samba - Jan 2005 - Access denied changing file attributes

Hi!

I've been tearing my hair out trying to get DOS file attributes to work 
with Samba. Basically, I have it all set up so the user mbolingbroke 
(me) can write to this Supernova Backup share I have - this all works 
fine. However, since this is going to backup my Windows machine I want 
to preserve the file attributes. To this end, I've set up mapping of the 
attributess using "map archive = yes" and so on. However, whenever I
try
to change the file attributes using either Windows or the smbclient, I 
get the error: "An error occured applying attributes to the file <file 
name> Access is denied".

I've tried using both extended attributes and the "map * = yes"
approach
to do this - neither has worked. Both extended attributes and ACLs for 
my filesystem are compiled into the kernel, although I removed the ACL I 
had set up from my backup share at one stage trying to get this to work 
and still no joy. The user mbolingbroke is mapped to the NT username of 
"Max Bolingbroke" in smbusers and there is a corresponding entry in 
smbpasswd.

I'd be really greatful for any insight on this problem! Thanks!

Max Bolingbroke

---------

getfacl output on share:

# file: supernova
# owner: mbolingbroke
# group: users
user::rwx
group::r-x
other::r-x

---------

smb.conf:

[global]
netbios name = Nebula
server string = An Expanding Cloud Of Vapour
workgroup = BOLINGBROKE

security = user
client ntlmv2 auth = yes
username map = /etc/samba/smbusers

encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd

hosts allow = 192.168.1.

wins server = 192.168.1.2
name resolve order = wins hosts lmhosts bcase

log file = /var/log/samba/log.%m
max log size = 1024

preserve case = yes
short preserve case = yes

map archive = yes
map hidden = yes
map system = yes

[Supernova Backup]
comment = Supernova backup area
guest ok = no
path = /data/supernova/
public = yes
writeable = yes
create mask = 755

Max Bolingbroke wrote:
> Hi!
>
> I've been tearing my hair out trying to get DOS file attributes to 
> work with Samba. Basically, I have it all set up so the user 
> mbolingbroke (me) can write to this Supernova Backup share I have - 
> this all works fine. However, since this is going to backup my Windows 
> machine I want to preserve the file attributes. To this end, I've set 
> up mapping of the attributess using "map archive = yes" and so
on.
> However, whenever I try to change the file attributes using either 
> Windows or the smbclient, I get the error: "An error occured applying 
> attributes to the file <file name> Access is denied".
>
> I've tried using both extended attributes and the "map * =
yes"
> approach to do this - neither has worked. Both extended attributes and 
> ACLs for my filesystem are compiled into the kernel, although I 
> removed the ACL I had set up from my backup share at one stage trying 
> to get this to work and still no joy. The user mbolingbroke is mapped 
> to the NT username of "Max Bolingbroke" in smbusers and there is
a
> corresponding entry in smbpasswd.
>
> I'd be really greatful for any insight on this problem! Thanks!
>
> Max Bolingbroke
>
> ---------
>
> getfacl output on share:
>
> # file: supernova
> # owner: mbolingbroke
> # group: users
> user::rwx
> group::r-x
> other::r-x
>
> ---------
>
> smb.conf:
>
> [global]
> netbios name = Nebula
> server string = An Expanding Cloud Of Vapour
> workgroup = BOLINGBROKE
>
> security = user
> client ntlmv2 auth = yes
> username map = /etc/samba/smbusers
>
> encrypt passwords = yes
> smb passwd file = /etc/samba/smbpasswd
>
> hosts allow = 192.168.1.
>
> wins server = 192.168.1.2
> name resolve order = wins hosts lmhosts bcase
>
> log file = /var/log/samba/log.%m
> max log size = 1024
>
> preserve case = yes
> short preserve case = yes
>
> map archive = yes
> map hidden = yes
> map system = yes
>
> [Supernova Backup]
> comment = Supernova backup area
> guest ok = no
> path = /data/supernova/
> public = yes
> writeable = yes
> create mask = 755
Does anyone have any idea about this? I'm desperate enough that I'm 
about ready to buy another Windows licence for the trouble it'll save 
me. Hell, if all else fails can anyone suggest another networkable file 
system that's well supported in Windows and Linux?

Thanks,

Max Bolingbroke

Hi Max,

are you owner of the files you want to handle?
Only file owner is allowed to change file permissions (where attributes are
mapped), write access isn't enough.

Daniel
> I've been tearing my hair out trying to get DOS file attributes
> to work with Samba. "An  error occured applying  attributes
> to the file <file name> Access is denied".

Try adding "admin users = mbolingbroke" to the share und try again.
> For a sample file that I am trying to change the
> attributes of. Since Samba should be authenticating
> me as mbolingbroke, I don't think this is the problem.

Strange, the "admin users" line should give to you full root access to
the
share, so "access denied" is quite impossible.
Did you restart smbd after inserting the line?
Maybe something basically broken...?!?
Next idea is a look to the log.smbd at log level 10.
Can you send it to me per mail?

Daniel



-----Urspr?ngliche Nachricht-----
Von: Max Bolingbroke [mailto:batterseapower@hotmail.com]
Gesendet: Sonntag, 23. Januar 2005 16:33
An: Beschorner Daniel
Cc: 'samba@lists.samba.org'
Betreff: Re: Access denied changing file attributes


No change whatsoever :) Are there any other possible problems?

Thanks in advance,

Max Bolingbroke

Beschorner Daniel wrote:
>Try adding "admin users = mbolingbroke" to the share und try
again.
>
>  
>
>>For a sample file that I am trying to change the
>>attributes of. Since Samba should be authenticating
>>me as mbolingbroke, I don't think this is the problem.
>>    
>>

Hi Max,

my first idea with this log file is that you're using the release 3.0.8 of
Samba, are you?
It has an evil bug related to file attributes, fixed in 3.0.9.

Daniel


-----Urspr?ngliche Nachricht-----
Von: Max Bolingbroke [mailto:batterseapower@hotmail.com] 
Gesendet: Montag, 24. Januar 2005 08:03
An: Beschorner Daniel
Betreff: Re: Access denied changing file attributes

Hi,

The log is attached, created using log level = 10 in smb.conf. I zipped 
it since its 360k unzipped. Thanks for the help!

Max Bolingbroke

Beschorner Daniel wrote:
>Strange, the "admin users" line should give to you full root
access to the
>share, so "access denied" is quite impossible.
>Did you restart smbd after inserting the line?
>Maybe something basically broken...?!?
>Next idea is a look to the log.smbd at log level 10.
>Can you send it to me per mail?
>
>Daniel
>
>
>
>-----Urspr?ngliche Nachricht-----
>Von: Max Bolingbroke [mailto:batterseapower@hotmail.com]
>Gesendet: Sonntag, 23. Januar 2005 16:33
>An: Beschorner Daniel
>Cc: 'samba@lists.samba.org'
>Betreff: Re: Access denied changing file attributes
>
>
>No change whatsoever :) Are there any other possible problems?
>
>Thanks in advance,
>
>Max Bolingbroke
>
>Beschorner Daniel wrote:
>
>  
>
>>Try adding "admin users = mbolingbroke" to the share und try
again.
>>
>> 
>>
>>    
>>
>>>For a sample file that I am trying to change the
>>>attributes of. Since Samba should be authenticating
>>>me as mbolingbroke, I don't think this is the problem.
>>>   
>>>
>>>      
>>>

Hi,

Thanks very much for pointing that out! Upgraded to 3.0.10 and 
everything works, even when I put it in an extended attribute as nature 
intended. Thanks again!

Max Bolingbroke

Beschorner Daniel wrote:
>Hi Max,
>
>my first idea with this log file is that you're using the release 3.0.8
of
>Samba, are you?
>It has an evil bug related to file attributes, fixed in 3.0.9.
>
>Daniel
>
>
>-----Urspr?ngliche Nachricht-----
>Von: Max Bolingbroke [mailto:batterseapower@hotmail.com] 
>Gesendet: Montag, 24. Januar 2005 08:03
>An: Beschorner Daniel
>Betreff: Re: Access denied changing file attributes
>
>Hi,
>
>The log is attached, created using log level = 10 in smb.conf. I zipped 
>it since its 360k unzipped. Thanks for the help!
>
>Max Bolingbroke
>
>Beschorner Daniel wrote:
>
>  
>
>>Strange, the "admin users" line should give to you full root
access to the
>>share, so "access denied" is quite impossible.
>>Did you restart smbd after inserting the line?
>>Maybe something basically broken...?!?
>>Next idea is a look to the log.smbd at log level 10.
>>Can you send it to me per mail?
>>
>>Daniel
>>
>>
>>
>>-----Urspr?ngliche Nachricht-----
>>Von: Max Bolingbroke [mailto:batterseapower@hotmail.com]
>>Gesendet: Sonntag, 23. Januar 2005 16:33
>>An: Beschorner Daniel
>>Cc: 'samba@lists.samba.org'
>>Betreff: Re: Access denied changing file attributes
>>
>>
>>No change whatsoever :) Are there any other possible problems?
>>
>>Thanks in advance,
>>
>>Max Bolingbroke
>>
>>Beschorner Daniel wrote:
>>
>> 
>>
>>    
>>
>>>Try adding "admin users = mbolingbroke" to the share und
try again.
>>>
>>>
>>>
>>>   
>>>
>>>      
>>>
>>>>For a sample file that I am trying to change the
>>>>attributes of. Since Samba should be authenticating
>>>>me as mbolingbroke, I don't think this is the problem.
>>>>  
>>>>
>>>>     
>>>>
>>>>        
>>>>

It would had been my first idea if you had specified your version of Samba.
I was assuming 3.0.10.

Glad it works now!
Daniel

-----Urspr?ngliche Nachricht-----
Von: Max Bolingbroke [mailto:batterseapower@hotmail.com]
Gesendet: Montag, 24. Januar 2005 20:22
An: Beschorner Daniel
Cc: 'samba@lists.samba.org'
Betreff: Re: Access denied changing file attributes


Hi,

Thanks very much for pointing that out! Upgraded to 3.0.10 and 
everything works, even when I put it in an extended attribute as nature 
intended. Thanks again!

Max Bolingbroke