I am running a Snap 4200 fileserver, which is a network appliance that
uses Samba to share files on a windows network.
I've been experiencing slow performance on the Snap. The issue started
suddenly 5 to 6 weeks ago, so I don't think it's a performance-related
problem. I SSHed into the unit and noticed some odd errors in the samba
event logs. They look something like this:
[2007/04/10 17:29:38, 0] smbd/posix_acls.c:has_pai_get_perm(474)
has_pai_get_perm: unknown tag type in ACL
[2007/04/10 18:36:15, 0] smbd/service.c:make_connection(844)
192.168.5.103 (192.168.5.103) couldn't find service furnitur
[2007/04/11 03:04:05, 0] lib/util_sock.c:read_socket_data(342)
read_socket_data: recv failure for 4. Error = Connection reset by peer
[2007/04/11 07:28:13, 0] smbd/service.c:set_current_service(56)
chdir (/shares/Meralta) failed
[2007/04/11 07:28:13, 0] smbd/service.c:set_current_service(56)
chdir (/shares/Meralta) failed
[2007/04/11 07:28:13, 0] smbd/service.c:set_current_service(56)
chdir (/shares/Meralta) failed
[2007/04/11 07:28:23, 0] smbd/service.c:set_current_service(56)
chdir (/shares/TEMPLATE) failed
[2007/04/11 07:28:23, 0] smbd/service.c:set_current_service(56)
chdir (/shares/TEMPLATE) failed
[2007/04/11 07:28:23, 0] smbd/service.c:set_current_service(56)
chdir (/shares/TEMPLATE) failed
[2007/04/11 07:55:16, 0] smbd/service.c:set_current_service(56)
chdir (/shares/Drawings) failed
[2007/04/11 07:55:16, 0] smbd/service.c:set_current_service(56)
chdir (/shares/Drawings) failed
[2007/04/11 08:27:11, 0] lib/module.c:smb_load_module(40)
"log.smbd" [readonly] 3228L, 166021C
Odd errors about enumerating shares... So I did a directory listing of
the shares, and lo and behold, some odd permissions showed themselves:
drwxrwxrwx 8 DOMAIN\ DOMAIN\ 103 Oct 1 2005 Archive
drwxrwx--- 17 DOMAIN\ DOMAIN\ 4096 Apr 5 11:40 Cad
drwxrwx--- 89 admin admingrp 4096 Apr 17 15:25 Design
drwxrwxrwx 6 DOMAIN\ DOMAIN\ 112 Oct 2 2005 DesignData
drwxrwxrwx 13 DOMAIN\ DOMAIN\ 4096 Feb 12 11:30 Finance
drwxrwxrwx 2 admin admingrp 6 Oct 2 2005 Financeapps
drwxrwxrwx 29 admin admingrp 4096 Apr 18 09:04 Furniture
drwxrwx--- 1629 DOMAIN\ DOMAIN\ 81920 Apr 19 15:53 In_Progress
drwxrwx--- 34 DOMAIN\ DOMAIN\ 4096 Apr 10 17:21 Marketing
drwxrwx--- 15 admin admingrp 4096 Apr 19 10:43 Meralta
drwxrwxrwx 2 DOMAIN\ DOMAIN\ 78 Mar 31 18:27 NAN_bu_Month-End
drwxrwxrwx 2 DOMAIN\ DOMAIN\ 43 Jun 3 2006 OllieBU_MonthEnd
drwxrwx--- 223 admin admingrp 16384 Apr 17 14:15 Purge-atory
drwxrwx--- 2 DOMAIN\ admingrp 135 Apr 14 20:10 RESTORED
-rwxrwx--- 1 DOMAIN\ DOMAIN\ 89 Apr 6 21:05 SPOT_top_log.txt
-rwxrwxrwx 1 DOMAIN\ DOMAIN\ 548 Nov 6 2005 Shortcut to
NetVault7_Administrators_Guide.pdf.lnk
drwxrwx--- 84 admin admingrp 4096 Apr 16 13:16 Transfer
drwxrwxrwx 35 DOMAIN\ DOMAIN\ 4096 Feb 2 15:28 cab
The errors in the samba event logs correlate only to the directories
that have permissions of "admin" and "admingrp." Before I
wipe the
problem out by brute force with chmod and chgrp, has anybody ever seen
errors like this before, and how did the permissions get changed from
DOMAIN|? Would they cause slow response time?
I've also noticed odd permissions scattered down through the directories
at various locations, and in some cases the owner of a file is set to a
5-digit number like "20160", etc.
Any ideas?
Josh
