search for: smb_acl_other

Maybe I'm doing somthing really stupid, but while copying some windows share onto a samba server, on some random subdirectory robocopy says ERROR 87 (0x00000057) Copying NTFS Security to Destination Directory... The samba logfile has lots of these lines. modules/vfs_posixacl.c:349(smb_acl_to_posix) smb_acl_to_posix: ACL is invalid for set (Das Argument ist ung?ltig) The strange thing is

... does not work. I use the W2k functionality "synchronize" on my laptop to have up2date synchronized copies of my files both at the laptop and the file server. The file server is a P 200 MHz running RH Linux 9. When on-line the synchronization of files works, except for my swedish letters "???". However when off-line working with my files, then reconnecting to the

...l) posix_get_nt_acl: called for file withoutgroupperm [2010/10/29 16:51:22, 10] smbd/posix_acls.c:2519(canonicalise_acl) canonicalise_acl: Access ace entries before arrange : [2010/10/29 16:51:22, 10] smbd/posix_acls.c:2532(canonicalise_acl) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x [2010/10/29 16:51:22, 10] smbd/posix_acls.c:2532(canonicalise_acl) canon_ace index 1. Type = allow SID = S-1-22-2-495 gid 495 (apache) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x [2010/10/29 16:51:22, 10] smbd/posix_acls.c:2532(canonicalise_acl) canon_ace index 2. Type...

...get_nt_acl: called for file . canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x So it's the top-level directory of the share /data/test that is root.root rwxr-xr-x Can you check that ? The open request fails with: smbd_check_access_rights: file . requesting 0x40 returning 0x40 (NT_STATUS_ACCESS_DENIED) 0x40 is SEC_DIR_DELETE_CHILD, which is...

...index 2. Type = allow SID = S-1-5-21-1908802895-3536710745-1580887524-1422 uid 211 (schmilor) SMB_ACL_USER perms r-x canon_ace index 3. Type = allow SID = S-1-5-21-1908802895-3536710745-1580887524-1412 uid 206 (fogarjoh) SMB_ACL_USER perms r-x canon_ace index 4. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-x [2005/03/11 08:29:54, 10] smbd/posix_acls.c:canonicalise_acl(2194) canonicalise_acl: Default ace entries before arrange : [2005/03/11 08:29:54, 10] smbd/posix_acls.c:canonicalise_acl(2207) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-x [2005/03/11 08:29:54...

...ndex 0. Type = allow SID = S-1-5-21-365335231-1557355366-1421764157-513 gid 10006 (W2K3TEST+domain users) SMB_ACL_GROUP perms rw- [2007/10/30 14:16:53, 10] smbd/posix_acls.c:create_canon_ace_lists(1505) create_canon_ace_lists: adding file ACL: canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms rw- [2007/10/30 14:16:53, 10] smbd/posix_acls.c:print_canon_ace_list(595) print_canon_ace_list: file ace - before merge canon_ace index 0. Type = allow SID = S-1-5-21-365335231-1557355366-1421764157-1644 uid 10003 (W2K3TEST+bobadmin) SMB_ACL_USER_OBJ perms rw- canon_ace index 1. Type =...

...(canonicalise_acl) > canonicalise_acl: Access ace entries before arrange : > [2016/11/14 11:32:30.009831, 10, pid=9336, effective(2310, 2049), > real(2310, 0), class=acls] ../source3/smbd/posix_a > cls.c:2737(canonicalise_acl) > canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER > ace_flags = 0x0 perms r-- > [2016/11/14 11:32:30.009858, 10, pid=9336, effective(2310, 2049), > real(2310, 0), class=acls] ../source3/smbd/posix_a > cls.c:2737(canonicalise_acl) > canon_ace index 1. Type = allow SID = S-1-22-2-9006 gid 9006 > (cvweb) SMB_ACL_GROUP_OBJ ace_flag...

Hello! I have samba share on my sshfs-mounted folder. All works just fine except I can't delete files from sshfs unless they are in 0777 chmodded directory. Even if that files were putted trough smbclient. I can read files, write files (regardless their directory permissions) but not delete them. Here is my share config: [myshare] comment = shre over sshfs path = /home/kli/work/remotes/dev

...> > canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) > SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) > SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER > ace_flags = 0x0 perms r-x Looks like a perm set of rwxr-xr-x on the file to me, with owner and group of root. > My interpretation of this is that samba things that the file GID is > 0 and that group write is not allowed. This is not at all what the > file permissions are though. Am...

...posix_get_nt_acl: called for file test [2012/05/10 14:24:33.711404, 10] smbd/posix_acls.c:2537(canonicalise_acl) canonicalise_acl: Access ace entries before arrange : [2012/05/10 14:24:33.711447, 10] smbd/posix_acls.c:2550(canonicalise_acl) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x [2012/05/10 14:24:33.711496, 10] smbd/posix_acls.c:2550(canonicalise_acl) canon_ace index 1. Type = allow SID = S-1-22-2-512 gid 512 (Domain Admins) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x [2012/05/10 14:24:33.713525, 10] smbd/posix_acls.c:2550(canonicalise_acl) ca...

Hello, Really stumped on this issue. I have samba 4.4.7 running on a new server. Users cannot write to files to which they have write permissions via group. Example: Here's the local filesystem on the samba server. I'm logged in as jmalone : jmalone at canis; cd /home/www.nrao.edu/content/logs/ : jmalone at canis; ls -l total 4 -rw-rw-r-- 1 jmalone nraoweb 0 Nov 10 10:02

...mbd/posix_a cls.c:2724(canonicalise_acl) canonicalise_acl: Access ace entries before arrange : [2016/11/14 11:32:30.009831, 10, pid=9336, effective(2310, 2049), real(2310, 0), class=acls] ../source3/smbd/posix_a cls.c:2737(canonicalise_acl) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-- [2016/11/14 11:32:30.009858, 10, pid=9336, effective(2310, 2049), real(2310, 0), class=acls] ../source3/smbd/posix_a cls.c:2737(canonicalise_acl) canon_ace index 1. Type = allow SID = S-1-22-2-9006 gid 9006 (cvweb) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms rw- [2016/11...

...5) get_nt_acl : file ACL absent, directory ACL absent [2015/02/02 18:34:15, 10] smbd/posix_acls.c:canonicalise_acl(2244) canonicalise_acl: Access ace entries before arrange : [2015/02/02 18:34:15, 10] smbd/posix_acls.c:canonicalise_acl(2257) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms r-x [2015/02/02 18:34:15, 10] smbd/posix_acls.c:canonicalise_acl(2257) canon_ace index 1. Type = allow SID = S-1-5-32-545 gid 512 (quickbooksusers) SMB_ACL_GROUP_OBJ perms rwx [2015/02/02 18:34:15, 10] smbd/posix_acls.c:canonicalise_acl(2257) canon_ace index 2. Type = allow SID = S-1-5-32...

...012 -> S-1-5-21-2852544288-689542784-3650984603-3025 [2007/04/02 17:31:10, 10] smbd/posix_acls.c:canonicalise_acl(2205) canonicalise_acl: Access ace entries before arrange : [2007/04/02 17:31:10, 10] smbd/posix_acls.c:canonicalise_acl(2218) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --- [2007/04/02 17:31:10, 10] smbd/posix_acls.c:canonicalise_acl(2218) canon_ace index 1. Type = allow SID = S-1-5-21-2852544288-689542784-3650984603-3025 gid 1012 (ensur) SMB_ACL_GROUP perms rwx [2007/04/02 17:31:10, 10] smbd/posix_acls.c:canonicalise_acl(2218) canon_ace index 2. Type =...

...works great instead. acls log: ===== [2011/01/27 16:16:53.079114, 10] smbd/posix_acls.c:2605(canonicalise_acl) canonicalise_acl: Default ace entries before arrange : [2011/01/27 16:16:53.079128, 10] smbd/posix_acls.c:2618(canonicalise_acl) canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms --- [2011/01/27 16:16:53.079144, 10] smbd/posix_acls.c:2618(canonicalise_acl) canon_ace index 1. Type = allow SID = S-1-2-0 gid 1004 (COMPANY) SMB_ACL_GROUP ace_flags = 0x0 perms rwx <= HERE APPEARS [2011/01/27 16:16:53.079164, 10] smbd/posix_a...

...rs" I'm able to create files when I'm connected to the share. In the samba logs I can see that the ACL -> UNIX convertion seems fine: gid_to_sid: local 100 -> S-1-22-2-100 canonicalise_acl: Access ace entries before arrange : canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER perms --- canon_ace index 1. Type = allow SID = S-1-22-2-100 gid 100 (users) SMB_ACL_GROUP perms rw- canon_ace index 2. Type = allow SID = S-1-22-2-1001 gid 1001 (grupo2) SMB_ACL_GROUP_OBJ perms r-x canon_ace index 3. Type = allow SID = S-1-5-21-822431398-922470320-1179183166-1666 uid 1666 (user2)...

...owever, I see this bit: canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x My interpretation of this is that samba things that the file GID is 0 and that group write is not allowed. This is not at all what the file permissions are though. Am I mis-reading this or is Samba getting permissions some other way. This is a purely Unix filesystem...

...on_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) >> SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >> canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) >> SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x >> canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER >> ace_flags = 0x0 perms r-x > > Looks like a perm set of rwxr-xr-x on the file to me, with > owner and group of root. But the file is not root:root - it's owned by uid 12477 and group 9006. Why is Samba getting the wrong owner/group for this file? > > smbd synthesises N...

...for file . > > canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms r-x > canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER ace_flags = 0x0 perms r-x > > So it's the top-level directory of the share > /data/test > > that is root.root rwxr-xr-x > > Can you check that ? Nope - that directory is uid 2310, group 9004. I'm in group 9004. How can samba be getting that wrong? > The open requ...

On Wed, Nov 16, 2016 at 03:12:06PM -0500, Josh Malone via samba wrote: > On 11/16/16 2:32 PM, Jeremy Allison via samba wrote: > >> > >>But the file is not root:root - it's owned by uid 12477 and group > >>9006. Why is Samba getting the wrong owner/group for this file? > > > >That is the core of your problem. What does the full debug level 10 >