From: Oliver Freyd on
Maybe I'm doing somthing really stupid, but while copying some windows
share onto a samba server, on some random subdirectory robocopy
says ERROR 87 (0x00000057) Copying NTFS Security to Destination Directory...

The samba logfile has lots of these lines.

modules/vfs_posixacl.c:349(smb_acl_to_posix)
smb_acl_to_posix: ACL is invalid for set (Das Argument ist ungültig)

The strange thing is that the same configuration worked with
samba-3.4.8 (from lenny-backports, on lenny, with the lenny kernel).
The samba3.5.3 is the sernet-samba, on lenny, with lenny kernel (2.6.26).

The ACL on the files to be copied are really simple, just
Everyone/Full Control, and "netzadmin"/Full Control.
That user is admin user on the samba machine, and is the user doing the
robocopy on a windows XP machine.

The filesystem is ext3, mounted with acl,user_xattr.

testparm says:

workgroup = XXXXX
netbios name = SERVER2
passdb backend = ldapsam:ldap://127.0.0.1
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* .
username map = /etc/samba/smbusers
syslog = 0
log file = /var/log/samba/machines/log.%m
max log size = 1000
name resolve order = wins bcast host
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192
SO_SNDBUF=8192
add user script = /usr/sbin/smbldap-useradd -m '%u'
add group script = /usr/sbin/smbldap-groupadd '%g'
add user to group script = /usr/sbin/smbldap-groupmod -m '%u' '%g'
set primary group script = /usr/sbin/smbldap-usermod -g '%g' '%u'
add machine script = /usr/sbin/smbldap-useradd -w "%u"
logon script = scripts\logon.cmd
logon path =
domain logons = Yes
os level = 60
domain master = No
dns proxy = No
wins server = 192.168.0.38
ldap admin dn = cn=admin,dc=xxxxx,dc=com
ldap group suffix = ou=groups
ldap idmap suffix = ou=idmap
ldap machine suffix = ou=machines
ldap passwd sync = yes
ldap suffix = dc=xxxxx,dc=com
ldap ssl = no
ldap timeout = 20
ldap user suffix = ou=users
add share command = /usr/bin/touch /tmp/test
panic action = /usr/share/samba/panic-action %d
idmap backend = ldap:ldap://127.0.0.1
idmap uid = 15000-20000
idmap gid = 15000-20000
admin users = netzadmin
ea support = Yes
map acl inherit = Yes

[netlogon]
comment = Network Logon Share
path = /data/netlogon
browseable = No
locking = No

[Installations]
comment = Installations
path = /data/h/Installations
read only = No
create mask = 0770
directory mask = 0770
force unknown acl user = Yes
inherit permissions = Yes
inherit acls = Yes

....


BTW, using the
vfs objects = acl_xattr
gives less of these ERROR 87 lines.

Don't know if this is helpful, I'll go back to samba-3.4.8 for now...

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba