L.P.H. van Belle
2011-Apr-01 07:59 UTC
[Samba] FW: ACL Lost and unable to set rights from explorer (xp)
Hai,
Ik have tried the option: follow symlinks = yes, but this also doesnt work.
My workstation is XP SP3.
Im also having some CIFS VFS messages on my console,
kern.log.0:Mar 30 20:47:52 ms249-lin-001 kernel: [12804.264823] CIFS VFS:
strtoUCS: char2uni of -121 returned -22
kern.log.0:Mar 30 20:47:52 ms249-lin-001 kernel: [12804.323034] CIFS VFS:
strtoUCS: char2uni of -127 returned -22
kern.log.0:Mar 30 20:47:52 ms249-lin-001 kernel: [12804.323278] CIFS VFS:
strtoUCS: char2uni of -127 returned -22
kern.log.0:Mar 30 20:55:16 ms249-lin-001 kernel: [13248.053159] CIFS VFS:
strtoUCS: char2uni of -119 returned -22
kern.log.0:Mar 30 20:55:16 ms249-lin-001 kernel: [13248.053405] CIFS VFS:
strtoUCS: char2uni of -119 returned -22
kern.log.0:Mar 30 21:14:11 ms249-lin-001 kernel: [14382.464779] CIFS VFS:
strtoUCS: char2uni of -13 returned -22
kern.log.0:Mar 30 21:14:11 ms249-lin-001 kernel: [14382.464806] CIFS VFS:
strtoUCS: char2uni of -13 returned -22
kern.log.0:Mar 30 21:14:11 ms249-lin-001 kernel: [14382.471268] CIFS VFS:
strtoUCS: char2uni of -13 returned -22
kern.log.0:Mar 30 21:14:11 ms249-lin-001 kernel: [14382.471293] CIFS VFS:
strtoUCS: char2uni of -13 returned -22
messages:Mar 30 11:05:50 ms249-lin-001 kernel: CIFS: Unknown mount option
prefixpath
messages:Mar 30 11:08:30 ms249-lin-001 kernel: CIFS: Unknown mount option
prefixpath
messages:Mar 30 11:38:54 ms249-lin-001 kernel: CIFS: Unknown mount option
prefixpath
messages:Mar 30 11:41:12 ms249-lin-001 kernel: CIFS: Unknown mount option
prefixpath
messages:Mar 30 12:02:22 ms249-lin-001 kernel: CIFS: Unknown mount option
prefixpath
messages:Mar 30 12:02:57 ms249-lin-001 kernel: CIFS: Unknown mount option
prefixpath
messages:Mar 30 12:36:59 ms249-lin-001 kernel: <fs/cifs/inode.c: CIFS VFS:
in cifs_revalidate as Xid: 182706760fs/cifs/inode.c: CIFS VFS: in
cifs_revalidate as Xid: 1827067624 with uid: 0
messages:Mar 30 12:36:59 ms249-lin-001 kernel: <fs/cifs/inode.c: CIFS VFS:
in cifs_revalidate as Xid: 1827067964 with uid: 0
syslog.0:Mar 31 10:27:47 ms249-lin-001 kernel: [61999.039710] CIFS VFS: No
response for cmd 114 mid 40334
syslog.0:Mar 31 20:30:47 ms249-lin-001 kernel: [98178.459129] CIFS VFS:
strtoUCS: char2uni of -21 returned -22
syslog.0:Mar 31 20:30:49 ms249-lin-001 kernel: [98180.484485] CIFS VFS:
strtoUCS: char2uni of -108 returned -22
syslog.0:Mar 31 20:30:49 ms249-lin-001 kernel: [98180.543383] CIFS VFS:
strtoUCS: char2uni of -55 returned -22
syslog.0:Mar 31 20:30:49 ms249-lin-001 kernel: [98181.123411] CIFS VFS:
strtoUCS: char2uni of -108 returned -22
syslog.0:Mar 31 20:30:52 ms249-lin-001 kernel: [98183.604815] CIFS VFS:
strtoUCS: char2uni of -4 returned -22
syslog.0:Mar 31 20:30:52 ms249-lin-001 kernel: [98183.850038] CIFS VFS:
strtoUCS: char2uni of -23 returned -22
syslog.0:Mar 31 20:30:54 ms249-lin-001 kernel: [98185.403633] CIFS VFS:
strtoUCS: char2uni of -23 returned -22
syslog.0:Mar 31 20:30:54 ms249-lin-001 kernel: [98185.418036] CIFS VFS:
strtoUCS: char2uni of -23 returned -22
syslog.0:Mar 31 20:30:57 ms249-lin-001 kernel: [98188.452798] CIFS VFS:
strtoUCS: char2uni of -24 returned -22
syslog.0:Mar 31 20:30:57 ms249-lin-001 kernel: [98188.586922] CIFS VFS:
strtoUCS: char2uni of -21 returned -22
syslog.0:Mar 31 20:30:57 ms249-lin-001 kernel: [98189.274373] CIFS VFS:
strtoUCS: char2uni of -23 returned -22
syslog.0:Mar 31 20:31:03 ms249-lin-001 kernel: [98195.360788] CIFS VFS:
strtoUCS: char2uni of -21 returned -22
syslog.0:Mar 31 20:31:04 ms249-lin-001 kernel: [98195.400124] CIFS VFS:
strtoUCS: char2uni of -10 returned -22
here is a part of my smb.conf of the running config.
