smb_share.conf.j2: Add 'ignore system acls' option to vfs_acl_xattr

For better coverage of smbtorture tests we require 'ignore system acls' enabled for acl_xattr VFS module. This is done to successfully complete those tests where such a lossy translation attempt from NT ACLs to POSIX ACLs would result in failures by design. Signed-off-by: Anoop C S <[email protected]>
samba-in-kubernetes · Feb 5, 2024 · a5b4518 · a5b4518
1 parent fb4c851
commit a5b4518
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/playbooks/ansible/roles/sit.cephfs/templates/smb_share.conf.j2 b/playbooks/ansible/roles/sit.cephfs/templates/smb_share.conf.j2
@@ -5,6 +5,7 @@ vfs objects = acl_xattr
 ceph:config_file = /etc/ceph/sit.ceph.conf
 ceph:user_id = sit
 {%- endif +%}
+acl_xattr:ignore system acls = yes
 browseable = yes
 read only = no
 {%- if config.be.variant == 'vfs' +%}

diff --git a/playbooks/ansible/roles/sit.glusterfs/templates/smb_share.conf.j2 b/playbooks/ansible/roles/sit.glusterfs/templates/smb_share.conf.j2
@@ -1,6 +1,7 @@
 [{{ name }}]
 comment = For samba share of volume {{ volume }}
 vfs objects = acl_xattr glusterfs
+acl_xattr:ignore system acls = yes
 glusterfs:volume = {{ volume }}
 glusterfs:logfile = /var/log/samba/{{ name }}.%M.log
 glusterfs:loglevel = 7

diff --git a/playbooks/ansible/roles/sit.xfs/templates/smb_share.conf.j2 b/playbooks/ansible/roles/sit.xfs/templates/smb_share.conf.j2
@@ -1,5 +1,6 @@
 [{{ name }}]
 comment = For samba share of volume {{ volume }}
 vfs objects = acl_xattr
+acl_xattr:ignore system acls = yes
 path = {{ path }}
 read only = no