Why is DACL Auto Inherit Required bit not set after migrating files to ONTAP?
Applies to
- ONTAP 9
- SMB2
Answer
- After migrating files to ONTAP storage, the DACL SE_DACL_AUTO_INHERIT_REQ bit may not be set. This flag is conditionally set in ONTAP independently of whether the copy source has it set.
-
Set when the DACL is to be computed through inheritance. When both DC and DI are set, the resulting security descriptor sets DI; the DC setting is not preserved.
-
This behavior is compliant with what is published here:
https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-dtyp/7d4dac05-9cef-4563-a058-f108abecce1d .
Additional Information