samba 4.5.0 on hpux ia64:- permission denied error for the share.
Arjit Gupta
arjitk.gupta at gmail.com
Wed Nov 23 11:15:01 UTC 2016
Hello Uri,
After using --without-acl-support in configure we are able to access share
with normal user.
Please help us understand the impact of disabling acl feature in samba.
Arjit Kumar
On Wed, Nov 23, 2016 at 2:01 PM, Arjit Gupta <arjitk.gupta at gmail.com> wrote:
> Hello Uri,
>
> I have added vfs objects = hpuxacl to the global section of smb.conf.
> It didn't work and logs the same error as before.
>
> Earlier samba 3.6.6 on hpux is build with acl support and works as
> expected.
>
> Please let me know if some more debug logs or build information is
> required...
>
>
> Arjit Kumar
> 9650104435
>
> On Wed, Nov 23, 2016 at 12:48 PM, Uri Simchoni <uri at samba.org> wrote:
>
>> I see you've got the basics right.
>>
>> While file system are you using?
>>
>> I see we have a vfs module "hpuxacl" that you can load - probably the
>> default (without this module) is for some file systems and the module is
>> for others.
>>
>> Try adding "vfs objects = hpuxacl" to the "global" section (or to each
>> share, if you add per-share vfs modules).
>>
>> If that doesn't work you may want to try --without-acl-support in
>> configure.
>>
>> Hope that helps,
>> Uri.
>>
>> On 11/23/2016 08:07 AM, Arjit Gupta wrote:
>> > *configure options:-*
>> >
>> > ./configure \
>> > --prefix=/opt/samba \
>> > --bindir=/opt/samba/bin \
>> > --sbindir=/opt/samba/bin \
>> > --libdir=/opt/samba/lib \
>> > --includedir=/opt/samba/include \
>> > --enable-fhs \
>> > --sysconfdir=/etc/opt/samba \
>> > --localstatedir=/var/opt/samba \
>> > --with-configdir=/etc/opt/samba --without-pie
>> >
>> >
>> > .*/smbd -b gives below output.*
>> >
>> > # ./smbd -b
>> > Build environment:
>> > Built by: root at machinename
>> > Built on: Mon Nov 21 11:52:42 IST 2016
>> > Built using: /opt/aCC/bin/cc
>> > Build host: HP-UX machinename B.11.31 U ia64 3395706695
>> unlimited-user
>> > license
>> > SRCDIR: /home/user/samba-4.5.0_build_heimdal/source3
>> > BUILDDIR: /home/user/samba-4.5.0_build_heimdal/source3
>> >
>> > Paths:
>> > SBINDIR: /opt/samba/bin
>> > BINDIR: /opt/samba/bin
>> > CONFIGFILE: /etc/opt/samba/smb.conf
>> > LOGFILEBASE: /var/opt/samba/log/samba
>> > LMHOSTSFILE: /etc/opt/samba/lmhosts
>> > LIBDIR: /opt/samba/lib
>> > MODULESDIR: /opt/samba/lib/samba
>> > SHLIBEXT: so
>> > LOCKDIR: /var/opt/samba/lock/samba
>> > STATEDIR: /var/opt/samba/lib/samba
>> > CACHEDIR: /var/opt/samba/cache/samba
