Samba 3.4.2: Acces problem with EA attributes

[Arendt, Volker]

Hello all,

we have a problem with our samba 3.4.2. We get the following messages in out logs for some user, but not all. Users can access their personal share, can create a directory or a file, but cannot change the directory or the file. The permissions are full access on the top level folder and permissions are inherited correctly.

Hints and tips are welcome


Regards

Dr. Volker Arendt
--------------------------------------------------------------------------
Dr. Volker Arendt                      mailto:arendt@...
Gaußstr. 20                                          Tel : [phone]
42097 Wuppertal, Deutschland                         Fax:  [phone]
University of Wuppertal                           Business Economics (FBB)
--------------------------------------------------------------------------




[2009/11/10 09:01:52,  1] smbd/service.c:1047(make_connection_snum)
  132.195.121.160 (132.195.121.160) connect to service ls-thiele$ initially as user FB6+steinbach (uid=16292, gid=13254) (pid 684068)
[2009/11/10 09:31:19,  1] smbd/dosmode.c:213(get_ea_dos_attribute)
  get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented
[2009/11/10 09:51:42,  1] smbd/service.c:1047(make_connection_snum)
  132.195.121.160 (132.195.121.160) connect to service steinbach$ initially as user steinbach (uid=16292, gid=10513) (pid 684068)
[2009/11/10 09:51:42,  1] smbd/dosmode.c:213(get_ea_dos_attribute)
  get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented

Our smb.conf follows:
[global]

# --------------------------------------------------------
# setting base configuration parameters
#
# --------------------------------------------------------
workgroup = FB6
netbios name = FRIGG
server string = AFS
security = ADS
realm = FB6.UNI-WUPPERTAL.DE
auth methods = winbind
# password server = AD logon server
password server = 132.195.120.9 132.195.120.12
wins server = 132.195.120.12
client use spnego = yes
client signing = yes
# added wg. ticket #5344
#client lanman auth = no
#client ntlmv2 auth = yes
encrypt passwords = yes
host msdfs = no
#domain logons = yes

# fuer Samba 3.3.0
# damit keine verschluesselte Verbindung zum Domain Controller
# aufgebaut wird
ldap ssl = no
obey pam restrictions = no

# ---------------------------------------------------------
# printer settings
# ??? better disable these settings ???
# ---------------------------------------------------------
# printcap name = cups
# disable spoolss = Yes
# show add printer wizard = No

# ---------------------------------------------------------
# ID mapping parameters
# mapping windows users to unix users
# this is performed on the basis of sid on windows and
# unix with uid for users and gid for groups
# the backend parameter rid allows to get the same mapping
# form sid to uid because it is determined algorithmically
# that way we get the same mapping even if we use samba on
# several disparate systems
# CHANGE NOTIFICATIO: with v3.3.0 there are changes
# to idmap; idmap domains is no longer supported
# ---------------------------------------------------------
#idmap domains = FB6
#idmap backend = rid
#idmap backend = tdb
idmap config FB6:backend   = rid
#idmap config FB6:base_rid  = 0
idmap config FB6:range     = 10000 - 499999
idmap uid = 10000-499999
idmap gid = 10000-499999
winbind separator =+
winbind use default domain = Yes
winbind enum users = no
winbind enum groups = no
winbind cache time = 60
winbind gid = 10000-499999
winbind uid = 10000-499999

#template homedir = /gpfs/fbb/user/%U
#template shell = /opt/pware/bin/bash
#use sendfile = Yes
#printing = cups

#-------------------------------------------------------
# Logging options
#
#-------------------------------------------------------
#
# higher log levels have a negative impact on performance
log level = 1
log file = /opt/pware/var/log/ max log size = 500000
debug timestamp = yes
#utmp = yes

#-------------------------------------------------------
# ACL Support
#
#-------------------------------------------------------
map acl inherit = yes
nt acl support = yes
inherit acls = yes
inherit permissions = yes
inherit owner = yes
admin users = @"DOMAIN+domain admins"

#-------------------------------------------------------
# problem with DOS attributes and UNIX permissions
# 20091105, VA
#-------------------------------------------------------
ea support = yes
store dos attributes = Yes
map archive = No
map hidden = No
map system = No
map readonly = No

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Arendt, Volker]

Hello all,

some additional information: a new directoriy cannot be renamed. It remains at "Neuer Ordner". A new file can be created inside the new folder.

