DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:message-id:date:mime-version
	:content-type:content-transfer-encoding; q=dns; s=default; b=Kdb
	qT2vNMfcFkCC1sye8cCAqF0Fkh7yu3lYGjSDlAbUG5i5WqWM/u7r1tw0lbtX/tHO
	QW/ChcG3Xnw7e3LJUjQfKLDG5DqgxIY9g7lZQXCwoPmGAcpr/mnCziMI388f8Pw2
	fIPrjxTKU71f3WWJYDmLjOGoIhN0GckQ0P8De1zY=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
To: cygwin@cygwin.com
From: "Matt D." <matt@codespunk.com>
Subject: No support for ACLs on network shares?
Message-ID: <5652E58A.2030605@codespunk.com>
Date: Mon, 23 Nov 2015 02:08:10 -0800
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit

I noticed today that when accessing a network share, the permissions for 
the current user are not resolving.

For example, I'm connected to a network share //server/share which is a 
CentOS share with a unix login/password. The share is already logged in 
by Windows and on the keychain so I don't have to enter the login 
information.

In Cygwin, 'cd //server/share' then 'ls -l' I get this:

drwxrwx---  1 Unknown+User Unix_Group+1001          0 Nov 23  2015 test

I'm already logged in through windows as the 'Unknown+User' but Cygwin 
does not recognize that I have access to any of the ACLs for the owner 
or groups and also does not resolve the SID name.

The problem with this is that files created or modified are only done so 
in the 'Everyone' permission and inherited permissions such as the 
execute bit are not recognized.

My use-case is where I've mapped a network path to either a network 
drive or a symlinked folder (with Windows mklink) with the path on the 
environment's PATH. In this case, files which are executable are not 
recognized and do not appear when calling 'which'.

It seems as though Cygwin only maps ACLs to the SIDs stored in passwd 
and group and cannot handle ACLs when accessing network devices where 
SIDs are not present in these files. Running passwd/mkgroup after the 
share is on the keychain does not provide additional SIDs.

Is there no support for ACLs across network shares at all?


Matt D.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple