[Samba] Posix acls problem

Ed Stoner ed at whsd.k12.pa.us
Fri Apr 4 18:03:14 GMT 2003


I've changed out all of the hardware except the actual disks, since they
have a lot of data on them, and it didn't seem to have any effect.  I'm
also not running an ACL enabled kernel.  

Actually, after looking through the new features of 2.2.8, I think a may
have an idea about what is happening (at least partially).  It appears
that I may need to turn on the 'force unknown acl user' parameter.  I have
a number of systems that backup their local disk to the server with the
Microsoft Robocopy utility.  My understanding is that is works a lot like
XCOPY in copying the NTFS permissions.  My guess is that they have a file
whose has a local user in the acl and are trying to copy it to the samba
server who has no idea who that local user is (and thus cannot map the
SID).  It may be that with security = domain this problem doesn't happen
because the domain controller can get the SID somehow (I really have no
idea if this is true or not but would be interested to find out, since
that is the only thing that changed in my configuration).  I am looking
into the backup schedule now to see if I can't correlate a particular
server backing up with the problem (it would be great if I could correlate
the create_canon_ace_lists error message with a machine, but there doesn't
seem to be a way to do that).

I'd be interesting on hearing your take on my theory.

Thanks

----------
Ed Stoner
Network Administrator
Woodland Hills School District
Pittsburgh, PA 15221

On Fri, 4 Apr 2003 jra at dp.samba.org wrote:

> On Fri, Apr 04, 2003 at 09:24:31AM -0500, Ed Stoner wrote:
> > 
> > Sometimes the system completely locks up and needs to be power cycled.  
> > Sometimes I am able to just restart smbd to fix the problem.
> 
> This is usually a sign of bad hardware. Are you running an ACL enabled
> Linux kernel ? This has been known anecdotally to cause some Linux
> stablity problems (sorry no reproducible test case or I'd have
> bugged the kernel team).
> 
> Jeremy.
> 



More information about the samba mailing list