Samba does not inherit share permissions for MacOS Clients

peter.m

Dabbler
Joined
Jan 1, 2021
Messages
41
I'm not sure if I should complain about this just yet, but share permissions are broken for samba right now. I made a AFP/SMB share with the default options, and the following permissions
rwxrwx--- root:Mediafiles

When creating a folder from MacOS, and making a folder inside that share, the resulting permissions for that folder endup
rwx------ user:users-primary-group

I believe this is because you're using acl_xattr in vfs objects, which in turn forces "force unknown acl user = yes" in samba. As per smb.conf

If this parameter is set, a Windows NT ACL that contains an unknown SID (security descriptor, or representation of a user or group id) as the owner or group owner of the file will be silently mapped into the current UNIX uid or gid of the currently connected user.

I remember seeing that ACLs are not done in SCALE, so please tell me if I should file a bug in Jira or not about this. This doesn't happen on CORE, since it uses zfsacl and nfsv4 acls

Edit: I've made a bug report here https://jira.ixsystems.com/browse/NAS-109208
 
Last edited:
Top