Hi again, regarding my post "plenty of vacuuuming process" a "gluster volume heal" seems to improve the situation. But I still have a strange problem: Sometimes a user don't have permissions to? a restricted folder when h connects to a share or logs in at a windows client. In some times all permissions are granted. If the user creates a file, the user and group is correctly set. Im running Samba version 4.9.12-SerNet-Debian-15.stretch on all 3 nodes. I tried to enlarge the id range with no effects. This is the output off net conf list: [global] ??? winbind refresh tickets = Yes ??? winbind use default domain = yes ??? template shell = /bin/bash ??? idmap config * : range = 1000000 - 1999999 ??? idmap config DOMAINNAME : backend = rid ??? idmap config DOMAINNAME : range = 1000 - 999999 ??? hide dot files = yes ??? server string = Daten server %h (Samba %v) ??? vfs objects = acl_xattr ??? map acl inherit = yes ??? workgroup = DOMAINNAME ??? netbios name = cluster-ho ??? clustering = yes ??? security = ads ??? realm = zfd.forumzfd.de ??? smbd:search ask sharemode = no [home] ??? path = /data/ho/ ??? comment = Home Directories ??? read only = no ??? browseable = yes [Ablage] ??? comment = DATA_Share ? ? path = /data/ho/data ??? read only = no This is is the message in /var/log/samba/log.smbd: ?smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_getinfo.c:159 Thank you again for ideas or comments. Best regards Bene -- ?forumZFD Entschieden f?r Frieden|Committed to Peace Benedikt Kale? Leiter Team IT|Head team IT Forum Ziviler Friedensdienst e.V.|Forum Civil Peace Service Am K?lner Brett 8 | 50825 K?ln | Germany Tel 0221 91273233 | Fax 0221 91273299 | http://www.forumZFD.de Vorstand nach ? 26 BGB, einzelvertretungsberechtigt|Executive Board: Oliver Knabe (Vorsitz|Chair), Sonja Wiekenberg-Mlalandle, Alexander Mauz VR 17651 Amtsgericht K?ln Spenden|Donations: IBAN DE37 3702 0500 0008 2401 01 BIC BFSWDE33XXX
Hi, in the glusterfs log I can find thatmany of these entries: [2019-08-28 12:01:27.429078] W [fuse-bridge.c:4169:fuse_xattr_cbk] 0-glusterfs-fuse: 1009932: GETXATTR(user.DOSATTRIB) /zfd => -1 (permission denied) Might that be a path to investigate further? The Gluster-Volume for the data is mounted like this: glusterX:/gv-ho on /data/ho type fuse.glusterfs (rw,relatime,user_id=0,group_id=0,allow_other,max_read=131072,_netdev) Best Bene Best Bene Am 28.08.19 um 11:22 schrieb Benedikt Kale? via samba:> Hi again, > > regarding my post "plenty of vacuuuming process" a "gluster volume heal" > seems to improve the situation. > > But I still have a strange problem: > > Sometimes a user don't have permissions to? a restricted folder when h > connects to a share or logs in at a windows client. In some times all > permissions are granted. If the user creates a file, the user and group > is correctly set. > > Im running Samba version 4.9.12-SerNet-Debian-15.stretch on all 3 nodes. > > I tried to enlarge the id range with no effects. > > This is the output off net conf list: > > [global] > ??? winbind refresh tickets = Yes > ??? winbind use default domain = yes > ??? template shell = /bin/bash > ??? idmap config * : range = 1000000 - 1999999 > ??? idmap config DOMAINNAME : backend = rid > ??? idmap config DOMAINNAME : range = 1000 - 999999 > ??? hide dot files = yes > ??? server string = Daten server %h (Samba %v) > ??? vfs objects = acl_xattr > ??? map acl inherit = yes > ??? workgroup = DOMAINNAME > ??? netbios name = cluster-ho > ??? clustering = yes > ??? security = ads > ??? realm = zfd.forumzfd.de > ??? smbd:search ask sharemode = no > > [home] > ??? path = /data/ho/ > ??? comment = Home Directories > ??? read only = no > ??? browseable = yes > > [Ablage] > ??? comment = DATA_Share > ? ? path = /data/ho/data > ??? read only = no > > > This is is the message in /var/log/samba/log.smbd: > > ?smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] > status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_getinfo.c:159 > > Thank you again for ideas or comments. > > > Best regards > > Bene >-- ?forumZFD Entschieden f?r Frieden|Committed to Peace Benedikt Kale? Leiter Team IT|Head team IT Forum Ziviler Friedensdienst e.V.|Forum Civil Peace Service Am K?lner Brett 8 | 50825 K?ln | Germany Tel 0221 91273233 | Fax 0221 91273299 | http://www.forumZFD.de Vorstand nach ? 26 BGB, einzelvertretungsberechtigt|Executive Board: Oliver Knabe (Vorsitz|Chair), Sonja Wiekenberg-Mlalandle, Alexander Mauz VR 17651 Amtsgericht K?ln Spenden|Donations: IBAN DE37 3702 0500 0008 2401 01 BIC BFSWDE33XXX
Hai,
First i must say, i dont use/know gluster.
But I noticed you config (smb.conf) is a bit off.
store dos attributes = Yes << is missing.
And i would say setup netbios name and REALM in CAPS.
And > ??? smbd:search ask sharemode = no
Should be : smbd search ask sharemod >> https://www.samba.org/samba/history/samba-4.10.0.html
See smb.conf changes,
What i dont know, but dont you need one or both of these. (vfs_modules)
Because i also notice New glusterfs_fuse VFS module as "new" in the
changelog.
See:
man vfs_glusterfs
man vfs_glusterfs_fuse
Someone, who knows gluster, should give more info about this.
I cant.. (sorry), I cant know everything.. :-/
Greetz,
Louis
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> Benedikt Kale? via samba
> Verzonden: woensdag 28 augustus 2019 11:22
> Aan: samba at lists.samba.org >> samba
> Onderwerp: [Samba] Permission Issue
>
> Hi again,
>
> regarding my post "plenty of vacuuuming process" a "gluster
> volume heal"
> seems to improve the situation.
>
> But I still have a strange problem:
>
> Sometimes a user don't have permissions to? a restricted folder when h
> connects to a share or logs in at a windows client. In some times all
> permissions are granted. If the user creates a file, the user
> and group
> is correctly set.
>
> Im running Samba version 4.9.12-SerNet-Debian-15.stretch on
> all 3 nodes.
>
> I tried to enlarge the id range with no effects.
>
> This is the output off net conf list:
>
> [global]
> ??? winbind refresh tickets = Yes
> ??? winbind use default domain = yes
> ??? template shell = /bin/bash
> ??? idmap config * : range = 1000000 - 1999999
> ??? idmap config DOMAINNAME : backend = rid
> ??? idmap config DOMAINNAME : range = 1000 - 999999
> ??? hide dot files = yes
> ??? server string = Daten server %h (Samba %v)
> ??? vfs objects = acl_xattr
> ??? map acl inherit = yes
> ??? workgroup = DOMAINNAME
> ??? netbios name = cluster-ho
> ??? clustering = yes
> ??? security = ads
> ??? realm = zfd.forumzfd.de
> ??? smbd:search ask sharemode = no
>
> [home]
> ??? path = /data/ho/
> ??? comment = Home Directories
> ??? read only = no
> ??? browseable = yes
>
> [Ablage]
> ??? comment = DATA_Share
> ? ? path = /data/ho/data
> ??? read only = no
>
>
> This is is the message in /var/log/samba/log.smbd:
>
> ?smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> status[NT_STATUS_ACCESS_DENIED] || at
> ../source3/smbd/smb2_getinfo.c:159
>
> Thank you again for ideas or comments.
>
>
> Best regards
>
> Bene
>
> --
> ???forumZFD
> Entschieden f?r Frieden|Committed to Peace
>
> Benedikt Kale?
> Leiter Team IT|Head team IT
>
> Forum Ziviler Friedensdienst e.V.|Forum Civil Peace Service
> Am K?lner Brett 8 | 50825 K?ln | Germany
>
> Tel 0221 91273233 | Fax 0221 91273299 |
> http://www.forumZFD.de
>
> Vorstand nach ? 26 BGB, einzelvertretungsberechtigt|Executive Board:
> Oliver Knabe (Vorsitz|Chair), Sonja Wiekenberg-Mlalandle,
> Alexander Mauz
> VR 17651 Amtsgericht K?ln
>
> Spenden|Donations: IBAN DE37 3702 0500 0008 2401 01 BIC BFSWDE33XXX
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
>
>
Hi, of course? you can not know everything :) I'm glad to have your support! Thank you. Actually I did a gluster_client fluse mount and set up the share in the registry "old fashioned". I changed that now to the following: [share] ??? comment = Archivdateien der Abteilung Projekte ??? read only = no ??? vfs objects = acl_xattr glusterfs ??? glusterfs:volume = gv-ho ??? glusterfs:logfile = /var/log/samba/glusterfs-gv-ho.log ??? glusterfs:loglevel = 3 ??? glusterfs:volfile_server = gluster1 gluster3 ??? kernel share modes = no ??? path = /data/share Of course I added your recomondations as well like "store dos attributes"... It looks good in the moment. But I will stay you updated here, if I'm allowed to. Best regards Bene Am 28.08.19 um 15:56 schrieb L.P.H. van Belle via samba:> Hai, > > First i must say, i dont use/know gluster. > > But I noticed you config (smb.conf) is a bit off. > > store dos attributes = Yes << is missing. > > And i would say setup netbios name and REALM in CAPS. > And > > ??? smbd:search ask sharemode = no > Should be : smbd search ask sharemod > >> https://www.samba.org/samba/history/samba-4.10.0.html > See smb.conf changes, > > What i dont know, but dont you need one or both of these. (vfs_modules) > Because i also notice New glusterfs_fuse VFS module as "new" in the changelog. > > See: > man vfs_glusterfs > man vfs_glusterfs_fuse > > Someone, who knows gluster, should give more info about this. > I cant.. (sorry), I cant know everything.. :-/ > > Greetz, > > Louis > > > > > > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > > Benedikt Kale? via samba > > Verzonden: woensdag 28 augustus 2019 11:22 > > Aan: samba at lists.samba.org >> samba > > Onderwerp: [Samba] Permission Issue > > > > Hi again, > > > > regarding my post "plenty of vacuuuming process" a "gluster > > volume heal" > > seems to improve the situation. > > > > But I still have a strange problem: > > > > Sometimes a user don't have permissions to? a restricted folder when h > > connects to a share or logs in at a windows client. In some times all > > permissions are granted. If the user creates a file, the user > > and group > > is correctly set. > > > > Im running Samba version 4.9.12-SerNet-Debian-15.stretch on > > all 3 nodes. > > > > I tried to enlarge the id range with no effects. > > > > This is the output off net conf list: > > > > [global] > > ??? winbind refresh tickets = Yes > > ??? winbind use default domain = yes > > ??? template shell = /bin/bash > > ??? idmap config * : range = 1000000 - 1999999 > > ??? idmap config DOMAINNAME : backend = rid > > ??? idmap config DOMAINNAME : range = 1000 - 999999 > > ??? hide dot files = yes > > ??? server string = Daten server %h (Samba %v) > > ??? vfs objects = acl_xattr > > ??? map acl inherit = yes > > ??? workgroup = DOMAINNAME > > ??? netbios name = cluster-ho > > ??? clustering = yes > > ??? security = ads > > ??? realm = zfd.forumzfd.de > > ??? smbd:search ask sharemode = no > > > > [home] > > ??? path = /data/ho/ > > ??? comment = Home Directories > > ??? read only = no > > ??? browseable = yes > > > > [Ablage] > > ??? comment = DATA_Share > > ? ? path = /data/ho/data > > ??? read only = no > > > > > > This is is the message in /var/log/samba/log.smbd: > > > > ?smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] > > status[NT_STATUS_ACCESS_DENIED] || at > > ../source3/smbd/smb2_getinfo.c:159 > > > > Thank you again for ideas or comments. > > > > > > Best regards > > > > Bene > > > > -- > > ???forumZFD > > Entschieden f?r Frieden|Committed to Peace > > > > Benedikt Kale? > > Leiter Team IT|Head team IT > > > > Forum Ziviler Friedensdienst e.V.|Forum Civil Peace Service > > Am K?lner Brett 8 | 50825 K?ln | Germany > > > > Tel 0221 91273233 | Fax 0221 91273299 | > > http://www.forumZFD.de > > > > Vorstand nach ? 26 BGB, einzelvertretungsberechtigt|Executive Board: > > Oliver Knabe (Vorsitz|Chair), Sonja Wiekenberg-Mlalandle, > > Alexander Mauz > > VR 17651 Amtsgericht K?ln > > > > Spenden|Donations: IBAN DE37 3702 0500 0008 2401 01 BIC BFSWDE33XXX > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba > > > > > >-- ?forumZFD Entschieden f?r Frieden|Committed to Peace Benedikt Kale? Leiter Team IT|Head team IT Forum Ziviler Friedensdienst e.V.|Forum Civil Peace Service Am K?lner Brett 8 | 50825 K?ln | Germany Tel 0221 91273233 | Fax 0221 91273299 | http://www.forumZFD.de Vorstand nach ? 26 BGB, einzelvertretungsberechtigt|Executive Board: Oliver Knabe (Vorsitz|Chair), Sonja Wiekenberg-Mlalandle, Alexander Mauz VR 17651 Amtsgericht K?ln Spenden|Donations: IBAN DE37 3702 0500 0008 2401 01 BIC BFSWDE33XXX
Hai, Great to hear i could help one with a gluster problem :-) And ofcourse your allowed to keep us up2date. So yes, plese, by doing that and sharing the configs it might help other people. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Benedikt Kale? via samba > Verzonden: woensdag 28 augustus 2019 17:37 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Permission Issue > > Hi, > > of course? you can not know everything :) I'm glad to have > your support! > Thank you. > > Actually I did a gluster_client fluse mount and set up the > share in the > registry "old fashioned". > > I changed that now to the following: > > [share] > ??? comment = Archivdateien der Abteilung Projekte > ??? read only = no > ??? vfs objects = acl_xattr glusterfs > ??? glusterfs:volume = gv-ho > ??? glusterfs:logfile = /var/log/samba/glusterfs-gv-ho.log > ??? glusterfs:loglevel = 3 > ??? glusterfs:volfile_server = gluster1 gluster3 > ??? kernel share modes = no > ??? path = /data/share > > Of course I added your recomondations as well like "store dos > attributes"... > > It looks good in the moment. But I will stay you updated here, if I'm > allowed to. > > Best regards > > Bene > > > Am 28.08.19 um 15:56 schrieb L.P.H. van Belle via samba: > > Hai, > > > > First i must say, i dont use/know gluster. > > > > But I noticed you config (smb.conf) is a bit off. > > > > store dos attributes = Yes << is missing. > > > > And i would say setup netbios name and REALM in CAPS. > > And > > > ??? smbd:search ask sharemode = no > > Should be : smbd search ask sharemod > > >> https://www.samba.org/samba/history/samba-4.10.0.html > > See smb.conf changes, > > > > What i dont know, but dont you need one or both of these. > (vfs_modules) > > Because i also notice New glusterfs_fuse VFS module as > "new" in the changelog. > > > > See: > > man vfs_glusterfs > > man vfs_glusterfs_fuse > > > > Someone, who knows gluster, should give more info about this. > > I cant.. (sorry), I cant know everything.. :-/ > > > > Greetz, > > > > Louis > > > > > > > > > > > > > -----Oorspronkelijk bericht----- > > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > > > Benedikt Kale? via samba > > > Verzonden: woensdag 28 augustus 2019 11:22 > > > Aan: samba at lists.samba.org >> samba > > > Onderwerp: [Samba] Permission Issue > > > > > > Hi again, > > > > > > regarding my post "plenty of vacuuuming process" a "gluster > > > volume heal" > > > seems to improve the situation. > > > > > > But I still have a strange problem: > > > > > > Sometimes a user don't have permissions to? a restricted > folder when h > > > connects to a share or logs in at a windows client. In > some times all > > > permissions are granted. If the user creates a file, the user > > > and group > > > is correctly set. > > > > > > Im running Samba version 4.9.12-SerNet-Debian-15.stretch on > > > all 3 nodes. > > > > > > I tried to enlarge the id range with no effects. > > > > > > This is the output off net conf list: > > > > > > [global] > > > ??? winbind refresh tickets = Yes > > > ??? winbind use default domain = yes > > > ??? template shell = /bin/bash > > > ??? idmap config * : range = 1000000 - 1999999 > > > ??? idmap config DOMAINNAME : backend = rid > > > ??? idmap config DOMAINNAME : range = 1000 - 999999 > > > ??? hide dot files = yes > > > ??? server string = Daten server %h (Samba %v) > > > ??? vfs objects = acl_xattr > > > ??? map acl inherit = yes > > > ??? workgroup = DOMAINNAME > > > ??? netbios name = cluster-ho > > > ??? clustering = yes > > > ??? security = ads > > > ??? realm = zfd.forumzfd.de > > > ??? smbd:search ask sharemode = no > > > > > > [home] > > > ??? path = /data/ho/ > > > ??? comment = Home Directories > > > ??? read only = no > > > ??? browseable = yes > > > > > > [Ablage] > > > ??? comment = DATA_Share > > > ? ? path = /data/ho/data > > > ??? read only = no > > > > > > > > > This is is the message in /var/log/samba/log.smbd: > > > > > > ?smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] > > > status[NT_STATUS_ACCESS_DENIED] || at > > > ../source3/smbd/smb2_getinfo.c:159 > > > > > > Thank you again for ideas or comments. > > > > > > > > > Best regards > > > > > > Bene > > > > > > -- > > > ???forumZFD > > > Entschieden f?r Frieden|Committed to Peace > > > > > > Benedikt Kale? > > > Leiter Team IT|Head team IT > > > > > > Forum Ziviler Friedensdienst e.V.|Forum Civil Peace Service > > > Am K?lner Brett 8 | 50825 K?ln | Germany > > > > > > Tel 0221 91273233 | Fax 0221 91273299 | > > > http://www.forumZFD.de > > > > > > Vorstand nach ? 26 BGB, > einzelvertretungsberechtigt|Executive Board: > > > Oliver Knabe (Vorsitz|Chair), Sonja Wiekenberg-Mlalandle, > > > Alexander Mauz > > > VR 17651 Amtsgericht K?ln > > > > > > Spenden|Donations: IBAN DE37 3702 0500 0008 2401 01 BIC > BFSWDE33XXX > > > > > > > > > -- > > > To unsubscribe from this list go to the following URL and read the > > > instructions: https://lists.samba.org/mailman/options/samba > > > > > > > > > > > -- > ???forumZFD > Entschieden f?r Frieden|Committed to Peace > > Benedikt Kale? > Leiter Team IT|Head team IT > > Forum Ziviler Friedensdienst e.V.|Forum Civil Peace Service > Am K?lner Brett 8 | 50825 K?ln | Germany > > Tel 0221 91273233 | Fax 0221 91273299 | > http://www.forumZFD.de > > Vorstand nach ? 26 BGB, einzelvertretungsberechtigt|Executive Board: > Oliver Knabe (Vorsitz|Chair), Sonja Wiekenberg-Mlalandle, > Alexander Mauz > VR 17651 Amtsgericht K?ln > > Spenden|Donations: IBAN DE37 3702 0500 0008 2401 01 BIC BFSWDE33XXX > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >