[OpenIndiana-discuss] CIFS approach to "valid users" etc.

[Laurent Blume]

Le 2013/11/21 16:17 +0100, Jim Klimov a écrit:
> On 2013-11-21 12:08, Stefan Müller-Wilken wrote:

>> Regarding the documentation: I have scanned most of what's there by
>> now but I
>> actually don't find the ACL approach not too intuitive and definitely
>> not halfway
>> as simple as with the Samba notation "valid users = stefan, jim".
> Indeed, no. But also it is more flexible since at the filesystem level
> you can change the (inherited or end-node) rights to something else
> for some aprticular files or directories. Maybe, for writable shares
> you can allow "@everyone" and then just enforce filesystem access to
> browse/read/write as if those were local accesses i.e. over SSH shells?

It's two different things, though. In the Windows world, you have access 
permissions for the share, and then on the contents of that share, you 
have ACLs.
One is not a substitue for the other (particularly because users can 
mess with the ACL whereas they cannot with the share permissions).

Laurent