HP CIFS Server 3.0a Administrator's Guide version A.02.01

Managing HP-UX File Access Permissions from Windows NT/XP/2000
Configuring Samba ACL Support
Chapter 3 73
Configuring Samba ACL Support
For HP CIFS Version A.01.07
In non-HP Samba versions, you could only turn Samba's NT ACL
Support on or off on a serverwide basis. When turned on, UNIX file
permission support was enabled for all Samba shares. There was no
support for any ACL scheme, including VxFS POSIX ACLs. Instead, you
configured the old NT ACL support through the smb.conf variable nt acl
support. This functionality is still supported in the HP CIFS product.
In HP CIFS, however, there is a new smb.conf variable that you can use
to configure Samba ACL support. And, with this Samba version, you may
configure every share on the Samba server differently.
Since there may be many UNIX file systems under the root of a Samba
share, one Samba share may have files on HFS file systems, VxFS 3.3 file
systems, NFS file systems, and older VxFS file systems. If you assign one
type of ACL support for the share, you might not be taking full
advantage of the capabilities of each file system located there. So with
this version of Samba you can create a list of ACL schemes for each
share.
The list of ACL schemes specifies the order that ACL schemes will be
attempted on a file in that share. Currently the ACL scheme unix is
supported (meaning UNIX file permissions) and hpux_posix is supported
(meaning VxFS POSIX ACLs on HP-UX).
In the examples below, assume that HP-UX HFS ACLs are also
supported and that this scheme is called hpux_hfs. The name of the
per-share variable in the smb.conf is acl_schemes.
Examples:
Following are five examples of ACL schemes.
Example 1:
acl schemes = hpux_posix hpux_hfs unix
If a share has this acl schemes parameter set, Samba will attempt to use
VxFS POSIX ACLs. If that scheme is not supported, it trys HFS ACLs.
And, if that scheme is not supported, it would use UNIX file permissions.