HP CIFS Server 3.0f Administrator's Guide verison A.02.03
POSIX Default Owner and Owning Group ACLs
With HP CIFS Server version A.01.10, the POSIX default owner and default owning group ACEs are shown
in the Windows interface as Creator Owner and Creator Group.
The HP CIFS Server versions A.01.09 and below, only one ACE each for owner, owning group and everyone
is shown if the permissions are the same on corresponding access and default ACEs.
With HP CIFS Server version A.01.10, the POSIX default owner and default owning group ACEs are shown
in the Windows interface as Creator Owner and Creator Group even if the permissions on the access
and default ACEs are the same. However, everyone is shown as only one ACE if the access and default
permissions are the same.
Changing permissions on Windows Creator Owner and Creator Group ACEs will only modify POSIX
default owner and owning group ACEs on the HP CIFS Server.
POSIX ACEs with zero permissions
POSIX owning group and everyone ACEs with zeros permissions are not displayed in the Windows interface.
For example, if a directory owning group has zero permissions on the HP CIFS Server, an ACE for that
owning group will not be shown on the Windows interface. ACEs for any other user or group with zero
permissions are shown with no permissions in the Windows interface.
POSIX ACEs with zero permission can be modified by adding an ACE and setting the desired permissions
for that user or group. A new ACE can be added by using the Add button on the Windows ACL interface.
In Conclusion
Samba ACL support is a feature that enables the manipulation of UNIX file permissions or UNIX ACLs from
Windows NT/XP/2000 clients.
With this feature, almost any modification you want to make to UNIX permissions or VxFS POSIX ACLs can
now be done from an NT/XP/2000 client (with the exception of the
class
entry for VxFS POSIX ACLs).
Windows applications running on the Windows NT/XP/2000 client cannot expect full NT/XP/2000 ACL
support. Although much of the NT/XP/2000 ACL information is retained and retrieved by the Samba server,
some of the information may be lost or changed in some cases.
The ACL support is not an NT/XP/2000 ACL emulation, but rather access to UNIX ACLs through the
NT/XP/2000 client. Therefore you cannot run Windows applications which require full, perfect NT/XP/2000
ACL support.
56 Managing HP-UX File Access Permissions from Windows NT/XP/2000