On 01/07/2020 09:03, Enrico Morelli wrote:> On Wed, 1 Jul 2020 08:43:37 +0100 > Rowland penny via samba <samba at lists.samba.org> wrote: > >> On 01/07/2020 08:36, Enrico Morelli via samba wrote: >>> On Tue, 30 Jun 2020 10:28:41 -0700 >>> Jeremy Allison via samba <samba at lists.samba.org> wrote: >>> >>>> On Tue, Jun 30, 2020 at 02:41:46PM +0200, Enrico Morelli via samba >>>> wrote: >>>>> On Tue, 30 Jun 2020 11:01:27 +0100 >>>>> Rowland penny via samba <samba at lists.samba.org> wrote: >>>>> >>>>>> On 30/06/2020 10:40, Enrico Morelli via samba wrote: >>>>>>> At the end I'll to abandon samba :-(( >>>>>>> I'm really sad >>>>>> One last thought, have you touched the 'share' tab ? >>>>>> >>>>>> For instance, have you removed 'Everyone' from it ? >>>>>> >>>>>> If so, put it back. >>>>>> >>>>>> Rowland >>>>>> >>>>>> >>>>>> >>>>> Everyone is present. Clicking on the security tab, the window >>>>> crash. >>>> The window crashing is a Windows bug. Whatever we send it >>>> shouldn't do that. Do you have a wireshark trace of the >>>> SMB2 reply that crashes the tab ? >>>> >>> A friend saw me that is a "bug" of the debian package. He sent me a >>> package with a patch that should solve the problem. >>> >> If it is a Samba bug, why is it that you seem to be amongst the >> select few that it affects ? >> >> I am not saying it isn't a possible bug, but I cannot recreate it, >> perhaps if you share the patch, we can see what the 'problem' >> actually is. >> >> Rowland >> >> >> > I don't know if it's a samba bug or something related to the debian > repackage, but with the patch I'm able to open security tab > without crash. > > This what my friend mailed me: > > The problem is that the owner (or group) is not root and then the > explorer is crashing when you try to look at the security tab I found a > patch from Julia Bremer > https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwiTx5Hv3anqAhVTT8AKHZgfCl8QFjAAegQIARAB&url=https%3A%2F%2Fbugzilla.samba.org%2Fattachment.cgi%3Fid%3D15746&usg=AOvVaw1jdLcM0ngv0tgjAyuuH35N >OK, from that, I have traced it to Samba bug 14213, but what I do not understand is, if I connect from explorer -> Network -> computer -> share and right click on the share and select 'Properties' it does not crash for me. The permissions on the share are: pi at raspberrypi:~ $ ls -lad /home/test/ drwxrwxr-x+ 3 root domain users 4096 May 26 10:01 /home/test/ pi at raspberrypi:~ $ getfacl /home/test/ getfacl: Removing leading '/' from absolute path names # file: home/test/ # owner: root # group: domain\040users user::rwx user:root:rwx group::r-x group:domain\040users:r-x group:unix\040admins:r-x mask::rwx other::r-x default:user::rwx default:user:root:rwx default:group::rwx default:group:domain\040users:rwx default:group:unix\040admins:r-x default:mask::rwx default:other::--- pi at raspberrypi:~ $ sudo samba-tool ntacl get /home/test --as-sddl .................. O:S-1-22-1-0G:DUD:PAI(A;;0x001200a9;;;WD)(A;;0x001f01ff;;;S-1-22-1-0)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001f01ff;;;CG)(A;;0x001200a9;;;DU)(A;OICI;0x001200a9;;;S-1-5-21-1768301897-3342589593-1064908849-2122) So, whilst Samba shouldn't cause anything on Windows to crash, if you follow the wiki it doesn't crash (not for me anyway) . Who owns your share that you are trying to connect to ? Rowland
On Wed, 1 Jul 2020 10:04:07 +0100 Rowland penny via samba <samba at lists.samba.org> wrote:> On 01/07/2020 09:03, Enrico Morelli wrote: > > On Wed, 1 Jul 2020 08:43:37 +0100 > > Rowland penny via samba <samba at lists.samba.org> wrote: > > > >> On 01/07/2020 08:36, Enrico Morelli via samba wrote: > >>> On Tue, 30 Jun 2020 10:28:41 -0700 > >>> Jeremy Allison via samba <samba at lists.samba.org> wrote: > >>> > >>>> On Tue, Jun 30, 2020 at 02:41:46PM +0200, Enrico Morelli via > >>>> samba wrote: > >>>>> On Tue, 30 Jun 2020 11:01:27 +0100 > >>>>> Rowland penny via samba <samba at lists.samba.org> wrote: > >>>>> > >>>>>> On 30/06/2020 10:40, Enrico Morelli via samba wrote: > >>>>>>> At the end I'll to abandon samba :-(( > >>>>>>> I'm really sad > >>>>>> One last thought, have you touched the 'share' tab ? > >>>>>> > >>>>>> For instance, have you removed 'Everyone' from it ? > >>>>>> > >>>>>> If so, put it back. > >>>>>> > >>>>>> Rowland > >>>>>> > >>>>>> > >>>>>> > >>>>> Everyone is present. Clicking on the security tab, the window > >>>>> crash. > >>>> The window crashing is a Windows bug. Whatever we send it > >>>> shouldn't do that. Do you have a wireshark trace of the > >>>> SMB2 reply that crashes the tab ? > >>>> > >>> A friend saw me that is a "bug" of the debian package. He sent me > >>> a package with a patch that should solve the problem. > >>> > >> If it is a Samba bug, why is it that you seem to be amongst the > >> select few that it affects ? > >> > >> I am not saying it isn't a possible bug, but I cannot recreate it, > >> perhaps if you share the patch, we can see what the 'problem' > >> actually is. > >> > >> Rowland > >> > >> > >> > > I don't know if it's a samba bug or something related to the debian > > repackage, but with the patch I'm able to open security tab > > without crash. > > > > This what my friend mailed me: > > > > The problem is that the owner (or group) is not root and then the > > explorer is crashing when you try to look at the security tab I > > found