if (acl->acl_version&GPFS_ACL_VERSION_NFS4)
{
- if ((psd->type&SEC_DESC_DACL_PROTECTED)) {
+ if (lp_parm_bool(fsp->conn->params->service, "gpfs",
+ "refuse_dacl_protected", false)
+ && (psd->type&SEC_DESC_DACL_PROTECTED)) {
DEBUG(2, ("Rejecting unsupported ACL with DACL_PROTECTED bit set\n"));
return NT_STATUS_NOT_SUPPORTED;
}