[Samba] Change in behaviour for the "%U" substitution in 4.10.8?

[gac]

This is unfortunately still happening - anyone else have any other ideas?

As a reminder/summary of the information from earlier in the thread;

- My [homes] share is "path = /shares/DOMAIN/%U"
- I am logging into a Windows 7 client as "DOMAIN\username"
- My log.smbd shows "canonicalize_connect_path failed for service username, path /shares/DOMAIN/domain_username" (where DOMAIN is the domain name with upper-case letters, domain is the domain name with lower-case latters)
- this issue is affecting two shares in total which use the %U substitution, both are showing the same error. Any shares which use fixed paths are fine, as expected
- this only seemed to start happening when I upgraded to 4.10.8 from Louis van Belle's repo; I did not see the problem with the 4.10.7 packages from the same repo. Unfortunately the repo removes old versions of packages so I can't roll back to 4.10.7 as a reproduction or workaround

I'd appreciate any more tips, thank you!

6 Sep 2019, 11:53 by samba at lists.samba.org:

> I hadn't, but I did that just now; still the same behaviour.
>
> 6 Sep 2019, 11:49 by samba at lists.samba.org:
>
>> Have you tried running
>>
>> net cache flush
>>
>> after you have removed the SERVER lines from you config?
>>
>> Regards
>>
>>
>> Am 06.09.19 um 12:33 schrieb gac via samba:
>>
>>> I've now changed the ownership to root, as you suggest.
>>>
>>> I've removed the ACLs from /shares/DOMAIN - they don't need to be there as anyone can enter this directory already so there's no need for them.
>>>
>>> The ACLs on my individual home directory:
>>>
>>> root at server:/shares# getfacl /shares/DOMAIN/username
>>> getfacl: Removing leading '/' from absolute path names
>>> # file: shares/DOMAIN/username
>>> # owner: username
>>> # group: domain\040users
>>> user::rwx
>>> user:www-data:--x
>>> group::---
>>> mask::r-x
>>> other::---
>>>
>>> Still no joy, and the logs are still showing:
>>>
>>> canonicalize_connect_path failed for service username, path /shares/DOMAIN/domain_username
>>>
>>> Thanks for all your advice so far but I still don't believe this is a permissions problem, Samba is trying to access a directory which simply does not exist, and never has existed...
>>> 6 Sep 2019, 11:19 by samba at lists.samba.org:
>>>
>>>> On 06/09/2019 11:12, gac wrote:
>>>>
>>>>> I imagine the numeric UID is my old boss who left the company a few years ago, and by this point his account has been removed, not just disabled. The only thing contained by the DOMAIN directory is a home directory for each user, which is owned by them. So I don't _think_ this is the problem.
>>>>>
>>>>> The command you suggested returns:
>>>>>
>>>>> winbind_lookup_rids failed: WBC_ERR_DOMAIN_NOT_FOUND
>>>>>
>>>>> The ACLs are to allow --x access for the 'www-data' into users home directories for use with Apache+mod_userdir, and then r-x access for their www directory
>>>>>
>>>> Try changing the ownership of /shares/DOMAIN to root
>>>>
>>>> What about the getfacl commands ?
>>>>
>>>> Rowland
>>>>
>>>>
>>>>
>>>> -- 
>>>> To unsubscribe from this list go to the following URL and read the
>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>>
>>
>> -- 
>> Dr. Christian Naumer
>> Unit Head Bioprocess Development
>> B.R.A.I.N Aktiengesellschaft
>> Darmstaedter Str. 34-36, D-64673 Zwingenberg
>> e-mail cn at brain-biotech.com, homepage www.brain-biotech.com
>> fon +49-6251-9331-30  /   fax +49-6251-9331-11
>>
>> Sitz der Gesellschaft: Zwingenberg/Bergstrasse
>> Registergericht AG Darmstadt, HRB 24758
>> Vorstand: Dr. Juergen Eck (Vorsitzender), Manfred Bender,
>> Ludger Roedder
>> Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>