samba - Sep 2024 - Getting 'Access Denied' under Offline mode (Offline Files)

Hi team,

Hoping someone from the community would be able to help.

Samba version *: 4.19.5*

OS *: Ubuntu 24.04*

We have a perculiar situation where users are getting /Access Denied/ on 
their roaming user profiles. These profiles are redirected using Windows 
GPOs with Offline Files enabled. We could replicate these on several 
instances that we manage.

On version 4.15.13, when 'Offline Files' are in /offline mode /users can
still work on their files under their profile and once /online/, the 
files will be synced back with the new changes.

Now on Samba 4.19.5, users are getting these errors /Access Denied/ / 
/You will need permission to make changes onto the folder /under 
/offline mode/. However, if it is a file within the top level folder, 
they are ok to make changes to.

E.g.? \\server\profiles\user\Desktop\Folder 1??? (Changes can't be made. 
Access Denied.)

 ??? ??? \\server\profiles\user\Desktop\File 1??? (Changes can't be 
made. Access Denied.)

 ??? ??? \\server\profiles\user\Desktop\Folder 1\File 1 (Changes can be 
made. No issues. Same thing goes for another folder instead of file.)

Once the Sync Centre is shown to be back in /Online mode/ everything 
works fine.

Nothing in the Windows Event Logs could specify. SMB connections are 
using version SMB3 as it should be on both versions (seen via 
smbstatus). The release notes did not mention anything that might effect 
this.

Would someone be able to point us in the right direction?

Kind regards,

-- 
*June Chong*
*Engineer | TechnologyWise*

Basestation
148 Durham St
Tauranga, NZ

*E:* june at tw.co.nz | *P:* +64 (0)7 571 1060 | *W:* technologywise.co.nz 
<https://www.technologywise.co.nz>

On Tue, 10 Sep 2024 15:32:46 +1200
June Chong | TechnologyWise via samba <samba at lists.samba.org> wrote:
> Hi team,
> 
> Hoping someone from the community would be able to help.
> 
> Samba version *: 4.19.5*
> 
> OS *: Ubuntu 24.04*
> 
> We have a perculiar situation where users are getting /Access Denied/
> on their roaming user profiles. These profiles are redirected using
> Windows GPOs with Offline Files enabled. We could replicate these on
> several instances that we manage.
> 
> On version 4.15.13, when 'Offline Files' are in /offline mode
/users
> can still work on their files under their profile and once /online/,
> the files will be synced back with the new changes.
> 
> Now on Samba 4.19.5, users are getting these errors /Access Denied/ / 
> /You will need permission to make changes onto the folder /under 
> /offline mode/. However, if it is a file within the top level folder, 
> they are ok to make changes to.
> 
> E.g.? \\server\profiles\user\Desktop\Folder 1??? (Changes can't be
> made. Access Denied.)
> 
>  ??? ??? \\server\profiles\user\Desktop\File 1??? (Changes can't be 
> made. Access Denied.)
> 
>  ??? ??? \\server\profiles\user\Desktop\Folder 1\File 1 (Changes can
> be made. No issues. Same thing goes for another folder instead of
> file.)
> 
> Once the Sync Centre is shown to be back in /Online mode/ everything 
> works fine.
> 
> Nothing in the Windows Event Logs could specify. SMB connections are 
> using version SMB3 as it should be on both versions (seen via 
> smbstatus). The release notes did not mention anything that might
> effect this.
> 
> Would someone be able to point us in the right direction?
> 
> Kind regards,
> 
I think we need to see your smb.conf (to see just how you are sharing
the profiles), please post the output of 'testparm -s'

Rowland