[rescue] ZFS puzzle migrating from Solaris 10 to 11

[Phil Stracchino]

On 07/29/17 15:06, David Brownlee wrote:
> On 29 July 2017 at 18:46, Phil Stracchino <phils at caerllewys.net> wrote:
>>
>> Nope, it is not Samba configuration.  Samba has a 'follow symlinks'
>> option, yes.  In 10u9, it follows cross-filesystem as well as
>> same-filesystem symlinks.  In 11.3, it does not.
>>
>> My first guess is this change was motivated by potential security concerns.
> 
> *blink*. Thats an interesting decision by someone. Its definitely
> happening with 'wide links = yes,  & unix extensions = no' setting?
> (apologies for basic questions here).


Uuummmm.....    Let me verify that a moment.

Aaaaaaaah!

The Solaris 10u9 box is running Samba 3.0.37.
The Solaris 11.3 box is running Samba 3.6.25.  In 3.6.25, there is a
new-since-3.0 'allow insecure wide links' option which *must* be set in
order to simultaneously enable wide links *and* unix extensions.  I
didn't know about this change.  (And yes, indeed, it apparently *is* due
to security concerns.)

Thank you for that specific question.  Had you not asked it, I wouldn't
have found this setting.

I'd assumed in the past I actually needed 'unix extensions' on.  On a
further reading of the documentation, though, maybe I don't.  The
documentation says the Unix extensions are actually of no use to Windows
clients.  I'm going to study this some more and experiment a bit.


-- 
  Phil Stracchino
  Babylon Communications
  phils at caerllewys.net
  phil at co.ordinate.org
  Landline: +1.603.293.8485
  Mobile:   +1.603.998.6958