LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 05-15-2012, 02:36 PM   #1
profector21
LQ Newbie
 
Registered: Apr 2012
Location: Olathe, KS USA
Distribution: RHEL 6
Posts: 11
Blog Entries: 1

Rep: Reputation: Disabled
ACL Help


So I finely got my folders shared and using active directory, but now I need to finish setting up the folder permission. Is there a quicker way to do this then going through the terminal one folder at a time?

I started using a windows computer and changing the permisions there, which was working nicely except on about half of the folder I'm getting an message that tell me sometime like "unable to save permissions changes on SomeFile, the parameter is incorrect". Looking at the ACLs with getfacl it seems the files that are giving me the trouble have different users and permissions than the others so I'm guessing thinking if I went in a edited the users on all of them that I would be able to go back the window computer and finish up from there.

At this point I'm almost condisering renaming the top folder and recreating everything under it. All of the files and folders were copied over from an old Windows Server.

From the terminal I've tried editing the list hoping that it would trickle down to all of the subfolders and thier contents, but no go.

Any help would be nice. Thanks
 
Old 05-15-2012, 04:16 PM   #2
profector21
LQ Newbie
 
Registered: Apr 2012
Location: Olathe, KS USA
Distribution: RHEL 6
Posts: 11

Original Poster
Blog Entries: 1

Rep: Reputation: Disabled
Ok I found -Rm help with the folders. Example using setfacl -Rm d:g:"domain admins":rwx /f/ added the domain admin group to all of the folder beneath /f/. That's a great start, but it looks like the exisitng files didn't get the same permissions. By permissions I'm referring to the users in the ACL AND thier permissions.
 
Old 05-16-2012, 10:31 AM   #3
profector21
LQ Newbie
 
Registered: Apr 2012
Location: Olathe, KS USA
Distribution: RHEL 6
Posts: 11

Original Poster
Blog Entries: 1

Rep: Reputation: Disabled
So I got a flustered and deleted all everything I could using setfacl -Rb "/f/ and to make sure, I followed it up with setfacl -RK "/f/ That seem to do it. Now everything has the same permissions. I went back in and added the domain user and the domain admins and still everything went fine. Next I came to a folder that should only be accessed by the people in the domain admins group. I removed the domain users and now I cannot get in from a windows machine. I'm in the admin group. Here what it looks like:

Quote:
[root@inflinux ~]# getfacl "/f/"
getfacl: Removing leading '/' from absolute path names
# file: f/
# owner: root
# group: domain\040users
user::rwx
userp1:rwx
group::rwx
group:domain\040users:rwx
group:domain\040admins:rwx
mask::rwx
other::rwx
I'm thinking that I need to open up the group in the linux file system and then lock it down through the ACL but I'm not sure of the effects or heck even what group I would make it.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
problem with samba and ACL ,ACL does not work as I want golden_boy615 Linux - Server 1 12-18-2011 09:18 AM
Why does the ACL of a file created under a directory differ from the default ACL sctebnt Linux - Security 5 12-02-2011 08:13 AM
iptables acl versus cisco acl id_viorel Linux - Security 1 04-09-2008 05:00 AM
acl sheetu Solaris / OpenSolaris 1 09-10-2006 12:48 PM
ACL Help theDrix Linux - General 0 07-22-2004 08:25 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 04:48 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration