Thursday, March 29, 2007

Passing ACLs from windows to Samba

I was trying to copy a file to Samba exported partition from Windows. When ACLs are stored in Samba store (i.e. the store which Samba exports), the users and groups must be mapped to that on the Samba machine.

This is generally accomplished by mapping the SIDs (Security Identifiers), that windows uses to uniquely identify a user. Unix does not have any notion of SIDs. But Samba users(local Unix users who also have a Samba account) do have SIDs associated with them mainly for the purpose of mapping windows users.

The SIDs can be set (else, Samba generates one automatically) by giving it along with pdbedit -a -U command. Then the mapping happens properly.

No comments: