Unable to copy NTFS file permissions ( ACL)

[Vishal Singh]

Hello,

I am trying to provide our users a way to change file / folder permissions on public share on samba (3.0.28a) ROLE_STANDALONE server. ACL's are working fine but the problem is to get list of users and groups on samba server via Windows XP Professional (SP3).

When I open 'Select users or groups' dialog and pressing' Find now ' button the Windows asks my Samba username / password pair. Why is that?
The share is already mounted, why I have to give my password again? That is annoying but * real * problem is that I get user list very rarely.
Sometimes it works but usually it does not. One interesting point is that I got user / group list every time if my samba password is different
than my windows password! Even though I have to give my username / password every time.

I cant 'be the only one trying to get this work but despite of that I haven't found any help from documentation.

[electricsketchbook]

When you install you must specify the rights that should be done to a certain point - to allow access (Allow) or disable (Deny). Local Security Authority (LSASS) which has control of access to resources, based on the security ID (SID), which is placed in the ACL, and then compared with the SID, which is attributable to the user when logging into the system. If the SID assigned to the user is in the ACL, then LSASS must determine what type of access set for the object - Allow or Deny. Human Allow and Deny are inherited for the entire structure, as well as to the rights described above.

he fact that a user or group SID is not in the ACL, leads to the same result - no access to a resource ( «No Access»), without requiring special settings in the ACL. Only very rarely need to use direct rights Deny. Denial of access to the resource in error from the ACL easier to debug, manage and configure.

[WMBrown]

Copy a file's ACL to another file by redirecting the getfacl output.

% getfacl filename1 | setfacl -f - filename2

filename1 : Specifies the file from which to copy the ACL.

filename2 : Specifies the file on which to set the copied ACL.

For an Example :

In the following example, the ACL on ch4.sgm is copied to ch5.sgm.


% getfacl ch4.sgm | setfacl -f - ch5.sgm