Some shared folders (root folders and non root folders) are seen as files on Windows XP and Windows 2003 having ACL enabled

Binary package hint: samba

Hi Guys,

Some samba shared folders (root folders and non root folders) are seen as files
on Windows XP and Windows 2003 when ACL is enabled.
If I rename a folder, delete it or create a new folder, a different folder
becomes a file.

We have identified that this error occurs when a "file" has acl mask set to
mask::--- in the directory. ie:
# file: file.exe
# owner: Domain+user
# group: BUILTIN+administrators
user::rw-
group::r-x #effective:---
group:Domain+domain\040admins:rwx #effective:---
group:Domain+admindd:rwx #effective:---
group:Domain+adminddc:rwx #effective:---
mask::---
other::---

Here is the smb.conf shared section..

[shared]
  comment = Shared Area
  path = /samba/shared
  read only = No
  create mask = 0770
  force security mode = 0700
  inherit acls = Yes
  hide unreadable = Yes
  fstype = XFS 1.2
  vfs objects = full_audit, shadow_copy

Steps to reproduce.

1. Enable acls
2. Configure samba as described above.
3. create 3 folders, create a file inside each folder and set one of the files
as follow:
sudo setfacl -m m:--- filename
4. Join a winxp or windows 2003 into a domain and try to access a shared
folder.

lborda@lborda-trash:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 10.04.2 LTS
Release: 10.04
Codename: lucid

---
lborda@lborda-trash:~$ dpkg --list|grep -i samba
ii libpam-smbpass 2:3.4.7~dfsg-1ubuntu3.3 pluggable authentication module for Samba
ii libwbclient0 2:3.4.7~dfsg-1ubuntu3.3 Samba winbind client library
ii samba 2:3.4.7~dfsg-1ubuntu3.3 SMB/CIFS file, print, and login server for U
ii samba-common 2:3.4.7~dfsg-1ubuntu3.3 common files used by both the Samba server a
ii samba-common-bin 2:3.4.7~dfsg-1ubuntu3.3 common files used by both the Samba server a
ii samba-doc 2:3.4.7~dfsg-1ubuntu3.3 Samba documentation
ii smbfs 2:3.4.7~dfsg-1ubuntu3.3 Samba file system utilities
ii winbind 2:3.4.7~dfsg-1ubuntu3.3 Samba nameservice integration server

Please let me know if you need anything else.

Leonardo