On 10/28/2020 3:31 AM, Marco Gaiarin via samba wrote:> Mandi! Dan Egli via samba > In chel di` si favelave... > >> Why on earth would samba even CARE about group permissions when user >> permissions are perfectly fine? Help me fix this? > Consider that, if POSIX ACL are enabled on this FS, the group > permission are considered as a 'mask' for all ACL, with unpredictable > result (no, they are predictable, only very confusing ;-). > > Use 'getfacl' to look at ACL on dirs, and post here, please. > > Or try to remove ACLs (setfacl -bR) and retry. >I posted the getfacl output a minute or two ago. I tried killing any ACLs with setfacl -bR and the result was identical. NT_STATUS_ACCESS_DENIED Next idea? :) -- Dan Egli On my Test server -------------- next part -------------- A non-text attachment was scrubbed... Name: OpenPGP_signature Type: application/pgp-signature Size: 495 bytes Desc: OpenPGP digital signature URL: <http://lists.samba.org/pipermail/samba/attachments/20201028/df4b9862/OpenPGP_signature.sig>
Mandi! Dan Egli via samba In chel di` si favelave...> I posted the getfacl output a minute or two ago.I've had missed that.> Next idea? :)No one. But plain 'POSIX' access (eg, ssh) works? Eg if you try to redo the operation that does not work with samba using plain ssh access (with the same user), they works? -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bont?, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
On 10/28/2020 4:14 AM, Marco Gaiarin via samba wrote:> >> Next idea? :) > No one. But plain 'POSIX' access (eg, ssh) works? Eg if you try to redo > the operation that does not work with samba using plain ssh access > (with the same user), they works? >Yes, ssh works just fine.? Here's an example of it: [dan at jupiter2 ~]$ mkdir test3 [dan at jupiter2 ~]$ cd test3 [dan at jupiter2 test3]$ cat > testing Hello World! Hello World! [dan at jupiter2 test3]$ ls testing [dan at jupiter2 test3]$ cat testing Hello World! Hello World! And samba works just fine as long as BOTH user and group permissions allow the operation. That's why I had the create mask and directory mask entries in the smb.conf on the [Homes] share I'm at a loss. -- Dan Egli On my Test server -------------- next part -------------- A non-text attachment was scrubbed... Name: OpenPGP_signature Type: application/pgp-signature Size: 495 bytes Desc: OpenPGP digital signature URL: <http://lists.samba.org/pipermail/samba/attachments/20201028/ae6eb90d/OpenPGP_signature.sig>