samba - Jul 2024 - Weird folders / files after upgrading to Samba 4.20

17.07.2024 10:54, Matthias K?hne | Ellerhold Aktiengesellschaft via samba
wrote:
> Hello lovely samba-people,
Hi! :)
> after upgrading to 4.20 some file shares randomly get weird directories
> and files in them:
> 
> drwxrwx---+    3 AD-ELLERHOLD\user AD-ELLERHOLD\group 4.0K May 29 01:14
''$'\352'
> drwxrwx---+    3 AD-ELLERHOLD\user AD-ELLERHOLD\group 4.0K May 29 01:14
''$'\324'
> drwxrwx---+    3 AD-ELLERHOLD\user AD-ELLERHOLD\group 4.0K May 18 01:12
''$'\001\002'
This looks like a listing from linux side, - is this a local linux filesystem
view?
> As you can see samba creates folders with random (binary?!) names. Sometime
parts of correct paths are used (see dir "_images" instead of the
correct dir "my_images").
> 
> Downgrading the fileserver back to 4.19 fixes this issue.
What do you mean "fixes" ?  Are the "wrong" files disappear
when
downgrading?

Do you know when these files gets created?
> As far as Im aware, these directories can be safely deleted because there
may be files in them, nothing is lost. In this instance every expected file is
in "images", "my-data" and "domain.de". The files
in the extra dirs are nonsense.
> 
> At first we thought its a problem with Windows clients, because shares that
were access regularly by windows machines had the most problems, but the share
above is ONLY used by another debian machine - mounted via cifs-utils! So only
samba + cifs-utils may be the culprit here.
> 
> We use Debian 12 Bookworm with samba 2:4.20.2+dfsg-5~mjt-deb12 on the
server and client side. For cifs-utils the version 2:7.0-2 is used (client
side).
> 
> Does anybody have any clue whats happening here?
Not yet, I for one has never seen anything like this before.

Thanks,

/mjt

-- 
GPG Key transition (from rsa2048 to rsa4096) since 2024-04-24.
New key: rsa4096/61AD3D98ECDF2C8E  9D8B E14E 3F2A 9DD7 9199  28F1 61AD 3D98 ECDF
2C8E
Old key: rsa2048/457CE0A0804465C5  6EE1 95D1 886E 8FFB 810D  4324 457C E0A0 8044
65C5
Transition statement: http://www.corpit.ru/mjt/gpg-transition-2024.txt

Hallo,

yes this is an "ls -lAh" on the samba fileserver side in the 
corresponding directory.

Downgrading to 4.19 does not remove the weird directories and files. But 
it prevents new weird ones being created...

Looking at the timestamps these seem to be created when (heavy?) 
filesystem operations are being done. There is a cronjob that imports 
images at 1oo and it runs for around 30 mins. Most of the weird 
directory are created between 1:00 and 1:30. This cronjob runs on 
another server which has this share mounted via fstab.

Nobody else has these problems with Samba 4.20 and debian 12? Any help 
is greatly appreciated.

Regards, Matthias K?hne.

Am 18.07.24 um 11:52 schrieb Michael Tokarev via samba:
> 17.07.2024 10:54, Matthias K?hne | Ellerhold Aktiengesellschaft via 
> samba wrote:
>> Hello lovely samba-people,
>
> Hi! :)
>
>> after upgrading to 4.20 some file shares randomly get weird directories
>> and files in them:
>>
>> drwxrwx---+??? 3 AD-ELLERHOLD\user AD-ELLERHOLD\group 4.0K May 29 
>> 01:14 ''$'\352'
>> drwxrwx---+??? 3 AD-ELLERHOLD\user AD-ELLERHOLD\group 4.0K May 29 
>> 01:14 ''$'\324'
>> drwxrwx---+??? 3 AD-ELLERHOLD\user AD-ELLERHOLD\group 4.0K May 18 
>> 01:12 ''$'\001\002'
>
> This looks like a listing from linux side, - is this a local linux 
> filesystem view?
>
>> As you can see samba creates folders with random (binary?!) names. 
>> Sometime parts of correct paths are used (see dir "_images"
instead
>> of the correct dir "my_images").
>>
>> Downgrading the fileserver back to 4.19 fixes this issue.
>
> What do you mean "fixes" ?? Are the "wrong" files
disappear when
> downgrading?
>
> Do you know when these files gets created?
>
>> As far as Im aware, these directories can be safely deleted because 
>> there may be files in them, nothing is lost. In this instance every 
>> expected file is in "images", "my-data" and
"domain.de". The files in
>> the extra dirs are nonsense.
>>
>> At first we thought its a problem with Windows clients, because 
>> shares that were access regularly by windows machines had the most 
>> problems, but the share above is ONLY used by another debian machine 
>> - mounted via cifs-utils! So only samba + cifs-utils may be the 
>> culprit here.
>>
>> We use Debian 12 Bookworm with samba 2:4.20.2+dfsg-5~mjt-deb12 on the 
>> server and client side. For cifs-utils the version 2:7.0-2 is used 
>> (client side).
>>
>> Does anybody have any clue whats happening here?
>
> Not yet, I for one has never seen anything like this before.
>
> Thanks,
>
> /mjt
>
-- 
Senior Webentwickler
Datenschutzbeauftragter

Ellerhold Aktiengesellschaft
Friedrich-List-Str. 4
01445 Radebeul

Telefon: +49 (0) 351 83933-61
Web: www.ellerhold.de
Facebook: www.facebook.com/ellerhold.gruppe
Instagram: www.instagram.com/ellerhold.gruppe
LinkedIn: www.linkedin.com/company/ellerhold-gruppe

Amtsgericht Dresden / HRB 23769
Vorstand: Stephan Ellerhold, Maximilian Ellerhold
Vorsitzender des Aufsichtsrates: Frank Ellerhold



---Diese E-Mail und Ihre Anlagen enthalten vertrauliche Mitteilungen. Sollten
Sie nicht der beabsichtigte Adressat sein, so bitten wir Sie um Mitteilung und
um sofortiges l?schen dieser E-Mail und der Anlagen.

Unsere Hinweise zum Datenschutz finden Sie hier:
http://www.ellerhold.de/datenschutz/

This e-mail and its attachments are privileged and confidential. If you are not
the intended recipient, please notify us and immediately delete this e-mail and
its attachments.

You can find our privacy policy here: http://www.ellerhold.de/datenschutz/