samba - Jun 2019 - Update 4.10.2 to 4.10.4: Cant create files in subdirectorie anymore

Hi everyone,

since i upgraded from 4.10.2 to 4.10.4 i can't write into subdirectories
of a share anymore.
This worked perfectly fine before i upgraded and also works again if i
downgrade.?
I think either something is fishy with the 'filename_convert_internal'
function of ".../source3/smbd/filename.c"
or my configuration needs to be adjusted for 4.10.4. I tried several
changes (disable unix extrensions, vfs_xattr options, reconfigured
GlusterFS volume and many more)
in my config but none of the changes made me able to use the shares like
before. I even tried "rwx for all" out of desperation.?

I'd be happy if i could find a solution here.
I only serve files to windows 10 clients, so if the solution includes
deactivating services used by unix im fine with that!?

I just really need everyone to be able to write into subdirectories (on
which they have permissions)(Windows ACLs of course) again couse my Setup
looks a bit like this:
-> Adminshare (rootshare for administrative use)
###--> Users (rootshare mounted on clients)
######---> UserDir (only readable by owner)
#########----> UsersFiles
###--> Departments (rootshare mounted on clients)
######---> Department (only readably by department)
#########----> DepartmentsFiles

###### Example: #####
## ON UNIX SYSTEM: ##
#####################
[root at FS2]# smbclient \\\\cluster-01\\john -U administrator
Enter SAMDOM\administrator's password:
smb: \> mkdir subfolder
smb: \> cd subfolder\
smb: \subfolder\> mkdir subsubfolder
NT_STATUS_INVALID_PARAMETER making remote directory
\subfolder\subsubfolder

###################
## ON WINDOWS10: ##
###################
Connect to \\cluster-01\john\
Create dir "winsubdir"
ChDir to "winsubdir"
Create File/Dir
Error: The File"" is too large for the destination file system.
ChDir to "john"
Create Dir "winsubsubdir"
move Dir "winsubsubdir" into "winsubdir"
Error: The File "winsubsubdir" is too large for the destination file
system.

################
# General Info #
################
OS: CentOS 7.6 (1810)
Samba Version: 4.10.4-4.el7 (SERNET-Packages)
CTDB Version: 4.10.4-4.el7 (SERNET-Packages)
Filesystem: GlusterFS 5.6-1.el7

################
### smb.conf ###
### PLEASE NOTE: The options regarding the case sensitivity arent usually
activated. Normally i leave them on default
### but since i troubleshooted this error for 2 days now i changed the
conf several times
[global]
clustering = Yes
log level = 10
log file = /glusterfs/log.samba
netbios name = CLUSTER-01
realm = SAMDOM.XYZ
registry shares = Yes
security = ADS
winbind enum groups = Yes
winbind enum users = Yes
winbind refresh tickets = Yes
winbind use default domain = Yes
workgroup = SAMDOM
idmap config samdom:range = 1000000-1999999
idmap config samdom:backend = rid
idmap config *:range = 10000-19999
idmap config * : backend = tdb
case sensitive = No
map acl inherit = Yes
preserve case = No
short preserve case = No
vfs objects = acl_xattr

[john]
#admin users = samdom\administrator
comment = admin share
kernel share modes = No
path = /top1/share
read only = No
vfs objects = glusterfs
glusterfs:loglevel = 1
glusterfs:logfile = /glusterfs/glusterfs-gv0.log
glusterfs:volume = gv0

#####################
#### permissions ####
#####################
[root at Cluster1-FS2 ~]# ls -la /glusterfs/top1/share/
drwxrwx---+ 2 administrator domain admins 4096 14. Jun 16:43 sub_dir

[root at Cluster1-FS2 ~]# getfacl glusterfs/top1/share/sub_dir
# file: glusterfs/top1/share/sub_dir
# owner: administrator
# group: domain\040admins
user::rwx
user:administrator:rwx
user:1000512:rwx
user:1000513:rwx
group::rwx
group:domain\040admins:rwx
group:domain\040users:rwx
mask::rwx
other::---
default:user::rwx
default:user:1000512:rwx
default:user:1000513:rwx
default:group::---
default:group:domain\040admins:rwx
default:group:domain\040users:rwx
default:mask::rwx
default:other::---

######################################
# LOGS(grep -ia2 dirName)? ?
# Tried to make this easy readable.
# Includes grep on "sub_dir" as well as "sub_sub_dir"
# If you need the plain level10 logs, let me know
######################################
481(unix_convert): ?? ??? ? ??? ??? ??? ?unix_convert called on file
"sub_dir"
245(stat_cache_lookup): ?? ??? ??? ?stat_cache_lookup: lookup failed for
name [SUB_DIR]
682(unix_convert): ?? ??? ? ??? ??? ??? ?unix_convert begin: name sub_dir,
dirpath = ., start = sub_dir
418(is_mangled): ?? ??? ? ??? ??? ??? ?is_mangled sub_dir ?
357(is_mangled_component): ?? ??? ??? ?is_mangled_component sub_dir (len
7) ?
418(is_mangled): ?? ??? ? ??? ??? ??? ?is_mangled sub_dir ?
357(is_mangled_component): ?? ??? ??? ?is_mangled_component sub_dir (len
7) ?
418(is_mangled): ?? ??? ? ??? ??? ??? ?is_mangled sub_dir ?
357(is_mangled_component): ?? ??? ??? ?is_mangled_component sub_dir (len
7) ?
1123(unix_convert): ?? ??? ? ??? ??? ?New file sub_dir
5625(create_file_default): ?? ??? ??? ?create_file_default: create_file:
access_mask = 0x80 file_attributes = 0x10, share_access = 0x3,
create_disposition = 0x2 create_options = 0x1 oplock_request = 0x0
private_flags = 0x0 root_dir_fid = 0x0, ea_list = (nil), sd = (nil), fname
= sub_dir
5075(create_file_unixpath): ?? ??? ?create_file_unixpath:
create_file_unixpath: access_mask = 0x80 file_attributes = 0x10,
share_access = 0x3, create_disposition = 0x2 create_options = 0x1
oplock_request = 0x0 private_flags = 0x0 ea_list = (nil), sd = (nil),
fname = sub_dir
4005(open_directory): ?? ??? ? ??? ??? ?open_directory: opening directory
sub_dir, access_mask = 0x80, share_access = 0x3 create_options = 0x1,
create_disposition = 0x2, file_attributes = 0x10
208(unix_mode): ?? ??? ? ??? ??? ??? ?unix_mode: unix_mode(sub_dir)
returning 0755
283(check_parent_access): ?? ??? ??? ?check_parent_access: root override
on sub_dir. Granting 0x4
923(file_set_dosmode): ?? ??? ? ??? ??? ?file_set_dosmode: setting dos
mode 0x10 on file sub_dir
457(set_ea_dos_attribute): ?? ??? ??? ?set_ea_dos_attributes: set
attribute 0x10, btime = Fri Jun 14 16:43:38 2019on file sub_dir
541(set_ea_dos_attribute): ?? ??? ??? ?set_ea_dos_attribute: set EA 0x10
on file sub_dir
217(notify_trigger): ?? ??? ? ??? ??? ?notify_trigger called action=0x1,
filter=0x2, dir=/top1/share, name=sub_dir
1436(messaging_dgm_send): ?? ??? ??? ?messaging_dgm_send: Sending message
to 6123
allocated file structure fnum 3330821925 (1 used): ?? ??? ?
747(file_name_hash): ?? ??? ? ??? ??? ?file_name_hash: /top1/share/sub_dir
hash 0xe1a55ab3
4213(open_directory): ?? ??? ? ??? ??? ?Not opening Directory sub_dir
130(dbwrap_lock_order_lock): ?? ??? ?bwrap_lock_order_lock: check lock
order 1 for locking.tdb
--
servicepath:?? ??? ??? ??? ??? ??? ?'/top1/share'
base_name:?? ??? ??? ??? ??? ??? ??? ?*
base_name:?? ??? ??? ??? ??? ??? ??? ?'sub_dir'
stream_name:?? ??? ??? ??? ??? ??? ?NULL
num_share_modes ? ? ? ? ?? ??? ??? ?0x00000001 (1): ?? ??? ?
extid:?? ??? ??? ??? ??? ??? ??? ??? ?0x0000000000000000 (0): ?? ??? ?
157(share_mode_memcache_delete):?? ?share_mode_memcache_delete: deleting
entry for file sub_dir seq cf24aa6df5275713 key
164f73fa:b67c55175d5c4291:0
159(dbwrap_lock_order_unlock): ?? ??? ?dbwrap_lock_order_unlock: release
lock order 1 for locking.tdb
--
Unlocking db 2048514125 key FA734F16000000009142
171(share_mode_memcache_store): ?? ?share_mode_memcache_store: stored
entry for file sub_dir seq cf24aa6df5275714 key
164f73fa:b67c55175d5c4291:0
668(get_nt_acl_common): ?? ??? ??? ?get_nt_acl_common: name=.
--
trustee?? ??? ??? ??? ??? ??? ??? ???
?S-1-5-21-2698934694-3277079463-324590320-513
4634(inherit_new_acl): ?? ??? ? ??? ??? ?inherit_new_acl: parent acl for
sub_dir is:
022(ndr_print_debug): ?? ??? ? ??? ? ?? ?parent_desc: struct
security_descriptor
--
se_create_child_secdesc(): ?? ??? ???
?S-1-5-21-2698934694-3277079463-324590320-513:0/0x07/0x001f01ff ?inherited
as S-1-5-21-2698934694-3277079463-324590320-513:0/0x10/0x001f01ff
4762(inherit_new_acl): ?? ??? ??? ? ??? ?inherit_new_acl: child acl for
sub_dir is:
422(ndr_print_debug): ?? ??? ? ?? ??? ?psd: struct security_descriptor
--
trustee?? ??? ??? ??? ??? ??? ??? ???
?S-1-5-21-2698934694-3277079463-324590320-513
930(fset_nt_acl_common): ?? ??? ??? ?fset_nt_acl_common: incoming sd for
file sub_dir
422(ndr_print_debug): ?? ??? ??? ? ? ?discard_const_p(struct
security_descriptor, orig_psd): struct security_descriptor
--?? ??? ?
trustee?? ??? ??? ??? ??? ??? ??? ???
?S-1-5-21-2698934694-3277079463-324590320-513
668(get_nt_acl_common): ?? ??? ??? ?get_nt_acl_common: name=sub_dir
216(push_sec_ctx): ?? ??? ? ?? ??? ??? ?push_sec_ctx(0, 1000512) :
sec_ctx_stack_ndx = 1
--
0id_to_sid: GID 1000513 -> ?? ??? ???
?S-1-5-21-2698934694-3277079463-324590320-513 from cache
793(get_nt_acl_common): ?? ??? ??? ?get_nt_acl_common: returning acl for
sub_dir is:
422(ndr_print_debug):?? ? ?? ??? ? ? ?psd: struct security_descriptor
--?? ?
xid_to_sid: GID 1000513 -> ?? ??? ???
?S-1-5-21-2698934694-3277079463-324590320-513 from cache
1054(fset_nt_acl_common): ?? ??? ??? ?fset_nt_acl_common: storing xattr sd
for file sub_dir based on system ACL
422(ndr_print_debug): ?? ??? ? ? ??? ?discard_const_p(struct
security_descriptor, psd): struct security_descriptor
--
create_file: info=2
734(dos_mode): ?? ??? ??? ??? ??? ??? ?dos_mode: sub_dir
285(parse_dos_attribute_blob): ?? ??? ?parse_dos_attribute_blob: sub_dir
attr = 0x10
325(parse_dos_attribute_blob): ?? ??? ?parse_dos_attribute_blob: file
sub_dir case 3 set btime Fri Jun 14 16:43:38 2019

