samba - Jan 2004 - Strange behavior WinXP and 2.2.8a and inherit permissions

Hi, 
 
I have a quite strange problem.
I have updated my Server with Suse 9.0 to Samba 2.2.8a. From that moment
on I couln'd run programms directly from the share anymore. The WinXP
Client says: "you dont have the permission for this file." But I have
all permissions for it. This only occurs in that shares where I have set
"inherit permissions" to yes. When I set it to "No" it works
again. I
can run programms from the share. I tried it on two XP Clients with same
results. When I used a WinMe Client it worked all the time. 
It looks for me a bit like a bug. For I have not changed anything except
updating samba to 2.2.8a 
 
Has anyone an Idea what this could be? Or how I can get around it?
 
Greetings from the Black Forrest
 
Markus

Well, currently the stable release of Samba is version 3.0.1 and all production
servers should be using it. Perhaps you should upgrade? Other then that, I dont
know what the solution could be.

On Sun, Jan 18, 2004 at 08:53:27PM +0100, Markus Th?er
wrote:
> Hi, 
>  
> I have a quite strange problem.
> I have updated my Server with Suse 9.0 to Samba 2.2.8a. From that moment
> on I couln'd run programms directly from the share anymore. The WinXP
> Client says: "you dont have the permission for this file." But I
have
> all permissions for it. This only occurs in that shares where I have set
> "inherit permissions" to yes. When I set it to "No" it
works again. I
> can run programms from the share. I tried it on two XP Clients with same
> results. When I used a WinMe Client it worked all the time. 
> It looks for me a bit like a bug. For I have not changed anything except
> updating samba to 2.2.8a 
>  
> Has anyone an Idea what this could be? Or how I can get around it?
>  
> Greetings from the Black Forrest
>  
> Markus 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
andrei bazhgin | aftermath
programmer
http://nan2d.com

> I have a quite strange problem.
> I have updated my Server with Suse 9.0 to Samba 2.2.8a. 
> From that moment on I couln'd run programms directly 
> from the share anymore. The WinXP Client says: "you 
> dont have the permission for this file." But I have
> all permissions for it. This only occurs in that shares 
> where I have set "inherit permissions" to yes. When I 
> set it to "No" it works again. I can run programms from 
> the share. I tried it on two XP Clients with same
> results. When I used a WinMe Client it worked all the 
> time. It looks for me a bit like a bug. For I have not 
> changed anything except updating samba to 2.2.8a 
Perhaps the group execute bit is interpreted as system
attribute. Try "map system = No" and leave inheritance on.

This only occurs in that shares 
> > where I have set "inherit permissions" to yes. When I 
> > set it to "No" it works again. I can run programms from 
> > the share. 
> 
> Perhaps the group execute bit is interpreted as system 
> attribute. Try "map system = No" and leave inheritance on. 
> 
I tried it but with no success. The map system is by default "no" and
I
have quiet simple shares. 
Perhaps you have a look at my smb.conf

