<?xml version="1.0" encoding="utf-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments for mattwilson.org</title>
	<atom:link href="http://mattwilson.org/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://mattwilson.org</link>
	<description>The web site of Matthew R. Wilson</description>
	<lastBuildDate>Wed, 28 Dec 2011 14:32:29 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
	<item>
		<title>Comment on Solaris CIFS Server and ZFS ACLs: The Problem by wujek</title>
		<link>http://mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/comment-page-1/#comment-31468</link>
		<dc:creator>wujek</dc:creator>
		<pubDate>Wed, 28 Dec 2011 14:32:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/#comment-31468</guid>
		<description>Thank you.</description>
		<content:encoded><![CDATA[<p>Thank you.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Solaris CIFS Server and ZFS ACLs: The Problem by Hayes Whitt</title>
		<link>http://mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/comment-page-1/#comment-25339</link>
		<dc:creator>Hayes Whitt</dc:creator>
		<pubDate>Fri, 15 Apr 2011 23:07:57 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/#comment-25339</guid>
		<description>I got the answer you are looking for on my Solaris 11 guide.  Check out under &quot;Permissions and ACL&quot;.</description>
		<content:encoded><![CDATA[<p>I got the answer you are looking for on my Solaris 11 guide.  Check out under &#8220;Permissions and ACL&#8221;.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Using OpenDS for DB2 Authentication by Everything has an end&#8230; &#171; Ludovic Poitou&#039;s Blog</title>
		<link>http://mattwilson.org/blog/solaris/using-opends-for-db2-authentication/comment-page-1/#comment-16894</link>
		<dc:creator>Everything has an end&#8230; &#171; Ludovic Poitou&#039;s Blog</dc:creator>
		<pubDate>Tue, 07 Sep 2010 14:54:25 +0000</pubDate>
		<guid isPermaLink="false">http://mattwilson.org/?p=27#comment-16894</guid>
		<description>[...] An article posted a few months ago by Matt Wilson on Using OpenDS for DB2 authentication. [...]</description>
		<content:encoded><![CDATA[<p>[...] An article posted a few months ago by Matt Wilson on Using OpenDS for DB2 authentication. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Solaris CIFS Server and ZFS ACLs: The Problem by Benjamin</title>
		<link>http://mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/comment-page-1/#comment-14543</link>
		<dc:creator>Benjamin</dc:creator>
		<pubDate>Tue, 08 Jun 2010 12:08:49 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/#comment-14543</guid>
		<description>&lt;a href=&quot;#comment-14523&quot; rel=&quot;nofollow&quot;&gt;@mwilson&lt;/a&gt; 
That did it! Thanks a bunch!</description>
		<content:encoded><![CDATA[<p><a href="#comment-14523" rel="nofollow">@mwilson</a><br />
That did it! Thanks a bunch!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Solaris CIFS Server and ZFS ACLs: The Problem by mwilson</title>
		<link>http://mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/comment-page-1/#comment-14523</link>
		<dc:creator>mwilson</dc:creator>
		<pubDate>Mon, 07 Jun 2010 16:44:41 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/#comment-14523</guid>
		<description>@Benjamin - the command you list works fine for me on Solaris 10u8. On OpenSolaris I think there&#039;s a possibility that the GNU chmod command is higher on your path than the Solaris chmod command. What does &#039;which chmod&#039; tell you? Try your command again, but specify a full path for chmod -- /usr/bin/chmod should work.</description>
		<content:encoded><![CDATA[<p>@Benjamin &#8211; the command you list works fine for me on Solaris 10u8. On OpenSolaris I think there&#8217;s a possibility that the GNU chmod command is higher on your path than the Solaris chmod command. What does &#8216;which chmod&#8217; tell you? Try your command again, but specify a full path for chmod &#8212; /usr/bin/chmod should work.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Solaris CIFS Server and ZFS ACLs: The Problem by Benjamin</title>
		<link>http://mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/comment-page-1/#comment-14517</link>
		<dc:creator>Benjamin</dc:creator>
		<pubDate>Mon, 07 Jun 2010 14:24:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/#comment-14517</guid>
		<description>I can&#039;t get Bryan&#039;s chmod command to work. I&#039;m on OpenSolaris JeOS svn_134 and issuing:

chmod -R A=owner@:rwxpdDaARWcCos:df:allow,everyone@:xrcarR:df:allow /export/home/cfissahre/osol

results in the following error:

chmod: invalid mode: &#039;A=owner@:rwxpdDaARWcCos:df:allow,everyone@:xrcarR:df:allow&#039;

