Samba POSIX ACL behavior

Samba POSIX ACL behavior

[Steve French]

> I recently encountered the following strange behavior as mentioned in
> this post from several years ago:
>
>
https://lists.samba.org/archive/linux-cifs-client/2009-February/004079.html
>
> I'm currently running Ubuntu 12.04 LTS on desktop and server, so
> I took some time to try the latest packaged versions of Samba and
> the kernel to make sure that the issue had not yet been fixed.
>
> Client:  Ubuntu 12.04 LTS with Kernel 3.11.0-13-generic
> Server:  Ubuntu 12.04 LTS with Samba 3.6.20 and Kernel 3.5.0-43-generic
>
> I tried many other combinations and the behavior is the same.  It
> looks like setting default ACLs somehow interacts with the
> non-default ACLs and vice versa.

I tried this here to Samba 3.6 with slightly different results:
1) If I set both a default and non-default ACL that seems to work
2) but as you and Rob saw, if I setfacl a default ACL it removes the
non-default ACL
3) and if I setfacl a non-default ACL it removes the default ACL

So for case 2 and 3 the behavior is different than for a local file
system.  This may be a server bug.

For Samba 4 and Samba 4.2-pre (master) - I get an error not supported on
this infolevel 512 (Set POSIX ACL).

-- 
Thanks,

Steve

Fwd: Samba POSIX ACL behavior

[Steve French]

---------- Forwarded message ----------
From: Steve French <smfrench-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
Date: Thu, Nov 14, 2013 at 12:13 PM
Subject: Samba POSIX ACL behavior
To: "linux-cifs-u79uwXL29TY76Z2rM5mHXA@public.gmane.org" <linux-cifs-u79uwXL29TY76Z2rM5mHXA@public.gmane.org>,
samba-technical <samba-technical-w/Ol4Ecudpl8XjKLYN78aQ@public.gmane.org>, Jeremy Allison
<jra-eUNUBHrolfbYtjvyW6yDsg@public.gmane.org>


> I recently encountered the following strange behavior as mentioned in
> this post from several years ago:
>
> https://lists.samba.org/archive/linux-cifs-client/2009-February/004079.html
>
> I'm currently running Ubuntu 12.04 LTS on desktop and server, so
> I took some time to try the latest packaged versions of Samba and
> the kernel to make sure that the issue had not yet been fixed.
>
> Client:  Ubuntu 12.04 LTS with Kernel 3.11.0-13-generic
> Server:  Ubuntu 12.04 LTS with Samba 3.6.20 and Kernel 3.5.0-43-generic
>
> I tried many other combinations and the behavior is the same.  It
> looks like setting default ACLs somehow interacts with the
> non-default ACLs and vice versa.

I tried this here to Samba 3.6 with slightly different results:
1) If I set both a default and non-default ACL that seems to work
2) but as you and Rob saw, if I setfacl a default ACL it removes the
non-default ACL
3) and if I setfacl a non-default ACL it removes the default ACL

So for case 2 and 3 the behavior is different than for a local file
system.  This may be a server bug.

For Samba 4 and Samba 4.2-pre (master) - I get an error not supported
on this infolevel 512 (Set POSIX ACL).

-- 
Thanks,

Steve



-- 
Thanks,

Steve

Re: Samba POSIX ACL behavior

[Steve French]

OK - figured out what the problem with Samba 4.x build (did not have
package acl-dev on Ubuntu and didn't see any mention of needing to
install that package in the log - but found the answer to the problem
googling)

So ... the set posix acl call works, but the behavior is similar to
what Rob and the recent poster described.


On Thu, Nov 14, 2013 at 12:13 PM, Steve French <smfrench-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org> wrote:
>> I recently encountered the following strange behavior as mentioned in
>> this post from several years ago:
>>
>>
>> https://lists.samba.org/archive/linux-cifs-client/2009-February/004079.html
>>
>> I'm currently running Ubuntu 12.04 LTS on desktop and server, so
>> I took some time to try the latest packaged versions of Samba and
>> the kernel to make sure that the issue had not yet been fixed.
>>
>> Client:  Ubuntu 12.04 LTS with Kernel 3.11.0-13-generic
>> Server:  Ubuntu 12.04 LTS with Samba 3.6.20 and Kernel 3.5.0-43-generic
>>
>> I tried many other combinations and the behavior is the same.  It
>> looks like setting default ACLs somehow interacts with the
>> non-default ACLs and vice versa.
>
> I tried this here to Samba 3.6 with slightly different results:
> 1) If I set both a default and non-default ACL that seems to work
> 2) but as you and Rob saw, if I setfacl a default ACL it removes the
> non-default ACL
> 3) and if I setfacl a non-default ACL it removes the default ACL
>
> So for case 2 and 3 the behavior is different than for a local file system.
> This may be a server bug.
>
> For Samba 4 and Samba 4.2-pre (master) - I get an error not supported on
> this infolevel 512 (Set POSIX ACL).
>
> --
> Thanks,
>
> Steve



-- 
Thanks,

Steve

Re: Samba POSIX ACL behavior

[Jeremy Allison]

On Thu, Nov 14, 2013 at 12:13:35PM -0600, Steve French wrote:
> > I recently encountered the following strange behavior as mentioned in
> > this post from several years ago:
> >
> > https://lists.samba.org/archive/linux-cifs-client/2009-February/004079.html
> >
> > I'm currently running Ubuntu 12.04 LTS on desktop and server, so
> > I took some time to try the latest packaged versions of Samba and
> > the kernel to make sure that the issue had not yet been fixed.
> >
> > Client:  Ubuntu 12.04 LTS with Kernel 3.11.0-13-generic
> > Server:  Ubuntu 12.04 LTS with Samba 3.6.20 and Kernel 3.5.0-43-generic
> >
> > I tried many other combinations and the behavior is the same.  It
> > looks like setting default ACLs somehow interacts with the
> > non-default ACLs and vice versa.
> 
> I tried this here to Samba 3.6 with slightly different results:
> 1) If I set both a default and non-default ACL that seems to work
> 2) but as you and Rob saw, if I setfacl a default ACL it removes the non-
> default ACL
> 3) and if I setfacl a non-default ACL it removes the default ACL
> 
> So for case 2 and 3 the behavior is different than for a local file system. 
> This may be a server bug.

