Hi, I have a strange problem : some users cannot acces to diretcory, the message is "access denied". The ACL is correct # file: rsrv/vol2/data1/groupes/CORDAF # owner: root # group: Utilisateurs user::rwx user:mro:r-x user:sad:r-x group::--- group:administrateurs:rwx group:daf:rwx mask::rwx other::--- default:user::rwx default:user:mro:r-x default:user:sad:r-x default:group::--- default:group:administrateurs:rwx default:group:daf:rwx default:mask::rwx default:other::--- The user lge is member of group daf, but cannot acces to to directory. In log I find Could not get RealPath CORDAF/* But if I add the user directly to the ACL, no problem Maybe is caused by the update to last service pack on the laptop, because a other people which is also member of group daf can acces correctly. can anyone have problem with last service pack ? Configuration : samba 3.0.20b ldap backend ldap:trusted=yes privileges enabled. file is on a XFS partition. ----------------------------------- St?phane PURNELLE stephane.purnelle@corman.be Service Informatique Corman S.A. Tel : 00 32 087/342467
stephane.purnelle@corman.be
2005-Oct-24 09:45 UTC
RE [Samba] Could not get RealPath CORDAF/* (It's a urgent problem)
A other user have the same problem, but :
I copied the directory with the same ACL on my test server and work fine :
[2005/10/24 10:25:47, 5] smbd/uid.c:change_to_user(304)
change_to_user uid=(1041,1041) gid=(0,513)
[2005/10/24 10:25:47, 3] smbd/trans2.c:call_trans2findfirst(1629)
call_trans2findfirst: dirtype = 16, maxentries = 1366,
close_after_first=0, close_if_end = 2 requires_resume_key = 4 level =
0x104, max_data_bytes = 16384
[2005/10/24 10:25:47, 5] smbd/filename.c:unix_convert(108)
unix_convert called on file "CORPLA/*"
[2005/10/24 10:25:47, 10] smbd/statcache.c:stat_cache_lookup(215)
stat_cache_lookup: lookup failed for name [CORPLA/*]
[2005/10/24 10:25:47, 10] smbd/statcache.c:stat_cache_lookup(248)
stat_cache_lookup: lookup succeeded for name [CORPLA] -> [CORPLA]
[2005/10/24 10:25:47, 5] smbd/filename.c:unix_convert(175)
unix_convert begin: name = CORPLA/*, dirpath = CORPLA, start = *
[2005/10/24 10:25:47, 10] smbd/mangle_hash2.c:is_mangled(276)
is_mangled * ?
[2005/10/24 10:25:47, 10] smbd/mangle_hash2.c:is_mangled_component(215)
is_mangled_component * (len 1) ?
[2005/10/24 10:25:47, 10] smbd/mangle_hash2.c:is_mangled(276)
is_mangled * ?
[2005/10/24 10:25:47, 10] smbd/mangle_hash2.c:is_mangled_component(215)
is_mangled_component * (len 1) ?
[2005/10/24 10:25:47, 5] smbd/filename.c:unix_convert(324)
New file *
[2005/10/24 10:25:47, 8] lib/util.c:is_in_path(1671)
is_in_path: CORPLA/*
[2005/10/24 10:25:47, 8] lib/util.c:is_in_path(1692)
is_in_path: match not found
[2005/10/24 10:25:47, 5] smbd/trans2.c:call_trans2findfirst(1683)
dir=CORPLA, mask = *
[2005/10/24 10:25:47, 5] smbd/dir.c:dptr_create(391)
dptr_create dir=CORPLA
[2005/10/24 10:25:47, 8] lib/util.c:is_in_path(1671)
is_in_path: CORPLA
[2005/10/24 10:25:47, 8] lib/util.c:is_in_path(1692)
is_in_path: match not found
[2005/10/24 10:25:47, 3] smbd/dir.c:dptr_create(511)
creating new dirptr 256 for path CORPLA, expect_close = 1
[2005/10/24 10:25:47, 4] smbd/trans2.c:call_trans2findfirst(1740)
dptr_num is 256, wcard = *, attr = 22
[2005/10/24 10:25:47, 8] smbd/trans2.c:call_trans2findfirst(1745)
dirpath=<CORPLA> dontdescend=<>
[2005/10/24 10:25:47, 8] smbd/trans2.c:get_lanman2_dir_entry(1077)
get_lanman2_dir_entry:readdir on dirptr 0x803ad4c0 now at offset 0
[2005/10/24 10:25:47, 8] smbd/dosmode.c:dos_mode(294)
dos_mode: CORPLA/.
[2005/10/24 10:25:47, 10]
smbd/posix_acls.c:check_posix_acl_group_write(4027)
check_posix_acl_group_write: file CORPLA/. match on group 1016 -> can
write.
[2005/10/24 10:25:47, 10]
smbd/posix_acls.c:check_posix_acl_group_write(4078)
check_posix_acl_group_write: file CORPLA/. returning (ret = 1).
[2005/10/24 10:25:47, 8] smbd/dosmode.c:dos_mode_from_sbuf(162)
dos_mode_from_sbuf returning d
[2005/10/24 10:25:47, 8] smbd/dosmode.c:dos_mode(328)
dos_mode returning d
[2005/10/24 10:25:47, 5] smbd/trans2.c:get_lanman2_dir_entry(1167)
get_lanman2_dir_entry found CORPLA/. fname=.
