Rowland Penny
2021-Sep-28 09:08 UTC
[Samba] Permission denied when chainbuilding packages with mock
On Tue, 2021-09-28 at 10:53 +0200, Julian Sikorski via samba wrote:> Hi list, > > since a few weeks I am no longer able to chainbuild packages with > mock > when localrepo is pointed to a samba share.Has anything changed, any updares etc ?> The client error is: > > Error calculating checksum > /mnt/openmediavault/kernel/results/fedora-34-x86_64/pesign-113- > 16.fc35/pesign-113-16.fc34.x86_64.rpm: > (39, fsync failed: Permission denied) > > I was able to get the server to generate a log, there are > NT_STATUS_NO_EAS_ON_FILE and NT_STATUS_ACCESS_DENIED errors present. > My > client is a Fedora 34 x86_64 machine, the server is > armbian/openmediavault. Does anybody have any ideas what is going on, > or > how can I check which request is getting access denied exactly? >Can you post the two smb.conf files and the Samba versions. Rowland
Julian Sikorski
2021-Sep-28 09:28 UTC
[Samba] Permission denied when chainbuilding packages with mock
W dniu 28.09.2021 o?11:08, Rowland Penny via samba pisze:> On Tue, 2021-09-28 at 10:53 +0200, Julian Sikorski via samba wrote: >> Hi list, >> >> since a few weeks I am no longer able to chainbuild packages with >> mock >> when localrepo is pointed to a samba share. > > Has anything changed, any updares etc ?On the client samba packages were updated from 4.14.6 to 4.14.7 on 1st September, but looking at my history it appears that the chainbuilds were working at least shortly after 16th September. I do not have the history for the server because /var/log is stored in a ramdisk by armbian. If I am not mistaken, I have deleted the repodata folder on the samba share before the issue started happening and since then the chainbuilds stopped working. I am not 100% sure though.> >> The client error is: >> >> Error calculating checksum >> /mnt/openmediavault/kernel/results/fedora-34-x86_64/pesign-113- >> 16.fc35/pesign-113-16.fc34.x86_64.rpm: >> (39, fsync failed: Permission denied) >> >> I was able to get the server to generate a log, there are >> NT_STATUS_NO_EAS_ON_FILE and NT_STATUS_ACCESS_DENIED errors present. >> My >> client is a Fedora 34 x86_64 machine, the server is >> armbian/openmediavault. Does anybody have any ideas what is going on, >> or >> how can I check which request is getting access denied exactly? >> > > Can you post the two smb.conf files and the Samba versions.Sure. Versions are as follows: Client: samba-client-4.14.7-0.fc34.x86_64 Server: samba-common/oldstable,oldstable,now 2:4.9.5+dfsg-5+deb10u1 smb.conf files are attached. The share is mounted on the client with the following /etc/fstab entry: //odroidxu4.local/julian /mnt/openmediavault cifs credentials=/home/julas/.credentials,uid=julas,gid=julas,vers=3.1.1,nobrl,_netdev,auto 0 0> > Rowland > > >-------------- next part -------------- # See smb.conf.example for a more detailed config file or # read the smb.conf manpage. # Run 'testparm' to verify the config is correct after # you modified it. # # Note: # SMB1 is disabled by default. This means clients without support for SMB2 or # SMB3 are no longer able to connect to smbd (by default). [global] workgroup = SAMBA security = user passdb backend = tdbsam printing = cups printcap name = cups load printers = yes cups options = raw [homes] comment = Home Directories valid users = %S, %D%w%S browseable = No read only = No inherit acls = Yes [printers] comment = All Printers path = /var/tmp printable = Yes create mask = 0600 browseable = No [print$] comment = Printer Drivers path = /var/lib/samba/drivers write list = @printadmin root force group = @printadmin create mask = 0664 directory mask = 0775 -------------- next part -------------- # This file is auto-generated by openmediavault (https://www.openmediavault.org) # WARNING: Do not edit this file, your changes will get lost. #======================= Global Settings ======================[global] workgroup = WORKGROUP server string = %h server dns proxy = no log level = 0 log file = /var/log/samba/log.%m max log size = 1000 logging = syslog panic action = /usr/share/samba/panic-action %d encrypt passwords = true passdb backend = tdbsam obey pam restrictions = no unix password sync = no passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* . pam password change = yes socket options = TCP_NODELAY IPTOS_LOWDELAY guest account = nobody load printers = no disable spoolss = yes printing = bsd printcap name = /dev/null unix extensions = yes wide links = no create mask = 0777 directory mask = 0777 use sendfile = yes aio read size = 16384 aio write size = 16384 time server = no wins support = no multicast dns register = no # Special configuration for Apple's Time Machine fruit:aapl = yes # Extra options min receivefile size = 