samba - May 2023 - vfs_shadow_copy2 cannot read/find snapshots

On Wed, 2023-05-24 at 14:38 +0200, Sebastian Neustein via samba wrote:
> > In addition to that there will be a log file corresponding to the
> > FUSE mount of GlusterFS volume under /var/log/glusterfs with mount
> > point as log file name? Please check if there are any warning/error
> > entries while trying to list previous versions from windows.
> Yes, there is a file called; /var/log/glusterfs/srv-glvol_samba.log
> 
> When the error in samba occurs there are these entries:
> [2023-05-24 12:30:09.764077 +0000] I [MSGID: 139001] 
> [posix-acl.c:252:posix_acl_log_permit_denied] 0-posix-acl-autoload: 
> client: -, gfid: 08ee40ea-8f84-4240-a6b1-e56e0d393016, 
> req(uid:1001103,gid:1000513,perm:4,ngrps:20), 
> ctx(uid:0,gid:0,in-groups:0,perm:000,updated-fop:INVALID, acl:-)
> [Keine Berechtigung]
> [2023-05-24 12:30:09.764234 +0000] W [fuse-bridge.c:1642:fuse_fd_cbk]
> 0-glusterfs-fuse: 201346: OPENDIR() /admin/projects/.snaps => -1
> (Keine Berechtigung)
Does it make a difference if you re-mount the volume without 'acl'
option? Even otherwise can you try listing the snapshot contents from
the server as a user(and not super user) who in reality tries to list
previous versions from Windows? I feel like it has something to do with
permissions setup for the user accessing the share.


Regards,
Anoop C S.

> Does it make a difference if you re-mount the volume without 'acl'
> option? Even otherwise can you try listing the snapshot contents from
> the server as a user(and not super user) who in reality tries to list
> previous versions from Windows? I feel like it has something to do with
> permissions setup for the user accessing the share.
It does make a difference! First only when accessing the directory on 
the server itself as a non priviledged AD user. Without acl I can enter 
the .snaps dir, with acl I can not.

Using Windows I wasn't able to access the privious version, but 
remembering Alexanders comment I could fix that aswell!

So my share looks like this now:
[projects]
 ??????? path = /srv/glvol_samba/admin/projects
 ??????? comment = ARC Projekte
 ??????? guest ok = no
 ??????? read only = no
 ??????? shadow:snapdir = /srv/glvol_samba/admin/projects/.snaps
 ??????? shadow:basedir = /srv/glvol_samba/admin/projects
 ??????? shadow:sort = desc
 ??????? vfs objects = acl_xattr shadow_copy2 glusterfs_fuse
 ??????? shadow:format = snap_GMT-%Y.%m.%d-%H.%M.%S



And my mounting unit looks like this:

[Unit]
Description=Data Dir
After=network.target
Requires=network-online.target

[Mount]
What=B741:/glvol_samba
Where=/srv/glvol_samba
Type=glusterfs
Options=defaults,_netdev,negative-timeout=10,attribute-timeout=30,fopen-keep-cache,direct-io-mode=enable

[Install]
WantedBy=multi-user.target



Now I have to test if the missing acl options has any influence on the 
windows acls.

Best regards and a big big Thank you!

Regards
Sebastian

-- 
Sebastian Neustein

Airport Research Center GmbH
Bismarckstra?e 61
52066 Aachen
Germany

Phone: +49 241 16843-23
Fax: +49 241 16843-19
e-mail: sebastian.neustein at arc-aachen.de
Website: http://www.airport-consultants.com

Register Court: Amtsgericht Aachen HRB 7313
Ust-Id-No.: DE196450052

Managing Director:
Dipl.-Ing. Tom Alexander Heuer