smb_share.conf.j2: Add 'ignore system acls' option to vfs_acl_xattr

For better coverage of smbtorture tests we require 'ignore system acls' enabled for acl_xattr VFS module. This is done to successfully complete those tests where such a lossy translation attempt from NT ACLs to POSIX ACLs would result in failures by design. Signed-off-by: Anoop C S <[email protected]>
samba-in-kubernetes · Feb 9, 2024 · 424d7c1 · 424d7c1
1 parent b9a6ede
commit 424d7c1
Show file tree

Hide file tree

Showing 3 changed files with 21 additions and 4 deletions.
diff --git a/playbooks/ansible/cluster-cephfs.yml b/playbooks/ansible/cluster-cephfs.yml
@@ -21,4 +21,8 @@ ctdb_network_public_interface_name: "eth2"
 samba_netbios_name: "SIT-CEPHFS-TEST"
 
 samba_shares:
-  - { cluster_volume: "samba", share_name: "share" }
+  - cluster_volume: "samba"
+    share_name: "share"
+    samba:
+      options:
+        "acl_xattr:ignore system acls": "yes"
diff --git a/playbooks/ansible/cluster-glusterfs.yml b/playbooks/ansible/cluster-glusterfs.yml
@@ -100,5 +100,13 @@ ctdb_cluster_replica_count: "{{ config.groups['cluster']|length }}"
 samba_netbios_name: "SIT-GLUSTERFS-TEST"
 
 samba_shares:
-  - { cluster_volume: "vol-replicate", share_name: "replicate" }
-  - { cluster_volume: "vol-disperse", share_name: "disperse" }
+  - cluster_volume: "vol-replicate"
+    share_name: "replicate"
+    samba:
+      options:
+        "acl_xattr:ignore system acls": "yes"
+  - cluster_volume: "vol-disperse"
+    share_name: "disperse"
+    samba:
+      options:
+        "acl_xattr:ignore system acls": "yes"
diff --git a/playbooks/ansible/cluster-xfs.yml b/playbooks/ansible/cluster-xfs.yml
@@ -21,4 +21,9 @@ ctdb_network_public_interface_name: "eth2"
 samba_netbios_name: "SIT-XFS-TEST"
 
 samba_shares:
-  - { cluster_volume: "samba", share_name: "share", device: "/dev/vdb" }
+  - cluster_volume: "samba"
+    share_name: "share"
+    device: "/dev/vdb"
+    samba:
+      options:
+        "acl_xattr:ignore system acls": "yes"