samba - May 2016 - smb_set_file_dosmode error: BUG after update to samba4-4.4.2

On 05/19/2016 03:16 AM, Markus Dellermann wrote:
> Am Mittwoch, 18. Mai 2016, 17:10:13 CEST schrieb Rowland penny:
>> On 18/05/16 16:16, Markus Dellermann wrote:
>> ...
>>> Not related to your Problem, but are you sure, that this repo
really
>>> provide ad-dc - funktionality??
>>>
>>> Markus
>> It looks like you are right, there is also these lines:
>> ...
>> Rowland
> Hi,
> for the record,
> it is possible to build own packages on opensuse-build-server for several
> distros.
> So there are one or two inofficial repos with ad-dc enabled samba-packages
for
> opensuse..
> Maybe not pefect, but works good for me
>
> (...eventually really a good place to do this for different distros...)
>   
> Markus
>
>
Yes, we are using an "unofficial" repository on this machine.  In
fact,
the following Samba repositories are configured:

http://download.opensuse.org/repositories/home:/jniltinho/openSUSE_13.2
http://download.opensuse.org/repositories/network:/samba:/TESTING/openSUSE_13.2
http://download.opensuse.org/repositories/network:/samba:/STABLE/openSUSE_13.2

The rpm samba4-4.4.2-1.1.x86_64.rpm is being taken from the first of these,
which has been working quite successfully for us.

The newest version of this repository is for OpenSuSE Leap 42.1 at
http://download.opensuse.org/repositories/home:/jniltinho/openSUSE_Leap_42.1/x86_64/
but it still uses the 4.4.2 version.

I'll contact Nilton OS to see if he plans to update to 4.4.3, so I can check
out Rowland Penny's suggestion that this problem may be solved in that
version.

If, not, I suppose I could diff the Nilton version of 4.4.2 and the standard
version to figure out how to modify the 4.4.3 version to run under OpenSuSE.

Bob Nelson

On 19/05/16 16:16, Robert K. Nelson wrote:
> On 05/19/2016 03:16 AM, Markus Dellermann wrote:
>> Am Mittwoch, 18. Mai 2016, 17:10:13 CEST schrieb Rowland penny:
>>> On 18/05/16 16:16, Markus Dellermann wrote:
>>> ...
>>>> Not related to your Problem, but are you sure, that this repo
really
>>>> provide ad-dc - funktionality??
>>>>
>>>> Markus
>>> It looks like you are right, there is also these lines:
>>> ...
>>> Rowland
>> Hi,
>> for the record,
>> it is possible to build own packages on opensuse-build-server for 
>> several
>> distros.
>> So there are one or two inofficial repos with ad-dc enabled 
>> samba-packages for
>> opensuse..
>> Maybe not pefect, but works good for me
>>
>> (...eventually really a good place to do this for different distros...)
>>   Markus
>>
>>
> Yes, we are using an "unofficial" repository on this machine.  In
> fact, the following Samba repositories are configured:
>
> http://download.opensuse.org/repositories/home:/jniltinho/openSUSE_13.2
>
http://download.opensuse.org/repositories/network:/samba:/TESTING/openSUSE_13.2
>
>
http://download.opensuse.org/repositories/network:/samba:/STABLE/openSUSE_13.2
>
>
> The rpm samba4-4.4.2-1.1.x86_64.rpm is being taken from the first of 
> these, which has been working quite successfully for us.
>
> The newest version of this repository is for OpenSuSE Leap 42.1 at
>
http://download.opensuse.org/repositories/home:/jniltinho/openSUSE_Leap_42.1/x86_64/
>
> but it still uses the 4.4.2 version.
>
> I'll contact Nilton OS to see if he plans to update to 4.4.3, so I can 
> check out Rowland Penny's suggestion that this problem may be solved 
> in that version.
>
> If, not, I suppose I could diff the Nilton version of 4.4.2 and the 
> standard version to figure out how to modify the 4.4.3 version to run 
> under OpenSuSE.
>
> Bob Nelson
>
>
>
If you run 'samba -V' do you get any output ?
Does samba-tool exist ?

If the answer to either or both is no, then you cannot have an AD domain.

Rowland

On 05/19/2016 11:57 AM, Rowland penny wrote:
> On 19/05/16 16:16, Robert K. Nelson wrote:
>> On 05/19/2016 03:16 AM, Markus Dellermann wrote:
>>> Am Mittwoch, 18. Mai 2016, 17:10:13 CEST schrieb Rowland penny:
>>>> On 18/05/16 16:16, Markus Dellermann wrote:
>>>> ...
>>>>> Not related to your Problem, but are you sure, that this
repo really
>>>>> provide ad-dc - funktionality??
>>>>>
>>>>> Markus
>>>> It looks like you are right, there is also these lines:
>>>> ...
>>>> Rowland
>>> Hi,
>>> for the record,
>>> it is possible to build own packages on opensuse-build-server for 
>>> several
>>> distros.
>>> So there are one or two inofficial repos with ad-dc enabled 
>>> samba-packages for
>>> opensuse..
>>> Maybe not pefect, but works good for me
>>>
>>> (...eventually really a good place to do this for different
distros...)
>>>   Markus
>>>
>>>
>> Yes, we are using an "unofficial" repository on this machine.
In
>> fact, the following Samba repositories are configured:
>>
>> http://download.opensuse.org/repositories/home:/jniltinho/openSUSE_13.2
>>
http://download.opensuse.org/repositories/network:/samba:/TESTING/openSUSE_13.2
>>
>>
http://download.opensuse.org/repositories/network:/samba:/STABLE/openSUSE_13.2
>>
>>
>> The rpm samba4-4.4.2-1.1.x86_64.rpm is being taken from the first of 
>> these, which has been working quite successfully for us.
>>
>> The newest version of this repository is for OpenSuSE Leap 42.1 at
>>
http://download.opensuse.org/repositories/home:/jniltinho/openSUSE_Leap_42.1/x86_64/
>>
>> but it still uses the 4.4.2 version.
>>
>> I'll contact Nilton OS to see if he plans to update to 4.4.3, so I 
>> can check out Rowland Penny's suggestion that this problem may be 
>> solved in that version.
>>
>> If, not, I suppose I could diff the Nilton version of 4.4.2 and the 
>> standard version to figure out how to modify the 4.4.3 version to run 
>> under OpenSuSE.
>>
>> Bob Nelson
>>
>>
>>
>
> If you run 'samba -V' do you get any output ?
> Does samba-tool exist ?
>
> If the answer to either or both is no, then you cannot have an AD domain.
>
> Rowland
>
The answer to both is no, which has to be, since I'm using Samba4 AD for 
unified login, windows access to Linux files, and for DNS resolution. 
Thanks to all concerned for this incredible useful too.

They work fast in Brasil! Right after I asked, Nilton OS added Samba 
4.4.3 to his OpenSuSE repositories. I installed it and checked it:

ascpc21:~ # samba -V
Version 4.4.3

Still failing. In fact now I see both sys_acl_set_file and 
sys_set_file_dosmode errors. The log file reads:

