Re: ICACLS and samba-tool...

Op 02-04-2026 om 11:20 schreef Béla Becker via samba:
> On Wed, Apr 1, 2026 at 11:15 PM Marco Gaiarin via samba
> <[email protected]> wrote:
>> I need to setup some ACL in some shares, with full windows ACL; i can set it
>> with ICACLS from windows, but i still prefere to do so from Linux.
>>
>> There's some guideline/document/howto on 'samba-tool ntacl set' (i suppose),
>> or there's other command (that i've not found) compatible with icacls?
> On Linux you should use setfacl / getfacl. Unless your file server is
> TrueNAS, in that case you should use the GUI for manipulating the
> share ACL's.
>
Posix ACLs (getfacl / setfacl) are a subset of the Windows ACLs.
The best option is to use smbcacls, which comes with Samba. It is well 
documented in its man-page.
It will set ACLs over SMB, so it uses the Samba logic to determine how 
the ACLs actually land on the Linux side. Samba will store it in Posix 
ACLs and, for the functionality not supported by Posix ACLs, in xattrs. 
The xattrs are not visible on the Linux side (although you can see that 
they exist with getfattr).

samba-tool ntacl set is another option, it uses the sddl format and does 
not need SMB-share access.

- Kees.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba