francis.dupin at ifsttar.fr
2013-Apr-07 13:28 UTC
[Samba] Samba 4.0.4 : Unable to map unix gid group
Hi, I have compiled and installed the stable 4.0.4 version from http://ftp.samba.org/pub/samba/stable/samba-4.0.4.tar.gz I would like to share directories based only on unix uid and gid, (on Ubunu 12.04LTS) To test I have added 2 users to the system and samba (same password) : user1 and user2 user1 is member of the groups permanentstest and usersbasictest user2 is member of the group userbasictest Test : id user1 uid=10005(user1) gid=10005(user1) groupes=10005(user1),10010(permanentstest),10013(usersbasictest) id user2 uid=10006(user2) gid=10006(user2) groupes=10006(user2),10013(usersbasictest) users added to samba by : /usr/local/samba/bin/samba-tool user add user1 /usr/local/samba/bin/samba-tool user add user2 I have created 2 directories : drwxrwxr-- 2 user1 permanentstest 4096 avril 7 13:04 test1 drwxrwxr-- 2 user2 usersbasictest 4096 avril 7 13:05 test2 user1 can access to test1 (matching user and group) but user can't access to test2 (but user1 match the group and has rwx group access to test2) The test from another Linux workstation : /usr/local/samba/bin/smbclient -U user1 //serverIP/shares smb: \test2\> dir NT_STATUS_ACCESS_DENIED listing \test2\* in the log file : [2013/04/07 15:13:53.675753, 3] ../source3/smbd/trans2.c:2350(call_trans2findfirst) call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0, close_if_end = 1 requires_resume_key = 1 backup_priv = 0 level = 0x104, max_data_bytes = 65535 [2013/04/07 15:13:53.675856, 3] ../source3/smbd/vfs.c:1118(check_reduced_name) check_reduced_name [test2/*] [/home/shares] [2013/04/07 15:13:53.675925, 3] ../source3/smbd/vfs.c:1172(check_reduced_name) check_reduced_name: couldn't get realpath for test2/* [2013/04/07 15:13:53.675959, 3] ../source3/smbd/filename.c:1377(filename_convert_internal) filename_convert_internal: check_name failed for name test2/* with NT_STATUS_ACCESS_DENIED I have also tested that user2 can access to test2. Any idea ? Thank you in advance. Below my configuration Samba Installed with no particular options : ./configure make make install then /usr/local/samba/bin/samba-tool domain provision realm: TEST Server Role : standalone DNS_backend : SAMBA_INTERNAL I have made many and many tests in smb.conf. Last version is : smb.conf : # Global parameters [global] workgroup = TEST realm = TEST netbios name = LIVIC45 server string = serveur %h (Samba %v, Ubuntu) server role = standalone server security = user encrypt passwords = Yes passdb backend = samba_dsdb log level = 3 log file = /var/log/samba/samba.log time server = Yes domain logons = Yes preferred master = Yes local master = Yes domain master = Yes domain logons = Yes dns proxy = No wins support = No lock directory = /var/lock/samba [shares] comment = share for test path = /home/shares writeable = Yes read only = No create mask = 0666 directory mask = 0777 inherit permissions = Yes guest ok = No follow symlinks = Yes browsable = Yes