docs-xml/vfs_gpfs: document 'gpfs:refuse_dacl_protected'

[metze/samba/wip.git] / docs-xml / manpages-3 / vfs_gpfs.8.xml

diff --git a/docs-xml/manpages-3/vfs_gpfs.8.xml b/docs-xml/manpages-3/vfs_gpfs.8.xml
index 941afe2e19439763aa0fdf87ce5cdb65a20f81ce..db20733ef15dcb1a17009470580f03437df660af 100644 (file)
--- a/docs-xml/manpages-3/vfs_gpfs.8.xml
+++ b/docs-xml/manpages-3/vfs_gpfs.8.xml
@@ -169,6 +169,37 @@
                </varlistentry>
                <varlistentry>
 
+               <term>gpfs:refuse_dacl_protected = [ yes | no ]</term>
+               <listitem>
+               <para>
+               As GPFS does not support the ACE4_FLAG_NO_PROPAGATE NFSv4 flag (which would be
+               the mapping for the DESC_DACL_PROTECTED flag), the status of this flag is
+               currently silently ignored by Samba. That means that if you deselect the "Allow
+               inheritable permissions..." checkbox in Windows' ACL dialog and then apply the
+               ACL, the flag will be back immediately.
+               </para>
+               <para>
+               To make sure that automatic migration with e.g. robocopy does not lead to
+               ACLs silently (and unintentionally) changed, you can set
+               <command>gpfs:refuse_dacl_protected = yes</command> to enable an explicit
+               check for this flag and if set, it will return NT_STATUS_NOT_SUPPORTED so
+               errors are shown up on the Windows side and the Administrator is aware of
+               the ACLs not being settable like intended
+               </para>
+
+               <itemizedlist>
+               <listitem><para>
+               <command>no(default)</command> - ignore the DESC_DACL_PROTECTED flags.
+               </para></listitem>
+               <listitem><para>
+               <command>yes</command> - reject ACLs with DESC_DACL_PROTECTED.
+               </para></listitem>
+               </itemizedlist>
+               </listitem>
+
+               </varlistentry>
+               <varlistentry>
+
                <term>nfs4:mode = [ simple | special ]</term>
                <listitem>
                <para>