16384 write cache size = 524288 getwd cache = yes socket options = TCP_NODELAY IPTOS_LOWDELAY #======================= Share Definitions ======================[julian] path = /srv/dev-disk-by-label-omv/julian/ guest ok = no guest only = no read only = no browseable = yes inherit acls = yes inherit permissions = no ea support = no store dos attributes = no vfs objects = printable = no create mask = 0664 force create mode = 0664 directory mask = 0775 force directory mode = 0775 hide special files = yes follow symlinks = yes hide dot files = yes valid users = "julas" invalid users = read list = write list = "julas" [yasy] path = /srv/dev-disk-by-label-omv/yasy/ guest ok = no guest only = no read only = no browseable = yes inherit acls = yes inherit permissions = no ea support = no store dos attributes = no vfs objects = printable = no create mask = 0664 force create mode = 0664 directory mask = 0775 force directory mode = 0775 hide special files = yes follow symlinks = yes hide dot files = yes valid users = "yasy" invalid users = read list = write list = "yasy" [austausch] path = /srv/dev-disk-by-label-omv/austausch/ guest ok = no guest only = no read only = no browseable = yes inherit acls = yes inherit permissions = no ea support = no store dos attributes = no vfs objects = printable = no create mask = 0664 force create mode = 0664 directory mask = 0775 force directory mode = 0775 hide special files = yes follow symlinks = yes hide dot files = yes valid users = "julas","yasy" invalid users = read list = write list = "julas","yasy" [Bilder2019] path = /srv/dev-disk-by-label-omv/julian/Pictures/2019/ guest ok = no guest only = no read only = no browseable = yes inherit acls = yes inherit permissions = no ea support = no store dos attributes = no vfs objects = printable = no create mask = 0664 force create mode = 0664 directory mask = 0775 force directory mode = 0775 hide special files = yes follow symlinks = yes hide dot files = yes valid users = "julas","yasy" invalid users = read list = write list = "julas","yasy"
L.P.H. van Belle
2021-Sep-28 09:35 UTC
[Samba] Permission denied when chainbuilding packages with mock
As someone replied my recently.. This issue appears to have stemmed from me running Samba in a k8s container without CAP_SYS_ADMIN which is apparently required for extended attributes. I ended up building 4.15 from source with this patch applied: https://gitlab.com/samba-team/samba/-/merge_requests/1908 and added xattr:unprotected_ntacl_name = user.NTACL to my smb.conf, I dont know if you/openmediavault uses containers, but this might be worth a try. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Julian Sikorski via samba > Verzonden: dinsdag 28 september 2021 11:29 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Permission denied when chainbuilding > packages with mock > > W dniu 28.09.2021 o?11:08, Rowland Penny via samba pisze: > > On Tue, 2021-09-28 at 10:53 +0200, Julian Sikorski via samba wrote: > >> Hi list, > >> > >> since a few weeks I am no longer able to chainbuild packages with > >> mock > >> when localrepo is pointed to a samba share. > > > > Has anything changed, any updares etc ? > > On the client samba packages were updated from 4.14.6 to > 4.14.7 on 1st > September, but looking at my history it appears that the chainbuilds > were working at least shortly after 16th September. I do not have the > history for the server because /var/log is stored in a > ramdisk by armbian. > If I am not mistaken, I have deleted the repodata folder on the samba > share before the issue started happening and since then the > chainbuilds > stopped working. I am not 100% sure though. > > > > >> The client error is: > >> > >> Error calculating checksum > >> /mnt/openmediavault/kernel/results/fedora-34-x86_64/pesign-113- > >> 16.fc35/pesign-113-16.fc34.x86_64.rpm: > >> (39, fsync failed: Permission denied) > >> > >> I was able to get the server to generate a log, there are > >> NT_STATUS_NO_EAS_ON_FILE and NT_STATUS_ACCESS_DENIED > errors present. > >> My > >> client is a Fedora 34 x86_64 machine, the server is > >> armbian/openmediavault. Does anybody have any ideas what > is going on, > >> or > >> how can I check which request is getting access denied exactly? > >> > > > > Can you post the two smb.conf files and the Samba versions. > Sure. Versions are as follows: > > Client: samba-client-4.14.7-0.fc34.x86_64 > Server: samba-common/oldstable,oldstable,now 2:4.9.5+dfsg-5+deb10u1 > > smb.conf files are attached. The share is mounted on the > client with the > following /etc/fstab entry: > //odroidxu4.local/julian /mnt/openmediavault cifs > credentials=/home/julas/.credentials,uid=julas,gid=julas,vers> 3.1.1,nobrl,_netdev,auto > 0 0 > > > > > Rowland > > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >