site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com Thread-index: AcmTs36HuKgPjkpkQBGkB0xo3q6B9g== Thread-topic: ACL Inheritance? Hi all! This may not be the right list, but perhaps someone could point me in the right direction regarding ACL's on Mac OS X... I've got an XServe running 10.4, with an attached Xserve RAID. The raid array is running XSan, and mounted as a single volume under /Volumes. The Xserve is joined to an Active Directory domain, which it uses for authentication. The folders at the root of the XSan volume are configured as SMB shares, so that Windows clients can access them. So here's the catch... we want to have a certain group in the Active Directory domain control access to one of the folders on the Xsan volume. When the server was set up, they were using UNIX permissions (user, group, others) to configure access, which became problematic as more and more users were added to the system. Switching to ACL's after the fact though, hasn't worked very well. The Active Directory group is added in Workgroup Manager to the folder, and set to propagate, but it doesn't do so to all subfolders, especially those that were present before the change. I set up a test volume on a dmg to experiment via the command line, and found that if you set an ACL with inheritance on a folder that ALREADY contains a subfolder, the subfolder won't automatically inherit the ACL from it's parent, but all subsequently created folders or files will. So my question is, is there a way, via the command line or otherwise, to essentially tell a folder or file to "re-inherit" it's ACL list from it's parent? I can do 'chmod -R +a "<acl>" folder', but that's not what we're after... Many thanks to all in advance!! -Ben _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... This email sent to site_archiver@lists.apple.com