Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 6 Aug 2007 12:06:46 +0200
From:      "Johan Hendriks" <>
To:        "Wilkinson, Alex" <>
Subject:   RE: setfacl(1) - Can FreeBSD's ACLs contain groups from NT/AD domains ?
Message-ID:  <57200BF94E69E54880C9BB1AF714BBCB19BC14@w2003s01.double-l.local>
References:  <>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help

>Hi all,

>I have "FreeBSD 7.0-CURRENT #1: Wed Jul 25" authenticating successfully =
>active directory via samba's winbindd(8). I need to manage samba shares =
>FreeBSD ACLs and CIFS ACLs. From my reading of setfacl(1) I should be =
able to
>set group permissions using the syntax of DOMAIN\group-name. For =

>   #setfacl -d -m g:"MYDOMAIN\mygroupname":rwx test

>However, when I do this on FreeBSD -CURRENT I get the following error:

>  #setfacl -d -m g:"MYDOMAIN\mygroupname":rwx test
>    setfacl: g:MYDOMAIN\mygroupname: Invalid argument

>From a quick Google it looks like Linux ACLs can do the aforementioned

>Does anyone know ?

As far as i know and the way i do it is leaving the Domain part out just =
the group name.
Wbinfo -g shows the groups if all is ok.


No virus found in this outgoing message.
Checked by AVG Free Edition.=20
Version: 7.5.476 / Virus Database: 269.11.6/938 - Release Date: 5-8-2007 =

Want to link to this message? Use this URL: <>