samba - Nov 2021 - chdir_current_service: vfs_ChDir(/srv/samba/users) failed: Permission denied.

Hello spindles,

On 11/27/21 11:02, spindles seven via samba wrote:
> I am struggling to know what to do next to track down this issue.  Any
suggestions?
what about the permission on /, /srv and /srv/samba? The account needs 
at least "x" there.

-slow

-- 
Ralph Boehme, Samba Team                 https://samba.org/
SerNet Samba Team Lead      https://sernet.de/en/team-samba
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.samba.org/pipermail/samba/attachments/20211127/3cb34d17/OpenPGP_signature.sig>

On 27 November 2021 10:10 Ralph Boehme wrote:
> 
> what about the permission on /, /srv and /srv/samba? The account needs
> at least "x" there.
> 
> -slow
> 
Thanks Ralph.

So  "x" was missing on /srv/samba: 
root at lxd-m1:~# ls -l /srv
total 16
drwxrwx--- 1 root domain admins 34 Feb 26  2021 samba

So add it:
root at lxd-m1:~# chmod 771 /srv/samba
root at lxd-m1:~# ls -l /srv
total 16
drwxrwx--x 1 root domain admins 34 Feb 26  2021 samba

The samba WiKi doesn't mention adding the "x" at all in the
directory hierarchy as far as I can see;   if so maybe a note needs adding to
the relevant page(s)?

Have added the "x" to the /srv/samba directory and the logs
haven't recurred (so far!).

Not sure I understand why this will work, considering that the line:
"acl_xattr:ignore system acl = yes" is in smb.conf?

Checking man smb.conf I can't find the description of this parameter.
A search finds mention of "acl)xattr:ignore system acls = yes" (note
the plural of acl) but no actual description of the parameter.

The Wiki suggests adding "acl_xattr:ignore system acl = yes", but
should it be: "acl_xattr:ignore system acls = yes"?

Thanks,
Roy