samba - Feb 2004 - Hide unreadable, strange problem

The "hide unreadable = yes" option gives strange results with samba
3.x.
Everything works fine when the server runs as a domain controller. Users
see the directories they are supposed to (unix group permission) in the
share. Turning off domain control and setting "security = DOMAIN",
however, hides every directory in the share unless you are an admin user.
I can cd to the directories with the appropriate permissions with
smbclient, but the content is invisble.

Googling, tethereal and max samba loglevel came up with nothing as far as
I could see, so I am stumped.

Any pointers, hints, solutions would be appreciated as I want to
move the BDC service away from this server (it hosts roaming profiles and
shared files).

Setup:

Red Hat Enterprise Linux AS,release 3 (Taroon Update 1)

Samba Version 3.0.2a-1, built from samba-3.0.2a-1.src.rpm

Linux 2.4.21-9.EL
No acls.

[global]
        workgroup = OURDOMAIN
        netbios name = SERVER
        server string = Felles
        encrypt passwords = Yes
        passdb backend = mysql:mysql
        mysql:mysql host = samba-mysql
        mysql:mysql user = sambauser
        mysql:mysql password = xxxx
        mysql:mysql database = samba
        domain master = No
        domain logons = Yes
        change notify timeout = 600
        socket options = TCP_NODELAY SO_KEEPALIVE SO_RCVBUF=8192 SO_SNDBUF=8192
        os level = 100
        preferred master = True
        local master = Yes
        dns proxy = No

ls -l /data/felles

drwxr-x---    5 root     est          4096 May  5  2002 est

[files]
        comment = Common files
        path = /data/felles
        create mask = 0660
        directory mask = 0770
        read only = no
        hide unreadable = yes
        veto oplock files = /.xls/.mdb/

Sten

In article <slrnc3k9dd.qki.Sten.Sletbak@valium.p52.hio.no>, Sten Sletbak
wrote:
> The "hide unreadable = yes" option gives strange results with
samba 3.x.
> Everything works fine when the server runs as a domain controller. Users
> see the directories they are supposed to (unix group permission) in the
> share. Turning off domain control and setting "security =
DOMAIN",
> however, hides every directory in the share unless you are an admin user.
> I can cd to the directories with the appropriate permissions with
> smbclient, but the content is invisble.
>
> Googling, tethereal and max samba loglevel came up with nothing as far as
> I could see, so I am stumped.
>
Here is a level 10 log of opening the shared folder from an XP client.
The first part is with security=user (mysql password backend), the
second part with security=domain (mysql password backend).
I think I spotted some differences that might be relevant.
It's a large log, so search for "--Start" and
"--Permission".

http://home.hio.no/~stens/samba_hide_unreadable_log.txt

Sten