I've noticed myself similiar issue. Windows 10 (v 1803) - window with security tab open crashes on certain files (yes, just the window, not whole OS). Just before crash i see unresolved SID which looks like nothing I know (doesn't look like domain SID - maybe local user SID from samba member server?). All files that cause this issue are from any of the samba servers. Same files I can vew and edit "security" tab no problem on older micrososft OS (win 2012 r2 server or windows 7). I have samba 4.8.3 DC's. I didn't dig too much into it, so I can't help, other than confirm, that there is an issue with security tab under specific circumstances. W dniu 16.08.2018 o 17:22, Rowland Penny via samba pisze:> On Thu, 16 Aug 2018 16:59:22 +0200 > Kacper <kacper at kacper.se> wrote: > >> By primary group I mean the group that is set by chgrp. that is the >> group returned after the pound key (#) from getfacl. In other words >> the Unix group and not the one managed by ACLs. >> > That is not necessarily the users primary group, the users primary > group is the one displayed by 'getent passwd username' e.g. > > root at dc4:~# getent passwd SAMDOM\\rowland > SAMDOM\rowland:*:10000:10000:Rowland Penny:/home/rowland:/bin/bash > > The second number is the users primary group, in this case '10000', > which is: > > root at dc4:~# getent group 10000 > SAMDOM\domain users:x:10000: > > But if I create a file in a share and ensure it belongs to the user > with a group that isn't the users primary group (which seems to be what > you are describing), I get: > > root at dc4:~# ls -la /srv/samba/Demo/test.txt > -rw-rwxr--+ 1 SAMDOM\rowland SAMDOM\unixgroup 0 Aug 16 11:29 /srv/samba/Demo/test.txt > > And getfacl shows: > > root at dc4:~# getfacl /srv/samba/Demo/test.txt > getfacl: Removing leading '/' from absolute path names > # file: srv/samba/Demo/test.txt > # owner: SAMDOM\134rowland > # group: SAMDOM\134unixgroup > user::rw- > user:root:rw- > user:SAMDOM\134rowland:rw- > group::r-- > group:SAMDOM\134unixgroup:r-- > group:SAMDOM\134unix\040admins:rw- > mask::rwx > other::r-- > > If I now go to a Win7 machine, log in as 'rowland', open explorer and > navigate to the file, right click it, select 'Properties' -> > 'Security', it opens correctly (without crashing) and displays the > owners etc. > > The share in smb.conf is this: > [Demo] > path = /srv/samba/Demo/ > read only = no > > If it is crashing for you, we need to know why. > What OS ? > What version of Samba ? > What is in your smb.conf ? > What is the DC ? > > Rowland > >-- Z poważaniem, Kacper Wirski tel. +48 608 421 424 tel: + 48 22 637 50 01 fax: + 48 22 637 50 04 Babka Medica Spółka z ograniczonš odpowiedzialnociš Spółka komandytowa ul. Słomińskiego 19 lok.517, 00-195 Warszawa Sšd Rejonowy dla M.St. Warszawy w Warszawie XII Wydział Gospodarczy KRS 0000491764 NIP 525-234-00-28 www.babkamedica.pl <http://www.babkamedica.pl/> ---------------------------------------------------------------------------- Informacja zawarta w niniejszej korespondencji jest poufna. Korespondencja skierowana jest wyłšcznie do osoby (firmy) wymienionej wyżej. Rozpowszechnianie, kopiowanie, ujawnianie lub przekazywanie osobom trzecim w jakiejkolwiek formie informacji zawartych w niniejszym dokumencie w całoci lub w częci jest zakazane bez uprzedniej pisemnej (pod rygorem nieważnoci) zgody Babka Medica Sp. z o.o. Sp. k.
On Thu, 16 Aug 2018 17:34:01 +0200 Kacper Wirski via samba <samba at lists.samba.org> wrote:> I've noticed myself similiar issue. > > Windows 10 (v 1803) - window with security tab open crashes on > certain files (yes, just the window, not whole OS). Just before crash > i see unresolved SID which looks like nothing I know (doesn't look > like domain SID - maybe local user SID from samba member server?). > All files that cause this issue are from any of the samba servers.I will try with a Win 10 machine, but, 'local user SID' ? A local user on a Samba Unix domain member will either be a Windows user with a uidNumber (in which case it will be the domain SID) or it will be a local Unix user and there will not be a SID. I wonder if the 'unresolved SID' could be one of the Well Known SIDs ?> > Same files I can vew and edit "security" tab no problem on older > micrososft OS (win 2012 r2 server or windows 7).Good to know.> > I have samba 4.8.3 DC's. > > I didn't dig too much into it, so I can't help, other than confirm, > that there is an issue with security tab under specific circumstances.The thing is, without knowing what the 'specific circumstances' are, it is hard to fix the problem, is it any file/folder or just a specific type e.g. .xls Rowland
As I said, I haven't got time to look at what's really happening, just that sometimes windows 10 + some file = security tab just closes/crashes instantly and clearly there is a long SID that's not like anything I recognize, might be well known SID (not well known enough though I'd say, as it's unresolved ;) ). I'm not sure if my experiences are related to those of OP, maybe it's completely different issue. I will try to reproduce this error and get some more informations to back it up. Also I'm pretty sure that a few weeks ago there was also a post on this mailing list related to windows 10 + security tab issues, but I can't find it right now. Maybe it's all related :). W dniu 16.08.2018 o 18:04, Rowland Penny via samba pisze:> On Thu, 16 Aug 2018 17:34:01 +0200 > Kacper Wirski via samba <samba at lists.samba.org> wrote: > >> I've noticed myself similiar issue. >> >> Windows 10 (v 1803) - window with security tab open crashes on >> certain files (yes, just the window, not whole OS). Just before crash >> i see unresolved SID which looks like nothing I know (doesn't look >> like domain SID - maybe local user SID from samba member server?). >> All files that cause this issue are from any of the samba servers. > I will try with a Win 10 machine, but, 'local user SID' ? A local user > on a Samba Unix domain member will either be a Windows user with a > uidNumber (in which case it will be the domain SID) or it will be a > local Unix user and there will not be a SID. > I wonder if the 'unresolved SID' could be one of the Well Known SIDs ? > >> Same files I can vew and edit "security" tab no problem on older >> micrososft OS (win 2012 r2 server or windows 7). > Good to know. > >> I have samba 4.8.3 DC's. >> >> I didn't dig too much into it, so I can't help, other than confirm, >> that there is an issue with security tab under specific circumstances. > The thing is, without knowing what the 'specific circumstances' are, it > is hard to fix the problem, is it any file/folder or just a specific > type e.g. .xls > > Rowland >-- Z poważaniem, Kacper Wirski tel. +48 608 421 424 tel: + 48 22 637 50 01 fax: + 48 22 637 50 04 Babka Medica Spółka z ograniczonš odpowiedzialnociš Spółka komandytowa ul. Słomińskiego 19 lok.517, 00-195 Warszawa Sšd Rejonowy dla M.St. Warszawy w Warszawie XII Wydział Gospodarczy KRS 0000491764 NIP 525-234-00-28 www.babkamedica.pl <http://www.babkamedica.pl/> ---------------------------------------------------------------------------- Informacja zawarta w niniejszej korespondencji jest poufna. Korespondencja skierowana jest wyłšcznie do osoby (firmy) wymienionej wyżej. Rozpowszechnianie, kopiowanie, ujawnianie lub przekazywanie osobom trzecim w jakiejkolwiek formie informacji zawartych w niniejszym dokumencie w całoci lub w częci jest zakazane bez uprzedniej pisemnej (pod rygorem nieważnoci) zgody Babka Medica Sp. z o.o. Sp. k.