Groups | Search | Server Info | Login | Register


Groups > linux.samba > #60426

[Samba] Skip ACL checks

From Christoph Kleineweber via samba <samba@lists.samba.org>
Newsgroups linux.samba
Subject [Samba] Skip ACL checks
Date 2017-03-16 17:50 +0100
Message-ID <tlGL8-14c-13@gated-at.bofh.it> (permalink)
Organization linux.* mail to news gateway

Show all headers | View raw


Hi all,

I am wondering if there is a way to bypass Samba's ACL checks and delegate
access control completely to the underlying file system.

My problem arises from the following scenario: Our file system implements
ACLs that are to the best of my knowledge currently not readable by any of
the existing VFS modules. When trying to access a file with an ACL going
beyond the file's POSIX mode, access is denied by Samba. I guess this is
caused by an mechanism to derive an NT ACL from the mode. Is there any
possibility to skip Samba's permission checks?

Thank you in advance,
Christoph



-- 
Quobyte GmbH, Berlin, AG Charlottenburg HRB 149012 B, Jan Stender, Felix
Hupfeld, Bjoern Kolbeck
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Back to linux.samba | Previous | NextNext in thread | Find similar


Thread

[Samba] Skip ACL checks Christoph Kleineweber via samba <samba@lists.samba.org> - 2017-03-16 17:50 +0100
  Re: [Samba] Skip ACL checks Volker Lendecke via samba <samba@lists.samba.org> - 2017-03-17 14:00 +0100
    Re: [Samba] Skip ACL checks Christoph Kleineweber via samba <samba@lists.samba.org> - 2017-03-20 11:00 +0100
      Re: [Samba] Skip ACL checks Volker Lendecke via samba <samba@lists.samba.org> - 2017-03-20 15:00 +0100
        Re: [Samba] Skip ACL checks Christoph Kleineweber via samba <samba@lists.samba.org> - 2017-03-20 16:00 +0100
      Re: [Samba] Skip ACL checks Andrew Bartlett via samba <samba@lists.samba.org> - 2017-03-20 21:20 +0100
        Re: [Samba] Skip ACL checks Christoph Kleineweber via samba <samba@lists.samba.org> - 2017-03-21 16:30 +0100

csiph-web