[NTLUG:Discuss] Samba, ACL - permissions

[Leroy Tennison]

Chris Cox wrote:
> Leroy Tennison wrote:
> ...
>   
>> This brings me back to the question "If 'user1' is a member of 'parent' 
>> and 'parent' is a member of 'child' should 'user1' receive (indirectly) 
>> the access of 'child'?"
>>     
>
> There are no nested groups.  Did Red Hat do something to try to
> implement (and thus break) this?
>
> A person can belong to multiple groups... the primary group is stored
> in /etc/passwd.  Additional group membership is in /etc/group.
>
> On a contemporary *ix box, having membership in a group is good
> enough for access (rwx).  All creates by default will be done with
> the primary group id.  On older *ix, or if you want to change
> your apparent primary group, you use newgrp which basically
> gives you a shell with the different group set as your
> primary group (script writers need to be aware of that).
>
>
>
> _______________________________________________
> http://www.ntlug.org/mailman/listinfo/discuss
>
>   
 > There are no nested groups.

OK, I thought I had been unaware of an important feature all this time.  
Thanks for the clarification.

No, Red Hat didn't do anything to implement this as best as I can tell, 
it works just as expected given that groups can't nest.  That was what 
was puzzling me, I thought there was this feature I didn't know about 
and couldn't get it to work on CentOS.