Re: ICACLS and samba-tool...

Marco Gaiarin via samba <[email protected]> Thu, 2 Apr 2026 23:21:34 +0200
Newsgroups gmane.network.samba.general
Organization Il gaio usa sempre TIN per le liste, fallo anche tu!!!
Message-ID <[email protected]>
Mandi! Kees van Vloten via samba
  In chel di` si favelave...

> Posix ACLs (getfacl / setfacl) are a subset of the Windows ACLs.
> The best option is to use smbcacls, which comes with Samba. It is well 
> documented in its man-page.
> It will set ACLs over SMB, so it uses the Samba logic to determine how 
> the ACLs actually land on the Linux side. Samba will store it in Posix 
> ACLs and, for the functionality not supported by Posix ACLs, in xattrs. 
> The xattrs are not visible on the Linux side (although you can see that 
> they exist with getfattr).

Bingo! I've totally missed that.

I'm using security.NTACL, so 'going SMB' seems to me the only option...


Thanks.

-- 



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba