Topic: SME Server and ACL support

[bloodshoteye]

Hi Forum,

I'm interested in providing acl support to ibays in a school environment, using SME Server 7.2
Schools really need a highly developed rights/permission control due to nature of the beast - I speak from years of experience.

This thread was discussing it:

http://forums.contribs.org/index.php?topic=33351.0

but the thread is dormant now - no activity for more than 60 days, so I started this thread...

Above thread referred to this link:

ftp://ftp.pbone.net/mirror/atrpms.net/el4-i386/atrpms/stable/acl-2.2.23-5_11.el4.at.i386.rpm

but I repeatedly get this error: "The requested URL could not be retrieved"
Google is also totally silent on the file name.

Does anyone know where to get the rpm? or some other way to achieve a greater acl?

TIA

[Stefano]

Hi

have you tried?

Code: [Select]

yum install acl

HTH

Ciao
Stefano

[bloodshoteye]

Stefano,

I installed acl on my server at home. Busy reading the man page now. Do I need
to enable acl's (fstab) on the root partition? Sorry if dumb question.

Edit #1
added acl to the root (/) partition in fstab and rebooted.
Can now setfacl - proof acl's are working 

Thanks a mil

Edit #2
I found this discussion which is very informative - easy read compared to man:

http://www.suse.de/~agruen/acl/linux-acls/online/#tab:entries

[filippoc]

See http://bugs.contribs.org/show_bug.cgi?id=527

[bloodshoteye]

Where do I set acl's the SME Server way - permanently?

I tried adding acl to this line in /etc/e-smith/templates/etc/fstab/50EnableQuotasForRootFS

{
    # Change defaults => usrquota,grpquota,acl for / file system
    @lines = map {
   /\s\/\s+ext[23]\s+defaults\s/ && s/defaults/usrquota,grpquota,acl/;
   $_
   } @lines;
    "";
}

Didn't work

I tried modifying /etc/fstab manually, did a reconfigure and reboot and the acl sticks - but is this the SME Server way?

[byte]

I tried modifying /etc/fstab manually, did a reconfigure and reboot and the acl sticks - but is this the SME Server way?

Only for the fstab yes, otherwise custom-template as usual.