Arendt, Volker
2009-Nov-10 10:25 UTC
[Samba] Samba 3.4.2: Acces problem with EA attributes
Hello all, we have a problem with our samba 3.4.2. We get the following messages in out logs for some user, but not all. Users can access their personal share, can create a directory or a file, but cannot change the directory or the file. The permissions are full access on the top level folder and permissions are inherited correctly. Hints and tips are welcome Regards Dr. Volker Arendt -------------------------------------------------------------------------- Dr. Volker Arendt mailto:arendt at wiwi.uni-wuppertal.de Gau?str. 20 Tel : +49(202)4392449 42097 Wuppertal, Deutschland Fax: +49(202)4393959 University of Wuppertal Business Economics (FBB) -------------------------------------------------------------------------- [2009/11/10 09:01:52, 1] smbd/service.c:1047(make_connection_snum) 132.195.121.160 (132.195.121.160) connect to service ls-thiele$ initially as user FB6+steinbach (uid=16292, gid=13254) (pid 684068) [2009/11/10 09:31:19, 1] smbd/dosmode.c:213(get_ea_dos_attribute) get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented [2009/11/10 09:51:42, 1] smbd/service.c:1047(make_connection_snum) 132.195.121.160 (132.195.121.160) connect to service steinbach$ initially as user steinbach (uid=16292, gid=10513) (pid 684068) [2009/11/10 09:51:42, 1] smbd/dosmode.c:213(get_ea_dos_attribute) get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented Our smb.conf follows: [global] # -------------------------------------------------------- # setting base configuration parameters # # -------------------------------------------------------- workgroup = FB6 netbios name = FRIGG server string = AFS security = ADS realm = FB6.UNI-WUPPERTAL.DE auth methods = winbind # password server = AD logon server password server = 132.195.120.9 132.195.120.12 wins server = 132.195.120.12 client use spnego = yes client signing = yes # added wg. ticket #5344 #client lanman auth = no #client ntlmv2 auth = yes encrypt passwords = yes host msdfs = no #domain logons = yes # fuer Samba 3.3.0 # damit keine verschluesselte Verbindung zum Domain Controller # aufgebaut wird ldap ssl = no obey pam restrictions = no # --------------------------------------------------------- # printer settings # ??? better disable these settings ??? # --------------------------------------------------------- # printcap name = cups # disable spoolss = Yes # show add printer wizard = No # --------------------------------------------------------- # ID mapping parameters # mapping windows users to unix users # this is performed on the basis of sid on windows and # unix with uid for users and gid for groups # the backend parameter rid allows to get the same mapping # form sid to uid because it is determined algorithmically # that way we get the same mapping even if we use samba on # several disparate systems # CHANGE NOTIFICATIO: with v3.3.0 there are changes # to idmap; idmap domains is no longer supported # --------------------------------------------------------- #idmap domains = FB6 #idmap backend = rid #idmap backend = tdb idmap config FB6:backend = rid #idmap config FB6:base_rid = 0 idmap config FB6:range = 10000 - 499999 idmap uid = 10000-499999 idmap gid = 10000-499999 winbind separator =+ winbind use default domain = Yes winbind enum users = no winbind enum groups = no winbind cache time = 60 winbind gid = 10000-499999 winbind uid = 10000-499999 #template homedir = /gpfs/fbb/user/%U #template shell = /opt/pware/bin/bash #use sendfile = Yes #printing = cups #------------------------------------------------------- # Logging options # #------------------------------------------------------- # # higher log levels have a negative impact on performance log level = 1 log file = /opt/pware/var/log/ max log size = 500000 debug timestamp = yes #utmp = yes #------------------------------------------------------- # ACL Support # #------------------------------------------------------- map acl inherit = yes nt acl support = yes inherit acls = yes inherit permissions = yes inherit owner = yes admin users = @"DOMAIN+domain admins" #------------------------------------------------------- # problem with DOS attributes and UNIX permissions # 20091105, VA #------------------------------------------------------- ea support = yes store dos attributes = Yes map archive = No map hidden = No map system = No map readonly = No
Arendt, Volker
2009-Nov-10 10:32 UTC
[Samba] Samba 3.4.2: Acces problem with EA attributes
