samba 4.5.0 on hpux ia64:- permission denied error for the share.

[Uri Simchoni]

On 11/21/2016 06:40 AM, Arjit Gupta wrote:
> Hi Team,
> 
> I am getting permission denied error guest and normal user with samba 4.5.0
> on hpux ia64.
> Through if you use root or configure normal user as admin it works.
> 
> Below are my configuration parameter.
> 
> # testparm -s
> Load smb config files from /etc/opt/samba/smb.conf
> rlimit_max: increasing rlimit_max (2048) to minimum Windows limit (16384)
> Processing section "[test1]"
> Processing section "[demoUser]"
> Loaded services file OK.
> Server role: ROLE_STANDALONE
> 
> # Global parameters
> [global]
>         workgroup = CIFSALONE
>         log file = /var/opt/samba/log.%m
>         max log size = 1000
>         security = USER
>         idmap config * : backend = tdb
> 
> 
> [test1]
>         comment = Temporary file space
>         path = /test1
> 
> 
> [demoUser]
>         comment = %U home directory
>         path = %H
> #
> 
> Below is the snippet of the debug logs.
> 
> *HP-UX*
> 
>   canonicalise_acl: Access ace entries before arrange :
> 
> [2016/11/21 09:06:12.999809, 10, pid=17019, effective(110, 20), real(0, 0),
> class=acls] ../source3/smbd/posix_acls.c:2737(canonicalise_acl)
> 
>   canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER
> ace_flags = 0x0 perms ---
> 
> [2016/11/21 09:06:12.999901, 10, pid=17019, effective(110, 20), real(0, 0),
> class=acls] ../source3/smbd/posix_acls.c:2737(canonicalise_acl)
> 
>   canon_ace index 1. Type = allow SID = S-1-22-2-3 gid 3 (sys)
> SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms ---
> 
> [2016/11/21 09:06:13.000204, 10, pid=17019, effective(110, 20), real(0, 0),
> class=acls] ../source3/smbd/posix_acls.c:2737(canonicalise_acl)
> 
>   canon_ace index 2. Type = allow SID = S-1-22-1-0 uid 0 (root)
> SMB_ACL_USER_OBJ ace_flags = 0x0 perms ---
> 
> [2016/11/21 09:06:13.000413, 10, pid=17019, effective(110, 20), real(0, 0),
> class=acls] ../source3/smbd/posix_acls.c:848(print_canon_ace_list)
> 
>   print_canon_ace_list: canonicalise_acl: ace entries after arrange
> 
>   canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root)
> SMB_ACL_USER_OBJ ace_flags = 0x0 perms ---
> 
>   canon_ace index 1. Type = allow SID = S-1-22-2-3 gid 3 (sys)
> SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms ---
> 
>   canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER
> ace_flags = 0x0 perms ---
> 
> 
> 
> P*lease suggest possible cause and solution for the same.*
> 
> Arjit Kumar
> 

smbd seems to think the folder (/test1 or %H) is totally inaccessible.
That might be due to a build issue (not correctly detecting POSIX ACLs).
Can you provide the output of "smbd -b" and also which (if any)
configure flags were used for the build? That could give a clue...

Uri.