samba - Jun 2017 - recycle on a fileserver domain member

Hello guys,

I configured the recycle in my fileserver, but when I logged in with normal
user and delete some files, folders, etc, the errors occurs.

./addc-pc-01.log:28251:  recycle: mkdir failed for .recycle with error:
Permission denied
./addc-pc-01.log:28252:[2017/06/13 14:15:11.816085,  3]
../source3/modules/vfs_recycle.c:582(recycle_unlink)
./addc-pc-01.log:28253:  recycle: Could not create directory, purging
HOME/eloisa.gomes/Cópia de CD Versão Final.doc...
./addc-pc-01.log:32167:[2017/06/13 14:22:46.278805,  1]
../source3/modules/vfs_recycle.c:311(recycle_create_dir)
./addc-pc-01.log:32168:  recycle: mkdir failed for .recycle with error:
Permission denied
./addc-pc-01.log:32169:[2017/06/13 14:22:46.278823,  3]
../source3/modules/vfs_recycle.c:582(recycle_unlink)
./addc-pc-01.log:32170:  recycle: Could not create directory, purging
HOME/eloisa.gomes/Cópia de CD Versão Final.doc...
./addc-pc-01.log:32217:[2017/06/13 14:22:46.284267,  1]
../source3/modules/vfs_recycle.c:311(recycle_create_dir)
./addc-pc-01.log:32218:  recycle: mkdir failed for .recycle with error:
Permission denied

[global]
...
vfs objects = acl_xattr, recycle, full_audit

[storage]
        path = /home/dados/
        read only = no
        #hide unreadable = yes
        #hide unwriteable files = yes

        ## Lixeira para o Samba ADDC
        recycle:keeptree = yes
        recycle:versions = yes
        recycle:touch = yes
        recycle:directory_mode = 0700
        recycle:subdir_mode = 0700
        recycle:inherit_nt_acl = Yes
        #acl_xattr:ignore system acls = yes
        recycle:repository = .recycle/%U
        recycle:exclude = *.tmp, *.log, *.obj, ~*.*, *.bak
        recycle:exclude_dir = tmp, cache, profiles

Do I need to create the .recycle folder on my fileserver? If yes, what
permissions do I set in the folder?

-- 
Elias Pereira

On Tue, 13 Jun 2017 14:56:33 -0300
Elias Pereira via samba <samba at lists.samba.org> wrote:
> Hello guys,
> 
> I configured the recycle in my fileserver, but when I logged in with
> normal user and delete some files, folders, etc, the errors occurs.
> 
> ./addc-pc-01.log:28251:  recycle: mkdir failed for .recycle with
> error: Permission denied
> 
> [global]
>         recycle:repository = .recycle/%U
> 
> Do I need to create the .recycle folder on my fileserver? If yes, what
> permissions do I set in the folder?
> 
You seem to be telling Samba to create the recycle bin in '/', which
if your machine is like mine, has permissions like these:

drwxr-xr-x 30 root root 4096 Feb 27 12:49 /

And as you can see, only the root user can write to '/'

So, to answer your question, yes, you will need to create '/.recycle'
and change the permissions so that your users can create their recycle
dir, probably by the group permissions.

Rowland

Thanks for your answer Rowland,

I fix this problem. I had not put writing permission to the "domain
users".

Http://i.imgur.com/oLXS0Kn.png

In the image above I show the permissions of the recycle folder. They are
correct?

Do I need to have these 3 entries below in my smb.conf?

recycle:directory_mode = 0700
recycle:subdir_mode = 0700
recycle:inherit_nt_acl = Yes

On Tue, Jun 13, 2017 at 3:23 PM, Rowland Penny <rpenny at samba.org>
wrote:
> On Tue, 13 Jun 2017 14:56:33 -0300
> Elias Pereira via samba <samba at lists.samba.org> wrote:
>
> > Hello guys,
> >
> > I configured the recycle in my fileserver, but when I logged in with
> > normal user and delete some files, folders, etc, the errors occurs.
> >
> > ./addc-pc-01.log:28251:  recycle: mkdir failed for .recycle with
> > error: Permission denied
> >
> > [global]
> >         recycle:repository = .recycle/%U
> >
> > Do I need to create the .recycle folder on my fileserver? If yes, what
> > permissions do I set in the folder?
> >
>
> You seem to be telling Samba to create the recycle bin in '/',
which
> if your machine is like mine, has permissions like these:
>
> drwxr-xr-x 30 root root 4096 Feb 27 12:49 /
>
> And as you can see, only the root user can write to '/'
>
> So, to answer your question, yes, you will need to create
'/.recycle'
> and change the permissions so that your users can create their recycle
> dir, probably by the group permissions.
>
> Rowland
>


-- 
Elias Pereira