From: Stefan Metzmacher Date: Tue, 13 Jun 2017 09:59:30 +0000 (+0200) Subject: docs-xml/smbdotconf: deprecated "profile acls" X-Git-Tag: ldb-1.1.31~86 X-Git-Url: http://git.samba.org/samba.git/?p=sfrench%2Fsamba-autobuild%2F.git;a=commitdiff_plain;h=c6bc00f1da785933d3a99454f6ef131027860602 docs-xml/smbdotconf: deprecated "profile acls" This doesn't work anymore with modern clients, and there're better ways to support profiles on a share. Typically something like this seems to work: [winprofiles] comment = Users profiles New path = /data/winprofiles/ browseable = No read only = No csc policy = disable store dos attributes = yes vfs objects = acl_xattr With chmod 1777 on /data/winprofiles/ In order to work around some locking problems, see https://bugzilla.samba.org/show_bug.cgi?id=12833 It's also useful to something like this in the global section in order to detect disconnects reliable: socket options = TCP_KEEPCNT=5 TCP_KEEPIDLE=30 TCP_KEEPINTVL=1 Signed-off-by: Stefan Metzmacher Reviewed-by: Jeremy Allison --- diff --git a/docs-xml/smbdotconf/protocol/profileacls.xml b/docs-xml/smbdotconf/protocol/profileacls.xml index ade906c0285..a660c528a69 100644 --- a/docs-xml/smbdotconf/protocol/profileacls.xml +++ b/docs-xml/smbdotconf/protocol/profileacls.xml @@ -1,8 +1,21 @@ + + As most system support support posix acls and extended attributes + today. The "acl_xattr" vfs module should be used instead of + using yes. + Using an vfs module that provides nfs4 acls may also work. + + + + With modern clients (as of 2017) it's not possible to + use yes anymore. + + This boolean parameter was added to fix the problems that people have been having with storing user profiles on Samba shares from Windows 2000 or @@ -40,6 +53,9 @@ On other shares, it might cause incorrect file ownerships. + + This parameter is deprecated with Samba 4.7 and will be removed in future versions. + no