similar to: NT_STATUS_ACCESS_DENIED (I can write and read, but not replace)

Hi Everyone, I have a really huge trouble with the Acls under windows 7. I use filesystem's acls under samba and it works correctly under windows xp, but it does not in w7. I am not sure if it is a kind of bug, the case is last week I upgraded my samba 3.0 to 3.5 and my acls under w7 worked fine. Now the problem I have is if a directory is set for example with the grup 'company' and

I've been wrestling with a problem on newer versions of samba with a configuration that "used" to work in samba 3.0.33 (RedHat Enterpise 5 packages) This maybe due to changes in the may samba maps NT permissions, but i'm not sure so I thought I would ask. I have a samba 3.3.8 (RedHat Enterprise 5.5 Samba3x packages) and samba 3.4.4 (Redhat Enterprise 6 beta packages)

On Ubuntu, I have upgraded to the latest LTS version, which upgraded my Samba to 3.6.3 and now getting NT_STATUS_ACCESS_DENIED when trying to remove files and folders. This server MEDIA is setup as a member server to a FreeBSD PDC called MAIL using LDAP for authentication. All been working great for a long time, now from the PDC, I try.... mail# smbclient -U robert //media/robert WARNING: The

Hi, I've a samba 3.0.24 server running in a debian "alike" OS with a (Open)LDAP backend and I'm having the following problem: I have LDAP users that belong to more than one (POSIX) group. For instance, I have a user2 that belongs to group "users" and "grupo2" and I have a share with the following ACL settings: getfacl /home/shares/share1/ getfacl: Removing

AIX 5.2, Samba 3.0.11, OpenLDAP 2.2.23. Can someone explain what reduce name is supposed to be checking? The final debug uses "p" as the "reduced" name, but p is NULL to start and only has a value during the code path IF there was no entry found on the first call to realpath at which point the last component is removed and we try again. Now since p points to the character

All, Apologies for basically bumping my own thread, but I'm absolutely at my wits' end trying to figure out this access problem. I've replicated the issue with and without NFS being involved. On our old 4.0.25 server, users can write to files that they have group-based write permissions. On 4.5.x, 4.4.x, and 4.3.x that permission is not being honored. I would be incredibly

Hi. I'm dealing with this "lib/smbldap.c:smbldap_open(1009)" message in the log file. I tried to find some hint in the net but I couldn't find anything that pointed to a solution. Below are the surrounding messages in a excerpt of the log file: [2007/04/02 17:31:10, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(918) fetch sid from uid cache 1088 ->

On Mon, Nov 14, 2016 at 11:38:52AM -0500, Josh Malone via samba wrote: > All, > > Apologies for basically bumping my own thread, but I'm absolutely at > my wits' end trying to figure out this access problem. I've > replicated the issue with and without NFS being involved. On our old > 4.0.25 server, users can write to files that they have group-based > write

Hello! I have samba share on my sshfs-mounted folder. All works just fine except I can't delete files from sshfs unless they are in 0777 chmodded directory. Even if that files were putted trough smbclient. I can read files, write files (regardless their directory permissions) but not delete them. Here is my share config: [myshare] comment = shre over sshfs path = /home/kli/work/remotes/dev

Hello, I have a question because POSIX ACL with SMB2 max protocol does not work properly.Did you test VFS xattr acls with SMB2 max protocol? Is it working corectly? Best regards/Adrian Berlin --

I'm running Samba 3.4.7 on Ubuntu 10.04. This is a recent upgrade and we've starting experience a sporadic problem after this upgrade. When users are browsing through Windows Explorer they sometimes run across folders that appear as unassociated files. This requires the user to click the 'Refresh' button in Windows Explorer to properly see the folders. The files and folders are

SNIP > [2010/06/14 11:43:21, 10] smbd/posix_acls.c:3045(add_or_replace_ace) > Replacing ACE 1 with SID S-1-5-32-545 and flags 00 > [2010/06/14 11:43:21, 10] smbd/posix_acls.c:3007(merge_default_aces) > merge_default_aces: Merging ACE 3 onto ACE 1. > [2010/06/14 11:43:21, 10] smbd/open.c:2952(create_file_unixpath) > create_file_unixpath: open file Temp/Neu Textdokument.txt for

Two attached patches for samba 2.2.7a and 3.0-alfa22, that I've made today, fix 3 bugs mentioned in my previous e-mail. 1) For each file in addition to ALLOW ACE proper DENY ACE is created. 2) "Take ownership" is shown DENIED for all except root ACEs 3) Read Permissions and read attributes are always shown as allowed, as they are actually allowed. -- Zhitomirsky

At the suggestion of Stas, I'm starting a new thread on this one. This pretty much covers where I'm at right now: Doug, thanks, here's a complete listing of the config file, and some logging, hopefully this will be illuminating to somebody. > Neither of these lines set the log level. Yes, I've been setting it in the init script. When I do ps -ef | grep smbd, I see that

We are using SAMBA 3.6.6 on Centos 5 with the acl_tdb VFS module. Our share is backed by storage on a SAN devices that does not support ACLs or extended attributes ... so we're trying the acl_tdb module as a mechanism to support Windows ACLs. We have verified that samba has ACL support enabled, and ACL support works find if we export the share from the local EXT4 filesystem. When trying to

Hello, Really stumped on this issue. I have samba 4.4.7 running on a new server. Users cannot write to files to which they have write permissions via group. Example: Here's the local filesystem on the samba server. I'm logged in as jmalone : jmalone at canis; cd /home/www.nrao.edu/content/logs/ : jmalone at canis; ls -l total 4 -rw-rw-r-- 1 jmalone nraoweb 0 Nov 10 10:02

On Wed, Nov 16, 2016 at 03:25:24PM -0500, Josh Malone wrote: > On 11/16/16 3:17 PM, Jeremy Allison wrote: > >On Wed, Nov 16, 2016 at 03:12:06PM -0500, Josh Malone via samba wrote: > >>On 11/16/16 2:32 PM, Jeremy Allison via samba wrote: > >>>> > >>>>But the file is not root:root - it's owned by uid 12477 and group > >>>>9006. Why

On 11/14/16 6:32 PM, Jeremy Allison via samba wrote: > On Mon, Nov 14, 2016 at 11:38:52AM -0500, Josh Malone via samba wrote: >> All, >> >> Apologies for basically bumping my own thread, but I'm absolutely at >> my wits' end trying to figure out this access problem. I've >> replicated the issue with and without NFS being involved. On our old >>

On 11/15/16 7:25 PM, Jeremy Allison wrote: > > The token is the list of uids/gids (or SIDs in Windows terms) > that this smbd is using to represent the user right now. Okay - that makes sense. Thank you. >> >> canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) >> SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx >> canon_ace index 1. Type = allow SID =

On 11/17/16 2:17 PM, Jeremy Allison wrote: > On Wed, Nov 16, 2016 at 03:25:24PM -0500, Josh Malone wrote: >> >> http://www.cv.nrao.edu/~jmalone/sambalog.txt > > Looking at that log I see: > > posix_get_nt_acl: called for file . > > canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1.