Peter Milesson
2023-Dec-13 08:34 UTC
[Samba] Permission denied while trying to setup share with RSAT
On 12.12.2023 20:00, Peter Milesson via samba wrote:> > > On 12.12.2023 19:46, Rowland Penny via samba wrote: >> On Tue, 12 Dec 2023 19:34:20 +0100 >> Peter Milesson via samba <samba at lists.samba.org> wrote: >> >>> Hi Rowland, >>> >>> Just one more bit of information. I don't think it is relevant, but >>> who knows. All servers are VMs that I migrated from Xen to Qemu/KVM a >>> week ago. The VMs are running off of LVM volumes (like before). >>> >>> I have also checked Apparmor. Samba is not under Apparmor control. >>> >>> Best regards, >>> >>> Peter >>> >>> >> I have heard of VMs where root doesn't work, could this be your problem >> ? >> >> I ask this because I use Oracle virtual box and it works for myself, >> with Apparmor ! >> >> Rowland >> >Hi folks, I finally found the culprit. When setting up shares with RSAT you must not activate acl_xattr:ignore system acls = yes until AFTER setting up share security. This statement is incredibly easy to miss in the Samba Wiki! It should be contained in the warning above the section. See https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs Best regards, Peter
Rowland Penny
2023-Dec-13 10:03 UTC
[Samba] Permission denied while trying to setup share with RSAT
On Wed, 13 Dec 2023 09:34:45 +0100 Peter Milesson via samba <samba at lists.samba.org> wrote:> > > On 12.12.2023 20:00, Peter Milesson via samba wrote: > > > > > > On 12.12.2023 19:46, Rowland Penny via samba wrote: > >> On Tue, 12 Dec 2023 19:34:20 +0100 > >> Peter Milesson via samba <samba at lists.samba.org> wrote: > >> > >>> Hi Rowland, > >>> > >>> Just one more bit of information. I don't think it is relevant, > >>> but who knows. All servers are VMs that I migrated from Xen to > >>> Qemu/KVM a week ago. The VMs are running off of LVM volumes (like > >>> before). > >>> > >>> I have also checked Apparmor. Samba is not under Apparmor control. > >>> > >>> Best regards, > >>> > >>> Peter > >>> > >>> > >> I have heard of VMs where root doesn't work, could this be your > >> problem ? > >> > >> I ask this because I use Oracle virtual box and it works for > >> myself, with Apparmor ! > >> > >> Rowland > >> > > > Hi folks, > > I finally found the culprit. When setting up shares with RSAT you > must not activate > > acl_xattr:ignore system acls = yes > > until AFTER setting up share security.Glad you found the cause.> > This statement is incredibly easy to miss in the Samba Wiki! It > should be contained in the warning above the section. See > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLsI have updated the page, hopefully it is a bit more clearer. Rowland