## MISC FILES/DIRECTORIES
# inherit permissions = yes
# inherit acls = yes
nt acl support = yes
dos filemode = yes
map acl inherit = yes
ea support = yes
store dos attributes = no
map hidden = no
map system = no
map archive = no
map readonly = no
dos charset = 850
# unix charset = ISO8859-1
preserve case = yes
short preserve case = yes
case sensitive = auto
directory mask = 0755
hide dot files = yes
hide unreadable = yes
[homes]
comment = Prive documenten van %U
read only = No
create mask = 0644
directory mask = 0775
browseable = Yes
follow symlinks = yes
vfs object = recycle
recycle: config-files = /etc/samba/samba-recycle.conf
>-----Oorspronkelijk bericht-----
>Van: belle at bazuin.nl [mailto:samba-bounces at lists.samba.org]
>Namens L.P.H. van Belle
>Verzonden: 2011-03-31 14:05
>Aan: samba at lists.samba.org
>Onderwerp: [Samba] ACL Lost and unable to set rights from explorer (xp)
>
>Hi all,
>
>I have 2 problems :-(
>
>Im running debian kernel 2.6.32 samba 3.5.6.
>i upgraded my samba from 3.2.4 to 3.5.6
>now i have the following problems.
>
>When i want to set my rights on a folder i get "access denied"
>this was working ok with the 3.2.4 version.
>
>fstab has acl,user_xattr on the partition i use for samba.
>what did i forget in this, or what is changed between these versions of
>samba.
>i didnt change my smb.conf
>
>second.
>
>i have a nfs mounted share. users are able to access the
>folders and files
>on this share.
>i symlinked for every user the user folder to the
>home/nfsmounted folder of
>the users.
>this also worked on 3.2.4 but now 1 get access denied.
>when i ssh to my server then im able to access the symlinked
>folder, but not
>from xp.
>
>Setup.
>samba PDC with ldap.
>
>anyone idee's, i googled a lot already but couldnt find a fix.
>
>
>im also seening these messages in the following logs:
>log.smb
>[2011/03/31 14:00:37.657069, 1] smbd/server.c:240(cleanup_timeout_fn)
> Cleaning up brl and lock database after unclean shutdown
>
>
>my log of my pc.
>[2011/03/31 12:24:56.757172, 0]
>modules/vfs_posixacl.c:349(smb_acl_to_posix)
> smb_acl_to_posix: ACL is invalid for set (Invalid argument)
>
>011/03/31 08:30:22.227927, 1] smbd/service.c:678(make_connection_snum)
> create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
>
>011/03/30 23:52:11.037062, 0]
>smbd/nttrans.c:2204(call_nt_transact_ioctl)
> call_nt_transact_ioctl(0x900eb): Currently not implemented.
>
>i hoop someone can help me.
>
>best regards,
>
>Louis
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4906 bytes
Desc: not available
URL:
<http://lists.samba.org/pipermail/samba/attachments/20110401/20c24748/attachment.bin>
TAKAHASHI Motonobu
2011-Apr-02 18:35 UTC
[Samba] FW: ACL Lost and unable to set rights from explorer (xp)
From: L.P.H._van_Belle <belle at bazuin.nl> Date: Fri, 1 Apr 2011 09:59:10 +0200> Ik have tried the option: follow symlinks = yes, but this also doesnt work. > > My workstation is XP SP3. > Im also having some CIFS VFS messages on my console,(snip) Although I may not understand your problem, Have your tried "wide links = yes"? The default value of this parameter is changed from "yes" to "no" at Samba 3.4.6 for security reason. --- TAKAHASHI Motonobu <monyo at monyo.com>
L.P.H. van Belle
2011-Apr-02 20:05 UTC
[Samba] FW: ACL Lost and unable to set rights from explorer (xp)
Hi,
my problem exists in 2 problems.
