Infrastructure Software

Hi,

I'm desperately looking for an example of a working smb.conf file for solaris 10 using zfs ?
I've been trying so many possible combinations of the available options, but I can not get it working properly.
I want to mimic simple NT acls, including inheritance, and the possibility to add AD groups.
I often get stuck on deny aces being generated as the first aces in the acl.

Environment : solaris 10 with zfs, AD integration via kerberos enabled, samba 3.0.35

smb.conf ( one of the many try-outs ... )
---------

[global]
workgroup = X
realm = X.Y.Z
netbios name = GISSMBD
server string = GIS DEV Samba Server
security = ADS
auth methods = winbind
server signing = auto
preferred master = No
local master = No
dns proxy = No
ldap timeout = 86400
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind use default domain = yes
...

[share1]
path = /path/to/share1
force group = gis
read only = no
create mask = 0660
directory mask = 0770
force unknown acl user = yes
acl check permissions = no
ea support = yes
store dos attributes = yes
map readonly = no
map archive = no
map system = no
vfs objects = zfsacl
nfs4: mode = special
nfs4: acedup = merge

Thanks in advance