summaryrefslogtreecommitdiff
path: root/source3/modules/onefs_acl.c
AgeCommit message (Collapse)AuthorFilesLines
2009-02-12s3 onefs: rename custom parameter to plural to match previous usageSteven Danneman1-2/+2
2009-02-11s3 OneFS: Expand the usage of the ignore sacl parametertodd stecher1-0/+6
2009-02-09s3 OneFS: Change ACLs to do a stat-only open before get/set_security_descriptorTim Prouty1-22/+4
This ensures that getting/stting a security descriptor does not contend an oplock. The correct access checks will be still be done in the kernel on the get/set rather than the open.
2009-01-30s3 onefs: Fix onefs ACLs to work with updated ACL syscallTim Prouty1-1/+1
2009-01-23s3: OneFS unmappable sids support.Dan Sledz1-65/+173
Updates the onefs vfs module to add configurable behavior to deal with sids that are unknown to us. The best examples are aces that come from robocopy/xcopy. Adds the following share level options (which are specific to the vfs_onefs module): onefs: ignore unmappable sids (Default = false) If this option is set to true, sids which could not be resolved to a uid/gid are ignored. If an unmappable sid is encountered as the owner or group, the owner/group is converted to BUILTIN\Administrators. onefs: unmappable sids ignore list (Default = empty) Only the sids in the list are ignored. onefs: ignore sacls (Default = false) SACLs are ignored onefs: unmappable sids deny everyone (Default = false) If an unmappable sid is found in a deny ACE, the ACE's identity is changed to Everyone.
2009-01-11s3: General cleanup of the open path in the OneFS vfs moduleTim Prouty1-3/+3
2008-12-09s3: Add the OneFS SMB_VFS_CREATE_FILE implementationTim Prouty1-38/+81
This is the first pass at extending the onefs vfs module to support the CIFS-specific enhancements available on OneFS. Most of this patch is massaging the sama open path to work with ifs_createfile. ifs_createfile is a CIFS-specific syscall for opening/files and directories. It adds support for: - Full in-kernel access checks using a windows access_mask - Cluster-coherent share mode locks - Cluster-coherent oplocks - Streams - Setting security descriptors at create time - Setting dos_attributes at create time This patch does not implement the samba side of the streams support or oplocks support. Tests that expect oplocks to be granted or streams to be supported will fail. This will be remedied in upcoming patches.
2008-12-02Add support for OneFS ACLsSteven Danneman1-0/+807
Add to the OneFS VFS module, support for NTFS ACLs through the calls: SMB_VFS_FGET_NT_ACL() SMB_VFS_GET_NT_ACL() SMB_VFS_FSET_NT_ACL() Also create several new onefs specific smb.conf parameters in onefs.h