a patch from Julia Bremer > > https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwiTx5Hv3anqAhVTT8AKHZgfCl8QFjAAegQIARAB&url=https%3A%2F%2Fbugzilla.samba.org%2Fattachment.cgi%3Fid%3D15746&usg=AOvVaw1jdLcM0ngv0tgjAyuuH35N > > > OK, from that, I have traced it to Samba bug 14213, but what I do not > understand is, if I connect from explorer -> Network -> computer -> > share and right click on the share and select 'Properties' it does > not crash for me. The permissions on the share are: > > pi at raspberrypi:~ $ ls -lad /home/test/ > drwxrwxr-x+ 3 root domain users 4096 May 26 10:01 /home/test/ > > pi at raspberrypi:~ $ getfacl /home/test/ > getfacl: Removing leading '/' from absolute path names > # file: home/test/ > # owner: root > # group: domain\040users > user::rwx > user:root:rwx > group::r-x > group:domain\040users:r-x > group:unix\040admins:r-x > mask::rwx > other::r-x > default:user::rwx > default:user:root:rwx > default:group::rwx > default:group:domain\040users:rwx > default:group:unix\040admins:r-x > default:mask::rwx > default:other::--- > > pi at raspberrypi:~ $ sudo samba-tool ntacl get /home/test --as-sddl > > .................. > > O:S-1-22-1-0G:DUD:PAI(A;;0x001200a9;;;WD)(A;;0x001f01ff;;;S-1-22-1-0)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001f01ff;;;CG)(A;;0x001200a9;;;DU)(A;OICI;0x001200a9;;;S-1-5-21-1768301897-3342589593-1064908849-2122) > > So, whilst Samba shouldn't cause anything on Windows to crash, if you > follow the wiki it doesn't crash (not for me anyway) . Who owns your > share that you are trying to connect to ? > > Rowland > > >root at localhost:~# getfacl /home/samba/users/ getfacl: Removing leading '/' from absolute path names # file: home/samba/users/ # owner: root # group: root user::rwx group::rwx other::rwx root at localhost:~# samba-tool ntacl get /home/samba/users --as-sddl O:LAG:S-1-22-2-0D:(A;;0x001f01ff;;;LA)(A;;0x001f01ff;;;S-1-22-2-0)(A;;0x001f01ff;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD) -- ----------------------------------------------------------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY ------------------------------------------------------------
> root at localhost:~# getfacl /home/samba/users/ > getfacl: Removing leading '/' from absolute path names > # file: home/samba/users/ > # owner: root > # group: root > user::rwx > group::rwx > other::rwx> root at localhost:~# samba-tool ntacl get /home/samba/users --as-sddl > O:LAG:S-1-22-2-0D:(A;;0x001f01ff;;;LA)(A;;0x001f01ff;;;S-1-22-2-0)(A;;0x001f01ff;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD)-------------------------------------------------------------------------------------------------------------------- Sorry for the bad format....I am fighting to get lists.samba.org into a newsreader without success (bloody Austrian A1 doesn't have a news server anymore and I couldn't find a nntp server with samba lists) If you change the file/directory owner to a unix user, windows explorer is crashing immediately in the security tab. The only exception is the user root, because it mapped to Administrator. Mani
PS. This my output. Im not that info reading the SSDL outputs.. It might help Rowland in analyzing it. O:S-1-22-1-0G:S-1-22-2-0D:AI(A;OICI;0x001f01ff;;;S-1-22-1-0)(A;OICI;0x001f01ff;;;DA)(A;OICI;0x001f01ff;;;SY)(A;OICI;;;;S-1-22-2-0)(A;;;;;S-1-22-2-0)(A;;0x001200a9;;;DU)(A;;0x001200a9;;;AU)(A;;0x001f01ff;;;S-1-22-1-0)(A;;0x001f01ff;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;;;;CG)(A;OICIIO;;;;WD) getfacl /home/samba/users getfacl: Removing leading '/' from absolute path names # file: home/samba/users # owner: root # group: root user::rwx user:root:rwx group::--- group:root:--- group:2004:r-x group:2005:rwx group:domain\040users:r-x group:domain\040admins:rwx mask::rwx other::rwx default:user::rwx default:user:root:rwx default:group::--- default:group:root:--- default:group:2005:rwx default:group:domain\040admins:rwx default:mask::rwx default:other::--- 2005 = SYSTEM 2004 = Authenticated Users Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Robi. T. Wagner via samba > Verzonden: woensdag 1 juli 2020 13:16 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Users, home directories and profiles > > > root at localhost:~# getfacl /home/samba/users/ > > getfacl: Removing leading '/' from absolute path names > > # file: home/samba/users/ > > # owner: root > > # group: root > > user::rwx > > group::rwx > > other::rwx > > > root at localhost:~# samba-tool ntacl get /home/samba/users --as-sddl > > > O:LAG:S-1-22-2-0D:(A;;0x001f01ff;;;LA)(A;;0x001f01ff;;;S-1-22- > 2-0)(A;;0x001f01ff;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x > 001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD) > > -------------------------------------------------------------- > ------------------------------------------------------ > Sorry for the bad format....I am fighting to get > lists.samba.org into a newsreader without success (bloody > Austrian A1 doesn't have a news server anymore and I couldn't > find a nntp server with samba lists) > > If you change the file/directory owner to a unix user, > windows explorer is crashing immediately in the security tab. > The only exception is the user root, because it mapped to > Administrator. > > > Mani > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >