similar to: Modify permission not available unless group permissions are set to write.

On Ubuntu, I have upgraded to the latest LTS version, which upgraded my Samba to 3.6.3 and now getting NT_STATUS_ACCESS_DENIED when trying to remove files and folders. This server MEDIA is setup as a member server to a FreeBSD PDC called MAIL using LDAP for authentication. All been working great for a long time, now from the PDC, I try.... mail# smbclient -U robert //media/robert WARNING: The

Hi Everyone, I have a really huge trouble with the Acls under windows 7. I use filesystem's acls under samba and it works correctly under windows xp, but it does not in w7. I am not sure if it is a kind of bug, the case is last week I upgraded my samba 3.0 to 3.5 and my acls under w7 worked fine. Now the problem I have is if a directory is set for example with the grup 'company' and

All, Apologies for basically bumping my own thread, but I'm absolutely at my wits' end trying to figure out this access problem. I've replicated the issue with and without NFS being involved. On our old 4.0.25 server, users can write to files that they have group-based write permissions. On 4.5.x, 4.4.x, and 4.3.x that permission is not being honored. I would be incredibly

On Mon, Nov 14, 2016 at 11:38:52AM -0500, Josh Malone via samba wrote: > All, > > Apologies for basically bumping my own thread, but I'm absolutely at > my wits' end trying to figure out this access problem. I've > replicated the issue with and without NFS being involved. On our old > 4.0.25 server, users can write to files that they have group-based > write

I need help interpeting this issue, thanks in advance. A file was created by user nli on windows 7, that user can manipulate the file at will. If user jpyeron tries to manipulate the file on XPx64 the below happens. # smbd -V Version 3.0.33-3.40.el5_10 [2015/02/02 18:34:15, 8] smbd/dosmode.c:dos_mode_from_sbuf(188) dos_mode_from_sbuf returning [2015/02/02 18:34:15, 8]

Hi, I've a samba 3.0.24 server running in a debian "alike" OS with a (Open)LDAP backend and I'm having the following problem: I have LDAP users that belong to more than one (POSIX) group. For instance, I have a user2 that belongs to group "users" and "grupo2" and I have a share with the following ACL settings: getfacl /home/shares/share1/ getfacl: Removing

AIX 5.2, Samba 3.0.11, OpenLDAP 2.2.23. Can someone explain what reduce name is supposed to be checking? The final debug uses "p" as the "reduced" name, but p is NULL to start and only has a value during the code path IF there was no entry found on the first call to realpath at which point the last component is removed and we try again. Now since p points to the character

Hello! I have samba share on my sshfs-mounted folder. All works just fine except I can't delete files from sshfs unless they are in 0777 chmodded directory. Even if that files were putted trough smbclient. I can read files, write files (regardless their directory permissions) but not delete them. Here is my share config: [myshare] comment = shre over sshfs path = /home/kli/work/remotes/dev

At the suggestion of Stas, I'm starting a new thread on this one. This pretty much covers where I'm at right now: Doug, thanks, here's a complete listing of the config file, and some logging, hopefully this will be illuminating to somebody. > Neither of these lines set the log level. Yes, I've been setting it in the init script. When I do ps -ef | grep smbd, I see that

On Wed, Nov 16, 2016 at 03:25:24PM -0500, Josh Malone wrote: > On 11/16/16 3:17 PM, Jeremy Allison wrote: > >On Wed, Nov 16, 2016 at 03:12:06PM -0500, Josh Malone via samba wrote: > >>On 11/16/16 2:32 PM, Jeremy Allison via samba wrote: > >>>> > >>>>But the file is not root:root - it's owned by uid 12477 and group > >>>>9006. Why

On 11/17/16 2:17 PM, Jeremy Allison wrote: > On Wed, Nov 16, 2016 at 03:25:24PM -0500, Josh Malone wrote: >> >> http://www.cv.nrao.edu/~jmalone/sambalog.txt > > Looking at that log I see: > > posix_get_nt_acl: called for file . > > canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1.

We are using SAMBA 3.6.6 on Centos 5 with the acl_tdb VFS module. Our share is backed by storage on a SAN devices that does not support ACLs or extended attributes ... so we're trying the acl_tdb module as a mechanism to support Windows ACLs. We have verified that samba has ACL support enabled, and ACL support works find if we export the share from the local EXT4 filesystem. When trying to

On 11/14/16 6:32 PM, Jeremy Allison via samba wrote: > On Mon, Nov 14, 2016 at 11:38:52AM -0500, Josh Malone via samba wrote: >> All, >> >> Apologies for basically bumping my own thread, but I'm absolutely at >> my wits' end trying to figure out this access problem. I've >> replicated the issue with and without NFS being involved. On our old >>

On 11/15/16 7:25 PM, Jeremy Allison wrote: > > The token is the list of uids/gids (or SIDs in Windows terms) > that this smbd is using to represent the user right now. Okay - that makes sense. Thank you. >> >> canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) >> SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >> canon_ace index 1. Type = allow SID =

I'm running Samba 3.4.7 on Ubuntu 10.04. This is a recent upgrade and we've starting experience a sporadic problem after this upgrade. When users are browsing through Windows Explorer they sometimes run across folders that appear as unassociated files. This requires the user to click the 'Refresh' button in Windows Explorer to properly see the folders. The files and folders are

On Tue, Nov 15, 2016 at 11:42:45AM -0500, Josh Malone via samba wrote: > On 11/14/16 6:32 PM, Jeremy Allison via samba wrote: > >On Mon, Nov 14, 2016 at 11:38:52AM -0500, Josh Malone via samba wrote: > >>All, > >> > >>Apologies for basically bumping my own thread, but I'm absolutely at > >>my wits' end trying to figure out this access problem.

Hello, I have a question because POSIX ACL with SMB2 max protocol does not work properly.Did you test VFS xattr acls with SMB2 max protocol? Is it working corectly? Best regards/Adrian Berlin --

On Wed, Nov 16, 2016 at 08:44:35AM -0500, Josh Malone via samba wrote: > On 11/15/16 7:25 PM, Jeremy Allison wrote: > > > >The token is the list of uids/gids (or SIDs in Windows terms) > >that this smbd is using to represent the user right now. > > Okay - that makes sense. Thank you. > > >> > >> canon_ace index 0. Type = allow SID = S-1-22-1-0 uid

Hi. I'm dealing with this "lib/smbldap.c:smbldap_open(1009)" message in the log file. I tried to find some hint in the net but I couldn't find anything that pointed to a solution. Below are the surrounding messages in a excerpt of the log file: [2007/04/02 17:31:10, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(918) fetch sid from uid cache 1088 ->

Hello, Really stumped on this issue. I have samba 4.4.7 running on a new server. Users cannot write to files to which they have write permissions via group. Example: Here's the local filesystem on the samba server. I'm logged in as jmalone : jmalone at canis; cd /home/www.nrao.edu/content/logs/ : jmalone at canis; ls -l total 4 -rw-rw-r-- 1 jmalone nraoweb 0 Nov 10 10:02