search for: share_access

Am 5/9/20 um 3:32 PM schrieb Ralph Boehme via samba: > I have a WIP fix for master, can you give it a whirl? here it is. -slow -- Ralph Boehme, Samba Team https://samba.org/ Samba Developer, SerNet GmbH https://sernet.de/en/samba/ GPG-Fingerprint FAE2C6088A24252051C559E4AA1E9B7126399E46 -------------- next part -------------- A non-text attachment was scrubbed... Name:

...) Calling acl_set_file: test-dir, 0 [2011/05/26 15:27:02.144762, 10] modules/vfs_posixacl.c:108 (posixacl_sys_acl_set_file) acl_set_file failed: Operation not permitted [2011/05/26 15:27:02.144815, 10] smbd/open.c:3381(create_file_default) create_file: access_mask = 0x2 file_attributes = 0x0, share_access = 0x7, create_disposition = 0x1 create_options = 0x0 oplock_request = 0x8 root_dir_fid = 0x0, ea_list = 0x(nil), sd = 0x(nil), fname = test-dir [2011/05/26 15:27:02.144863, 3] smbd/vfs.c:881(check_reduced_name) check_reduced_name [test-dir] [/srv/samba/file-shares/testshare] [2011/05/26 15:27:...

....23b SID/GID problem. The only thing that jumps out at me is that you can't access your home share and other shares just quit working. Looking at the log files, I see this: [2007/05/14 15:24:55, 10] smbd/open.c:share_conflict(389) share_conflict: entry->access_mask = 0x100001, entry->share_access = 0x7, entry->private_options = 0x1 [2007/05/14 15:24:55, 10] smbd/open.c:share_conflict(392) share_conflict: access_mask = 0x81, share_access = 0x3 [2007/05/14 15:24:55, 10] smbd/open.c:share_conflict(441) share_conflict: [1] am (0x100001) & right (0x6) = 0x0 <snip.....> Nothin...

...; smbd_check_open_rights(conn = 0x0000000110155aa0, smb_fname = 0x000000011015c290, access_mask = 16777216, access_granted = 0x0010008000100080), line 115 in "open.c" open_directory(conn = 0x0000000110155aa0, req = 0x000000011015c140, smb_dname = 0x000000011015c290, access_mask = 1048704, share_access = 0, create_disposition = 1, create_options = 8388609, file_attributes = 16, pinfo = 0x0fffffffffffd3e0, result = 0x0fffffffffffd3f0), line 2706 in "open.c" create_file_unixpath(conn = 0x0fffffffffffd590, req = 0x000000011014b680, smb_fname = 0x00000001005b8120, access_mask = 0, share_acc...

...f the share config is set to: [arrakis] path = "/export/arrakis" comment = "Arraken Test share" writeable = yes valid users = @"UIUC+domain users" vfs objects = zfsacl nfs4: mode = special The logs will spit out: [2007/12/12 10:09:17, 10] smbd/share_access.c:(232) user_ok_token: share arrakis is ok for unix user UIUC+vanhoudn [2007/12/12 10:09:17, 10] smbd/share_access.c:(274) is_share_read_only_for_user: share arrakis is read-write for unix user UIUC+vanhoudn Which is good. And, we can see that samba is correctly finding all of the groups that...

I need to temporarily disable a share for a few days, I remember there was an entry I could add to the share definition to temporarily disable the share (I think it was disabled=true or enabled=false) but I can't remember what it was for sure, nor can I find it in the manual. what is it ?

...new modules system [2020/06/05 16:40:40.672789, 10, pid=2781, effective(0, 0), real(0, 0)] ../../source3/smbd/service.c:70(set_conn_connectpath) set_conn_connectpath: service IPC$, connectpath = /tmpfs/tmp [2020/06/05 16:40:40.672815, 10, pid=2781, effective(0, 0), real(0, 0)] ../../source3/smbd/share_access.c:220(user_ok_token) user_ok_token: share IPC$ is ok for unix user bbb [2020/06/05 16:40:40.672840, 10, pid=2781, effective(0, 0), real(0, 0)] ../../source3/smbd/share_access.c:271(is_share_read_only is_share_read_only_for_user: share IPC$ is read-only for unix user bbb [2020/06/05 16:40:40.672...

..., real(0, 0)] share_conflict: [6] am (0x100081) & right (0x10000) = 0x0 share_conflict: [6] sa (0x7) & share (0x4) = 0x4 share_conflict: No conflict. [2014/10/08 01:44:51.341157, 10, pid=25524, effective(1248, 1012), real(0, 0)] share_conflict: entry->access_mask = 0x100080, entry->share_access = 0x0, entry->private_options = 0x0 [2014/10/08 01:44:51.341223, 10, pid=25524, effective(1248, 1012), real(0, 0)] share_conflict: access_mask = 0x100081, share_access = 0x7 [2014/10/08 01:44:51.341284, 10, pid=25524, effective(1248, 1012), real(0, 0)] share_conflict: No conflict due to entry-...

...The restore is now broken because security settings cannot be restored any more. I have enabled samba loglevel 10 . I see the problem is coming here. ---------- 2011/01/26 10:41:04, 10] smbd/open.c:2896(create_file_unixpath) create_file_unixpath: access_mask = 0x11e019f file_attributes = 0x80, share_access = 0x3, create_disposition = 0x1 create_options = 0x4004 oplock_request = 0x0 ea_list = 0x(nil), sd = 0x(nil), fname = Share2/file2.txt -------------- SEC_FLAG_SYSTEM_SECURITY is 0x01000000 /* We need to support SeSecurityPrivilege for this. */ if (access_mask & SEC_FLAG_SYSTEM_SECUR...

...ngled): ?? ??? ? ??? ??? ??? ?is_mangled sub_dir ? 357(is_mangled_component): ?? ??? ??? ?is_mangled_component sub_dir (len 7) ? 1123(unix_convert): ?? ??? ? ??? ??? ?New file sub_dir 5625(create_file_default): ?? ??? ??? ?create_file_default: create_file: access_mask = 0x80 file_attributes = 0x10, share_access = 0x3, create_disposition = 0x2 create_options = 0x1 oplock_request = 0x0 private_flags = 0x0 root_dir_fid = 0x0, ea_list = (nil), sd = (nil), fname = sub_dir 5075(create_file_unixpath): ?? ??? ?create_file_unixpath: create_file_unixpath: access_mask = 0x80 file_attributes = 0x10, share_access = 0x...

...sage SMBntcreateX (pid 3791) conn 0x8f998a8 [2007/10/02 16:22:12, 4] smbd/uid.c:change_to_user(222) change_to_user: Skipping user change - already user [2007/10/02 16:22:12, 10] smbd/nttrans.c:reply_ntcreate_and_X(506) reply_ntcreateX: flags = 0x16, access_mask = 0x20189 file_attributes = 0x0, share_access = 0x3, create_disposition = 0x1 create_options = 0x40 root_dir_fid = 0x0 [2007/10/02 16:22:12, 5] smbd/filename.c:unix_convert(108) unix_convert called on file "srb_data" [2007/10/02 16:22:12, 10] smbd/statcache.c:stat_cache_lookup(248) stat_cache_lookup: lookup succeeded for name [S...

..../source3/locking/locking.c:1226(find_delete_on_close_token) find_delete_on_close_token: name_hash = 0x264a327 [2018/10/12 12:05:09.533062, 10, pid=3350, effective(1017, 1003), real(1017, 0)] ../source3/smbd/open.c:1424(share_conflict) share_conflict: entry->access_mask = 0x100081, entry->share_access = 0x7, entry->private_options = 0x0 [2018/10/12 12:05:09.533070, 10, pid=3350, effective(1017, 1003), real(1017, 0)] ../source3/smbd/open.c:1435(share_conflict) share_conflict: access_mask = 0x100081, share_access = 0x7 [2018/10/12 12:05:09.533078, 10, pid=3350, effective(1017, 1003), real(101...

I'm running Samba 3.4.7 on Ubuntu 10.04. This is a recent upgrade and we've starting experience a sporadic problem after this upgrade. When users are browsing through Windows Explorer they sometimes run across folders that appear as unassociated files. This requires the user to click the 'Refresh' button in Windows Explorer to properly see the folders. The files and folders are

...from bitmap [2016/08/31 08:00:40.641074, 10, pid=6463, effective(0, 0), real(0, 0)] ../source3/smbd/smb2_server.c:2018(smbd_smb2_request_dispatch) smbd_smb2_request_dispatch: opcode[SMB2_OP_CREATE] mid = 66899 [2016/08/31 08:00:40.641105, 10, pid=6463, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:237(user_ok_token) user_ok_token: share (null) is ok for unix user DOMAIN\ish-prd-svc [2016/08/31 08:00:40.641123, 10, pid=6463, effective(0, 0), real(0, 0)] ../source3/smbd/share_access.c:284(is_share_read_only_for_token) is_share_read_only_for_user: share (null) is read-write for unix user...

...15/02/02 18:34:15, 8] smbd/dosmode.c:dos_mode_from_sbuf(188) dos_mode_from_sbuf returning [2015/02/02 18:34:15, 8] smbd/dosmode.c:dos_mode(409) dos_mode returning [2015/02/02 18:34:15, 5] smbd/open.c:open_directory(2057) open_directory: opening directory tax/2014/gttsc, access_mask = 0x20000, share_access = 0x3 create_options = 0x0, create_disposition = 0x1, file_attributes = 0x10 [2015/02/02 18:34:15, 5] smbd/files.c:file_new(123) allocated file structure 9908, fnum = 14004 (1 used) [2015/02/02 18:34:15, 10] locking/locking.c:unparse_share_modes(681) unparse_share_modes: del: 0, tok = 0, num: 1...

Hello, I have a question because POSIX ACL with SMB2 max protocol does not work properly.Did you test VFS xattr acls with SMB2 max protocol? Is it working corectly? Best regards/Adrian Berlin --

...[2020/06/05 16:40:40.672789, 10, pid=2781, effective(0, 0), real(0, 0)] > ../../source3/smbd/service.c:70(set_conn_connectpath) > set_conn_connectpath: service IPC$, connectpath = /tmpfs/tmp > [2020/06/05 16:40:40.672815, 10, pid=2781, effective(0, 0), real(0, 0)] > ../../source3/smbd/share_access.c:220(user_ok_token) > user_ok_token: share IPC$ is ok for unix user bbb > [2020/06/05 16:40:40.672840, 10, pid=2781, effective(0, 0), real(0, 0)] > ../../source3/smbd/share_access.c:271(is_share_read_only > is_share_read_only_for_user: share IPC$ is read-only for unix user bbb >...

...018/06/14 16:04:29.229453, 5] ../source3/smbd/vfs.c:1458(check_reduced_name) check_reduced_name: New folder reduced to /data/fs/2430-ram/New folder [2018/06/14 16:04:29.229465, 5] ../source3/smbd/open.c:3945(open_directory) open_directory: opening directory New folder, access_mask = 0x100081, share_access = 0x3 create_options = 0x200001, create_disposition = 0x2, file_attributes = 0x90 [2018/06/14 16:04:29.229488, 5] ../source3/smbd/dosmode.c:206(unix_mode) unix_mode: unix_mode(New folder) returning 0775 [2018/06/14 16:04:29.229560, 5] ../source3/smbd/open.c:319(check_parent_access) check_pare...

...(|(displayName=TestGroup)(cn=TestGroup)))], scope => [2] [2007/09/10 10:24:08, 4] passdb/pdb_ldap.c:ldapsam_getgroup(2235) ldapsam_getgroup: Did not find group [2007/09/10 10:24:08, 3] smbd/sec_ctx.c:pop_sec_ctx(356) pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0 [2007/09/10 10:24:08, 5] smbd/share_access.c:token_contains_name(118) lookup_name DOMAIN2+TestGroup failed [2007/09/10 10:24:08, 10] smbd/share_access.c:user_ok_token(211) User muehlfeld not in 'valid users' [2007/09/10 10:24:08, 2] smbd/service.c:make_connection_snum(616) user 'muehlfeld' (from session setup) not p...

I''ve used the nfs_share type to export NFS shares on server A: nfs_share { "": shares => ["/path/to/share/", "/path/to/another/share/"], share_access => "server.example.com" } The /etc/exports file on server A look like this: /path/to/share server.example.com(rw,sync) /path/to/another/share server.example.com(rw,sync) When running Puppet, I see that the ownership of these folders are changed to root, even thoug...