samba - Mar 2012 - Robocopy from Windows to Samba (3.6.3) with backup flag

Hello,

I need to copy a Windows NAS to a Samba one preserving all stuffs (dates, owner,
security, etc...) in an enterprise environment.

I'm used to do that with between two Windows using robocopy  and the /b
(backup) flag, so I can backup files even if I do not have an ACE for my account
as I have the backup and restore privileges.

I need to do the same thing from Windows to Samba but using the backup flag does
not work at all : it does not even copy the data. If I copy without the backup
flag, it's OK for the files I have access, but as I am in an enterprise, I
don't have access to all files.

Here what happens :
(From the Windows NAS) :

robocopy G:\share\XXXXX\04_generique
\\samba-nas\root$\xfs\shares\archives\XXXXX\04_generique /V /NS /NC /NDL /NFL
/S/E /COPY:DATS /B /NP /XJ /R:0 /W:30

2012/03/13 10:56:18 ERROR 87 (0x00000057) Copying NTFS Security to Destination
Directory G:\share\ XXXXX \04_generique\
The parameter is incorrect.


?  No data is copied :/

If do the same without the /B flag, it's OK in this particular case, but I
don't have access to all the data and I won't be able to.

I have tested on Centos 6 with Samba 3.5.10 and Samba 3.6.3 and I have the same
result.

Is this supposed to work ?
Are there "special" parameters in smb.conf for this to work ?
If not, how can I backup from Windows to Samba ?

Regards.

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

On Tue, Mar 13, 2012 at 11:27:07AM +0100, Vincent Miszczak
wrote:
> Hello,
> 
> I need to copy a Windows NAS to a Samba one preserving all stuffs (dates,
owner, security, etc...) in an enterprise environment.
> 
> I'm used to do that with between two Windows using robocopy  and the /b
(backup) flag, so I can backup files even if I do not have an ACE for my account
as I have the backup and restore privileges.
> 
> I need to do the same thing from Windows to Samba but using the backup flag
does not work at all : it does not even copy the data. If I copy without the
backup flag, it's OK for the files I have access, but as I am in an
enterprise, I don't have access to all files.
> 
> Here what happens :
> (From the Windows NAS) :
> 
> robocopy G:\share\XXXXX\04_generique
\\samba-nas\root$\xfs\shares\archives\XXXXX\04_generique /V /NS /NC /NDL /NFL
/S/E /COPY:DATS /B /NP /XJ /R:0 /W:30
> 
> 2012/03/13 10:56:18 ERROR 87 (0x00000057) Copying NTFS Security to
Destination Directory G:\share\ XXXXX \04_generique\
> The parameter is incorrect.
> 
> 
> ?  No data is copied :/
> 
> If do the same without the /B flag, it's OK in this particular case,
but I don't have access to all the data and I won't be able to.
> 
> I have tested on Centos 6 with Samba 3.5.10 and Samba 3.6.3 and I have the
same result.
> 
> Is this supposed to work ?
Not in 3.6.x yet (it's being fixed for 4.0 and may get back-ported).
SeBackup/SeRestore require some special case code to ensure this
is done securely with no security holes or races.
> Are there "special" parameters in smb.conf for this to work ?
> If not, how can I backup from Windows to Samba ?
Currently the best way is to create a custom share, which
uses "force user = root" and is set with the valid users
set to those users who have SeRestore privilege.

This works, but I agree it's a little clunky. I'm working
on it.

Jeremy.