1) i lost the ability to set rights from windows explorer ( even connected
as root )
i get the message, "the parameter is incorrect"
2) in my home share have a symlink to a directory which is connected with
nfs to a sco server
before ( samba 3.2.4 ) i was able to access and read/write in the
symlinked folder.
now, samba 3.5.6 (debian backport) im unable to access the symlinked
folder, message "access denied"
i tried your suggestions.
this is what i have in my smb.conf.
in global i also have
unix extentions = no
[homes]
comment = Prive documenten van %U
read only = No
create mask = 0644
directory mask = 0775
browseable = Yes
wide links = yes
follow symlinks = yes
vfs object = recycle
recycle: config-files = /etc/samba/samba-recycle.conf
Im still unable to access the symlinked folder.
this is in the log
[2011/04/02 21:48:19.715355, 0] param/loadparm.c:9912(widelinks_warning)
Share 'username' has wide links and unix extensions enabled. These
parameters are incompatible. Wide links will be disabled for this share.
[2011/04/02 21:48:19.716721, 1] smbd/service.c:1070(make_connection_snum)
PCNAME (192.168.0.1) connect to service username initially as user
username (uid=0, gid=512) (pid 30552)
dmesg gives messages
[271229.471873] CIFS VFS: strtoUCS: char2uni of -23 returned -22
[271229.605270] CIFS VFS: strtoUCS: char2uni of -24 returned -22
[271232.040536] CIFS VFS: strtoUCS: char2uni of -126 returned -22
[271232.616308] CIFS VFS: strtoUCS: char2uni of -121 returned -22
[271232.663801] CIFS VFS: strtoUCS: char2uni of -127 returned -22
[271233.942182] CIFS VFS: strtoUCS: char2uni of -119 returned -22
[271279.065694] CIFS VFS: strtoUCS: char2uni of -13 returned -22
[271279.065726] CIFS VFS: strtoUCS: char2uni of -13 returned -22
i can access the symlinked folder as unix users with shell access. so it
must a samba setting.
any other suggestions ?
thank you in advance for the support.
Louis
>-----Oorspronkelijk bericht-----
>Van: TAKAHASHI Motonobu [mailto:monyo at monyo.com]
>Verzonden: 2011-04-02 20:36
>Aan: L.P.H. van Belle
>CC: samba at lists.samba.org
>Onderwerp: Re: [Samba] FW: ACL Lost and unable to set rights
>from explorer (xp)
>
>From: L.P.H._van_Belle <belle at bazuin.nl>
>Date: Fri, 1 Apr 2011 09:59:10 +0200
>
>> Ik have tried the option: follow symlinks = yes, but this
>also doesnt work.
>>
>> My workstation is XP SP3.
>> Im also having some CIFS VFS messages on my console,
>
>(snip)
>
>Although I may not understand your problem,
>
>Have your tried "wide links = yes"?
>The default value of this parameter is changed from "yes" to
"no" at
>Samba 3.4.6 for security reason.
>
>---
>TAKAHASHI Motonobu <monyo at monyo.com>
>
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4906 bytes
Desc: not available
URL:
<http://lists.samba.org/pipermail/samba/attachments/20110402/a887a510/attachment.bin>
Alex Crow
2011-Apr-05 12:20 UTC
[Samba] FW: ACL Lost and unable to set rights from explorer (xp)
On 03/04/11 21:28, L.P.H. van Belle wrote:> Lol, yes the same typo here, but its corrected in my smb.conf en tested it. > ( my english is not that good ) > > Now only my main problem, why i cant set my rights any more. > checked everything, fstab is ok, acl and user_xattr, > rights on folders, checked als from console. > Im lost in this one. I must fix it because is on my mijn PDC. > > so if someone has any idees, please trow them at me. ;-) > > Louis > >I have seen this too. I found the only way to consistently set ACLs and avoid this is to do it from the Linux side. You may however try removing all the acls (using setfacl -b) and then trying to add them from Windows again. Cheers Alex -- This message is intended only for the addressee and may contain confidential information. Unless you are that person, you may not disclose its contents or use it in any way and are requested to delete the message along with any attachments and notify us immediately. "Transact" is operated by Integrated Financial Arrangements plc Domain House, 5-7 Singer Street, London EC2A 4BQ Tel: (020) 7608 4900 Fax: (020) 7608 5300 (Registered office: as above; Registered in England and Wales under number: 3727592) Authorised and regulated by the Financial Services Authority (entered on the FSA Register; number: 190856)