Hello all, some additional information: a new directoriy cannot be renamed. It remains at "Neuer Ordner". A new file can be created inside the new folder. Neither directories nor files can be renamed, moved or deleted. Regards Volker -----Urspr?ngliche Nachricht----- Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] Im Auftrag von Arendt, Volker Gesendet: Dienstag, 10. November 2009 11:25 An: samba at lists.samba.org Betreff: [Samba] Samba 3.4.2: Acces problem with EA attributes Hello all, we have a problem with our samba 3.4.2. We get the following messages in out logs for some user, but not all. Users can access their personal share, can create a directory or a file, but cannot change the directory or the file. The permissions are full access on the top level folder and permissions are inherited correctly. Hints and tips are welcome Regards Dr. Volker Arendt -------------------------------------------------------------------------- Dr. Volker Arendt mailto:arendt at wiwi.uni-wuppertal.de Gau?str. 20 Tel : +49(202)4392449 42097 Wuppertal, Deutschland Fax: +49(202)4393959 University of Wuppertal Business Economics (FBB) -------------------------------------------------------------------------- [2009/11/10 09:01:52, 1] smbd/service.c:1047(make_connection_snum) 132.195.121.160 (132.195.121.160) connect to service ls-thiele$ initially as user FB6+steinbach (uid=16292, gid=13254) (pid 684068) [2009/11/10 09:31:19, 1] smbd/dosmode.c:213(get_ea_dos_attribute) get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented [2009/11/10 09:51:42, 1] smbd/service.c:1047(make_connection_snum) 132.195.121.160 (132.195.121.160) connect to service steinbach$ initially as user steinbach (uid=16292, gid=10513) (pid 684068) [2009/11/10 09:51:42, 1] smbd/dosmode.c:213(get_ea_dos_attribute) get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented Our smb.conf follows: [global] # -------------------------------------------------------- # setting base configuration parameters # # -------------------------------------------------------- workgroup = FB6 netbios name = FRIGG server string = AFS security = ADS realm = FB6.UNI-WUPPERTAL.DE auth methods = winbind # password server = AD logon server password server = 132.195.120.9 132.195.120.12 wins server = 132.195.120.12 client use spnego = yes client signing = yes # added wg. ticket #5344 #client lanman auth = no #client ntlmv2 auth = yes encrypt passwords = yes host msdfs = no #domain logons = yes # fuer Samba 3.3.0 # damit keine verschluesselte Verbindung zum Domain Controller # aufgebaut wird ldap ssl = no obey pam restrictions = no # --------------------------------------------------------- # printer settings # ??? better disable these settings ??? # --------------------------------------------------------- # printcap name = cups # disable spoolss = Yes # show add printer wizard = No # --------------------------------------------------------- # ID mapping parameters # mapping windows users to unix users # this is performed on the basis of sid on windows and # unix with uid for users and gid for groups # the backend parameter rid allows to get the same mapping # form sid to uid because it is determined algorithmically # that way we get the same mapping even if we use samba on # several disparate systems # CHANGE NOTIFICATIO: with v3.3.0 there are changes # to idmap; idmap domains is no longer supported # --------------------------------------------------------- #idmap domains = FB6 #idmap backend = rid #idmap backend = tdb idmap config FB6:backend = rid #idmap config FB6:base_rid = 0 idmap config FB6:range = 10000 - 499999 idmap uid = 10000-499999 idmap gid = 10000-499999 winbind separator =+ winbind use default domain = Yes winbind enum users = no winbind enum groups = no winbind cache time = 60 winbind gid = 10000-499999 winbind uid = 10000-499999 #template homedir = /gpfs/fbb/user/%U #template shell = /opt/pware/bin/bash #use sendfile = Yes #printing = cups #------------------------------------------------------- # Logging options # #------------------------------------------------------- # # higher log levels have a negative impact on performance log level = 1 log file = /opt/pware/var/log/ max log size = 500000 debug timestamp = yes #utmp = yes #------------------------------------------------------- # ACL Support # #------------------------------------------------------- map acl inherit = yes nt acl support = yes inherit acls = yes inherit permissions = yes inherit owner = yes admin users = @"DOMAIN+domain admins" #------------------------------------------------------- # problem with DOS attributes and UNIX permissions # 20091105, VA #------------------------------------------------------- ea support = yes store dos attributes = Yes map archive = No map hidden = No map system = No map readonly = No -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Jeremy Allison
2009-Nov-10 19:22 UTC
[Samba] Samba 3.4.2: Acces problem with EA attributes
On Tue, Nov 10, 2009 at 11:32:42AM +0100, Arendt, Volker wrote:> Hello all, > > some additional information: a new directoriy cannot be renamed. It remains at "Neuer Ordner". A new file can be created inside the new folder. > > Neither directories nor files can be renamed, moved or deleted.Bug that was fixed with 3.4.3. Jeremy.
Arendt, Volker
2009-Nov-17 11:05 UTC
[Samba] Samba 3.4.2: Acces problem with EA attributes
Hi Jeremy, this is not correct. Out problem is not solved in 3.4.3. Her is a current excerpt from a logfile showing that the error persists: [2009/11/17 10:55:54, 1] smbd/service.c:1047(make_connection_snum) 132.195.121.79 (132.195.121.79) connect to service temme$ initially as user temme (uid=15213, gid=10513) (pid 217140) [2009/11/17 11:22:51, 1] smbd/dosmode.c:213(get_ea_dos_attribute) get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented Please let me know if you need more information. Regards Volker -----Urspr?ngliche Nachricht----- Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] Im Auftrag von Jeremy Allison Gesendet: Dienstag, 10. November 2009 20:23 An: Arendt, Volker Cc: samba at lists.samba.org Betreff: Re: [Samba] Samba 3.4.2: Acces problem with EA attributes On Tue, Nov 10, 2009 at 11:32:42AM +0100, Arendt, Volker wrote:> Hello all, > > some additional information: a new directoriy cannot be renamed. It remains at "Neuer Ordner". A new file can be created inside the new folder. > > Neither directories nor files can be renamed, moved or deleted.Bug that was fixed with 3.4.3. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Arendt, Volker
2009-Nov-17 11:19 UTC
[Samba] Samba 3.4.2: Acces problem with EA attributes
Hi Jeremy, bug #6775 is still open. Is this the bug that was supposed to be fixed? Regards Volker -----Urspr?ngliche Nachricht----- Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] Im Auftrag von Jeremy Allison Gesendet: Dienstag, 10. November 2009 20:23 An: Arendt, Volker Cc: samba at lists.samba.org Betreff: Re: [Samba] Samba 3.4.2: Acces problem with EA attributes On Tue, Nov 10, 2009 at 11:32:42AM +0100, Arendt, Volker wrote:> Hello all, > > some additional information: a new directoriy cannot be renamed. It remains at "Neuer Ordner". A new file can be created inside the new folder. > > Neither directories nor files can be renamed, moved or deleted.Bug that was fixed with 3.4.3. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Hallo, Arendt,, Du meintest am 10.11.09:> Hello all,> we have a problem with our samba 3.4.2. We get the following messages > in out logs for some user, but not all. Users can access their > personal share, can create a directory or a file, but cannot change > the directory or the file. The permissions are full access on the top > level folder and permissions are inherited correctly.Message-ID: <cfPd9-2KI-5 at gated-at.bofh.it> or http://groups.google.de/group/linux.samba/msg/cc8a5ce9439c31f3 G?nter Kukkukk recommends some modifications in "/etc/fstab" and "smb.conf". On my test machine (Slackware-current, Samba 3.4.2): most "get_ea_dos_attributes" error messages have disappeared, but not all: 2 directories are empty -> error message 1 directory is not allowed for this user -> error message Viele Gruesse! Helmut
Arendt, Volker
2009-Nov-17 12:06 UTC
[Samba] Samba 3.4.3: Acces problem with EA attributes
Hi all, we still have an access problem with samba 3.4.3 on AIX 5300-10-01-0921, mounting a GPFS filesystem. The error started to appear a few weeks ago when we were still on 3.4.1. We do not have this problem on 3.0.26a, but we need to go to 3.4.3 due to Windows Vista and Windows 7 requirements. The upgrade to 3.4.3 did not solve our problem. Here is a sample error: [2009/11/17 10:55:54, 1] smbd/service.c:1047(make_connection_snum) 132.195.121.79 (132.195.121.79) connect to service temme$ initially as user temme (uid=15213, gid=10513) (pid 217140) [2009/11/17 11:22:51, 1] smbd/dosmode.c:213(get_ea_dos_attribute) get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented There is a bug open (#6775) that looks somewhat like our problem. In our smb.conf we set the following parameter, but this did not help: #------------------------------------------------------- # problem with DOS attributes and UNIX permissions # 20091105, VA #------------------------------------------------------- ea support = yes store dos attributes = Yes map archive = No map hidden = No map system = No map readonly = No Please let me know if you need more information. Do we need to open a new bu report? Shall we add a debug level 10 log and our smb.conf tot he bug ticket? Regards Volker
Volker Lendecke
2009-Nov-17 12:17 UTC
[Samba] Samba 3.4.3: Acces problem with EA attributes
On Tue, Nov 17, 2009 at 01:06:51PM +0100, Arendt, Volker wrote:> Hi all, > > we still have an access problem with samba 3.4.3 on AIX 5300-10-01-0921, mounting a GPFS filesystem. The error started to appear a few weeks ago when we were still on 3.4.1. We do not have this problem on 3.0.26a, but we need to go to 3.4.3 due to Windows Vista and Windows 7 requirements. > > The upgrade to 3.4.3 did not solve our problem. > > Here is a sample error: > > [2009/11/17 10:55:54, 1] smbd/service.c:1047(make_connection_snum) > 132.195.121.79 (132.195.121.79) connect to service temme$ initially as user temme (uid=15213, gid=10513) (pid 217140) > [2009/11/17 11:22:51, 1] smbd/dosmode.c:213(get_ea_dos_attribute) > get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implementedPlease upload a full debug level 10 log. Volker -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 197 bytes Desc: Digital signature URL: <http://lists.samba.org/pipermail/samba/attachments/20091117/a0faf725/attachment.pgp>
Arendt, Volker
2009-Nov-17 12:42 UTC
[Samba] Samba 3.4.3: Acces problem with EA attributes
Hello Volker, where shall i upload the debug log? I do not have an account on bugzilla. Do i need to create one? Volker -----Urspr?ngliche Nachricht----- Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] Im Auftrag von Volker Lendecke Gesendet: Dienstag, 17. November 2009 13:17 An: Arendt, Volker Cc: samba at lists.samba.org; Jeremy Allison Betreff: Re: [Samba] Samba 3.4.3: Acces problem with EA attributes On Tue, Nov 17, 2009 at 01:06:51PM +0100, Arendt, Volker wrote:> Hi all, > > we still have an access problem with samba 3.4.3 on AIX 5300-10-01-0921, mounting a GPFS filesystem. The error started to appear a few weeks ago when we were still on 3.4.1. We do not have this problem on 3.0.26a, but we need to go to 3.4.3 due to Windows Vista and Windows 7 requirements. > > The upgrade to 3.4.3 did not solve our problem. > > Here is a sample error: > > [2009/11/17 10:55:54, 1] smbd/service.c:1047(make_connection_snum) > 132.195.121.79 (132.195.121.79) connect to service temme$ initially as user temme (uid=15213, gid=10513) (pid 217140) > [2009/11/17 11:22:51, 1] smbd/dosmode.c:213(get_ea_dos_attribute) > get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implementedPlease upload a full debug level 10 log. Volker
Volker Lendecke
2009-Nov-17 13:29 UTC
[Samba] Samba 3.4.3: Acces problem with EA attributes
On Tue, Nov 17, 2009 at 01:42:23PM +0100, Arendt, Volker wrote:> where shall i upload the debug log? I do not have an > account on bugzilla. Do i need to create one?Probably you need to create one. Volker -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 197 bytes Desc: Digital signature URL: <http://lists.samba.org/pipermail/samba/attachments/20091117/adb55076/attachment.pgp>