72(dos_mode_debug_print): ?? ??? ?--
Locking db 2048514125 key FA734F16000000009142
285(share_mode_memcache_fetch): ?? ??? ? ?share_mode_memcache_fetch:
fetched entry for file sub_dir seq cf24aa6df5275714 key
164f73fa:b67c55175d5c4291:0
1139(find_delete_on_close_token): ?? ??? ? ?find_delete_on_close_token:
name_hash = 0xe1a55ab3

servicepath:?? ??? ??? ??? ??? ??? ?'/top1/share'
base_name:?? ??? ??? ??? ??? ??? ??? ?*
base_name:?? ??? ??? ??? ??? ??? ??? ?'sub_dir'
stream_name:?? ??? ??? ??? ??? ??? ?NULL
num_share_modes:?? ??? ??? ??? ??? ?0x00000000 (0)
extid:?? ??? ??? ??? ??? ??? ??? ??? ?0x0000000000000000 (0) ?? ??? ?
157(share_mode_memcache_delete): ?? ?share_mode_memcache_delete: deleting
entry for file sub_dir seq cf24aa6df5275714 key
164f73fa:b67c55175d5c4291:0
358(unparse_share_modes): ?? ??? ??? ?No used share mode found
--
change_to_user_internal:?? ??? ? ?? ?Impersonated user: uid=(0,0),
gid=(0,1000512), cwd=[/top1/share]
481(unix_convert): ?? ??? ??? ??? ? ??? ?unix_convert called on file
"sub_dir"
245(stat_cache_lookup):?? ??? ??? ? ?? ?stat_cache_lookup: lookup failed
for name [SUB_DIR]
682(unix_convert): ?? ??? ??? ??? ? ??? ?unix_convert begin: name sub_dir,
dirpath = ., start = sub_dir
705(unix_convert): ?? ??? ??? ??? ? ??? ?conversion of base_name finished
sub_dir -> sub_dir
5625(create_file_default):?? ??? ? ?? ?create_file_default: create_file:
access_mask = 0x80 file_attributes = 0x10, share_access = 0x7,
create_disposition = 0x1 create_options = 0x1 oplock_request = 0x0
private_flags = 0x0 root_dir_fid = 0x0, ea_list = (nil), sd = (nil), fname
= sub_dir
5075(create_file_unixpath):?? ??? ??? ?create_file_unixpath:
create_file_unixpath: access_mask = 0x80 file_attributes = 0x10,
share_access = 0x7, create_disposition = 0x1 create_options = 0x1
oplock_request = 0x0 private_flags = 0x0 ea_list = (nil), sd = (nil),
fname = sub_dir
4005(open_directory): ?? ??? ??? ??? ?open_directory: opening directory
sub_dir, access_mask = 0x80, share_access = 0x7 create_options = 0x1,
create_disposition = 0x1, file_attributes = 0x10
109(smbd_check_access_rights): ?? ??? ?smbd_check_access_rights: root
override on sub_dir. Granting 0x80
130(dbwrap_lock_order_lock): ?? ? ?? ?dbwrap_lock_order_lock: check lock
order 1 for smbXsrv_open_global.tdb

allocated file structure fnum 820903026 (1 used): ?? ??? ?
747(file_name_hash): ?? ??? ??? ??? ?file_name_hash: /top1/share/sub_dir
hash 0xe1a55ab3
4213(open_directory): ?? ??? ? ??? ??? ?Not opening Directory sub_dir
130(dbwrap_lock_order_lock): ?? ??? ?dbwrap_lock_order_lock: check lock
order 1 for locking.tdb

servicepath:?? ??? ??? ??? ??? ??? ?'/top1/share'
base_name:?? ??? ??? ??? ??? ??? ??? ?*
base_name:?? ??? ??? ??? ??? ??? ??? ?'sub_dir'
stream_name:?? ??? ??? ??? ??? ??? ?NULL
num_share_modes:?? ??? ??? ??? ??? ?0x00000001 (1):
extid:?? ??? ??? ??? ??? ??? ??? ??? ?0x0000000000000000 (0)
157(share_mode_memcache_delete): ?? ?share_mode_memcache_delete: deleting
entry for file sub_dir seq 5c9538e21713d24c key
164f73fa:b67c55175d5c4291:0
159(dbwrap_lock_order_unlock): ?? ??? ?dbwrap_lock_order_unlock: release
lock order 1 for locking.tdb
Unlocking db 2048514125 key FA734F16000000009142
171(share_mode_memcache_store): ?? ?share_mode_memcache_store: stored
entry for file sub_dir seq 5c9538e21713d24d key
164f73fa:b67c55175d5c4291:0
5433(create_file_unixpath): ?? ??? ?create_file_unixpath: info=1
create_file: info=1
734(dos_mode): ?? ??? ? ??? ??? ??? ??? ?dos_mode: sub_dir
285(parse_dos_attribute_blob): ?? ??? ?parse_dos_attribute_blob: sub_dir
attr = 0x10
325(parse_dos_attribute_blob): ?? ??? ?parse_dos_attribute_blob: file
sub_dir case 3 set btime Fri Jun 14 16:43:38 2019