Neither directories nor files can be renamed, moved or deleted.

Regards

Volker

-----Ursprüngliche Nachricht-----
Von: samba-bounces@... [mailto:samba-bounces@...] Im Auftrag von Arendt, Volker
Gesendet: Dienstag, 10. November 2009 11:25
An: samba@...
Betreff: [Samba] Samba 3.4.2: Acces problem with EA attributes

Hello all,

we have a problem with our samba 3.4.2. We get the following messages in out logs for some user, but not all. Users can access their personal share, can create a directory or a file, but cannot change the directory or the file. The permissions are full access on the top level folder and permissions are inherited correctly.

Hints and tips are welcome


Regards

Dr. Volker Arendt
--------------------------------------------------------------------------
Dr. Volker Arendt                      mailto:arendt@...
Gaußstr. 20                                          Tel : [phone]
42097 Wuppertal, Deutschland                         Fax:  [phone]
University of Wuppertal                           Business Economics (FBB)
--------------------------------------------------------------------------




[2009/11/10 09:01:52,  1] smbd/service.c:1047(make_connection_snum)
  132.195.121.160 (132.195.121.160) connect to service ls-thiele$ initially as user FB6+steinbach (uid=16292, gid=13254) (pid 684068)
[2009/11/10 09:31:19,  1] smbd/dosmode.c:213(get_ea_dos_attribute)
  get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented
[2009/11/10 09:51:42,  1] smbd/service.c:1047(make_connection_snum)
  132.195.121.160 (132.195.121.160) connect to service steinbach$ initially as user steinbach (uid=16292, gid=10513) (pid 684068)
[2009/11/10 09:51:42,  1] smbd/dosmode.c:213(get_ea_dos_attribute)
  get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented

Our smb.conf follows:
[global]

# --------------------------------------------------------
# setting base configuration parameters
#
# --------------------------------------------------------
workgroup = FB6
netbios name = FRIGG
server string = AFS
security = ADS
realm = FB6.UNI-WUPPERTAL.DE
auth methods = winbind
# password server = AD logon server
password server = 132.195.120.9 132.195.120.12
wins server = 132.195.120.12
client use spnego = yes
client signing = yes
# added wg. ticket #5344
#client lanman auth = no
#client ntlmv2 auth = yes
encrypt passwords = yes
host msdfs = no
#domain logons = yes

# fuer Samba 3.3.0
# damit keine verschluesselte Verbindung zum Domain Controller
# aufgebaut wird
ldap ssl = no
obey pam restrictions = no

# ---------------------------------------------------------
# printer settings
# ??? better disable these settings ???
# ---------------------------------------------------------
# printcap name = cups
# disable spoolss = Yes
# show add printer wizard = No

# ---------------------------------------------------------
# ID mapping parameters
# mapping windows users to unix users
# this is performed on the basis of sid on windows and
# unix with uid for users and gid for groups
# the backend parameter rid allows to get the same mapping
# form sid to uid because it is determined algorithmically
# that way we get the same mapping even if we use samba on
# several disparate systems
# CHANGE NOTIFICATIO: with v3.3.0 there are changes
# to idmap; idmap domains is no longer supported
# ---------------------------------------------------------
#idmap domains = FB6
#idmap backend = rid
#idmap backend = tdb
idmap config FB6:backend   = rid
#idmap config FB6:base_rid  = 0
idmap config FB6:range     = 10000 - 499999
idmap uid = 10000-499999
idmap gid = 10000-499999
winbind separator =+
winbind use default domain = Yes
winbind enum users = no
winbind enum groups = no
winbind cache time = 60
winbind gid = 10000-499999
winbind uid = 10000-499999

#template homedir = /gpfs/fbb/user/%U
#template shell = /opt/pware/bin/bash
#use sendfile = Yes
#printing = cups

#-------------------------------------------------------
# Logging options
#
#-------------------------------------------------------
#
# higher log levels have a negative impact on performance
log level = 1
log file = /opt/pware/var/log/ max log size = 500000
debug timestamp = yes
#utmp = yes

#-------------------------------------------------------
# ACL Support
#
#-------------------------------------------------------
map acl inherit = yes
nt acl support = yes
inherit acls = yes
inherit permissions = yes
inherit owner = yes
admin users = @"DOMAIN+domain admins"

#-------------------------------------------------------
# problem with DOS attributes and UNIX permissions
# 20091105, VA
#-------------------------------------------------------
ea support = yes
store dos attributes = Yes
map archive = No
map hidden = No
map system = No
map readonly = No

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Jeremy Allison]

On Tue, Nov 10, 2009 at 11:32:42AM +0100, Arendt, Volker wrote:
> Hello all,
>
> some additional information: a new directoriy cannot be renamed. It remains at "Neuer Ordner". A new file can be created inside the new folder.
>
> Neither directories nor files can be renamed, moved or deleted.

Bug that was fixed with 3.4.3.

Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Arendt, Volker]

Hi Jeremy,

this is not correct. Out problem is not solved in 3.4.3. Her is a current excerpt from a logfile showing that the error persists:

[2009/11/17 10:55:54,  1] smbd/service.c:1047(make_connection_snum)
  132.195.121.79 (132.195.121.79) connect to service temme$ initially as user temme (uid=15213, gid=10513) (pid 217140)
[2009/11/17 11:22:51,  1] smbd/dosmode.c:213(get_ea_dos_attribute)
  get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented

Please let me know if you need more information.

Regards

Volker

-----Ursprüngliche Nachricht-----
Von: samba-bounces@... [mailto:samba-bounces@...] Im Auftrag von Jeremy Allison
Gesendet: Dienstag, 10. November 2009 20:23
An: Arendt, Volker
Cc: samba@...
Betreff: Re: [Samba] Samba 3.4.2: Acces problem with EA attributes

On Tue, Nov 10, 2009 at 11:32:42AM +0100, Arendt, Volker wrote:
> Hello all,
>
> some additional information: a new directoriy cannot be renamed. It remains at "Neuer Ordner". A new file can be created inside the new folder.
>
> Neither directories nor files can be renamed, moved or deleted.

Bug that was fixed with 3.4.3.

Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Arendt, Volker]

Hi Jeremy,

bug #6775 is still open. Is this the bug that was supposed to be fixed?

Regards

Volker

-----Ursprüngliche Nachricht-----
Von: samba-bounces@... [mailto:samba-bounces@...] Im Auftrag von Jeremy Allison
Gesendet: Dienstag, 10. November 2009 20:23
An: Arendt, Volker
Cc: samba@...
Betreff: Re: [Samba] Samba 3.4.2: Acces problem with EA attributes

On Tue, Nov 10, 2009 at 11:32:42AM +0100, Arendt, Volker wrote:
> Hello all,
>
> some additional information: a new directoriy cannot be renamed. It remains at "Neuer Ordner". A new file can be created inside the new folder.
>
> Neither directories nor files can be renamed, moved or deleted.

Bug that was fixed with 3.4.3.

Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Helmut Hullen]

Hallo, Arendt,,

Du meintest am 10.11.09:

> Hello all,

> we have a problem with our samba 3.4.2. We get the following messages
> in out logs for some user, but not all. Users can access their
> personal share, can create a directory or a file, but cannot change
> the directory or the file. The permissions are full access on the top
> level folder and permissions are inherited correctly.


  Message-ID: <cfPd9-2KI-5@...>

or

  http://groups.google.de/group/linux.samba/msg/cc8a5ce9439c31f3


Günter Kukkukk recommends some modifications in "/etc/fstab" and  
"smb.conf".

On my test machine (Slackware-current, Samba 3.4.2): most  
"get_ea_dos_attributes" error messages have disappeared, but not all:

2 directories are empty -> error message
1 directory is not allowed for this user -> error message

Viele Gruesse!
Helmut
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Arendt, Volker]

Hi all,

we still have an access problem with samba 3.4.3 on AIX 5300-10-01-0921, mounting a GPFS filesystem. The error started to appear a few weeks ago when we were still on 3.4.1. We do not have this problem on 3.0.26a, but we need to go to 3.4.3 due to Windows Vista and Windows 7 requirements.

The upgrade to 3.4.3 did not solve our problem.

Here is a sample error:

[2009/11/17 10:55:54,  1] smbd/service.c:1047(make_connection_snum)
  132.195.121.79 (132.195.121.79) connect to service temme$ initially as user temme (uid=15213, gid=10513) (pid 217140)
[2009/11/17 11:22:51,  1] smbd/dosmode.c:213(get_ea_dos_attribute)
  get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented

There is a bug open (#6775) that looks somewhat like our problem.

In our smb.conf we set the following parameter, but this did not help:
#-------------------------------------------------------
# problem with DOS attributes and UNIX permissions
# 20091105, VA
#-------------------------------------------------------
ea support = yes
store dos attributes = Yes
map archive = No
map hidden = No
map system = No
map readonly = No

Please let me know if you need more information. Do we need to open a new bu report? Shall we add a debug level 10 log and our smb.conf tot he bug ticket?

Regards

Volker

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Volker Lendecke]

On Tue, Nov 17, 2009 at 01:06:51PM +0100, Arendt, Volker wrote:

> Hi all,
>
> we still have an access problem with samba 3.4.3 on AIX 5300-10-01-0921, mounting a GPFS filesystem. The error started to appear a few weeks ago when we were still on 3.4.1. We do not have this problem on 3.0.26a, but we need to go to 3.4.3 due to Windows Vista and Windows 7 requirements.
>
> The upgrade to 3.4.3 did not solve our problem.
>
> Here is a sample error:
>
> [2009/11/17 10:55:54,  1] smbd/service.c:1047(make_connection_snum)
>   132.195.121.79 (132.195.121.79) connect to service temme$ initially as user temme (uid=15213, gid=10513) (pid 217140)
> [2009/11/17 11:22:51,  1] smbd/dosmode.c:213(get_ea_dos_attribute)
>   get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented

Please upload a full debug level 10 log.

Volker


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Arendt, Volker]

Hello Volker,

where shall i upload the debug log? I do not have an account on bugzilla. Do i need to create one?

Volker

-----Ursprüngliche Nachricht-----
Von: samba-bounces@... [mailto:samba-bounces@...] Im Auftrag von Volker Lendecke
Gesendet: Dienstag, 17. November 2009 13:17
An: Arendt, Volker
Cc: samba@...; Jeremy Allison
Betreff: Re: [Samba] Samba 3.4.3: Acces problem with EA attributes

On Tue, Nov 17, 2009 at 01:06:51PM +0100, Arendt, Volker wrote:

> Hi all,
>
> we still have an access problem with samba 3.4.3 on AIX 5300-10-01-0921, mounting a GPFS filesystem. The error started to appear a few weeks ago when we were still on 3.4.1. We do not have this problem on 3.0.26a, but we need to go to 3.4.3 due to Windows Vista and Windows 7 requirements.
>
> The upgrade to 3.4.3 did not solve our problem.
>
> Here is a sample error:
>
> [2009/11/17 10:55:54,  1] smbd/service.c:1047(make_connection_snum)
>   132.195.121.79 (132.195.121.79) connect to service temme$ initially as user temme (uid=15213, gid=10513) (pid 217140)
> [2009/11/17 11:22:51,  1] smbd/dosmode.c:213(get_ea_dos_attribute)
>   get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented

Please upload a full debug level 10 log.

Volker
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Volker Lendecke]

On Tue, Nov 17, 2009 at 01:42:23PM +0100, Arendt, Volker wrote:
> where shall i upload the debug log? I do not have an
> account on bugzilla. Do i need to create one?

Probably you need to create one.

Volker


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Jeremy Allison]

On Tue, Nov 17, 2009 at 01:06:51PM +0100, Arendt, Volker wrote:

> Hi all,
>
> we still have an access problem with samba 3.4.3 on AIX 5300-10-01-0921, mounting a GPFS filesystem. The error started to appear a few weeks ago when we were still on 3.4.1. We do not have this problem on 3.0.26a, but we need to go to 3.4.3 due to Windows Vista and Windows 7 requirements.
>
> The upgrade to 3.4.3 did not solve our problem.
>
> Here is a sample error:
>
> [2009/11/17 10:55:54,  1] smbd/service.c:1047(make_connection_snum)
>   132.195.121.79 (132.195.121.79) connect to service temme$ initially as user temme (uid=15213, gid=10513) (pid 217140)
> [2009/11/17 11:22:51,  1] smbd/dosmode.c:213(get_ea_dos_attribute)
>   get_ea_dos_attributes: Cannot get attribute from EA on file .: Error = Function not implemented
>
> There is a bug open (#6775) that looks somewhat like our problem.

This means you have no functional EA support on this
filesystem. This is required if you want to support
DOS attributes in EA's. You need to fix that before
Samba will perform correctly on this machine.

Jeremy.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba