zfs discuss - Mar 2008 - Wired behavour of MS-Excel file on a Solaris 10 8/07 Samba Share

I am deploying a new file server using Samba+ZFS running on Solaris 10 8/07
which play as a membership of our existing MS-2003_R2 Ads context. This is my
environment:

# uname -a
SunOS Solaris.keynet.com.cn 5.10 Generic_127112-10 i86pc i386 i86pc

# /usr/sfw/sbin/smbd -V
Version 3.0.28

I applied the 119758-12 patch so Samba upgraded to Version 3.0.28

I followed [u]http://blogs.sun.com/jurasek/[/u] and all what I want works fine
except for the zfs part. I prepare a zpool named tank and create a directory(Not
a zfs) named /tank/test and chown it to my MS-2003 ads user:group like this:
# chown -R "KEYNET+user_a":"KEYNET+gpc" /tank/test
# chmod -R 775 /tank/test

This is my smb.conf:
...
[test]
path = /tank/weihuziliao
read only = no
browseable = yes
user = @"KEYNET+gpc"
vfs objects = zfsacl
nfs4: mode = special
...

When "KEYNET+user_a" create a new Excel file, it look like this:
-rwxrw-r--   1 KEYNET+user_a KEYNET+gpc   13824 Mar 21 16:15 text.xls
            owner@:rwxp---A-W-Co-:------:allow
            group@:--x-----------:------:deny
            group@:rw-p----------:------:allow
         everyone@:-wxp---A-W-Co-:------:deny
         everyone@:r-----a-R-c--s:------:allow

That''s right but after another user in this group, e.g user_b modify
text.xls, it look like this:
-r--rw-r--+  1 KEYNET+user_b KEYNET+gpc   13824 Mar 21 16:23 text.xls
    user:KEYNET+user_a:rwxp---A-W-Co-:------:allow
            group@:--x-----------:------:deny
            group@:rw-p----------:------:allow
         everyone@:-wxp---A-W-Co-:------:deny
         everyone@:r-----a-R-c--s:------:allow

I noticed that:
1. File owner changed, I know that MS-Office would delete original file after
save changes and create a new file which name is the same as before. I think I
can not change this behavor.
2. Neither user_a nor user_b can write on this file any more even if the group
permission is writeable.
3. A non-trivial ACE was created but that''s not effective: user_a can
not write on this file.
4. Where is the owner@?

I hope that group members can write even though I can not hold owner for these
OFFICE files so I added two lines:
force create mode = 0664
force directory mode = 0775

to that share but nothing different, then I issued:
zfs set aclinherit=discard tank
zfs set aclmode=discard tank

No lucky too.

Then I tested notepad text file, all things seem fine, no owner change, no
non-trivial ACE, group member can write... all that what I''d hope.

I''m not sure if this is a bug? If so, it''s MS-Office or ZFS or
Samba?
 
 
This message posted from opensolaris.org

what version of office?  I remember a similar issue with office 2k7
and a netapp filer.  It ended up being a bug in office that ms had a
patch for.





On 3/21/08, Lin Xiao Song <Wasily.Lin at gmail.com>
wrote:
> I am deploying a new file server using Samba+ZFS running on Solaris 10 8/07
> which play as a membership of our existing MS-2003_R2 Ads context. This is
> my environment:
>
> # uname -a
> SunOS Solaris.keynet.com.cn 5.10 Generic_127112-10 i86pc i386 i86pc
>
> # /usr/sfw/sbin/smbd -V
> Version 3.0.28
>
> I applied the 119758-12 patch so Samba upgraded to Version 3.0.28
>
> I followed [u]http://blogs.sun.com/jurasek/[/u] and all what I want works
> fine except for the zfs part. I prepare a zpool named tank and create a
> directory(Not a zfs) named /tank/test and chown it to my MS-2003 ads
> user:group like this:
> # chown -R "KEYNET+user_a":"KEYNET+gpc" /tank/test
> # chmod -R 775 /tank/test
>
> This is my smb.conf:
> ...
> [test]
> path = /tank/weihuziliao
> read only = no
> browseable = yes
> user = @"KEYNET+gpc"
> vfs objects = zfsacl
> nfs4: mode = special
> ...
>
> When "KEYNET+user_a" create a new Excel file, it look like this:
> -rwxrw-r--   1 KEYNET+user_a KEYNET+gpc   13824 Mar 21 16:15 text.xls
>             owner@:rwxp---A-W-Co-:------:allow
>             group@:--x-----------:------:deny
>             group@:rw-p----------:------:allow
>          everyone@:-wxp---A-W-Co-:------:deny
>          everyone@:r-----a-R-c--s:------:allow
>
> That''s right but after another user in this group, e.g user_b
modify
> text.xls, it look like this:
> -r--rw-r--+  1 KEYNET+user_b KEYNET+gpc   13824 Mar 21 16:23 text.xls
>     user:KEYNET+user_a:rwxp---A-W-Co-:------:allow
>             group@:--x-----------:------:deny
>             group@:rw-p----------:------:allow
>          everyone@:-wxp---A-W-Co-:------:deny
>          everyone@:r-----a-R-c--s:------:allow
>
> I noticed that:
> 1. File owner changed, I know that MS-Office would delete original file
> after save changes and create a new file which name is the same as before.
I
> think I can not change this behavor.
> 2. Neither user_a nor user_b can write on this file any more even if the
> group permission is writeable.
> 3. A non-trivial ACE was created but that''s not effective: user_a
can not
> write on this file.
> 4. Where is the owner@?
>
> I hope that group members can write even though I can not hold owner for
> these OFFICE files so I added two lines:
> force create mode = 0664
> force directory mode = 0775
>
> to that share but nothing different, then I issued:
> zfs set aclinherit=discard tank
> zfs set aclmode=discard tank
>
> No lucky too.
>
> Then I tested notepad text file, all things seem fine, no owner change, no
> non-trivial ACE, group member can write... all that what I''d hope.
>
> I''m not sure if this is a bug? If so, it''s MS-Office or
ZFS or Samba?
>
>
> This message posted from opensolaris.org
> _______________________________________________
> zfs-discuss mailing list
> zfs-discuss at opensolaris.org
> http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
>

It seems like not the case because on our old file server - Debian/Etch with
Samba 3.0.24/JFS it works fine:
Before modified:
-rwxrwxr-x  1 user_a       gpc       16384 Mar 24 09:48 text.xls
After modified:
-rwxrwxr-x+  1 user_b       gpc       16384 Mar 24 09:48 text.xls

We are using Office 2003 and the testing workstations are:
user_a: Microsoft Office Excel 2003 (11.5612.5606)
user_b: Microsoft Office Excel 2003 (11.8206.8202) SP3

Although extra bit "+" added but else same as before and our users did
not get any trouble with this excel file.

Thanks tcook and I think I should change another version of office to issue some
testing, later talk on that.
 
 
This message posted from opensolaris.org

I made some tests on Office 2007(12.0.4518.1014) and Office 2007(12.0.6300.5000
SP1) and got no luck, but if I deploy shares on a UFS partition, either Office
2003 or Office 2007 work smoothly with Samba.

So I think it''s the zfs and its acl break the rule, isn''t it?

And another question is how can I entirely ignore the acl on zfs? It seems that
"zfs set aclinherit disacrd" and "zfs set aclmode discard"
have no effects.

Best Regards
Wasily
 
 
This message posted from opensolaris.org