72(dos_mode_debug_print): ?? ??? ?--
Locking db 2048514125 key FA734F16000000009142
285(share_mode_memcache_fetch): ?? ??? ? ?share_mode_memcache_fetch:
fetched entry for file sub_dir seq 5c9538e21713d24d key
164f73fa:b67c55175d5c4291:0
1139(find_delete_on_close_token): ?? ??? ? ?find_delete_on_close_token:
name_hash = 0xe1a55ab3
--
servicepath:?? ??? ??? ??? ??? ??? ?'/top1/share'
base_name:?? ??? ??? ??? ??? ??? ??? ?*
base_name:?? ??? ??? ??? ??? ??? ??? ?'sub_dir'
stream_name:?? ??? ??? ??? ??? ??? ?NULL
num_share_modes:?? ??? ??? ??? ??? ?0x00000000 (0): ?? ??? ?--
extid:?? ??? ??? ??? ??? ??? ??? ??? ?0x0000000000000000 (0): ?? ?
?? ?
157(share_mode_memcache_delete): ?? ??? ? share_mode_memcache_delete:
deleting entry for file sub_dir seq 5c9538e21713d24d key
164f73fa:b67c55175d5c4291:0
358(unparse_share_modes): ?? ??? ??? ??? ? No used share mode found
--
change_to_user_internal: ?? ??? ??? ?Impersonated user: uid=(0,0),
gid=(0,1000512), cwd=[/top1/share]
481(unix_convert): ?? ??? ? ??? ??? ??? ?unix_convert called on file
"sub_dir/sub_sub_dir"
245(stat_cache_lookup): ?? ??? ??? ?stat_cache_lookup: lookup failed for
name [SUB_DIR/SUB_SUB_DIR]
245(stat_cache_lookup): ?? ??? ??? ?stat_cache_lookup: lookup failed for
name [SUB_DIR]
682(unix_convert): ?? ??? ? ??? ??? ??? ?unix_convert begin: name
sub_dir/sub_sub_dir, dirpath = ., start = sub_dir/sub_sub_dir
233(check_parent_exists): ?? ??? ??? ?check_parent_exists: name
sub_dir/sub_sub_dir, dirpath = sub_dir, start = sub_sub_dir
418(is_mangled): ?? ??? ? ??? ??? ??? ?is_mangled sub_sub_dir ?
357(is_mangled_component): ?? ??? ??? ?is_mangled_component sub_sub_dir
(len 11) ?
418(is_mangled): ?? ??? ? ??? ??? ??? ?is_mangled sub_sub_dir ?
357(is_mangled_component): ?? ??? ??? ?is_mangled_component sub_sub_dir
(len 11) ?
1272(unix_convert): ?? ??? ? ??? ??? ?dirpath = [sub_dir] start [sub_sub_dir]
1787(filename_convert_internal):?? ?filename_convert_internal:
unix_convert failed for name sub_dir/sub_sub_dir with
NT_STATUS_INVALID_PARAMETER
944(smb2_set_operation_credit): ?? ?smb2_set_operation_credit:
smb2_set_operation_credit: requested 1, charge 1, granted 1, current
possible/max 1/8192, total granted/max/low/range 8192/8192/19/8192

Regards,

Sascha Brutscher
Administration
---------------------------------------------
medicomp
Gesellschaft f?r neue Medien und Computer mbH
Hoheloogstr. 14
67065 Ludwigshafen
Deutschland

> ################
> ### smb.conf ###
> ### PLEASE NOTE: The options regarding the case sensitivity arent usually
> activated. Normally i leave them on default
> ### but since i troubleshooted this error for 2 days now i changed the
> conf several times
> [global]
> clustering = Yes
> log level = 10
> log file = /glusterfs/log.samba
> netbios name = CLUSTER-01
> realm = SAMDOM.XYZ
> registry shares = Yes
> security = ADS
> winbind enum groups = Yes
> winbind enum users = Yes
> winbind refresh tickets = Yes
> winbind use default domain = Yes
> workgroup = SAMDOM
> idmap config samdom:range = 1000000-1999999
> idmap config samdom:backend = rid
> idmap config *:range = 10000-19999
> idmap config * : backend = tdb
> case sensitive = No
> map acl inherit = Yes
> preserve case = No
> short preserve case = No
> vfs objects = acl_xattr
>
> [john]
> #admin users = samdom\administrator
> comment = admin share
> kernel share modes = No
> path = /top1/share
> read only = No
> vfs objects = glusterfs
> glusterfs:loglevel = 1
> glusterfs:logfile = /glusterfs/glusterfs-gv0.log
> glusterfs:volume = gv0
>
I don't know if this answers the whole of your problem but I find at 
least the following issue:

You declared "vfs objects = acl_xattr" in the global section, but
since
you declared an additional vfs object "vfs objects = glusterfs" for
your
"john" share, you will need to declare both, or "vfs objects = 
acl_xattr" won't be active for the share. Under the share, you must
declare:


vfs objects = acl_xattr glusterfs