several wired errors with samba4

[Matthieu Patou]

On 02/13/2009 02:33 AM, Andrew Bartlett wrote:
> On Thu, 2009-02-12 at 15:21 +0300, Matthieu Patou wrote:
>    
>> Dear all,
>>
>> While trying to search a problem I had a look at my samba4 log today,
>> and I saw this errors:
>>
>> * /usr/local/samba/private/smbd.tmp/messaging/names.tdb
>> * keytab /usr/local/samba/private/secrets.keytab open failed: Permission
>> denied
>> *
>> '/usr/local/samba/private/smbd.tmp/messaging/msg.0.0.146':NT_STATUS_ACCESS_DENIED
>>
>> It seems to me that the samba process is started with root so unless it
>> tries to lower its rights I do not see a reason for this because all
>> files and folders (even parent folders) are owned by root with a least
>> rw rights.
>>
>> Any idea of what could cause this problem ?
>>      
>
> Are you sure it started as root?
>    
root      4730  8.2  3.2 137208 77556 ?        Ss   Feb11 201:32 
/usr/local/samba/sbin/samba -D -M single

> Is SeLinux or some other tool denying access?
>    
I don't think so
> Samba does change user to perform filesystem access (in the SMB server),
> but should change back as soon as it needs to access anything else.
>
> In short, I'm a bit stumped - the best route forward would be to print
> the real and effective UID in the debug messages.
>
>    
I'll made a change this afternoon.

Matthieu