summaryrefslogtreecommitdiff
path: root/docs-xml
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2010-08-30 10:45:52 +0200
committerStefan Metzmacher <metze@samba.org>2010-08-30 10:50:16 +0200
commitfc79f358eb6a1dd7ed2e5f5b1e31fb664a182595 (patch)
tree5299545091215b871f8fcb93bef69009031da5de /docs-xml
parent4d76c18f78742ba92b4772037ac306b567351ca1 (diff)
downloadsamba-fc79f358eb6a1dd7ed2e5f5b1e31fb664a182595.tar.gz
docs-xml/vfs_gpfs: document 'gpfs:refuse_dacl_protected'
metze
Diffstat (limited to 'docs-xml')
-rw-r--r--docs-xml/manpages-3/vfs_gpfs.8.xml31
1 files changed, 31 insertions, 0 deletions
diff --git a/docs-xml/manpages-3/vfs_gpfs.8.xml b/docs-xml/manpages-3/vfs_gpfs.8.xml
index 4963ecd88a9..6421fc6796f 100644
--- a/docs-xml/manpages-3/vfs_gpfs.8.xml
+++ b/docs-xml/manpages-3/vfs_gpfs.8.xml
@@ -169,6 +169,37 @@
</varlistentry>
<varlistentry>
+ <term>gpfs:refuse_dacl_protected = [ yes | no ]</term>
+ <listitem>
+ <para>
+ As GPFS does not support the ACE4_FLAG_NO_PROPAGATE NFSv4 flag (which would be
+ the mapping for the DESC_DACL_PROTECTED flag), the status of this flag is
+ currently silently ignored by Samba. That means that if you deselect the "Allow
+ inheritable permissions..." checkbox in Windows' ACL dialog and then apply the
+ ACL, the flag will be back immediately.
+ </para>
+ <para>
+ To make sure that automatic migration with e.g. robocopy does not lead to
+ ACLs silently (and unintentionally) changed, you can set
+ <command>gpfs:refuse_dacl_protected = yes</command> to enable an explicit
+ check for this flag and if set, it will return NT_STATUS_NOT_SUPPORTED so
+ errors are shown up on the Windows side and the Administrator is aware of
+ the ACLs not being settable like intended
+ </para>
+
+ <itemizedlist>
+ <listitem><para>
+ <command>no(default)</command> - ignore the DESC_DACL_PROTECTED flags.
+ </para></listitem>
+ <listitem><para>
+ <command>yes</command> - reject ACLs with DESC_DACL_PROTECTED.
+ </para></listitem>
+ </itemizedlist>
+ </listitem>
+
+ </varlistentry>
+ <varlistentry>
+
<term>nfs4:mode = [ simple | special ]</term>
<listitem>
<para>