Travis Bullock
2006-Dec-14 19:14 UTC
[Samba] Error since upgrade to Version 3.0.23a-1.fc4.1 - URGENT
My samba shares aren't working with ACL access since the upgrade. Here is an example of the error from /var/log/messages Dec 14 12:44:17 gfm-atlas smbd[14365]: [2006/12/14 12:44:17, 0] smbd/service.c:make_connection_snum(911) Dec 14 12:44:17 gfm-atlas smbd[14365]: '/usr/GFM_Shares/Users/Receiving' does not exist or permission denied when connecting to [GF_Receiving] Error was Permission denied Here is the detailed ACL on that particular share: [root@gfm-atlas Users]# getfacl Receiving/ # file: Receiving # owner: root # group: AVMAX+domain\040admins user::rwx group::rwx other::--- default:user::rwx default:user:AVMAX+gfreceiving:rwx default:group::rwx default:mask::rwx default:other::--- Interestingly enough, the group "Domain Admins" can access this share no problem. But the lower level ACL for the user 'avmax+gfreceiving' generates that error in the messages log. Some other errors in my /var/log/messages are: Dec 14 12:20:22 gfm-atlas winbindd[14097]: [2006/12/14 12:20:22, 0] nsswitch/winbindd_dual.c:child_read_request(49) Dec 14 12:20:22 gfm-atlas winbindd[14097]: Got invalid request length: 0 Dec 14 12:20:22 gfm-atlas winbindd[14084]: [2006/12/14 12:20:22, 0] nsswitch/winbindd_dual.c:child_read_request(49) Dec 14 12:20:22 gfm-atlas winbindd[14084]: Got invalid request length: 0 Dec 14 12:21:33 gfm-atlas nmbd[14198]: [2006/12/14 12:21:33, 0] nmbd/asyncdns.c:start_async_dns(151) Dec 14 12:21:33 gfm-atlas nmbd[14198]: started asyncdns process 14199 Dec 14 12:21:35 gfm-atlas winbindd[14196]: [2006/12/14 12:21:35, 0] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2265) Dec 14 12:21:35 gfm-atlas winbindd[14196]: cli_rpc_pipe_open_noauth: rpc_pipe_bind for pipe \lsarpc failed with error NT_STATUS_BUFFER_TOO_SMALL Please help. Cheers, Travis Bullock Systems Administrator Avmax Group Inc.
Michael Coburn
2006-Dec-14 19:41 UTC
[Samba] Error since upgrade to Version 3.0.23a-1.fc4.1 - URGENT
Since it failed at the winbind step, could it be related to your Windows PDC instead? Can you create new shares and define new ACLs and confirm that they work? -- Michael Coburn Travis Bullock wrote:> My samba shares aren't working with ACL access since the upgrade. Here is an example of the error from /var/log/messages > > Dec 14 12:44:17 gfm-atlas smbd[14365]: [2006/12/14 12:44:17, 0] smbd/service.c:make_connection_snum(911) > Dec 14 12:44:17 gfm-atlas smbd[14365]: '/usr/GFM_Shares/Users/Receiving' does not exist or permission denied when connecting to [GF_Receiving] Error was Permission denied > > Here is the detailed ACL on that particular share: > > [root@gfm-atlas Users]# getfacl Receiving/ > # file: Receiving > # owner: root > # group: AVMAX+domain\040admins > user::rwx > group::rwx > other::--- > default:user::rwx > default:user:AVMAX+gfreceiving:rwx > default:group::rwx > default:mask::rwx > default:other::--- > > Interestingly enough, the group "Domain Admins" can access this share no problem. But the lower level ACL for the user 'avmax+gfreceiving' generates that error in the messages log. > > Some other errors in my /var/log/messages are: > > Dec 14 12:20:22 gfm-atlas winbindd[14097]: [2006/12/14 12:20:22, 0] nsswitch/winbindd_dual.c:child_read_request(49) > Dec 14 12:20:22 gfm-atlas winbindd[14097]: Got invalid request length: 0 > Dec 14 12:20:22 gfm-atlas winbindd[14084]: [2006/12/14 12:20:22, 0] nsswitch/winbindd_dual.c:child_read_request(49) > Dec 14 12:20:22 gfm-atlas winbindd[14084]: Got invalid request length: 0 > Dec 14 12:21:33 gfm-atlas nmbd[14198]: [2006/12/14 12:21:33, 0] nmbd/asyncdns.c:start_async_dns(151) > Dec 14 12:21:33 gfm-atlas nmbd[14198]: started asyncdns process 14199 > Dec 14 12:21:35 gfm-atlas winbindd[14196]: [2006/12/14 12:21:35, 0] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2265) > Dec 14 12:21:35 gfm-atlas winbindd[14196]: cli_rpc_pipe_open_noauth: rpc_pipe_bind for pipe \lsarpc failed with error NT_STATUS_BUFFER_TOO_SMALL > > Please help. > > Cheers, > > Travis Bullock > Systems Administrator > Avmax Group Inc. > >
Travis Bullock
2006-Dec-14 20:53 UTC
[Samba] Error since upgrade to Version 3.0.23a-1.fc4.1 - URGENT
Hi Michael, I deleted the folder in question are recreated the ACL: [root@gfm-atlas Users]# getfacl Receiving/ # file: Receiving # owner: root # group: AVMAX+domain\040admins user::rwx group::rwx other::--- default:user::rwx default:user:AVMAX+gfreceiving:rwx default:group::rwx default:mask::rwx default:other::--- That is the newly created ACL, so winbind is having no trouble getting group/user info from the PDC. Here is the log when I try and access it via the 'avmax+gfreceiving' user id: Dec 14 14:39:38 gfm-atlas smbd[15331]: [2006/12/14 14:39:38, 0] smbd/service.c:make_connection_snum(911) Dec 14 14:39:38 gfm-atlas smbd[15331]: '/usr/GFM_Shares/Users/Receiving' does not exist or permission denied when connecting to [GF_Receiving] Error was Permission denied Dec 14 14:40:15 gfm-atlas smbd[15331]: [2006/12/14 14:40:15, 0] smbd/service.c:set_current_service(150) Dec 14 14:40:15 gfm-atlas smbd[15331]: chdir (/usr/GFM_Shares/Users/Receiving) failed Dec 14 14:40:15 gfm-atlas smbd[15331]: [2006/12/14 14:40:15, 0] smbd/service.c:set_current_service(150) Dec 14 14:40:15 gfm-atlas smbd[15331]: chdir (/usr/GFM_Shares/Users/Receiving) failed Dec 14 14:40:15 gfm-atlas smbd[15331]: [2006/12/14 14:40:15, 0] smbd/service.c:set_current_service(150) Dec 14 14:40:15 gfm-atlas smbd[15331]: chdir (/usr/GFM_Shares/Users/Receiving) failed I am stumped. Travis Bullock Systems Administrator Avmax Group Inc. ----- Original Message ----- From: Michael Coburn <mcoburn@jupiterimages.com> To: Travis Bullock <tbullock@avmax.ca> Cc: samba <samba@lists.samba.org> Sent: Thursday, December 14, 2006 12:41:37 PM GMT-0700 US/Mountain Subject: Re: [Samba] Error since upgrade to Version 3.0.23a-1.fc4.1 - URGENT Since it failed at the winbind step, could it be related to your Windows PDC instead? Can you create new shares and define new ACLs and confirm that they work? -- Michael Coburn Travis Bullock wrote:> My samba shares aren't working with ACL access since the upgrade. Here is an example of the error from /var/log/messages > > Dec 14 12:44:17 gfm-atlas smbd[14365]: [2006/12/14 12:44:17, 0] smbd/service.c:make_connection_snum(911) > Dec 