[2016/05/19 12:41:56.327435,  2] 
../source3/smbd/close.c:780(close_normal_file)
   ASC\jnitz closed file 
Projects/ALI/CAD/ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (numopen=4) 
NT_STATUS_OK
[2016/05/19 12:41:56.334243,  2] 
../source4/dns_server/dns_query.c:994(dns_server_process_query_send)
   Not authoritative for 'safebrowsing-cache.google.com', forwarding
[2016/05/19 12:41:56.334628,  2] 
../source4/dns_server/dns_query.c:994(dns_server_process_query_send)
   Not authoritative for 'safebrowsing-cache.google.com', forwarding
[2016/05/19 12:41:56.369922,  2] ../source3/smbd/open.c:1006(open_file)
   ASC\jnitz opened file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM read=Yes 
write=Yes (numopen=5)
[2016/05/19 12:41:56.372597,  2] 
../source3/smbd/posix_acls.c:3040(set_canon_ace_list)
   set_canon_ace_list: sys_acl_set_file failed for file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (Operation 
not supported).
[2016/05/19 12:41:56.420078,  2] 
../source3/smbd/close.c:780(close_normal_file)
   ASC\jnitz closed file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (numopen=4) 
NT_STATUS_OK
[2016/05/19 12:41:56.421726,  2] ../source3/smbd/open.c:1006(open_file)
   ASC\jnitz opened file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM read=No 
write=No (numopen=5)
[2016/05/19 12:41:56.422742,  2] 
../source3/smbd/close.c:780(close_normal_file)
   ASC\jnitz closed file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (numopen=4) 
NT_STATUS_OK
[2016/05/19 12:41:56.423770,  2] ../source3/smbd/open.c:1006(open_file)
   ASC\jnitz opened file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM read=No 
write=No (numopen=5)
[2016/05/19 12:41:56.424819,  2] 
../source3/smbd/trans2.c:6183(smb_set_file_dosmode)
   smb_set_file_dosmode: file_set_dosmode of 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM failed 
(Operation not supported)
[2016/05/19 12:41:56.425344,  2] 
../source3/smbd/close.c:780(close_normal_file)
   ASC\jnitz closed file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (numopen=4) 
NT_STATUS_OK
[2016/05/19 12:41:56.787246,  2] ../source3/smbd/open.c:1006(open_file)
   ASC\jnitz opened file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM read=No 
write=No (numopen=5)
[2016/05/19 12:41:56.788304,  2] 
../source3/smbd/close.c:780(close_normal_file)
   ASC\jnitz closed file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (numopen=4) 
NT_STATUS_OK
[2016/05/19 12:41:56.789430,  2] ../source3/smbd/open.c:1006(open_file)
   ASC\jnitz opened file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM read=Yes 
write=No (numopen=5)
[2016/05/19 12:41:56.791039,  2] 
../source3/smbd/close.c:780(close_normal_file)
   ASC\jnitz closed file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (numopen=4) 
NT_STATUS_OK
[2016/05/19 12:41:56.791985,  2] ../source3/smbd/open.c:1006(open_file)
   ASC\jnitz opened file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM read=Yes 
write=No (numopen=5)
[2016/05/19 12:41:56.793107,  2] 
../source3/smbd/close.c:780(close_normal_file)
   ASC\jnitz closed file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (numopen=4) 
NT_STATUS_OK
[2016/05/19 12:41:56.793711,  2] ../source3/smbd/open.c:1006(open_file)
   ASC\jnitz opened file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM read=Yes 
write=No (numopen=5)
[2016/05/19 12:41:56.794885,  2] 
../source3/smbd/close.c:780(close_normal_file)
   ASC\jnitz closed file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (numopen=4) 
NT_STATUS_OK
[2016/05/19 12:41:56.834743,  2] ../source3/smbd/open.c:1006(open_file)
   ASC\jnitz opened file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM read=Yes 
write=No (numopen=5)
[2016/05/19 12:41:56.835820,  2] 
../source3/smbd/close.c:780(close_normal_file)
   ASC\jnitz closed file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (numopen=4) 
NT_STATUS_OK
[2016/05/19 12:41:56.836625,  2] ../source3/smbd/open.c:1006(open_file)
   ASC\jnitz opened file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM read=Yes 
write=No (numopen=5)
[2016/05/19 12:41:56.837654,  2] 
../source3/smbd/close.c:780(close_normal_file)
   ASC\jnitz closed file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (numopen=4) 
NT_STATUS_OK
[2016/05/19 12:41:56.838247,  2] ../source3/smbd/open.c:1006(open_file)
   ASC\jnitz opened file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM read=Yes 
write=No (numopen=5)
[2016/05/19 12:41:56.839437,  2] 
../source3/smbd/close.c:780(close_normal_file)
   ASC\jnitz closed file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (numopen=4) 
NT_STATUS_OK
[2016/05/19 12:41:56.879357,  2] ../source3/smbd/open.c:1006(open_file)
   ASC\jnitz opened file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM read=Yes 
write=No (numopen=5)
[2016/05/19 12:41:56.880462,  2] 
../source3/smbd/close.c:780(close_normal_file)
   ASC\jnitz closed file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (numopen=4) 
NT_STATUS_OK
[2016/05/19 12:41:56.881248,  2] ../source3/smbd/open.c:1006(open_file)
   ASC\jnitz opened file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM read=Yes 
write=No (numopen=5)
[2016/05/19 12:41:56.882298,  2] 
../source3/smbd/close.c:780(close_normal_file)
   ASC\jnitz closed file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (numopen=4) 
NT_STATUS_OK
[2016/05/19 12:41:56.882909,  2] ../source3/smbd/open.c:1006(open_file)
   ASC\jnitz opened file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM read=Yes 
write=No (numopen=5)
[2016/05/19 12:41:56.884262,  2] 
../source3/smbd/close.c:780(close_normal_file)
   ASC\jnitz closed file 
Projects/ALI/CAD/~$ALI_Pit-8-Concept_Assy-0_MAIN_00.SLDASM (numopen=4) 
NT_STATUS_OK)

How can I help straighten this out? Could this be an issue with kerberos 
versions?

Bob Nelson