Samba CIFS : prevent extented attributes ?

[Martintamare]

Hi,

I would like to forbid the create of extented attribute like DosStream.AFP_Resource.
Does anyone know how to ? Is this related to vfs object ?

Here is the attributes I'd like to get rid of : DosStream.AFP_Resource:$DATA
Here is my samba conf :

Code:

[global]
    server max protocol = SMB3_00
    encrypt passwords = yes
    dns proxy = no
    strict locking = no
    oplocks = yes
    deadtime = 15
    max log size = 51200
    max open files = 11070
    syslog only = yes
    syslog = 1
    load printers = no
    printing = bsd
    printcap name = /dev/null
    disable spoolss = yes
    getwd cache = yes
    guest account = nobody
    map to guest = Bad User
    obey pam restrictions = Yes
    directory name cache size = 0
    kernel change notify = no
    panic action = /usr/local/libexec/samba/samba-backtrace
    ea support = yes
    store dos attributes = yes
    acl allow execute always = true
    local master = yes
    idmap config *:backend = tdb
    idmap config *:range = 90000000-100000000
    server role = member server
    security = user
    passdb backend = ldapsam:ldaps://192.168.0.253
    ldap admin dn = cn=admin2,dc=toto
    ldap suffix = dc=toto
    ldap user suffix = ou=people
    ldap group suffix = ou=groups
    ldap machine suffix = ou=computers
    ldap ssl = off
    ldap replication sleep = 1000
    ldap passwd sync = yes
    ldapsam:trusted = yes
    idmap uid = 10000-39999
    idmap gid = 10000-39999
    netbios name = NAS0
    workgroup = TOTO
    pid directory = /var/run/samba
    smb passwd file = /var/etc/private/smbpasswd
    private dir = /var/etc/private
    create mask = 0666
    directory mask = 0777
    client ntlmv2 auth = yes
    dos charset = CP437
    unix charset = UTF-8
    log level = 10
    syslog only = no
    max log size = 5000
    log file = /var/log/tmp_smbd.log
    log level = 2

[_02Fichiers]
    path = /mnt/data/redac/_02Fichiers
    printable = no
    veto files = /.snap/.windows/.zfs/
    comment = NAS
    writeable = yes
    browseable = yes
    recycle:repository = .recycle/%U
    recycle:keeptree = yes
    recycle:versions = yes
    recycle:touch = yes
    recycle:directory_mode = 0777
    recycle:subdir_mode = 0700
    shadow:snapdir = .zfs/snapshot
    shadow:sort = desc
    shadow:localtime = yes
    shadow:format = auto-%Y%m%d.%H%M-2w
    vfs objects = shadow_copy2 zfsacl streams_xattr aio_pthread

 

[anodos]

remove the vfs object "streams_xattr"

Note that these xattrs are created as a way of storing a type of OSX metadata called "resource forks". Once you disable this, samba will revert to storing this data in a different way (I can't remember off the top of my head and I'm too lazy to google it - not an apple user), which may be more annoying than the xattrs. Such annoyances are the price you pay for using "the most advanced operating system in the world" :D

 

[hugovsky]

This, especially point 4, might help you.

 

[Martintamare]

Thanks for your replies :) I hope to close this one too (closely related : https://forums.freenas.org/index.php?threads/osx-cifs-unable-to-open-some-files.28356/)
I'll get you updated

 

[anodos]

This, especially point 4, might help you.

Not really. That post only deals with DOS attributes (hidden | system | archive | read-only), which are stored in a USER.DOSATTRIB extended attribute.

NTFS alternate datastreams (streams_xattr) are a different beast altogether.