[2005/10/24 10:25:47, 10] smbd/trans2.c:get_lanman2_dir_entry(1308)
get_lanman2_dir_entry: SMB_FIND_FILE_BOTH_DIRECTORY_INFO
And on the produc server :
[2005/10/24 11:04:56, 4] smbd/uid.c:change_to_user(217)
change_to_user: Skipping user change - already user
[2005/10/24 11:04:56, 3] smbd/trans2.c:call_trans2findfirst(1629)
call_trans2findfirst: dirtype = 16, maxentries = 1366,
close_after_first=0, close_if_end = 2 requires_resume_key = 4 level =
0x104, max_data_bytes = 16384
[2005/10/24 11:04:56, 5] smbd/filename.c:unix_convert(108)
unix_convert called on file "CORPLA/*"
[2005/10/24 11:04:56, 10] smbd/statcache.c:stat_cache_lookup(215)
stat_cache_lookup: lookup failed for name [CORPLA/*]
[2005/10/24 11:04:56, 10] smbd/statcache.c:stat_cache_lookup(248)
stat_cache_lookup: lookup succeeded for name [CORPLA] -> [CORPLA]
[2005/10/24 11:04:56, 5] smbd/filename.c:unix_convert(175)
unix_convert begin: name = CORPLA/*, dirpath = CORPLA, start = *
[2005/10/24 11:04:56, 10] smbd/mangle_hash2.c:is_mangled(276)
is_mangled * ?
[2005/10/24 11:04:56, 10] smbd/mangle_hash2.c:is_mangled_component(215)
is_mangled_component * (len 1) ?
[2005/10/24 11:04:56, 10] smbd/mangle_hash2.c:is_mangled(276)
is_mangled * ?
[2005/10/24 11:04:56, 10] smbd/mangle_hash2.c:is_mangled_component(215)
is_mangled_component * (len 1) ?
[2005/10/24 11:04:56, 5] smbd/filename.c:unix_convert(324)
New file *
[2005/10/24 11:04:56, 8] lib/util.c:is_in_path(1671)
is_in_path: CORPLA/*
[2005/10/24 11:04:56, 8] lib/util.c:is_in_path(1692)
is_in_path: match not found
[2005/10/24 11:04:56, 1] smbd/vfs.c:reduce_name(981)
reduce_name: couldn't get realpath for CORPLA/*
[2005/10/24 11:04:56, 5] smbd/filename.c:check_name(418)
check_name on CORPLA/* failed
[2005/10/24 11:04:56, 10] smbd/trans2.c:set_bad_path_error(2583)
set_bad_path_error: err = 13 bad_path = 0
[2005/10/24 11:04:56, 3] smbd/error.c:unix_error_packet(91)
unix_error_packet: error string = Permission denied
[2005/10/24 11:04:56, 3] smbd/error.c:error_packet(147)
error packet at smbd/trans2.c(2592) cmd=50 (SMBtrans2)
NT_STATUS_ACCESS_DENIED
Product server :
Redhat 8.0 (kernel 2.4) - samba 3.0.20b - ACL on XFS (no quota)+ ldap
backend
* smb.conf
[groupes]
comment = GROUPES
path = /rsrv/vol2/data1/groupes
admin users = Administrateur, Administrator, admin, spu
read only = No
inherit permissions = Yes
inherit acls = Yes
hide unreadable = Yes
security mask = 0770
directory security mask = 0770
force security mode = 0770
force directory security mode = 0770
Test server
RedHat Enterprise Linux 3 (kernel 2.6) - samba 3.0.20b - ACl on XFS (no
quota) + ldap backend
* smb.conf
[groupes]
comment = GROUPES
path = /rsrv/vol2/data1/groupes
admin users = @administrateurs
read only = No
inherit permissions = Yes
inherit acls = Yes
hide unreadable = Yes
security mask = 0770
directory security mask = 0770
force security mode = 0770
force directory security mode = 0770
-----------------------------------
St?phane PURNELLE stephane.purnelle@corman.be
Service Informatique Corman S.A. Tel : 00 32 087/342467
samba-bounces+stephane.purnelle=corman.be@lists.samba.org a ?crit sur
21/10/2005 16:22:08 :
> Hi,
>
> I have a strange problem :
>
> some users cannot acces to diretcory, the message is "access
denied".
> The ACL is correct
>
>
> # file: rsrv/vol2/data1/groupes/CORDAF
> # owner: root
> # group: Utilisateurs
> user::rwx
> user:mro:r-x
> user:sad:r-x
> group::---
> group:administrateurs:rwx
> group:daf:rwx
> mask::rwx
> other::---
> default:user::rwx
> default:user:mro:r-x
> default:user:sad:r-x
> default:group::---
> default:group:administrateurs:rwx
> default:group:daf:rwx
> default:mask::rwx
> default:other::---
>
> The user lge is member of group daf, but cannot acces to to directory.
> In log I find Could not get RealPath CORDAF/*
>
> But if I add the user directly to the ACL, no problem
>
> Maybe is caused by the update to last service pack on the laptop,
because > a other people which is also member of group daf can acces correctly.
>
> can anyone have problem with last service pack ?
>
>
> Configuration :
> samba 3.0.20b
> ldap backend
> ldap:trusted=yes
> privileges enabled.
>
> file is on a XFS partition.
>
> -----------------------------------
> St?phane PURNELLE stephane.purnelle@corman.be
> Service Informatique Corman S.A. Tel : 00 32 087/342467
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba