Prev: [Samba] Settings up a Domain Member server, to act as a file server
Next: [Samba] Problem After Upgrade - NT_STATUS_FILE_IS_A_DIRECTORY
From: torcs74854 on 7 Jul 2010 13:00
I recently upgraded our samba from version 3.0.13 to 3.4.8. I also changed from security=domain to security=ads with the upgrade. Doing some testing I've found out if a user does not have read access at a minimum on a file or directory either by owning the file, through primary or secondary groups or other permissions on solaris the windows security tab (right clicking on a file or directory and selecting properties) does not even show up. This happens on both Windows XP and Vista.

Here are my configuration options.

../configure --prefix=/tools/samba/v3.4.8 --with-lockdir=/var/samba/locks --with-piddir=/var/samba/locks --with-privatedir=/var/samba/private --with-logfilebase=/var/log/samba --with-configdir=/etc/samba --with-libiconv=/tools/iconv/v1.12 --with-krb5=/tools/kerberos/v1.6.3 --with-ads --with-aio-support --with-automount --with-pam --with-sendfile-support --with-utmp --with-winbind

Here is my config file.
# Logging
realm = TEST.LAB
workgroup = TEST
security = ADS
password server = test01.test.lab test02.test.lab
encrypt passwords = yes
server string = File Server
log level = 1
syslog only = no
max log size = 50
log file = /var/samba/log/%m.log
domain master = no
socket options = TCP_NODELAY
;client schannel = no
;server schannel = yes
aio read size = 1
aio write size = 1
allow trusted domains = no
[homes]
comment = Home Directories
browseable = no
writable = yes
veto oplock files = /*.pst/
create mask = 640
directory mask = 750

[temp]
comment = Temporary holding area for file restores
path = /data/temp
public = no
writeable =yes
create mask = 660
directory mask = 770
dos filetimes = True
veto oplock files = /*.jar/*.mdb/*.ldb/*.pst/


I'm doing the testing in the temp share.


Here is information from my samba logs. I was trying to right click on a directory called test. Windows explorer just hung up on me. I did not even get to select properties from the list.

[2010/07/06 20:52:31, 3] smbd/error.c:60(error_packet_set)
error packet at smbd/nttrans.c(563) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
[2010/07/06 20:52:32, 3] smbd/process.c:1459(process_smb)
Transaction 1079 of length 116 (0 toread)
[2010/07/06 20:52:32, 3] smbd/process.c:1273(switch_message)
switch message SMBtrans2 (pid 2189) conn 0x92a580
[2010/07/06 20:52:32, 3] smbd/trans2.c:3956(call_trans2qfilepathinfo)
call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2010/07/06 20:52:32, 3] smbd/filename.c:848(get_real_filename_full_scan)
scan dir didn't open dir [test]
[2010/07/06 20:52:32, 3] smbd/error.c:60(error_packet_set)
error packet at smbd/trans2.c(3988) cmd=50 (SMBtrans2) NT_STATUS_ACCESS_DENIED
[2010/07/06 20:52:32, 3] smbd/process.c:1459(process_smb)
Transaction 1080 of length 126 (0 toread)
[2010/07/06 20:52:32, 3] smbd/process.c:1273(switch_message)
switch message SMBntcreateX (pid 2189) conn 0x92a580
[2010/07/06 20:52:32, 3] smbd/filename.c:848(get_real_filename_full_scan)
scan dir didn't open dir [test]
[2010/07/06 20:52:32, 3] smbd/error.c:60(error_packet_set)
error packet at smbd/nttrans.c(563) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED

I can view the directory permissions through windows with the older version of samba (3.0.13). I'm not sure what I'm missing.

If this is the way samba works now what version was the change made?

Thanks

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
 | 
Pages: 1
Prev: [Samba] Settings up a Domain Member server, to act as a file server
Next: [Samba] Problem After Upgrade - NT_STATUS_FILE_IS_A_DIRECTORY