gac
2019-Sep-06 10:33 UTC
[Samba] Change in behaviour for the "%U" substitution in 4.10.8?
I've now changed the ownership to root, as you suggest. I've removed the ACLs from /shares/DOMAIN - they don't need to be there as anyone can enter this directory already so there's no need for them. The ACLs on my individual home directory: root at server:/shares# getfacl /shares/DOMAIN/username getfacl: Removing leading '/' from absolute path names # file: shares/DOMAIN/username # owner: username # group: domain\040users user::rwx user:www-data:--x group::--- mask::r-x other::--- Still no joy, and the logs are still showing: canonicalize_connect_path failed for service username, path /shares/DOMAIN/domain_username Thanks for all your advice so far but I still don't believe this is a permissions problem, Samba is trying to access a directory which simply does not exist, and never has existed... 6 Sep 2019, 11:19 by samba at lists.samba.org:> On 06/09/2019 11:12, gac wrote: > >> I imagine the numeric UID is my old boss who left the company a few years ago, and by this point his account has been removed, not just disabled. The only thing contained by the DOMAIN directory is a home directory for each user, which is owned by them. So I don't _think_ this is the problem. >> >> The command you suggested returns: >> >> winbind_lookup_rids failed: WBC_ERR_DOMAIN_NOT_FOUND >> >> The ACLs are to allow --x access for the 'www-data' into users home directories for use with Apache+mod_userdir, and then r-x access for their www directory >> > Try changing the ownership of /shares/DOMAIN to root > > What about the getfacl commands ? > > Rowland > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
Christian Naumer
2019-Sep-06 10:49 UTC
[Samba] Change in behaviour for the "%U" substitution in 4.10.8?
Have you tried running net cache flush after you have removed the SERVER lines from you config? Regards Am 06.09.19 um 12:33 schrieb gac via samba:> I've now changed the ownership to root, as you suggest. > > I've removed the ACLs from /shares/DOMAIN - they don't need to be there as anyone can enter this directory already so there's no need for them. > > The ACLs on my individual home directory: > > root at server:/shares# getfacl /shares/DOMAIN/username > getfacl: Removing leading '/' from absolute path names > # file: shares/DOMAIN/username > # owner: username > # group: domain\040users > user::rwx > user:www-data:--x > group::--- > mask::r-x > other::--- > > Still no joy, and the logs are still showing: > > canonicalize_connect_path failed for service username, path /shares/DOMAIN/domain_username > > Thanks for all your advice so far but I still don't believe this is a permissions problem, Samba is trying to access a directory which simply does not exist, and never has existed... > 6 Sep 2019, 11:19 by samba at lists.samba.org: > >> On 06/09/2019 11:12, gac wrote: >> >>> I imagine the numeric UID is my old boss who left the company a few years ago, and by this point his account has been removed, not just disabled. The only thing contained by the DOMAIN directory is a home directory for each user, which is owned by them. So I don't _think_ this is the problem. >>> >>> The command you suggested returns: >>> >>> winbind_lookup_rids failed: WBC_ERR_DOMAIN_NOT_FOUND >>> >>> The ACLs are to allow --x access for the 'www-data' into users home directories for use with Apache+mod_userdir, and then r-x access for their www directory >>> >> Try changing the ownership of /shares/DOMAIN to root >> >> What about the getfacl commands ? >> >> Rowland >> >> >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> >-- Dr. Christian Naumer Unit Head Bioprocess Development B.R.A.I.N Aktiengesellschaft Darmstaedter Str. 34-36, D-64673 Zwingenberg e-mail cn at brain-biotech.com, homepage www.brain-biotech.com fon +49-6251-9331-30 / fax +49-6251-9331-11 Sitz der Gesellschaft: Zwingenberg/Bergstrasse Registergericht AG Darmstadt, HRB 24758 Vorstand: Dr. Juergen Eck (Vorsitzender), Manfred Bender, Ludger Roedder Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen
gac
2019-Sep-06 10:53 UTC
[Samba] Change in behaviour for the "%U" substitution in 4.10.8?
I hadn't, but I did that just now; still the same behaviour. 6 Sep 2019, 11:49 by samba at lists.samba.org:> Have you tried running > > net cache flush > > after you have removed the SERVER lines from you config? > > Regards > > > Am 06.09.19 um 12:33 schrieb gac via samba: > >> I've now changed the ownership to root, as you suggest. >> >> I've removed the ACLs from /shares/DOMAIN - they don't need to be there as anyone can enter this directory already so there's no need for them. >> >> The ACLs on my individual home directory: >> >> root at server:/shares# getfacl /shares/DOMAIN/username >> getfacl: Removing leading '/' from absolute path names >> # file: shares/DOMAIN/username >> # owner: username >> # group: domain\040users >> user::rwx >> user:www-data:--x >> group::--- >> mask::r-x >> other::--- >> >> Still no joy, and the logs are still showing: >> >> canonicalize_connect_path failed for service username, path /shares/DOMAIN/domain_username >> >> Thanks for all your advice so far but I still don't believe this is a permissions problem, Samba is trying to access a directory which simply does not exist, and never has existed... >> 6 Sep 2019, 11:19 by samba at lists.samba.org: >> >>> On 06/09/2019 11:12, gac wrote: >>> >>>> I imagine the numeric UID is my old boss who left the company a few years ago, and by this point his account has been removed, not just disabled. The only thing contained by the DOMAIN directory is a home directory for each user, which is owned by them. So I don't _think_ this is the problem. >>>> >>>> The command you suggested returns: >>>> >>>> winbind_lookup_rids failed: WBC_ERR_DOMAIN_NOT_FOUND >>>> >>>> The ACLs are to allow --x access for the 'www-data' into users home directories for use with Apache+mod_userdir, and then r-x access for their www directory >>>> >>> Try changing the ownership of /shares/DOMAIN to root >>> >>> What about the getfacl commands ? >>> >>> Rowland >>> >>> >>> >>> -- >>> To unsubscribe from this list go to the following URL and read the >>> instructions: https://lists.samba.org/mailman/options/samba >>> > > -- > Dr. Christian Naumer > Unit Head Bioprocess Development > B.R.A.I.N Aktiengesellschaft > Darmstaedter Str. 34-36, D-64673 Zwingenberg > e-mail cn at brain-biotech.com, homepage www.brain-biotech.com > fon +49-6251-9331-30 / fax +49-6251-9331-11 > > Sitz der Gesellschaft: Zwingenberg/Bergstrasse > Registergericht AG Darmstadt, HRB 24758 > Vorstand: Dr. Juergen Eck (Vorsitzender), Manfred Bender, > Ludger Roedder > Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
gac
2019-Sep-17 10:49 UTC
[Samba] Change in behaviour for the "%U" substitution in 4.10.8?
