[Samba] Error accessing the share_info.tdb file

[Philippe Maladjian]

-----Message d'origine-----
De : samba <samba-bounces at lists.samba.org> De la part de Rowland Penny via samba
Envoyé : jeudi 25 avril 2024 15:11
À : samba at lists.samba.org
Cc : Rowland Penny <rpenny at samba.org>
Objet : Re: [Samba] Error accessing the share_info.tdb file

On Thu, 25 Apr 2024 12:42:16 +0000
Philippe Maladjian <pmaladjian at hilaire.fr> wrote:

> On Thu, 25 Apr 2024 11:44:42 +0000
> Philippe Maladjian via samba <samba at lists.samba.org> wrote:
>
> > Hello everyone,
> >
> > I'm preparing a migration from a NT4-mode domain controller 3.5 to
> > version 4.19. The migration process is going well, but from the
> > share management MMC, no matter the share defined in the smb.conf,
> > when I try to access the authorization tab, I get the following
> > message in the Samba logs:
> >
> > Apr 25 11:39:58 svdom01.voillot205 rpcd_classic[1827]: [2024/04/25
> > 11:39:58.511922,  0]
> > ../../source3/lib/sharesec.c:161(share_info_db_init) Apr 25 11:39:58
> > svdom01.voillot205 rpcd_classic[1827]:   Failed to open share info
> > database /var/lib/samba/share_info.tdb (Permission denied)
> >
> > The only solution is to apply a chmod 744 to the share_info.tdb
> > file.
> >
> > The new server is on Debian 12.5 with Samba installed in version
> > 4.19.5-debian. How can I fix the issue without modifying the chmod?
> >
> > Thanks in advance.
>
> >> What version of Windows are you running the 'share management MMC'
> >> on ? I thought that Microsoft had removed the Share and Storage
> >> Management MMC from Windows 10.
>
> >> Rowland
>
> For now, I have a computer park running Windows 7, and it's also a
> Windows 7 machine that I use to access various RSAT tools.

> Windows 7 is EOL and I have checked, the share MMC has been removed from Windows 10.

The migration to Windows 10 is planned once Samba 4.X is in production. In the meantime, I need to perform a migration to an equivalent level of functionality and version.

> For share
> management, I follow the procedure outlined on this page :
>
> https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs
> #Setting_Share_Permissions_and_ACLs
>
> But I encounter the same issue when browsing the network from a test
> machine (connected to the domain) and right-clicking on the netlogon
> share, for example.

>> That should work, can you please post the output of 'samba-tool testparm' when run on the Samba AD DC.

#samba-tool testparm
INFO 2024-04-25 15:17:44,189 pid:3021 /usr/lib/python3/dist-packages/samba/netcmd/testparm.py #96: Loaded smb config files from /etc/samba/smb.conf
INFO 2024-04-25 15:17:44,189 pid:3021 /usr/lib/python3/dist-packages/samba/netcmd/testparm.py #97: Loaded services file OK.
Press enter to see a dump of your service definitions

# Global parameters
[global]
        disable netbios = Yes
        disable spoolss = Yes
        netbios name = svad01
        printcap name = /dev/null
        realm = MYDOM.LAN
        restrict anonymous = 2
        server role = active directory domain controller
        server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate
        smb ports = 445
        workgroup = MYDOM
        idmap_ldb:use rfc2307 = yes
        map acl inherit = Yes

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No

[netlogon]
        path = /var/lib/samba/sysvol/mydom.lan/scripts
        read only = No

Philippe.

 > Rowland

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Philippe Maladjian
Responsable informatique
Ligne directe : +33 (0)4 72 14 50 66

[https://hilaire.fr/tools/signature.jpg]<https://hilaire.fr>

HILAIRE s.a.s.
203 - 205 rue Jean Voillot, 69100 Villeurbanne - France
Tél. : +33 (0)4 72 37 58 23 - Fax : +33 (0)4 78 26 02 03
https://hilaire.fr