Can you send me a wireshark trace ?

> For Samba 4 and Samba 4.2-pre (master) - I get an error not supported on this
> infolevel 512 (Set POSIX ACL).

You're running the wrong server :-). You need smbd running, not the source4
server.

Jeremy.

Re: Samba POSIX ACL behavior

[Steve French]

On Thu, Nov 14, 2013 at 12:18 PM, Jeremy Allison <jra-eUNUBHrolfbYtjvyW6yDsg@public.gmane.org> wrote:
> On Thu, Nov 14, 2013 at 12:13:35PM -0600, Steve French wrote:
>> > I recently encountered the following strange behavior as mentioned in
>> > this post from several years ago:
>> >
>> > https://lists.samba.org/archive/linux-cifs-client/2009-February/004079.html
>> >
>> > I'm currently running Ubuntu 12.04 LTS on desktop and server, so
>> > I took some time to try the latest packaged versions of Samba and
>> > the kernel to make sure that the issue had not yet been fixed.
>> >
>> > Client:  Ubuntu 12.04 LTS with Kernel 3.11.0-13-generic
>> > Server:  Ubuntu 12.04 LTS with Samba 3.6.20 and Kernel 3.5.0-43-generic
>> >
>> > I tried many other combinations and the behavior is the same.  It
>> > looks like setting default ACLs somehow interacts with the
>> > non-default ACLs and vice versa.
>>
>> I tried this here to Samba 3.6 with slightly different results:
>> 1) If I set both a default and non-default ACL that seems to work
>> 2) but as you and Rob saw, if I setfacl a default ACL it removes the non-
>> default ACL
>> 3) and if I setfacl a non-default ACL it removes the default ACL
>>
>> So for case 2 and 3 the behavior is different than for a local file system.
>> This may be a server bug.
>
> Can you send me a wireshark trace ?
>
>> For Samba 4 and Samba 4.2-pre (master) - I get an error not supported on this
>> infolevel 512 (Set POSIX ACL).
>
> You're running the wrong server :-). You need smbd running, not the source4
> server.

steven@steven-GA-970A-DS3:/etc$ ps -A | grep "mbd"
 2321 ?        00:00:00 smbd
19715 ?        00:00:00 smbd
19721 ?        00:00:00 smbd

This is smbd
Version 4.2.0pre1-GIT-72b240f
-- 
Thanks,

Steve

Re: Samba POSIX ACL behavior

[Jeremy Allison]

On Thu, Nov 14, 2013 at 12:32:43PM -0600, Steve French wrote:
> On Thu, Nov 14, 2013 at 12:18 PM, Jeremy Allison <jra-eUNUBHrolfbYtjvyW6yDsg@public.gmane.org> wrote:
> > On Thu, Nov 14, 2013 at 12:13:35PM -0600, Steve French wrote:
> >> > I recently encountered the following strange behavior as mentioned in
> >> > this post from several years ago:
> >> >
> >> > https://lists.samba.org/archive/linux-cifs-client/2009-February/004079.html
> >> >
> >> > I'm currently running Ubuntu 12.04 LTS on desktop and server, so
> >> > I took some time to try the latest packaged versions of Samba and
> >> > the kernel to make sure that the issue had not yet been fixed.
> >> >
> >> > Client:  Ubuntu 12.04 LTS with Kernel 3.11.0-13-generic
> >> > Server:  Ubuntu 12.04 LTS with Samba 3.6.20 and Kernel 3.5.0-43-generic
> >> >
> >> > I tried many other combinations and the behavior is the same.  It
> >> > looks like setting default ACLs somehow interacts with the
> >> > non-default ACLs and vice versa.
> >>
> >> I tried this here to Samba 3.6 with slightly different results:
> >> 1) If I set both a default and non-default ACL that seems to work
> >> 2) but as you and Rob saw, if I setfacl a default ACL it removes the non-
> >> default ACL
> >> 3) and if I setfacl a non-default ACL it removes the default ACL
> >>
> >> So for case 2 and 3 the behavior is different than for a local file system.
> >> This may be a server bug.
> >
> > Can you send me a wireshark trace ?
> >
> >> For Samba 4 and Samba 4.2-pre (master) - I get an error not supported on this
> >> infolevel 512 (Set POSIX ACL).
> >
> > You're running the wrong server :-). You need smbd running, not the source4
> > server.
> 
> steven@steven-GA-970A-DS3:/etc$ ps -A | grep "mbd"
>  2321 ?        00:00:00 smbd
> 19715 ?        00:00:00 smbd
> 19721 ?        00:00:00 smbd
> 
> This is smbd
> Version 4.2.0pre1-GIT-72b240f

Then I definitely need the wireshark trace. I have never seen error
not supported from smbd.