This is unfortunately still happening - anyone else have any other ideas? As a reminder/summary of the information from earlier in the thread; - My [homes] share is "path = /shares/DOMAIN/%U" - I am logging into a Windows 7 client as "DOMAIN\username" - My log.smbd shows "canonicalize_connect_path failed for service username, path /shares/DOMAIN/domain_username" (where DOMAIN is the domain name with upper-case letters, domain is the domain name with lower-case latters) - this issue is affecting two shares in total which use the %U substitution, both are showing the same error. Any shares which use fixed paths are fine, as expected - this only seemed to start happening when I upgraded to 4.10.8 from Louis van Belle's repo; I did not see the problem with the 4.10.7 packages from the same repo. Unfortunately the repo removes old versions of packages so I can't roll back to 4.10.7 as a reproduction or workaround I'd appreciate any more tips, thank you! 6 Sep 2019, 11:53 by samba at lists.samba.org:> I hadn't, but I did that just now; still the same behaviour. > > 6 Sep 2019, 11:49 by samba at lists.samba.org: > >> Have you tried running >> >> net cache flush >> >> after you have removed the SERVER lines from you config? >> >> Regards >> >> >> Am 06.09.19 um 12:33 schrieb gac via samba: >> >>> I've now changed the ownership to root, as you suggest. >>> >>> I've removed the ACLs from /shares/DOMAIN - they don't need to be there as anyone can enter this directory already so there's no need for them. >>> >>> The ACLs on my individual home directory: >>> >>> root at server:/shares# getfacl /shares/DOMAIN/username >>> getfacl: Removing leading '/' from absolute path names >>> # file: shares/DOMAIN/username >>> # owner: username >>> # group: domain\040users >>> user::rwx >>> user:www-data:--x >>> group::--- >>> mask::r-x >>> other::--- >>> >>> Still no joy, and the logs are still showing: >>> >>> canonicalize_connect_path failed for service username, path /shares/DOMAIN/domain_username >>> >>> Thanks for all your advice so far but I still don't believe this is a permissions problem, Samba is trying to access a directory which simply does not exist, and never has existed... >>> 6 Sep 2019, 11:19 by samba at lists.samba.org: >>> >>>> On 06/09/2019 11:12, gac wrote: >>>> >>>>> I imagine the numeric UID is my old boss who left the company a few years ago, and by this point his account has been removed, not just disabled. The only thing contained by the DOMAIN directory is a home directory for each user, which is owned by them. So I don't _think_ this is the problem. >>>>> >>>>> The command you suggested returns: >>>>> >>>>> winbind_lookup_rids failed: WBC_ERR_DOMAIN_NOT_FOUND >>>>> >>>>> The ACLs are to allow --x access for the 'www-data' into users home directories for use with Apache+mod_userdir, and then r-x access for their www directory >>>>> >>>> Try changing the ownership of /shares/DOMAIN to root >>>> >>>> What about the getfacl commands ? >>>> >>>> Rowland >>>> >>>> >>>> >>>> -- >>>> To unsubscribe from this list go to the following URL and read the >>>> instructions: https://lists.samba.org/mailman/options/samba >>>> >> >> -- >> Dr. Christian Naumer >> Unit Head Bioprocess Development >> B.R.A.I.N Aktiengesellschaft >> Darmstaedter Str. 34-36, D-64673 Zwingenberg >> e-mail cn at brain-biotech.com, homepage www.brain-biotech.com >> fon +49-6251-9331-30 / fax +49-6251-9331-11 >> >> Sitz der Gesellschaft: Zwingenberg/Bergstrasse >> Registergericht AG Darmstadt, HRB 24758 >> Vorstand: Dr. Juergen Eck (Vorsitzender), Manfred Bender, >> Ludger Roedder >> Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
Reasonably Related Threads
- Change in behaviour for the "%U" substitution in 4.10.8?
- Change in behaviour for the "%U" substitution in 4.10.8?
- Change in behaviour for the "%U" substitution in 4.10.8?
- Change in behaviour for the "%U" substitution in 4.10.8?
- Change in behaviour for the "%U" substitution in 4.10.8?