samba - Sep 2019 - Change in behaviour for the "%U" substitution in 4.10.8?

Hai, 

Yes, the repo does not allow different versionnumbers, but i do have all my
versions in backup.

I made a few tar.gz for you so you can test again with 4.10.7 on a local repo.
You can find them here. http://downloads.van-belle.nl/samba4/ 
The 4.10.7 for Stretch Buster and Bionic source and deb's are there to get. 


Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens gac via samba
> Verzonden: dinsdag 17 september 2019 12:49
> Aan: Samba
> Onderwerp: Re: [Samba] Change in behaviour for the "%U" 
> substitution in 4.10.8?
> 
> This is unfortunately still happening - anyone else have any 
> other ideas?
> 
> As a reminder/summary of the information from earlier in the thread;
> 
> - My [homes] share is "path = /shares/DOMAIN/%U"
> - I am logging into a Windows 7 client as "DOMAIN\username"
> - My log.smbd shows "canonicalize_connect_path failed for 
> service username, path /shares/DOMAIN/domain_username" (where 
> DOMAIN is the domain name with upper-case letters, domain is 
> the domain name with lower-case latters)
> - this issue is affecting two shares in total which use the 
> %U substitution, both are showing the same error. Any shares 
> which use fixed paths are fine, as expected
> - this only seemed to start happening when I upgraded to 
> 4.10.8 from Louis van Belle's repo; I did not see the problem 
> with the 4.10.7 packages from the same repo. Unfortunately 
> the repo removes old versions of packages so I can't roll 
> back to 4.10.7 as a reproduction or workaround
> 
> I'd appreciate any more tips, thank you!
> 
> 6 Sep 2019, 11:53 by samba at lists.samba.org:
> 
> > I hadn't, but I did that just now; still the same behaviour.
> >
> > 6 Sep 2019, 11:49 by samba at lists.samba.org:
> >
> >> Have you tried running
> >>
> >> net cache flush
> >>
> >> after you have removed the SERVER lines from you config?
> >>
> >> Regards
> >>
> >>
> >> Am 06.09.19 um 12:33 schrieb gac via samba:
> >>
> >>> I've now changed the ownership to root, as you suggest.
> >>>
> >>> I've removed the ACLs from /shares/DOMAIN - they don't
> need to be there as anyone can enter this directory already 
> so there's no need for them.
> >>>
> >>> The ACLs on my individual home directory:
> >>>
> >>> root at server:/shares# getfacl /shares/DOMAIN/username
> >>> getfacl: Removing leading '/' from absolute path names
> >>> # file: shares/DOMAIN/username
> >>> # owner: username
> >>> # group: domain\040users
> >>> user::rwx
> >>> user:www-data:--x
> >>> group::---
> >>> mask::r-x
> >>> other::---
> >>>
> >>> Still no joy, and the logs are still showing:
> >>>
> >>> canonicalize_connect_path failed for service username, 
> path /shares/DOMAIN/domain_username
> >>>
> >>> Thanks for all your advice so far but I still don't 
> believe this is a permissions problem, Samba is trying to 
> access a directory which simply does not exist, and never has 
> existed...
> >>> 6 Sep 2019, 11:19 by samba at lists.samba.org:
> >>>
> >>>> On 06/09/2019 11:12, gac wrote:
> >>>>
> >>>>> I imagine the numeric UID is my old boss who left the 
> company a few years ago, and by this point his account has 
> been removed, not just disabled. The only thing contained by 
> the DOMAIN directory is a home directory for each user, which 
> is owned by them. So I don't _think_ this is the problem.
> >>>>>
> >>>>> The command you suggested returns:
> >>>>>
> >>>>> winbind_lookup_rids failed: WBC_ERR_DOMAIN_NOT_FOUND
> >>>>>
> >>>>> The ACLs are to allow --x access for the
'www-data'
> into users home directories for use with Apache+mod_userdir, 
> and then r-x access for their www directory
> >>>>>
> >>>> Try changing the ownership of /shares/DOMAIN to root
> >>>>
> >>>> What about the getfacl commands ?
> >>>>
> >>>> Rowland
> >>>>
> >>>>
> >>>>
> >>>> -- 
> >>>> To unsubscribe from this list go to the following URL 
> and read the
> >>>> instructions: 
https://lists.samba.org/mailman/options/samba
> >>>>
> >>
> >> -- 
> >> Dr. Christian Naumer
> >> Unit Head Bioprocess Development
> >> B.R.A.I.N Aktiengesellschaft
> >> Darmstaedter Str. 34-36, D-64673 Zwingenberg
> >> e-mail cn at brain-biotech.com, homepage www.brain-biotech.com
> >> fon +49-6251-9331-30  /   fax +49-6251-9331-11
> >>
> >> Sitz der Gesellschaft: Zwingenberg/Bergstrasse
> >> Registergericht AG Darmstadt, HRB 24758
> >> Vorstand: Dr. Juergen Eck (Vorsitzender), Manfred Bender,
> >> Ludger Roedder
> >> Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen
> >>
> >> -- 
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions:  https://lists.samba.org/mailman/options/samba
> >>
> >
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>

Ah, thanks - I'll try with those this afternoon and check the behaviour with
this version

17 Sep 2019, 12:56 by samba at lists.samba.org:
> Hai, 
>
> Yes, the repo does not allow different versionnumbers, but i do have all my
versions in backup.
>
> I made a few tar.gz for you so you can test again with 4.10.7 on a local
repo.
> You can find them here. http://downloads.van-belle.nl/samba4/ 
> The 4.10.7 for Stretch Buster and Bionic source and deb's are there to
get.
>
>
> Greetz, 
>
> Louis
>
>
>
>> -----Oorspronkelijk bericht-----
>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens gac via
samba
>> Verzonden: dinsdag 17 september 2019 12:49
>> Aan: Samba
>> Onderwerp: Re: [Samba] Change in behaviour for the "%U" 
>> substitution in 4.10.8?
>>
>> This is unfortunately still happening - anyone else have any 
>> other ideas?
>>
>> As a reminder/summary of the information from earlier in the thread;
>>
>> - My [homes] share is "path = /shares/DOMAIN/%U"
>> - I am logging into a Windows 7 client as "DOMAIN\username"
>> - My log.smbd shows "canonicalize_connect_path failed for 
>> service username, path /shares/DOMAIN/domain_username" (where 
>> DOMAIN is the domain name with upper-case letters, domain is 
>> the domain name with lower-case latters)
>> - this issue is affecting two shares in total which use the 
>> %U substitution, both are showing the same error. Any shares 
>> which use fixed paths are fine, as expected
>> - this only seemed to start happening when I upgraded to 
>> 4.10.8 from Louis van Belle's repo; I did not see the problem 
>> with the 4.10.7 packages from the same repo. Unfortunately 
>> the repo removes old versions of packages so I can't roll 
>> back to 4.10.7 as a reproduction or workaround
>>
>> I'd appreciate any more tips, thank you!
>>
>> 6 Sep 2019, 11:53 by samba at lists.samba.org:
>>
>> > I hadn't, but I did that just now; still the same behaviour.
>> >
>> > 6 Sep 2019, 11:49 by samba at lists.samba.org:
>> >
>> >> Have you tried running
>> >>
>> >> net cache flush
>> >>
>> >> after you have removed the SERVER lines from you config?
>> >>
>> >> Regards
>> >>
>> >>
>> >> Am 06.09.19 um 12:33 schrieb gac via samba:
>> >>
>> >>> I've now changed the ownership to root, as you
suggest.
>> >>>
>> >>> I've removed the ACLs from /shares/DOMAIN - they
don't
>> need to be there as anyone can enter this directory already 
>> so there's no need for them.
>> >>>
>> >>> The ACLs on my individual home directory:
>> >>>
>> >>> root at server:/shares# getfacl /shares/DOMAIN/username
>> >>> getfacl: Removing leading '/' from absolute path
names
>> >>> # file: shares/DOMAIN/username
>> >>> # owner: username
>> >>> # group: domain\040users
>> >>> user::rwx
>> >>> user:www-data:--x
>> >>> group::---
>> >>> mask::r-x
>> >>> other::---
>> >>>
>> >>> Still no joy, and the logs are still showing:
>> >>>
>> >>> canonicalize_connect_path failed for service username, 
>> path /shares/DOMAIN/domain_username
>> >>>
>> >>> Thanks for all your advice so far but I still don't 
>> believe this is a permissions problem, Samba is trying to 
>> access a directory which simply does not exist, and never has 
>> existed...
>> >>> 6 Sep 2019, 11:19 by samba at lists.samba.org:
>> >>>
>> >>>> On 06/09/2019 11:12, gac wrote:
>> >>>>
>> >>>>> I imagine the numeric UID is my old boss who left
the
>> company a few years ago, and by this point his account has 
>> been removed, not just disabled. The only thing contained by 
>> the DOMAIN directory is a home directory for each user, which 
>> is owned by them. So I don't _think_ this is the problem.
>> >>>>>
>> >>>>> The command you suggested returns:
>> >>>>>
>> >>>>> winbind_lookup_rids failed:
WBC_ERR_DOMAIN_NOT_FOUND
>> >>>>>
>> >>>>> The ACLs are to allow --x access for the
'www-data'
>> into users home directories for use with Apache+mod_userdir, 
>> and then r-x access for their www directory
>> >>>>>
>> >>>> Try changing the ownership of /shares/DOMAIN to root
>> >>>>
>> >>>> What about the getfacl commands ?
>> >>>>
>> >>>> Rowland
>> >>>>
>> >>>>
>> >>>>
>> >>>> -- 
>> >>>> To unsubscribe from this list go to the following URL 
>> and read the
>> >>>> instructions: 
https://lists.samba.org/mailman/options/samba
>> >>>>
>> >>
>> >> -- 
>> >> Dr. Christian Naumer
>> >> Unit Head Bioprocess Development
>> >> B.R.A.I.N Aktiengesellschaft
>> >> Darmstaedter Str. 34-36, D-64673 Zwingenberg
>> >> e-mail cn at brain-biotech.com, homepage www.brain-biotech.com
>> >> fon +49-6251-9331-30  /   fax +49-6251-9331-11
>> >>
>> >> Sitz der Gesellschaft: Zwingenberg/Bergstrasse
>> >> Registergericht AG Darmstadt, HRB 24758
>> >> Vorstand: Dr. Juergen Eck (Vorsitzender), Manfred Bender,
>> >> Ludger Roedder
>> >> Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen
>> >>
>> >> -- 
>> >> To unsubscribe from this list go to the following URL and read
the
>> >> instructions:  https://lists.samba.org/mailman/options/samba
>> >>
>> >
>> > -- 
>> > To unsubscribe from this list go to the following URL and read the
>> > instructions:  https://lists.samba.org/mailman/options/samba
>> >
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>