Windows machines creating multipe file ACL’s

Hi all,

We’re about to move to ACL’s and have encountered a weird problem – we’ve got a few Windows XP machines that access our AFP server:
The first time one of the PC users saves a file, it inherits the enclosing folder’s ACL’s correctly, then each subsequent save adds 5 more inherited Custom ACL’s to the file, even though no Custom permissions have been defined.
This only seems to be caused by the PC’s and not by the Mac’s, it is reproducible every time.

The following is on an Xserve 2.3Ghz with 10.4.7 (same problem in 10.4.5).

Some detail for my FinanceTest share point:
The Finance group is a member of the Global group and testuser is a member of Finance
The Finance folder (see below) has Read and Write ACL permissions.

#
# Before first file creation/save
#
root# ls -lahe FinanceTest
total 0
drwxr-xr-x + 4 root wheel 136B Jun 19 16:18 .
0: group:global allow list,search,readattr,readextattr,readsecurity,limit_inherit,only_inherit
drwxr-xr-x 6 root wheel 306B Jun 19 16:11 ..
drwxr-x— + 2 root wheel 68B Jul 3 15:39 Finance
0: group:finance allow list,add_file,search,delete,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,readsecurity,file_inherit,directory_inherit
root#
root#
root# ls -lahe FinanceTest/Finance
total 0
drwxr-x— + 2 root wheel 68B Jul 3 15:39 .
0: group:finance allow list,add_file,search,delete,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,readsecurity,file_inherit,directory_inherit
drwxr-xr-x + 4 root wheel 136B Jun 19 16:18 ..
0: group:global allow list,search,readattr,readextattr,readsecurity,limit_inherit,only_inherit
root#

#
# After first file save
#
root# ls -lahe FinanceTest/Finance
total 32
drwxr-x— + 3 root wheel 102B Jul 3 16:01 .
0: group:finance allow list,add_file,search,delete,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,readsecurity,file_inherit,directory_inherit
drwxr-xr-x + 4 root wheel 136B Jun 19 16:18 ..
0: group:global allow list,search,readattr,readextattr,readsecurity,limit_inherit,only_inherit
-rw-r–r– + 1 testuser wheel 13K Jul 3 16:01 Book1.xls
0: group:finance inherited allow read,write,execute,delete,append,readattr,writeattr,readextattr,writeextattr,readsecurity
root#

#
# Second save of the same file
#
root# ls -lahe FinanceTest/Finance
total 32
drwxr-x— + 3 root wheel 102B Jul 3 16:02 .
0: group:finance allow list,add_file,search,delete,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,readsecurity,file_inherit,directory_inherit
drwxr-xr-x + 4 root wheel 136B Jun 19 16:18 ..
0: group:global allow list,search,readattr,readextattr,readsecurity,limit_inherit,only_inherit
-rw-r–r– + 1 testuser wheel 13K Jul 3 16:02 Book1.xls
0: group:finance inherited allow read,write,execute,delete,append,readattr,writeattr,readextattr,writeextattr,readsecurity
1: group:finance inherited allow read,write,execute,delete,append,readattr,writeattr,readextattr,writeextattr,readsecurity
2: user:testuser inherited allow read,write,append,readattr,writeattr,readextattr,writeextattr,readsecurity,limit_inherit
3: group:wheel inherited allow read,readattr,readextattr,readsecurity,limit_inherit
4: group:everyone inherited allow read,readattr,readextattr,readsecurity
5: group:finance inherited allow read,write,execute,delete,append,readattr,writeattr,readextattr,writeextattr,readsecurity
root#

#
# Third save of the same file
#
root# ls -lahe FinanceTest/Finance
total 32
drwxr-x— + 3 root wheel 102B Jul 3 16:02 .
0: group:finance allow list,add_file,search,delete,add_subdirectory,delete_child,readattr,writeattr,readextattr,writeextattr,readsecurity,file_inherit,directory_inherit
drwxr-xr-x + 4 root wheel 136B Jun 19 16:18 ..
0: group:global allow list,search,readattr,readextattr,readsecurity,limit_inherit,only_inherit
-rw-r–r– + 1 testuser wheel 13K Jul 3 16:02 Book1.xls
0: group:finance inherited allow read,write,execute,delete,append,readattr,writeattr,readextattr,writeextattr,readsecurity
1: group:finance inherited allow read,write,execute,delete,append,readattr,writeattr,readextattr,writeextattr,readsecurity
2: group:finance inherited allow read,write,execute,delete,append,readattr,writeattr,readextattr,writeextattr,readsecurity
3: user:testuser inherited allow read,write,append,readattr,writeattr,readextattr,writeextattr,readsecurity,limit_inherit
4: group:wheel inherited allow read,readattr,readextattr,readsecurity,limit_inherit
5: group:everyone inherited allow read,readattr,readextattr,readsecurity
6: group:finance inherited allow read,write,execute,delete,append,readattr,writeattr,readextattr,writeextattr,readsecurity
7: user:testuser inherited allow read,write,append,readattr,writeattr,readextattr,writeextattr,readsecurity,limit_inherit
8: group:wheel inherited allow read,readattr,readextattr,readsecurity,limit_inherit
9: group:everyone inherited allow read,readattr,readextattr,readsecurity
10: group:finance inherited allow read,write,execute,delete,append,readattr,writeattr,readextattr,writeextattr,readsecurity
root#

… and so on, anyone got any idea’s what is causing the creation of all the extra ACL’s ?!

I thank you for your thoughts!