What am I missing?
Thanks</description>
		<content:encoded><![CDATA[<p>I can&#8217;t get Bryan&#8217;s chmod command to work. I&#8217;m on OpenSolaris JeOS svn_134 and issuing:</p>
<p>chmod -R A=owner@:rwxpdDaARWcCos:df:allow,everyone@:xrcarR:df:allow /export/home/cfissahre/osol</p>
<p>results in the following error:</p>
<p>chmod: invalid mode: &#8216;A=owner@:rwxpdDaARWcCos:df:allow,everyone@:xrcarR:df:allow&#8217;</p>
<p>What am I missing?<br />
Thanks</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Solaris CIFS Server and ZFS ACLs: The Problem by Noname</title>
		<link>http://mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/comment-page-1/#comment-14320</link>
		<dc:creator>Noname</dc:creator>
		<pubDate>Mon, 31 May 2010 15:56:03 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/#comment-14320</guid>
		<description>Indeed. Thanks, Bryan.</description>
		<content:encoded><![CDATA[<p>Indeed. Thanks, Bryan.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Solaris CIFS Server and ZFS ACLs: The Problem by Bryan</title>
		<link>http://mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/comment-page-1/#comment-6255</link>
		<dc:creator>Bryan</dc:creator>
		<pubDate>Fri, 17 Jul 2009 20:28:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/#comment-6255</guid>
		<description>Sorry for the additional comment - but the comment box stripped off the last bit of the chmod command.  You obviously need to add the directory name to the end of the command - the directory you want to apply the ACL to.

Hope this helps anybody out there that is looking for this information.</description>
		<content:encoded><![CDATA[<p>Sorry for the additional comment &#8211; but the comment box stripped off the last bit of the chmod command.  You obviously need to add the directory name to the end of the command &#8211; the directory you want to apply the ACL to.</p>
<p>Hope this helps anybody out there that is looking for this information.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Solaris CIFS Server and ZFS ACLs: The Problem by Bryan</title>
		<link>http://mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/comment-page-1/#comment-6254</link>
		<dc:creator>Bryan</dc:creator>
		<pubDate>Fri, 17 Jul 2009 20:26:01 +0000</pubDate>
		<guid isPermaLink="false">http://www.mattwilson.org/blog/solaris/solaris-cifs-server-and-zfs-acls-the-problem/#comment-6254</guid>
		<description>OpenSolaris and CIFS share ACLs are bit hard to deal with initially.  The problem starts with the fact that ZFS shares do not come with inheritable ACL permissions out of the box - and both Windows and OS X (I&#039;m dealing with Leopard) clients only pay attention to the ACLs and ignore umask and other UNIX based permissions.

To fix this issue, you simply need to create a standard set of ACLs with inheritance marked on the directory you are sharing, something like this (careful this will replace all existing ACLs):

chmod -R A=owner@:rwxpdDaARWcCos:df:allow,everyone@:xrcarR:df:allow 

This gives a new file with permissions like this:
user:full control
everyone: read_only (it includes reading of child objects and attrs, etc).

The moral of the story is to define a default set of ACLs when you create a new ZFS/CIFS share.
(Most of this was derived from the post by Afshin: http://opensolaris.org/jive/thread.jspa?messageID=278848 -- Mentioned by Kopsis in another comment).</description>
		<content:encoded><![CDATA[<p>OpenSolaris and CIFS share ACLs are bit hard to deal with initially.  The problem starts with the fact that ZFS shares do not come with inheritable ACL permissions out of the box &#8211; and both Windows and OS X (I&#8217;m dealing with Leopard) clients only pay attention to the ACLs and ignore umask and other UNIX based permissions.</p>
<p>To fix this issue, you simply need to create a standard set of ACLs with inheritance marked on the directory you are sharing, something like this (careful this will replace all existing ACLs):</p>
<p>chmod -R A=owner@:rwxpdDaARWcCos:df:allow,everyone@:xrcarR:df:allow </p>
<p>This gives a new file with permissions like this:<br />
user:full control<br />
everyone: read_only (it includes reading of child objects and attrs, etc).</p>
<p>The moral of the story is to define a default set of ACLs when you create a new ZFS/CIFS share.<br />
(Most of this was derived from the post by Afshin: <a href="http://opensolaris.org/jive/thread.jspa?messageID=278848" rel="nofollow">http://opensolaris.org/jive/thread.jspa?messageID=278848</a> &#8212; Mentioned by Kopsis in another comment).</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Zero character password? by Peter</title>
		<link>http://mattwilson.org/blog/general/zero-character-password/comment-page-1/#comment-5802</link>
		<dc:creator>Peter</dc:creator>
		<pubDate>Thu, 18 Jun 2009 21:36:06 +0000</pubDate>
		<guid isPermaLink="false">http://mattwilson.org/?p=51#comment-5802</guid>
		<description>It&#039;s just you.  A 0 character password is a workflow enhancer.  One less click!</description>
		<content:encoded><![CDATA[<p>It&#8217;s just you.  A 0 character password is a workflow enhancer.  One less click!</p>
]]></content:encoded>
	</item>
</channel>
</rss>

