Difference between revisions of "Using the acl xattr VFS Module"
(Added new documentation about acl_xattr.)
Revision as of 16:39, 1 November 2017
acl_xattr Virtual File System (VFS) module enables you to use the fine-granular Windows Access Control Lists (ACL) on a share. For further details, see Setting up a Share Using Windows ACLs.
Samba stores the Windows ACLs in the
security.NTACL extended attribute of a file or directory. Therefore, the file system of the share must support extended attributes. For details, see your operating system's and file system's documentation.
|On a Samba Active Directory (AD) domain controller (DC), the |
You can enable the
acl_xattr module either globally in the the
[global] section or for individual shares in the share's section. To enable the module:
- Edit your
smb.conffile. Depending on where to enable the module, add the following entry either to the
[global]or to the share's section:
vfs objects = streams_xattr
- Restart the Samba configuration:
# smbcontrol all reload-config
For additional information, see the
vfs_acl_xattr man page.