# Samba config file created using SWAT
# from 192.168.123.102 (192.168.123.102)
# Date: 2004/01/19 22:24:21

# Global parameters
[global]
	coding system = 
	client code page = 850
	code page directory = /usr/share/samba/codepages
	workgroup = ARBEITSGRUPPE
	netbios name = 
	netbios aliases = 
	netbios scope = 
	server string = Samba Server
	interfaces = 
	bind interfaces only = No
	security = USER
	encrypt passwords = Yes
	update encrypted = No
	allow trusted domains = Yes
	hosts equiv = 
	min passwd length = 5
	map to guest = Bad User
	null passwords = No
	obey pam restrictions = No
	password server = 
	smb passwd file = /etc/samba/smbpasswd
	root directory = 
	pam password change = No
	passwd program = /usr/bin/passwd
	passwd chat = *new*password* %n\n *new*password* %n\n *changed*
	passwd chat debug = No
	username map = 
	password level = 0
	username level = 0
	unix password sync = No
	restrict anonymous = No
	lanman auth = Yes
	use rhosts = No
	admin log = No
	log level = 0
	syslog = 1
	syslog only = No
	log file = 
	max log size = 5000
	timestamp logs = Yes
	debug hires timestamp = No
	debug pid = No
	debug uid = No
	protocol = NT1
	large readwrite = Yes
	max protocol = NT1
	min protocol = CORE
	read bmpx = No
	read raw = Yes
	write raw = Yes
	acl compatibility = 
	nt smb support = Yes
	nt pipe support = Yes
	nt status support = Yes
	server schannel = Auto
	announce version = 4.9
	announce as = NT
	max mux = 50
	max xmit = 16644
	name resolve order = lmhosts host wins bcast
	max ttl = 259200
	max wins ttl = 518400
	min wins ttl = 21600
	time server = Yes
	unix extensions = Yes
	change notify timeout = 60
	deadtime = 0
	getwd cache = Yes
	keepalive = 300
	lpq cache time = 10
	max smbd processes = 0
	max disk size = 0
	max open files = 10000
	name cache timeout = 660
	read size = 16384
	socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
	stat cache size = 50
	use mmap = Yes
	total print jobs = 0
	load printers = Yes
	printcap name = CUPS
	disable spoolss = No
	enumports command = 
	addprinter command = 
	deleteprinter command = 
	show add printer wizard = Yes
	os2 driver map = 
	strip dot = No
	mangling method = hash
	character set = 
	mangled stack = 50
	stat cache = Yes
	domain admin group = 
	domain guest group = 
	machine password timeout = 604800
	add user script = 
	delete user script = 
	logon script = 
	logon path = \\%N\%U\profile
	logon drive = 
	logon home = \\%N\%U
	domain logons = No
	os level = 2
	lm announce = Auto
	lm interval = 60
	preferred master = Auto
	local master = No
	domain master = No
	browse list = Yes
	enhanced browsing = Yes
	dns proxy = Yes
	wins proxy = No
	wins server = 
	wins support = No
	wins hook = 
	kernel oplocks = Yes
	lock spin count = 3
	lock spin time = 10
	oplock break wait time = 0
	add share command = 
	change share command = 
	delete share command = 
	config file = 
	preload = 
	lock dir = /var/lib/samba
	pid directory = /var/run/samba
	utmp directory = 
	wtmp directory = 
	utmp = No
	default service = 
	message command = 
	dfree command = 
	valid chars = 
	remote announce = 
	remote browse sync = 
	socket address = 0.0.0.0
	homedir map = auto.home
	time offset = 0
	NIS homedir = No
	source environment = 
	panic action = 
	hide local users = No
	host msdfs = No
	winbind uid = 
	winbind gid = 
	template homedir = /home/%D/%U
	template shell = /bin/false
	winbind separator = \
	winbind cache time = 15
	winbind enum users = Yes
	winbind enum groups = Yes
	winbind use default domain = No
	comment = 
	path = 
	alternate permissions = No
	username = 
	guest account = nobody
	invalid users = 
	valid users = 
	admin users = 
	read list = 
	write list = 
	printer admin = 
	force user = 
	force group = 
	read only = Yes
	create mask = 0744
	force create mode = 00
	security mask = 0777
	force security mode = 00
	directory mask = 0755
	force directory mode = 00
	directory security mask = 0777
	force directory security mode = 00
	force unknown acl user = 00
	inherit permissions = No
	inherit acls = No
	guest only = No
	guest ok = No
	only user = No
	hosts allow = 
	hosts deny = 
	status = Yes
	nt acl support = Yes
	profile acls = No
	block size = 1024
	max connections = 0
	min print space = 0
	strict allocate = No
	strict sync = No
	sync always = No
	use sendfile = No
	write cache size = 0
	max print jobs = 1000
	printable = No
	postscript = No
	printing = cups
	print command = lpr -r -P%p %s
	lpq command = lpq -P%p
	lprm command = lprm -P%p %j
	lppause command = 
	lpresume command = 
	queuepause command = 
	queueresume command = 
	printer name = 
	use client driver = No
	default devmode = No
	printer driver = 
	printer driver file = /etc/samba/printers.def
	printer driver location = 
	default case = lower
	case sensitive = No
	preserve case = Yes
	short preserve case = Yes
	mangle case = No
	mangling char = ~
	hide dot files = Yes
	hide unreadable = No
	delete veto files = No
	veto files = /*.eml/*.nws/riched20.dll/*.{*}/
	hide files = 
	veto oplock files = 
	map system = No
	map hidden = No
	map archive = Yes
	mangled names = Yes
	mangled map = 
	browseable = Yes
	blocking locks = Yes
	csc policy = manual
	fake oplocks = No
	locking = Yes
	oplocks = Yes
	level2 oplocks = Yes
	oplock contention limit = 2
	posix locking = Yes
	strict locking = No
	share modes = Yes
	copy = 
	include = 
	exec = 
	preexec close = No
	postexec = 
	root preexec = 
	root preexec close = No
	root postexec = 
	available = Yes
	volume = 
	fstype = NTFS
	set directory = No
	wide links = Yes
	follow symlinks = Yes
	dont descend = 
	magic script = 
	magic output = 
	delete readonly = No
	dos filemode = No
	dos filetimes = No
	dos filetime resolution = No
	fake directory create times = No
	vfs object = 
	vfs options = 
	msdfs root = No
	msdfs proxy = 

[homes]
	comment = Home Directories
	valid users = %S
	read only = No
	create mask = 0640
	directory mask = 0750
	browseable = No

[Dokumente]
	path = /daten/shares/dokumente
	read only = No
	create mask = 0774
	directory mask = 0775
	inherit permissions = Yes