Simple family samba solution

[neptunus]

Hello,

I'm working an a simple family samba solution. Where the Father and Mother can read and write both of there shares and also read and write there common share.

The two kids can only read and write there own share, with the exception of both parents.

This is all working, I'm using a simple solution where I'm using unix file permissions (not ACL).

With my config I get this annoying warning in the log:

Code: Select all

Mar 12 19:37:22 	sideswipe 	smbd[80795]: unknown tag type 64
Mar 12 19:37:22 	sideswipe 	smbd[80795]: [2016/03/12 19:37:22.244277, 0] ../source3/modules/vfs_posixacl.c:171(smb_ace_to_internal)

Of course I have seen and tried first topic and second topic. This was not helping me. Therefor I have two questions:
1: Is my config below the right approach?
2: How can I fix this annoying warning in the log?

CONFIG:
Groups:

Code: Select all

Group       GID     Description
share       1001    share
father      1002    father
mother      1003    mother
son         1004    son
daughter    1005    daughter

Users:

Code: Select all

User        UID     Group
father      1002    father, mother, son, daughter, share
mother      1003    mother, father, son, daughter, share
son         1004    son
daughter    1005    daughter
share       1001    share

ZFS config

Code: Select all

drwxrwx---  32 father       father         33B Mar 12 17:28 father/
drwxrwx---  35 mother       mother         67B Mar 12 17:28 mother/
drwxrwx---   2 son          son             3B Mar 12 17:28 son/
drwxrwx---   2 daughter     daughter        3B Mar 12 17:28 daughter/
drwxrwx---  12 share        share          12B Mar 12 17:28 media/
drwxrwx---   2 father       share           4B Mar 12 18:26 test/
drwxrwx---  20 share        share          31B Mar 12 19:02 fatherandmother/

ZFS settings for all above ZFS datasets:

Code: Select all

Compression: lzjb
Dedup: off
Sync: standard
Access Time (atime): off
ACL inherit: restricted
ACL mode: discard
Canmount: checked
Readonly: not checked
Extended attributes: checked
Snapshot Visibility: not checked

SMB4 config (testparm output):

Code: Select all

# Global parameters
[global]
        dos charset = CP437
        workgroup = TRANSFORMERS
        server string = NAS4Free Server
        server role = standalone server
        security = USER
        map to guest = Bad User
        smb passwd file = /var/etc/private/smbpasswd
        private dir = /var/etc/private
        guest account = ftp
        syslog only = Yes
        max log size = 100
        client max protocol = SMB3
        max xmit = 65535
        deadtime = 15
        socket options = TCP_NODELAY SO_SNDBUF=128480 SO_RCVBUF=128480
        load printers = No
        printcap cache time = 0
        printcap name = /dev/null
        disable spoolss = Yes
        os level = 35
        preferred master = Yes
        domain master = Yes
        dns proxy = No
        idmap config * : range = 10000-39999
        idmap config * : backend = tdb
        aio read size = 1024
        aio write size = 1024
        strict locking = No


[mother]
        comment = mother
        path = /zstore/mother
        read only = No
        create mask = 0770
        force create mode = 0770
        directory mask = 0770
        force directory mode = 0770
        inherit permissions = Yes
        veto files = /.snap/.sujournal/
        vfs objects = shadow_copy2 aio_pthread
        shadow:localtime = yes
        shadow:sort = desc
        shadow:snapdir = .zfs/snapshot
        shadow:format = %Y%m%d_%H%M_autosnap_type%S


[son]
        comment = son
        path = /zstore/son
        read only = No
        create mask = 0770
        force create mode = 0770
        directory mask = 0770
        force directory mode = 0770
        inherit permissions = Yes
        veto files = /.snap/.sujournal/
        vfs objects = shadow_copy2 aio_pthread
        shadow:localtime = yes
        shadow:sort = desc
        shadow:snapdir = .zfs/snapshot
        shadow:format = %Y%m%d_%H%M_autosnap_type%S


[media]
        comment = Media
        path = /zstore/media
        read only = No
        create mask = 0770
        force create mode = 0770
        directory mask = 0770
        force directory mode = 0770
        inherit permissions = Yes
        veto files = /.snap/.sujournal/
        vfs objects = shadow_copy2 aio_pthread
        shadow:localtime = yes
        shadow:sort = desc
        shadow:snapdir = .zfs/snapshot
        shadow:format = %Y%m%d_%H%M_autosnap_type%S


[father]
        comment = father
        path = /zstore/father
        read only = No
        create mask = 0770
        force create mode = 0770
        directory mask = 0770
        force directory mode = 0770
        inherit permissions = Yes
        veto files = /.snap/.sujournal/
        vfs objects = shadow_copy2 aio_pthread
        shadow:localtime = yes
        shadow:sort = desc
        shadow:snapdir = .zfs/snapshot
        shadow:format = %Y%m%d_%H%M_autosnap_type%S


[fatherandmother]
        comment = father and mother
        path = /zstore/fatherandmother
        read only = No
        create mask = 0770
        force create mode = 0770
        directory mask = 0770
        force directory mode = 0770
        inherit permissions = Yes
        veto files = /.snap/.sujournal/
        vfs objects = shadow_copy2 aio_pthread
        shadow:localtime = yes
        shadow:sort = desc
        shadow:snapdir = .zfs/snapshot
        shadow:format = %Y%m%d_%H%M_autosnap_type%S


[daughter]
        comment = daughter
        path = /zstore/daughter
        read only = No
        create mask = 0770
        force create mode = 0770
        directory mask = 0770
        force directory mode = 0770
        inherit permissions = Yes
        veto files = /.snap/.sujournal/
        vfs objects = shadow_copy2 aio_pthread
        shadow:localtime = yes
        shadow:sort = desc
        shadow:snapdir = .zfs/snapshot
        shadow:format = %Y%m%d_%H%M_autosnap_type%S


[test]
        comment = test
        path = /zstore/test
        read only = No
        create mask = 0770
        force create mode = 0770
        directory mask = 0770
        force directory mode = 0770
        inherit permissions = Yes
        veto files = /.snap/.sujournal/
        browseable = No
        vfs objects = shadow_copy2 aio_pthread
        shadow:localtime = yes
        shadow:sort = desc
        shadow:snapdir = .zfs/snapshot
        shadow:format = %Y%m%d_%H%M_autosnap_type%S

[raulfg3]

this is what i can find on internet, perhaps help you:

https://forums.freebsd.org/threads/35851/

https://forums.freenas.org/index.php?th ... ost-117794

if works on FreeNAS system , must work on Nas4Free because both uses BSD as base system.