC 
3.0.20b with the acl check permission = false works great.  Thanks!