samba - Jun 2024 - Random permission denied and path not found errors

On Mon, 17 Jun 2024 15:53:13 +0200
Tamas Papp via samba <samba at lists.samba.org> wrote:
> hi All,
> 
> 
> I have a problem that is way beyond my Samba knowledge skills and 
> capabilities. I would appreciate your advice.
> 
> 
> This is a VFX company with W10 clients and Windows and Linux servers. 
> Currently, there is a project migrating shares from W2K16 to Linux.
> The Windows server (from this point of view) services the storage
> backend in a reliable way. The clients are workstations and render
> machines.
> 
> In numbers:
> 
> - Windows storage: 90TB
> 
> - Windows WS: ~30
> 
> - Windows render machines: 7
> 
> 
> Now there is a Linux server with Ubuntu 22.04 (samba 
> 4.15.13+dfsg-0ubuntu1.6). Its configuration is 128GB RAM, E5 CPU, 
> Samsung PM893 SSDs in ZFS raidz3. There are some Incus containers
> with Samba packages in them.
Are your incus containers privileged ?
I should also point out that, from the Samba point of view, 4.15.13 is
EOL.
> 
> 
> The problem is that in certain cases render jobs reports the a path
> is not available or a file is not accessible for write (permission
> denied). The path is there and the user has permission. In addition,
> after a while the render job recovers and is able to write the file
> or read the path. The network speed is between 1Gb/s - 4Gb/s
> (changing fast), the load is between 1-3.
> 
> I will need to measure these better in the future.
> 
> 
> Any idea, what's going on and how could I track this down?
No idea because I haven't a clue how you are running Samba, for all I
know, you could be running sssd on a Samba fileserver.

Might be an idea if you post the output of 'testparm -s'

Rowland

On 6/17/24 16:15, Rowland Penny via samba wrote:
> Are your incus containers privileged ?
Yes.
> I should also point out that, from the Samba point of view, 4.15.13 is
> EOL.

I can upgrade samba (ubuntu), but would only do if there is any relevant 
change/fix/improvement. The release notes are quite long and in many 
cases I am unsure about the meaning of the content.

Ubuntu 24.04 includes 4.19.5+dfsg-4ubuntu9.
> No idea because I haven't a clue how you are running Samba, for all I
> know, you could be running sssd on a Samba fileserver.
>
> Might be an idea if you post the output of 'testparm -s'

Good point, I missed adding the configuration.

The windows server is a AD DC and samba is AD member:


# Global parameters
[global]
 ?? ?kerberos method = secrets and keytab
 ?? ?log file = /var/log/samba/log.%m
 ?? ?logging = file
 ?? ?map to guest = Bad User
 ?? ?max log size = 1000
 ?? ?obey pam restrictions = Yes
 ?? ?pam password change = Yes
 ?? ?panic action = /usr/share/samba/panic-action %d
 ?? ?passwd chat = *Enter\snew\s*\spassword:* %n\n 
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
 ?? ?passwd program = /usr/bin/passwd %u
 ?? ?realm = SPECTRALSTUDIOS.LOCAL
 ?? ?security = ADS
 ?? ?server role = standalone server
 ?? ?server string = %h server (Samba, Ubuntu)
 ?? ?template homedir = /home/%U@%D
 ?? ?template shell = /bin/bash
 ?? ?unix password sync = Yes
 ?? ?usershare allow guests = Yes
 ?? ?winbind offline logon = Yes
 ?? ?winbind refresh tickets = Yes
 ?? ?workgroup = SPECTRALSTUDIOS
 ?? ?idmap config * : range = 10000-999999
 ?? ?idmap config spectralstudios : backend = rid
 ?? ?idmap config spectralstudios : range = 2000000-2999999
 ?? ?idmap config * : backend = tdb

[HUNY_asset]
 ?? ?comment = HUNY/asset
 ?? ?create mask = 0664
 ?? ?directory mask = 02775
 ?? ?force create mode = 0664
 ?? ?force directory mode = 02775
 ?? ?path = /data/Projects/HUNY/asset
 ?? ?read only = No
 ?? ?valid users = "@spectralstudios\domain users"


There are more shares but the configuration is the same.


Thank you,