14 12:44:17 gfm-atlas smbd[14365]: '/usr/GFM_Shares/Users/Receiving' does not exist or permission denied when connecting to [GF_Receiving] Error was Permission denied > > Here is the detailed ACL on that particular share: > > [root@gfm-atlas Users]# getfacl Receiving/ > # file: Receiving > # owner: root > # group: AVMAX+domain\040admins > user::rwx > group::rwx > other::--- > default:user::rwx > default:user:AVMAX+gfreceiving:rwx > default:group::rwx > default:mask::rwx > default:other::--- > > Interestingly enough, the group "Domain Admins" can access this share no problem. But the lower level ACL for the user 'avmax+gfreceiving' generates that error in the messages log. > > Some other errors in my /var/log/messages are: > > Dec 14 12:20:22 gfm-atlas winbindd[14097]: [2006/12/14 12:20:22, 0] nsswitch/winbindd_dual.c:child_read_request(49) > Dec 14 12:20:22 gfm-atlas winbindd[14097]: Got invalid request length: 0 > Dec 14 12:20:22 gfm-atlas winbindd[14084]: [2006/12/14 12:20:22, 0] nsswitch/winbindd_dual.c:child_read_request(49) > Dec 14 12:20:22 gfm-atlas winbindd[14084]: Got invalid request length: 0 > Dec 14 12:21:33 gfm-atlas nmbd[14198]: [2006/12/14 12:21:33, 0] nmbd/asyncdns.c:start_async_dns(151) > Dec 14 12:21:33 gfm-atlas nmbd[14198]: started asyncdns process 14199 > Dec 14 12:21:35 gfm-atlas winbindd[14196]: [2006/12/14 12:21:35, 0] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2265) > Dec 14 12:21:35 gfm-atlas winbindd[14196]: cli_rpc_pipe_open_noauth: rpc_pipe_bind for pipe \lsarpc failed with error NT_STATUS_BUFFER_TOO_SMALL > > Please help. > > Cheers, > > Travis Bullock > Systems Administrator > Avmax Group Inc. > >-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Travis Bullock
2006-Dec-14 21:54 UTC
[Samba] Error since upgrade to Version 3.0.23a-1.fc4.1 - URGENT
Thanks Canuck! Travis Bullock Systems Administrator Avmax Group Inc. ----- Original Message ----- From: Michael Coburn <mcoburn@jupiterimages.com> To: Travis Bullock <tbullock@avmax.ca> Sent: Thursday, December 14, 2006 1:56:49 PM GMT-0700 US/Mountain Subject: Re: [Samba] Error since upgrade to Version 3.0.23a-1.fc4.1 - URGENT Reply to the list. In regards to this issue I'm stumped too, I'm really sorry. We don't do extended ACLs here, so I'm clueless on this. Just trying to help out a fellow Canadian! :) -- Michael Coburn Travis Bullock wrote:> Hi Michael, > > I deleted the folder in question are recreated the ACL: > > [root@gfm-atlas Users]# getfacl Receiving/ > # file: Receiving > # owner: root > # group: AVMAX+domain\040admins > user::rwx > group::rwx > other::--- > default:user::rwx > default:user:AVMAX+gfreceiving:rwx > default:group::rwx > default:mask::rwx > default:other::--- > > That is the newly created ACL, so winbind is having no trouble getting group/user info from the PDC. > > Here is the log when I try and access it via the 'avmax+gfreceiving' user id: > > Dec 14 14:39:38 gfm-atlas smbd[15331]: [2006/12/14 14:39:38, 0] smbd/service.c:make_connection_snum(911) > Dec 14 14:39:38 gfm-atlas smbd[15331]: '/usr/GFM_Shares/Users/Receiving' does not exist or permission denied when connecting to [GF_Receiving] Error was Permission denied > Dec 14 14:40:15 gfm-atlas smbd[15331]: [2006/12/14 14:40:15, 0] smbd/service.c:set_current_service(150) > Dec 14 14:40:15 gfm-atlas smbd[15331]: chdir (/usr/GFM_Shares/Users/Receiving) failed > Dec 14 14:40:15 gfm-atlas smbd[15331]: [2006/12/14 14:40:15, 0] smbd/service.c:set_current_service(150) > Dec 14 14:40:15 gfm-atlas smbd[15331]: chdir (/usr/GFM_Shares/Users/Receiving) failed > Dec 14 14:40:15 gfm-atlas smbd[15331]: [2006/12/14 14:40:15, 0] smbd/service.c:set_current_service(150) > Dec 14 14:40:15 gfm-atlas smbd[15331]: chdir (/usr/GFM_Shares/Users/Receiving) failed > > I am stumped. > > > Travis Bullock > Systems Administrator > Avmax Group Inc. > > > ----- Original Message ----- > From: Michael Coburn <mcoburn@jupiterimages.com> > To: Travis Bullock <tbullock@avmax.ca> > Cc: samba <samba@lists.samba.org> > Sent: Thursday, December 14, 2006 12:41:37 PM GMT-0700 US/Mountain > Subject: Re: [Samba] Error since upgrade to Version 3.0.23a-1.fc4.1 - URGENT > > Since it failed at the winbind step, could it be related to your Windows > PDC instead? Can you create new shares and define new ACLs and confirm > that they work? > -- > Michael Coburn > > Travis Bullock wrote: > >> My samba shares aren't working with ACL access since the upgrade. Here is an example of the error from /var/log/messages >> >> Dec 14 12:44:17 gfm-atlas smbd[14365]: [2006/12/14 12:44:17, 0] smbd/service.c:make_connection_snum(911) >> Dec 14 12:44:17 gfm-atlas smbd[14365]: '/usr/GFM_Shares/Users/Receiving' does not exist or permission denied when connecting to [GF_Receiving] Error was Permission denied >> >> Here is the detailed ACL on that particular share: >> >> [root@gfm-atlas Users]# getfacl Receiving/ >> # file: Receiving >> # owner: root >> # group: AVMAX+domain\040admins >> user::rwx >> group::rwx >> other::--- >> default:user::rwx >> default:user:AVMAX+gfreceiving:rwx >> default:group::rwx >> default:mask::rwx >> default:other::--- >> >> Interestingly enough, the group "Domain Admins" can access this share no problem. But the lower level ACL for the user 'avmax+gfreceiving' generates that error in the messages log. >> >> Some other errors in my /var/log/messages are: >> >> Dec 14 12:20:22 gfm-atlas winbindd[14097]: [2006/12/14 12:20:22, 0] nsswitch/winbindd_dual.c:child_read_request(49) >> Dec 14 12:20:22 gfm-atlas winbindd[14097]: Got invalid request length: 0 >> Dec 14 12:20:22 gfm-atlas winbindd[14084]: [2006/12/14 12:20:22, 0] nsswitch/winbindd_dual.c:child_read_request(49) >> Dec 14 12:20:22 gfm-atlas winbindd[14084]: Got invalid request length: 0 >> Dec 14 12:21:33 gfm-atlas nmbd[14198]: [2006/12/14 12:21:33, 0] nmbd/asyncdns.c:start_async_dns(151) >> Dec 14 12:21:33 gfm-atlas nmbd[14198]: started asyncdns process 14199 >> Dec 14 12:21:35 gfm-atlas winbindd[14196]: [2006/12/14 12:21:35, 0] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2265) >> Dec 14 12:21:35 gfm-atlas winbindd[14196]: cli_rpc_pipe_open_noauth: rpc_pipe_bind for pipe \lsarpc failed with error NT_STATUS_BUFFER_TOO_SMALL >> >> Please help. >> >> Cheers, >> >> Travis Bullock >> Systems Administrator >> Avmax Group Inc. >> >> >>