thr3ads.net - samba - [Samba] Allow insecure wide links = yes, wide links =yes; but I still can't "see" files from links to NFS mounts using 3.6.15, after upgrading from 2.2.8a [Dec 2013]

If this information is useful, please help other people find it:
Share via:

Jordan Verschuer

2013-Dec-11 06:34 UTC

[Samba] Allow insecure wide links = yes, wide links =yes; but I still can't "see" files from links to NFS mounts using 3.6.15, after upgrading from 2.2.8a

Hi friends,


I updated our old sparc Solaris 9 server running samba 2.2.8a to 3.6.15 so
that Mac 10.7+ users could access this file server.

However now we can't see files in folders that are links to NFS mounts from
other servers.

I can access folders/files that are links outside the share but local to
the samba server,

but for links to folders that are mounted to the server via NFS from other
servers you can double click and get into the folder but you can't see the
files, as if they're hidden.

For e.g. my folder that I use is large, so I keep it on a separate server
which is mounted to the samba server via NFS;
          mount  -F  nfs  xraid:/Volumes/Sharing_RAID/Sharing  /raid1

and my folder under this is linked to the samba share folder called
"biograph";
          ln  -s  /raid1/Staff/Jordan  /p3/biograph/Jordan

The configuration/permsissions/ownership for these folders hasn't changed,
and I could access these folders with no problems using 2.2.8a.

I have read many posts about the "allow insecure wide links" and I
think I
have set the correct options for this in smb.conf, with allow insecure wide
links = yes, wide links = yes, follow symlinks = yes, unix extensions = yes
[global] and wide links = yes, follow symlinks = yes [share],

and if these were set incorrectly, wouldn't I get an "access
denied" type
of message appear rather than just showing no files??

I can even copy files to the linked folder, but they "disappear" or
become
hidden after a refresh, and I can see all the linked files via ls on the
samba server, so they are there and the link is ok, and I can open them and
access them fine, for e.g. using more or cat,

it's just they're no longer "visible" via the samba clients,
even though
they were under 2.2.8a.

I'm thinking it must be a permission issue that's crept in somehow, but
like I say, the ownership/permissions of the links and source files/folders
hasn't changed. Nor the user/password used to access the share, this is the
same, using smbpasswd backend.


I've copied my testparm results below for the new smb.conf, as well as the
old smb.conf.

Any help would be greatly appreciated, thanks for reading.


Cheers,
Jordan



+-----------------------------------------------------------------------------------------------------------------------------
+-----------------------------------------------------------------------------------------------------------------------------
[root at hakea:/usr/local/samba]> testparm /usr/local/samba/lib/smb.conf
Load smb config files from /usr/local/samba/lib/smb.conf
rlimit_max: increasing rlimit_max (256) to minimum Windows limit (16384)
WARNING: The "printer admin" option is deprecated
Processing section "[print$]"
Processing section "[biograph]"
Processing section "[roger]"
Processing section "[X2125-A6]"
Processing section "[wenlf]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

[global]
  server string = Samba Server
  interfaces = eri0, 152.76.10.3/255.255.255.192
  passdb backend = smbpasswd
  os level = 65
  preferred master = Yes
  domain master = Yes
  wins support = Yes
  remote announce = 152.76.10.255/WORKGROUP
  allow insecure wide links = Yes
  idmap config * : range   idmap config * : backend = tdb
  admin users = root, roger, ecat
  printer admin = @ntadmin
  wide links = Yes

[print$]
  path = /usr/local/samba/printers
  admin users = roger, root
  write list = @ntadmin, root
  guest ok = Yes

[biograph]
  comment = biograph
  path = /p3/biograph
  valid users = biograph, roger, steve, stefan, ecat, root, lingfeng, jordan
  admin users   read only = No

[roger]
  comment = roger
  path = /home/acacia/roger
  valid users = roger, root
  read only = No

[X2125-A6]
  comment = X2125 A6
  path = /var/spool/samba/print
  printable = Yes
  print ok = Yes

[wenlf]
  comment = lingfeng
  path = /home/karri/lingfeng
  valid users = lingfeng
  admin users   read only = No
  browseable = No
[root at hakea:/usr/local/samba]>
+-----------------------------------------------------------------------------------------------------------------------------
+-----------------------------------------------------------------------------------------------------------------------------


OLD 2.2.8a smb.conf
+-----------------------------------------------------------------------------------------------------------------------------
+-----------------------------------------------------------------------------------------------------------------------------
# Samba config file created using SWAT
# from libertas.nucmed.rpa.cs.nsw.gov.au (152.76.10.115)
# Date: 2008/10/17 10:57:23

# Global parameters
[global]
  server string = Samba Server
  interfaces = eri0 152.76.10.3/255.255.255.192
  encrypt passwords = Yes
  os level = 65
  preferred master = Yes
  domain master = Yes
  wins support = Yes
  remote announce = 152.76.10.255/WORKGROUP
  admin users = roger,ecat
  printer admin = @ntadmin

[print$]
  path = /usr/local/samba/printers
  admin users = roger,root
  write list = @ntadmin,root
  guest ok = Yes

[biograph]
  comment = biograph
  path = /p3/biograph
  guest account   valid users = biograph,roger,steve,stefan,ecat,root
  admin users   read only = No

[roger]
  comment = roger
  path = /home/acacia/roger
  guest account   valid users = roger,root
  read only = No

[X2125-A6]
  comment = X2125 A6
  path = /var/spool/samba/print
  guest account = ftp
  printable = Yes

[wenlf]
  comment = lingfeng
  path = /home/karri/lingfeng
  guest account   valid users = lingfeng
  admin users   read only = No
  browseable = No
+-----------------------------------------------------------------------------------------------------------------------------
+-----------------------------------------------------------------------------------------------------------------------------

Linda W

2013-Dec-11 08:20 UTC

head link

[Samba] Allow insecure wide links = yes, wide links =yes; but I still can't "see" files from links to NFS mounts using 3.6.15, after upgrading from 2.2.8a

On 12/10/2013 10:34 PM, Jordan Verschuer wrote:> Hi friends,
>
> I can access folders/files that are links outside the share but local to
> the samba server,
>
> but for links to folders that are mounted to the server via NFS from other
> servers you can double click and get into the folder but you can't see
the
> files, as if they're hidden.
>   ----

"note that "wide links" is a [S] (per share parameter)...

Michael Adam

2013-Dec-11 08:46 UTC

head link

[Samba] Allow insecure wide links = yes, wide links =yes; but I still can't "see" files from links to NFS mounts using 3.6.15, after upgrading from 2.2.8a

Hi,

you have to set "unix extensions = no" in order to be able
to use wide links. Setting "unix extensions = yes" (the default)
automatically disables insecure wide links.

Cheers - Michael

On 2013-12-11 at 17:34 +1100, Jordan Verschuer wrote:> Hi friends,
> 
> 
> I updated our old sparc Solaris 9 server running samba 2.2.8a to 3.6.15 so
> that Mac 10.7+ users could access this file server.
> 
> However now we can't see files in folders that are links to NFS mounts
from
> other servers.
> 
> I can access folders/files that are links outside the share but local to
> the samba server,
> 
> but for links to folders that are mounted to the server via NFS from other
> servers you can double click and get into the folder but you can't see
the
> files, as if they're hidden.
> 
> For e.g. my folder that I use is large, so I keep it on a separate server
> which is mounted to the samba server via NFS;
>           mount  -F  nfs  xraid:/Volumes/Sharing_RAID/Sharing  /raid1
> 
> and my folder under this is linked to the samba share folder called
> "biograph";
>           ln  -s  /raid1/Staff/Jordan  /p3/biograph/Jordan
> 
> The configuration/permsissions/ownership for these folders hasn't
changed,
> and I could access these folders with no problems using 2.2.8a.
> 
> I have read many posts about the "allow insecure wide links" and
I think I
> have set the correct options for this in smb.conf, with allow insecure wide
> links = yes, wide links = yes, follow symlinks = yes, unix extensions = yes
> [global] and wide links = yes, follow symlinks = yes [share],
> 
> and if these were set incorrectly, wouldn't I get an "access
denied" type
> of message appear rather than just showing no files??
> 
> I can even copy files to the linked folder, but they "disappear"
or become
> hidden after a refresh, and I can see all the linked files via ls on the
> samba server, so they are there and the link is ok, and I can open them and
> access them fine, for e.g. using more or cat,
> 
> it's just they're no longer "visible" via the samba
clients, even though
> they were under 2.2.8a.
> 
> I'm thinking it must be a permission issue that's crept in somehow,
but
> like I say, the ownership/permissions of the links and source files/folders
> hasn't changed. Nor the user/password used to access the share, this is
the
> same, using smbpasswd backend.
> 
> 
> I've copied my testparm results below for the new smb.conf, as well as
the
> old smb.conf.
> 
> Any help would be greatly appreciated, thanks for reading.
> 
> 
> Cheers,
> Jordan
> 
> 
> 
>
+-----------------------------------------------------------------------------------------------------------------------------
>
+-----------------------------------------------------------------------------------------------------------------------------
> [root at hakea:/usr/local/samba]> testparm /usr/local/samba/lib/smb.conf
> Load smb config files from /usr/local/samba/lib/smb.conf
> rlimit_max: increasing rlimit_max (256) to minimum Windows limit (16384)
> WARNING: The "printer admin" option is deprecated
> Processing section "[print$]"
> Processing section "[biograph]"
> Processing section "[roger]"
> Processing section "[X2125-A6]"
> Processing section "[wenlf]"
> Loaded services file OK.
> Server role: ROLE_STANDALONE
> Press enter to see a dump of your service definitions
> 
> [global]
>   server string = Samba Server
>   interfaces = eri0, 152.76.10.3/255.255.255.192
>   passdb backend = smbpasswd
>   os level = 65
>   preferred master = Yes
>   domain master = Yes
>   wins support = Yes
>   remote announce = 152.76.10.255/WORKGROUP
>   allow insecure wide links = Yes
>   idmap config * : range >   idmap config * : backend = tdb
>   admin users = root, roger, ecat
>   printer admin = @ntadmin
>   wide links = Yes
> 
> [print$]
>   path = /usr/local/samba/printers
>   admin users = roger, root
>   write list = @ntadmin, root
>   guest ok = Yes
> 
> [biograph]
>   comment = biograph
>   path = /p3/biograph
>   valid users = biograph, roger, steve, stefan, ecat, root, lingfeng,
jordan
>   admin users >   read only = No
> 
> [roger]
>   comment = roger
>   path = /home/acacia/roger
>   valid users = roger, root
>   read only = No
> 
> [X2125-A6]
>   comment = X2125 A6
>   path = /var/spool/samba/print
>   printable = Yes
>   print ok = Yes
> 
> [wenlf]
>   comment = lingfeng
>   path = /home/karri/lingfeng
>   valid users = lingfeng
>   admin users >   read only = No
>   browseable = No
> [root at hakea:/usr/local/samba]>
>
+-----------------------------------------------------------------------------------------------------------------------------
>
+-----------------------------------------------------------------------------------------------------------------------------
> 
> 
> OLD 2.2.8a smb.conf
>
+-----------------------------------------------------------------------------------------------------------------------------
>
+-----------------------------------------------------------------------------------------------------------------------------
> # Samba config file created using SWAT
> # from libertas.nucmed.rpa.cs.nsw.gov.au (152.76.10.115)
> # Date: 2008/10/17 10:57:23
> 
> # Global parameters
> [global]
>   server string = Samba Server
>   interfaces = eri0 152.76.10.3/255.255.255.192
>   encrypt passwords = Yes
>   os level = 65
>   preferred master = Yes
>   domain master = Yes
>   wins support = Yes
>   remote announce = 152.76.10.255/WORKGROUP
>   admin users = roger,ecat
>   printer admin = @ntadmin
> 
> [print$]
>   path = /usr/local/samba/printers
>   admin users = roger,root
>   write list = @ntadmin,root
>   guest ok = Yes
> 
> [biograph]
>   comment = biograph
>   path = /p3/biograph
>   guest account >   valid users = biograph,roger,steve,stefan,ecat,root
>   admin users >   read only = No
> 
> [roger]
>   comment = roger
>   path = /home/acacia/roger
>   guest account >   valid users = roger,root
>   read only = No
> 
> [X2125-A6]
>   comment = X2125 A6
>   path = /var/spool/samba/print
>   guest account = ftp
>   printable = Yes
> 
> [wenlf]
>   comment = lingfeng
>   path = /home/karri/lingfeng
>   guest account >   valid users = lingfeng
>   admin users >   read only = No
>   browseable = No
>
+-----------------------------------------------------------------------------------------------------------------------------
>
+-----------------------------------------------------------------------------------------------------------------------------
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 215 bytes
Desc: Digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20131211/ec1ffeb3/attachment.pgp>

Possibly Parallel Threads

Search for more reasonably related threads

samba - Dec 2013 - Allow insecure wide links = yes, wide links =yes; but I still can't "see" files from links to NFS mounts using 3.6.15, after upgrading from 2.2.8a

[Samba] Allow insecure wide links = yes, wide links =yes; but I still can't "see" files from links to NFS mounts using 3.6.15, after upgrading from 2.2.8a

[Samba] Allow insecure wide links = yes, wide links =yes; but I still can't "see" files from links to NFS mounts using 3.6.15, after upgrading from 2.2.8a

[Samba] Allow insecure wide links = yes, wide links =yes; but I still can't "see" files from links to NFS mounts using 3.6.15, after upgrading from 2.2.8a

Possibly Parallel Threads