[Samba] Getting 'Access Denied' under Offline mode (Offline Files)

Rowland Penny
Tue, 10 Sep 2024 07:36:41 -0000

On Tue, 10 Sep 2024 15:32:46 +1200
June Chong | TechnologyWise via samba <samba at lists.samba.org> wrote:

> Hi team,
>
> Hoping someone from the community would be able to help.
>
> Samba version *: 4.19.5*
>
> OS *: Ubuntu 24.04*
>
> We have a perculiar situation where users are getting /Access Denied/
> on their roaming user profiles. These profiles are redirected using
> Windows GPOs with Offline Files enabled. We could replicate these on
> several instances that we manage.
>
> On version 4.15.13, when 'Offline Files' are in /offline mode
/users
> can still work on their files under their profile and once /online/,
> the files will be synced back with the new changes.
>
> Now on Samba 4.19.5, users are getting these errors /Access Denied/ /
> /You will need permission to make changes onto the folder /under
> /offline mode/. However, if it is a file within the top level folder,
> they are ok to make changes to.
>
> E.g.? \\server\profiles\user\Desktop\Folder 1??? (Changes can't be
> made. Access Denied.)
>
>  ??? ??? \\server\profiles\user\Desktop\File 1??? (Changes can't be
> made. Access Denied.)
>
>  ??? ??? \\server\profiles\user\Desktop\Folder 1\File 1 (Changes can
> be made. No issues. Same thing goes for another folder instead of
> file.)
>
> Once the Sync Centre is shown to be back in /Online mode/ everything
> works fine.
>
> Nothing in the Windows Event Logs could specify. SMB connections are
> using version SMB3 as it should be on both versions (seen via
> smbstatus). The release notes did not mention anything that might
> effect this.
>
> Would someone be able to point us in the right direction?
>
> Kind regards,
>

I think we need to see your smb.conf (to see just how you are sharing
the profiles), please post the output of 'testparm -s'

Rowland