>> > PIDDIR: /var/opt/samba/run/samba
>> > SMB_PASSWD_FILE: /var/opt/samba/lib/samba/private/smbpasswd
>> > PRIVATE_DIR: /var/opt/samba/lib/samba/private
>> >
>> > System Headers:
>> > HAVE_SYS_ACL_H
>> > HAVE_SYS_DIR_H
>> > HAVE_SYS_FCNTL_H
>> > HAVE_SYS_FILE_H
>> > HAVE_SYS_FILSYS_H
>> > HAVE_SYS_IOCTL_H
>> > HAVE_SYS_IPC_H
>> > HAVE_SYS_MMAN_H
>> > HAVE_SYS_MOUNT_H
>> > HAVE_SYS_PARAM_H
>> > HAVE_SYS_PRIV_H
>> > HAVE_SYS_QUOTAS
>> > HAVE_SYS_QUOTA_H
>> > HAVE_SYS_RESOURCE_H
>> > HAVE_SYS_SELECT_H
>> > HAVE_SYS_SHM_H
>> > HAVE_SYS_SOCKET_H
>> > HAVE_SYS_STATVFS_H
>> > HAVE_SYS_STAT_H
>> > HAVE_SYS_STROPTS_H
>> > HAVE_SYS_SYSCALL_H
>> > HAVE_SYS_SYSMACROS_H
>> > HAVE_SYS_TERMIOS_H
>> > HAVE_SYS_TERMIO_H
>> > HAVE_SYS_TIMEB_H
>> > HAVE_SYS_TIMES_H
>> > HAVE_SYS_TIME_H
>> > HAVE_SYS_TYPES_H
>> > HAVE_SYS_UCONTEXT_H
>> > HAVE_SYS_UIO_H
>> > HAVE_SYS_UNISTD_H
>> > HAVE_SYS_UN_H
>> > HAVE_SYS_UTSNAME_H
>> > HAVE_SYS_VFS_H
>> > HAVE_SYS_WAIT_H
>> >
>> > Headers:
>> > HAVE_AIO_H
>> > HAVE_ALLOCA_H
>> > HAVE_ARPA_INET_H
>> > HAVE_ARPA_NAMESER_H
>> > HAVE_ASSERT_H
>> > HAVE_COM_ERR_H
>> > HAVE_CONFIG_H
>> > HAVE_CRYPT_H
>> > HAVE_CTYPE_H
>> > HAVE_CUPS_CUPS_H
>> > HAVE_CUPS_LANGUAGE_H
>> > HAVE_DIRENT_H
>> > HAVE_DLFCN_H
>> > HAVE_DL_H
>> > HAVE_ERRNO_H
>> > HAVE_FCNTL_H
>> > HAVE_FLOAT_H
>> > HAVE_FNMATCH_H
>> > HAVE_FORM_H
>> > HAVE_GLOB_H
>> > HAVE_GNUTLS_GNUTLS_H
>> > HAVE_GNUTLS_X509_H
>> > HAVE_GRP_H
>> > HAVE_GSSAPI_GSSAPI_H
>> > HAVE_GSSAPI_GSSAPI_KRB5_H
>> > HAVE_GSSAPI_GSSAPI_SPNEGO_H
>> > HAVE_ICONV_H
>> > HAVE_INTTYPES_H
>> > HAVE_KRB5_H
>> > HAVE_KRB5_LOCATE_PLUGIN_H
>> > HAVE_LANGINFO_H
>> > HAVE_LBER_H
>> > HAVE_LDAP_H
>> > HAVE_LIBGEN_H
>> > HAVE_LIMITS_H
>> > HAVE_LOCALE_H
>> > HAVE_MALLOC_H
>> > HAVE_MEMORY_H
>> > HAVE_MENU_H
>> > HAVE_MNTENT_H
>> > HAVE_NCURSES_H
>> > HAVE_NETDB_H
>> > HAVE_NETINET_IN6_H
>> > HAVE_NETINET_IN_H
>> > HAVE_NETINET_IN_SYSTM_H
>> > HAVE_NETINET_IP_H
>> > HAVE_NETINET_TCP_H
>> > HAVE_NET_IF_H
>> > HAVE_NSSWITCH_H
>> > HAVE_PANEL_H
>> > HAVE_POLL_H
>> > HAVE_PORT_H
>> > HAVE_PTHREAD_H
>> > HAVE_PWD_H
>> > HAVE_PYTHON_H
>> > HAVE_READLINE_HISTORY_H
>> > HAVE_READLINE_READLINE_H
>> > HAVE_RESOLV_H
>> > HAVE_RPCSVC_RQUOTA_H
>> > HAVE_RPCSVC_YPCLNT_H
>> > HAVE_RPCSVC_YP_PROT_H
>> > HAVE_RPC_NETTYPE_H
>> > HAVE_RPC_RPC_H
>> > HAVE_SECURITY_PAM_APPL_H
>> > HAVE_SECURITY_PAM_MODULES_H
>> > HAVE_SETJMP_H
>> > HAVE_SHADOW_H
>> > HAVE_SIGNAL_H
>> > HAVE_STDARG_H
>> > HAVE_STDBOOL_H
>> > HAVE_STDDEF_H
>> > HAVE_STDINT_H
>> > HAVE_STDIO_H
>> > HAVE_STDLIB_H
>> > HAVE_STRINGS_H
>> > HAVE_STRING_H
>> > HAVE_STROPTS_H
>> > HAVE_SYSCALL_H
>> > HAVE_SYSLOG_H
>> > HAVE_TERMIOS_H
>> > HAVE_TERMIO_H
>> > HAVE_TIME_H
>> > HAVE_UNISTD_H
>> > HAVE_UTIME_H
>> > HAVE_ZLIB_H
>> >
>> > UTMP Options:
>> > HAVE_UTMPX_H
>> > HAVE_UTMP_H
>> > HAVE_UT_UT_EXIT
>> > HAVE_UT_UT_HOST
>> > HAVE_UT_UT_ID
>> > HAVE_UT_UT_NAME
>> > HAVE_UT_UT_PID
>> > HAVE_UT_UT_TIME
>> > HAVE_UT_UT_TYPE
>> > HAVE_UT_UT_USER
>> > SIZEOF_UTMP_UT_LINE
>> > WITH_UTMP
>> >
>> > HAVE_* Defines:
>> > HAVE_ADDR_TYPE_IN_KRB5_ADDRESS
>> > HAVE_AP_OPTS_USE_SUBKEY
>> > HAVE_ATEXIT
>> > HAVE_BASENAME
>> > HAVE_BER_TAG_T
>> > HAVE_BIG_ENDIAN
>> > HAVE_BLKCNT_T
>> > HAVE_BLKSIZE_T
>> > HAVE_BOOL
>> > HAVE_BZERO
>> > HAVE_CHARSET_CP850
>> > HAVE_CHARSET_UTF_8
>> > HAVE_CHECKSUM_IN_KRB5_CHECKSUM
>> > HAVE_CHMOD
>> > HAVE_CHOWN
>> > HAVE_CHROOT
>> > HAVE_CLEARENV
>> > HAVE_CLOCK_GETTIME
>> > HAVE_CLOCK_REALTIME
>> > HAVE_COMPILER_WILL_OPTIMIZE_OUT_FNS
>> > HAVE_CONNECT
>> > HAVE_CONSTRUCTOR_ATTRIBUTE
>> > HAVE_CPPFUNCTION
>> > HAVE_CRYPT
>> > HAVE_CUPS
>> > HAVE_DECL_DLOPEN
>> > HAVE_DECL_EWOULDBLOCK
>> > HAVE_DECL_FDATASYNC
>> > HAVE_DECL_GETTIMEOFDAY
>> > HAVE_DECL_GNUTLS_CERT_EXPIRED
>> > HAVE_DECL_GNUTLS_CERT_NOT_ACTIVATED
>> > HAVE_DECL_GNUTLS_CERT_UNEXPECTED_OWNER
>> > HAVE_DECL_H_ERRNO
>> > HAVE_DECL_KRB5_AUTH_CON_SET_REQ_CKSUMTYPE
>> > HAVE_DECL_KRB5_GET_CREDENTIALS_FOR_USER
>> > HAVE_DECL_MALLOC
>> > HAVE_DECL_MEMALIGN
>> > HAVE_DECL_READAHEAD
>> > HAVE_DECL_RL_EVENT_HOOK
>> > HAVE_DECL_SNPRINTF
>> > HAVE_DECL_STRPTIME
>> > HAVE_DECL_VSNPRINTF
>> > HAVE_DECL__RES
>> > HAVE_DESTRUCTOR_ATTRIBUTE
>> > HAVE_DES_PCBC_ENCRYPT
>> > HAVE_DEVICE_MAJOR_FN
>> > HAVE_DEVICE_MINOR_FN
>> > HAVE_DEVNM
>> > HAVE_DIRNAME
>> > HAVE_DIR_DD_FD
>> > HAVE_DLCLOSE
>> > HAVE_DLERROR
>> > HAVE_DLOPEN
>> > HAVE_DLSYM
>> > HAVE_DN_EXPAND
>> > HAVE_DQB_FSOFTLIMIT
>> > HAVE_DUP2
>> > HAVE_ENCTYPE_AES128_CTS_HMAC_SHA1_96
>> > HAVE_ENCTYPE_AES256_CTS_HMAC_SHA1_96
>> > HAVE_ENCTYPE_ARCFOUR_HMAC
>> > HAVE_ENCTYPE_ARCFOUR_HMAC_MD5
>> > HAVE_ENCTYPE_ARCFOUR_HMAC_MD5_56
>> > HAVE_ENDHOSTENT
>> > HAVE_ENDMNTENT
>> > HAVE_ENDNETGRENT
>> > HAVE_ENVIRON_DECL
>> > HAVE_ERRNO_DECL
>> > HAVE_ETYPE_IN_ENCRYPTEDDATA
>> > HAVE_EXECL
>> > HAVE_E_DATA_POINTER_IN_KRB5_ERROR
>> > HAVE_FCHMOD
>> > HAVE_FCHOWN
>> > HAVE_FCNTL_LOCK
>> > HAVE_FCVT
>> > HAVE_FDATASYNC
>> > HAVE_FDATASYNC_DECL
>> > HAVE_FLAGS_IN_KRB5_CREDS
>> > HAVE_FLOCK
>> > HAVE_FREEADDRINFO
>> > HAVE_FREEHOSTENT
>> > HAVE_FREE_CHECKSUM
>> > HAVE_FRSIZE
>> > HAVE_FSEEKO
>> > HAVE_FSID_INT
>> > HAVE_FSYNC
>> > HAVE_FTRUNCATE
>> > HAVE_FTRUNCATE_EXTEND
>> > HAVE_FUNCTION_MACRO
>> > HAVE_GAI_STRERROR
>> > HAVE_GETADDRINFO
>> > HAVE_GETCWD
>> > HAVE_GETDENTS
>> > HAVE_GETDIRENTRIES
>> > HAVE_GETGRENT
>> > HAVE_GETGRGID_R
>> > HAVE_GETGRNAM
>> > HAVE_GETGRNAM_R
>> > HAVE_GETHOSTBYADDR
>> > HAVE_GETHOSTBYNAME
>> > HAVE_GETHOSTENT
>> > HAVE_GETHOSTNAME
>> > HAVE_GETIPNODEBYADDR
>> > HAVE_GETIPNODEBYNAME
>> > HAVE_GETMNTENT
>> > HAVE_GETNAMEINFO
>> > HAVE_GETNETGRENT
>> > HAVE_GETPAGESIZE
>> > HAVE_GETPGRP
>> > HAVE_GETPWNAM
>> > HAVE_GETPWNAM_R
>> > HAVE_GETPWUID_R
>> > HAVE_GETRLIMIT
>> > HAVE_GETSPNAM
>> > HAVE_GETTIMEOFDAY_TZ_VOID
>> > HAVE_GETUTXENT
>> > HAVE_GLOB
>> > HAVE_GNUTLS
>> > HAVE_GNUTLS3
>> > HAVE_GNUTLS_CERTIFICATE_VERIFY_PEERS3
>> > HAVE_GNUTLS_DATUM
>> > HAVE_GNUTLS_DATUM_T
>> > HAVE_GNUTLS_GLOBAL_INIT
>> > HAVE_GNUTLS_X509_CRT_SET_SUBJECT_KEY_ID
>> > HAVE_GNUTLS_X509_CRT_SET_VERSION
>> > HAVE_GRANTPT
>> > HAVE_GSSAPI
>> > HAVE_GSSKRB5_EXTRACT_AUTHZ_DATA_FROM_SEC_CONTEXT
>> > HAVE_GSSKRB5_GET_SUBKEY
>> > HAVE_GSS_DISPLAY_STATUS
>> > HAVE_GSS_EXPORT_CRED
>> > HAVE_GSS_IMPORT_CRED
>> > HAVE_GSS_INQUIRE_SEC_CONTEXT_BY_OID
>> > HAVE_GSS_KRB5_CRED_NO_CI_FLAGS_X
>> > HAVE_GSS_KRB5_EXPORT_LUCID_SEC_CONTEXT
>> > HAVE_GSS_KRB5_IMPORT_CRED
>> > HAVE_GSS_OID_EQUAL
>> > HAVE_GSS_WRAP_IOV
>> > HAVE_HISTORY_LIST
>> > HAVE_HPUX_ACLS
>> > HAVE_H_ERRNO
>> > HAVE_ICONV
>> > HAVE_ICONV_OPEN
>> > HAVE_IFACE_IFCONF
>> > HAVE_IF_NAMETOINDEX
>> > HAVE_IMMEDIATE_STRUCTURES
>> > HAVE_INET_ATON
>> > HAVE_INET_NTOA
>> > HAVE_INET_NTOP
>> > HAVE_INET_PTON
>> > HAVE_INITGROUPS
>> > HAVE_INITIALIZE_KRB5_ERROR_TABLE
>> > HAVE_INITSCR
>> > HAVE_INNETGR
>> > HAVE_INO_T
>> > HAVE_INT16_T
>> > HAVE_INT32_T
>> > HAVE_INT64_T
>> > HAVE_INT8_T
>> > HAVE_INTPTR_T
>> > HAVE_IPRINT
>> > HAVE_IPV6
>> > HAVE_IPV6_V6ONLY
>> > HAVE_ISATTY
>> > HAVE_KRB5
>> > HAVE_KRB5_ADDRESSES
>> > HAVE_KRB5_AUTH_CON_SETKEY
>> > HAVE_KRB5_CC_COPY_CACHE
>> > HAVE_KRB5_CC_GET_LIFETIME
>> > HAVE_KRB5_CONFIG_GET_BOOL_DEFAULT
>> > HAVE_KRB5_CREATE_CHECKSUM
>> > HAVE_KRB5_CRYPTO
>> > HAVE_KRB5_CRYPTO_DESTROY
>> > HAVE_KRB5_CRYPTO_INIT
>> > HAVE_KRB5_C_VERIFY_CHECKSUM
>> > HAVE_KRB5_DATA_COPY
>> > HAVE_KRB5_ENCTYPE_TO_STRING
>> > HAVE_KRB5_ENCTYPE_TO_STRING_WITH_KRB5_CONTEXT_ARG
>> > HAVE_KRB5_FREE_ERROR_CONTENTS
>> > HAVE_KRB5_FREE_HOST_REALM
>> > HAVE_KRB5_FWD_TGT_CREDS
>> > HAVE_KRB5_GET_CREDS
>> > HAVE_KRB5_GET_CREDS_OPT_ALLOC
>> > HAVE_KRB5_GET_CREDS_OPT_SET_IMPERSONATE
>> > HAVE_KRB5_GET_DEFAULT_IN_TKT_ETYPES
>> > HAVE_KRB5_GET_HOST_REALM
>> > HAVE_KRB5_GET_INIT_CREDS_KEYBLOCK
>> > HAVE_KRB5_GET_INIT_CREDS_OPT_ALLOC
>> > HAVE_KRB5_GET_INIT_CREDS_OPT_FREE
>> > HAVE_KRB5_GET_INIT_CREDS_OPT_GET_ERROR
>> > HAVE_KRB5_GET_INIT_CREDS_OPT_SET_PAC_REQUEST
>> > HAVE_KRB5_GET_PW_SALT
>> > HAVE_KRB5_GET_RENEWED_CREDS
>> > HAVE_KRB5_KEYBLOCK_INIT
>> > HAVE_KRB5_KEYBLOCK_KEYVALUE
>> > HAVE_KRB5_KEYTAB_ENTRY_KEYBLOCK
>> > HAVE_KRB5_KRBHST_GET_ADDRINFO
>> > HAVE_KRB5_KRBHST_INIT
>> > HAVE_KRB5_KT_COMPARE
>> > HAVE_KRB5_KT_FREE_ENTRY
>> > HAVE_KRB5_KU_OTHER_CKSUM
>> > HAVE_KRB5_MAKE_PRINCIPAL
>> > HAVE_KRB5_MK_REQ_EXTENDED
>> > HAVE_KRB5_PDU_NONE_DECL
>> > HAVE_KRB5_PRINCIPAL_COMPARE_ANY_REALM
>> > HAVE_KRB5_PRINCIPAL_GET_COMP_STRING
>> > HAVE_KRB5_PRINCIPAL_GET_NUM_COMP
>> > HAVE_KRB5_PRINCIPAL_GET_REALM
>> > HAVE_KRB5_PRINCIPAL_GET_TYPE
>> > HAVE_KRB5_PRINCIPAL_SET_REALM
>> > HAVE_KRB5_PRINCIPAL_SET_TYPE
>> > HAVE_KRB5_PROMPT_TYPE
>> > HAVE_KRB5_REALM_TYPE
>> > HAVE_KRB5_SET_DEFAULT_IN_TKT_ETYPES
>> > HAVE_KRB5_SET_REAL_TIME
>> > HAVE_KRB5_STRING_TO_KEY
>> > HAVE_KRB5_STRING_TO_KEY_SALT
>> > HAVE_KRB5_WARNX
>> > HAVE_KRB_STRUCT_WINSIZE
>> > HAVE_LARGEFILE
>> > HAVE_LCHOWN
>> > HAVE_LDAP
>> > HAVE_LDAP_ADD_RESULT_ENTRY
>> > HAVE_LDAP_INIT
>> > HAVE_LDAP_SET_REBIND_PROC
>> > HAVE_LIBCRYPTO
>> > HAVE_LIBFORM
>> > HAVE_LIBGEN
>> > HAVE_LIBGNUTLS
>> > HAVE_LIBICONV
>> > HAVE_LIBKRB5
>> > HAVE_LIBLDAP
>> > HAVE_LIBNCURSES
>> > HAVE_LIBNSL
>> > HAVE_LIBPAM
>> > HAVE_LIBPANEL
>> > HAVE_LIBPTHREAD
>> > HAVE_LIBREADLINE
>> > HAVE_LIBREPLACE
>> > HAVE_LIBRT
>> > HAVE_LIBSEC
>> > HAVE_LIBZ
>> > HAVE_LINK
>> > HAVE_LONG_LONG
>> > HAVE_LSTAT
>> > HAVE_MAKEDEV
>> > HAVE_MEMALIGN
>> > HAVE_MEMCPY
>> > HAVE_MEMMOVE
>> > HAVE_MEMSET
>> > HAVE_MKDIR_MODE
>> > HAVE_MKNOD
>> > HAVE_MKTIME
>> > HAVE_MLOCK
>> > HAVE_MLOCKALL
>> > HAVE_MMAP
>> > HAVE_MUNLOCK
>> > HAVE_MUNLOCKALL
>> > HAVE_NANOSLEEP
>> > HAVE_NATIVE_ICONV
>> > HAVE_NCURSES
>> > HAVE_NEW_FIELD
>> > HAVE_NEW_FORM
>> > HAVE_NEW_LIBREADLINE
>> > HAVE_NEW_PANEL
>> > HAVE_NFS_QUOTAS
>> > HAVE_OPEN_O_DIRECT
>> > HAVE_PAM_GET_DATA
>> > HAVE_PAM_RHOST
>> > HAVE_PAM_START
>> > HAVE_PAM_TTY
>> > HAVE_PASSWD_PW_AGE
>> > HAVE_PASSWD_PW_COMMENT
>> > HAVE_PATHCONF
>> > HAVE_PERL_MAKEMAKER
>> > HAVE_PIPE
>> > HAVE_POLL
>> > HAVE_POSIX_FADVISE
>> > HAVE_POSIX_OPENPT
>> > HAVE_PREAD
>> > HAVE_PREAD_DECL
>> > HAVE_PRINTF
>> > HAVE_PTHREAD
>> > HAVE_PTHREAD_ATTR_INIT
>> > HAVE_PTHREAD_CREATE
>> > HAVE_PTRDIFF_T
>> > HAVE_PUTENV
>> > HAVE_PUTUTLINE
>> > HAVE_PUTUTXLINE
>> > HAVE_PWRITE
>> > HAVE_PWRITE_DECL
>> > HAVE_QUOTACTL_4A
>> > HAVE_RAND
>> > HAVE_RANDOM
>> > HAVE_RCMD
>> > HAVE_READLINK
>> > HAVE_READV
>> > HAVE_REALPATH
>> > HAVE_RENAME
>> > HAVE_RES_SEARCH
>> > HAVE_RL_COMPLETION_MATCHES
>> > HAVE_SA_FAMILY_T
>> > HAVE_SA_SIGINFO_DECL
>> > HAVE_SECURE_MKSTEMP
>> > HAVE_SELECT
>> > HAVE_SENDMSG
>> > HAVE_SETEGID
>> > HAVE_SETENV
>> > HAVE_SETENV_DECL
>> > HAVE_SETEUID
>> > HAVE_SETGID
>> > HAVE_SETGROUPS
>> > HAVE_SETHOSTENT
>> > HAVE_SETITIMER
>> > HAVE_SETLINEBUF
>> > HAVE_SETLOCALE
>> > HAVE_SETMNTENT
>> > HAVE_SETNETGRENT
>> > HAVE_SETNETGRENT_PROTOTYPE
>> > HAVE_SETPGID
>> > HAVE_SETREGID
>> > HAVE_SETRESGID
>> > HAVE_SETRESGID_DECL
>> > HAVE_SETRESUID
>> > HAVE_SETRESUID_DECL
>> > HAVE_SETREUID
>> > HAVE_SETSID
>> > HAVE_SETUID
>> > HAVE_SHARED_MMAP
>> > HAVE_SHL_FINDSYM
>> > HAVE_SHL_LOAD
>> > HAVE_SHL_UNLOAD
>> > HAVE_SHMGET
>> > HAVE_SHM_OPEN
>> > HAVE_SHOW_PANEL
>> > HAVE_SIGACTION
>> > HAVE_SIGBLOCK
>> > HAVE_SIGPROCMASK
>> > HAVE_SIGSET
>> > HAVE_SIGSETMASK
>> > HAVE_SIG_ATOMIC_T_TYPE
>> > HAVE_SIMPLE_C_PROG
>> > HAVE_SIZE_T
>> > HAVE_SNPRINTF
>> > HAVE_SOCKET
>> > HAVE_SOCKETPAIR
>> > HAVE_SOCKLEN_T
>> > HAVE_SRAND
>> > HAVE_SRANDOM
>> > HAVE_SSIZE_T
>> > HAVE_SS_FAMILY
>> > HAVE_STATVFS
>> > HAVE_STATVFS_F_FLAG
>> > HAVE_STAT_ST_BLKSIZE
>> > HAVE_STAT_ST_BLOCKS
>> > HAVE_STRCASECMP
>> > HAVE_STRCHR
>> > HAVE_STRCPY
>> > HAVE_STRDUP
>> > HAVE_STRERROR
>> > HAVE_STRERROR_R
>> > HAVE_STRFTIME
>> > HAVE_STRNCASECMP
>> > HAVE_STRNCPY
>> > HAVE_STRPBRK
>> > HAVE_STRPTIME
>> > HAVE_STRTOK_R
>> > HAVE_STRTOL
>> > HAVE_STRTOLL
>> > HAVE_STRTOQ
>> > HAVE_STRTOULL
>> > HAVE_STRUCT_ADDRINFO
>> > HAVE_STRUCT_MSGHDR_MSG_CONTROL
>> > HAVE_STRUCT_SIGEVENT
>> > HAVE_STRUCT_SIGEVENT_SIGEV_VALUE_SIVAL_PTR
>> > HAVE_STRUCT_SOCKADDR
>> > HAVE_STRUCT_SOCKADDR_IN6
>> > HAVE_STRUCT_SOCKADDR_STORAGE
>> > HAVE_STRUCT_STAT_ST_RDEV
>> > HAVE_STRUCT_TIMESPEC
>> > HAVE_STRUCT_WINSIZE
>> > HAVE_ST_RDEV
>> > HAVE_SWAB
>> > HAVE_SYMLINK
>> > HAVE_SYSCALL
>> > HAVE_SYSCONF
>> > HAVE_SYSLOG
>> > HAVE_TGETENT
>> > HAVE_UCONTEXT_T
>> > HAVE_UINT16_T
>> > HAVE_UINT32_T
>> > HAVE_UINT64_T
>> > HAVE_UINT8_T
>> > HAVE_UINTPTR_T
>> > HAVE_UINT_T
>> > HAVE_UMASK
>> > HAVE_UNAME
>> > HAVE_UNIXSOCKET
>> > HAVE_UNSETENV
>> > HAVE_USLEEP
>> > HAVE_UTIMBUF
>> > HAVE_UTIME
>> > HAVE_UTIMES
>> > HAVE_U_CHAR
>> > HAVE_VA_COPY
>> > HAVE_VISIBILITY_ATTR
>> > HAVE_VOLATILE
>> > HAVE_VSNPRINTF
>> > HAVE_WAIT4
>> > HAVE_WAITPID
>> > HAVE_WRITEV
>> > HAVE_WS_XPIXEL
>> > HAVE_WS_YPIXEL
>> > HAVE_YP_GET_DEFAULT_DOMAIN
>> > HAVE_Z
>> > HAVE_ZLIBVERSION
>> > HAVE__Bool
>> > HAVE__CLOSE
>> > HAVE__FCNTL
>> > HAVE__FORK
>> > HAVE__FSTAT
>> > HAVE__LSEEK
>> > HAVE__LSTAT
>> > HAVE__OPEN
>> > HAVE__READ
>> > HAVE__RES
>> > HAVE__STAT
>> > HAVE__VA_ARGS__MACRO
>> > HAVE__WRITE
>> > HAVE___ACL
>> > HAVE___ATTRIBUTE__
>> > HAVE___STRTOLL
>> > HAVE___STRTOULL
>> >
>> > --with Options:
>> > WITH_ADS
>> > WITH_AUTOMOUNT
>> > WITH_DNS_UPDATES
>> > WITH_PAM
>> > WITH_PAM_MODULES
>> > WITH_PTHREADPOOL
>> > WITH_QUOTAS
>> > WITH_SYSLOG
>> > WITH_WINBIND
>> >
>> > Build Options:
>> > BROKEN_NISPLUS_INCLUDE_FILES
>> > BUILD_SYSTEM
>> > CHECK_BUNDLED_SYSTEM_Z
>> > COMPILER_SUPPORTS_LL
>> > CONFIG_H_IS_FROM_SAMBA
>> > DEFAULT_DOS_CHARSET
>> > DEFAULT_UNIX_CHARSET
>> > ENABLE_GNUTLS
>> > HPUX
>> > INLINE_MACRO
>> > KRB5_CREDS_OPT_FREE_REQUIRES_CONTEXT
>> > KRB5_PRINC_REALM_RETURNS_REALM
>> > LDAP_DEPRECATED
>> > LDAP_SET_REBIND_PROC_ARGS
>> > LIBREPLACE_NETWORK_CHECKS
>> > POSIX_ACL_NEEDS_MASK
>> > RETSIGTYPE
>> > SAMBA4_USES_HEIMDAL
>> > SHLIBEXT
>> > SIZEOF_BLKCNT_T_8
>> > SIZEOF_BOOL
>> > SIZEOF_CHAR
>> > SIZEOF_DEV_T
>> > SIZEOF_INO_T
>> > SIZEOF_INT
>> > SIZEOF_INT16_T
>> > SIZEOF_INT32_T
>> > SIZEOF_INT64_T
>> > SIZEOF_INT8_T
>> > SIZEOF_LONG
>> > SIZEOF_LONG_LONG
>> > SIZEOF_OFF_T
>> > SIZEOF_SHORT
>> > SIZEOF_SIZE_T
>> > SIZEOF_SSIZE_T
>> > SIZEOF_TIME_T
>> > SIZEOF_UINT16_T
>> > SIZEOF_UINT32_T
>> > SIZEOF_UINT64_T
>> > SIZEOF_UINT8_T
>> > SIZEOF_VOID_P
>> > STAT_STATVFS
>> > STAT_ST_BLOCKSIZE
>> > STDC_HEADERS
>> > STRERROR_R_PROTO_COMPATIBLE
>> > STRING_STATIC_MODULES
>> > SUMMARY_PASSES
>> > SYSCONF_SC_NGROUPS_MAX
>> > SYSCONF_SC_PAGESIZE
>> > SYSTEM_UNAME_MACHINE
>> > SYSTEM_UNAME_RELEASE
>> > SYSTEM_UNAME_SYSNAME
>> > SYSTEM_UNAME_VERSION
>> > TEVENT_NUM_SIGNALS
>> > TIME_WITH_SYS_TIME
>> > USE_SETREUID
>> > USING_SYSTEM_ZLIB
>> > VALUEOF_NSIG
>> > VALUEOF_SIGRTMAX
>> > VALUEOF_SIGRTMIN
>> > VALUEOF__NSIG
>> > VOID_RETSIGTYPE
>> > WORDS_BIGENDIAN
>> > _FILE_OFFSET_BITS
>> > _GNU_SOURCE
>> > _HAVE_UNBROKEN_POSIX_FALLOCATE
>> > _SAMBA_BUILD_
>> > _XOPEN_SOURCE_EXTENDED
>> > auth_script_init
>> > idmap_ad_init
>> > idmap_autorid_init
>> > idmap_hash_init
>> > idmap_rfc2307_init
>> > idmap_rid_init
>> > idmap_script_init
>> > idmap_tdb2_init
>> > loff_t
>> > offset_t
>> > static_decl_auth
>> > static_decl_charset
>> > static_decl_gpext
>> > static_decl_idmap
>> > static_decl_nss_info
>> > static_decl_pdb
>> > static_decl_perfcount
>> > static_decl_rpc
>> > static_decl_vfs
>> > static_init_auth
>> > static_init_charset
>> > static_init_gpext
>> > static_init_idmap
>> > static_init_nss_info
>> > static_init_pdb
>> > static_init_perfcount
>> > static_init_rpc
>> > static_init_vfs
>> > u_int32_t
>> > vfs_acl_tdb_init
>> > vfs_acl_xattr_init
>> > vfs_aio_fork_init
>> > vfs_aio_pthread_init
>> > vfs_audit_init
>> > vfs_cap_init
>> > vfs_catia_init
>> > vfs_commit_init
>> > vfs_crossrename_init
>> > vfs_default_quota_init
>> > vfs_expand_msdfs_init
>> > vfs_extd_audit_init
>> > vfs_fake_perms_init
>> > vfs_fruit_init
>> > vfs_full_audit_init
>> > vfs_linux_xfs_sgid_init
>> > vfs_media_harmony_init
>> > vfs_netatalk_init
>> > vfs_offline_init
>> > vfs_posix_eadb_init
>> > vfs_preopen_init
>> > vfs_readahead_init
>> > vfs_readonly_init
>> > vfs_recycle_init
>> > vfs_shadow_copy2_init
>> > vfs_shadow_copy_init
>> > vfs_shell_snap_init
>> > vfs_streams_depot_init
>> > vfs_streams_xattr_init
>> > vfs_time_audit_init
>> > vfs_unityed_media_init
>> > vfs_worm_init
>> > vfs_xattr_tdb_init
>> >
>> > Cluster support features:
>> > NONE
>> >
>> > Type sizes:
>> > sizeof(char): 1
>> > sizeof(int): 4
>> > sizeof(long): 4
>> > sizeof(long long): 8
>> > sizeof(uint8_t): 1
>> > sizeof(uint16_t): 2
>> > sizeof(uint32_t): 4
>> > sizeof(short): 2
>> > sizeof(void*): 4
>> > sizeof(size_t): 4
>> > sizeof(off_t): 8
>> > sizeof(ino_t): 4
>> > sizeof(dev_t): 4
>> >
>> > Builtin modules:
>> > vfs_default auth_domain auth_builtin auth_sam auth_winbind
>> vfs_hpuxacl
>> > pdb_smbpasswd pdb_tdbsam pdb_wbc_sam auth_unix auth_wbc
>> nss_info_template
>> > idmap_tdb idmap_passdb idmap_nss pdb_ldapsam idmap_ldap
>> > #
>> >
>> >
>> > Arjit Kumar
>> >
>> >
>> > On Wed, Nov 23, 2016 at 11:12 AM, Uri Simchoni <uri at samba.org> wrote:
>> >
>> >> On 11/21/2016 06:40 AM, Arjit Gupta wrote:
>> >>> Hi Team,
>> >>>
>> >>> I am getting permission denied error guest and normal user with samba
>> >> 4.5.0
>> >>> on hpux ia64.
>> >>> Through if you use root or configure normal user as admin it works.
>> >>>
>> >>> Below are my configuration parameter.
>> >>>
>> >>> # testparm -s
>> >>> Load smb config files from /etc/opt/samba/smb.conf
>> >>> rlimit_max: increasing rlimit_max (2048) to minimum Windows limit
>> (16384)
>> >>> Processing section "[test1]"
>> >>> Processing section "[demoUser]"
>> >>> Loaded services file OK.
>> >>> Server role: ROLE_STANDALONE
>> >>>
>> >>> # Global parameters
>> >>> [global]
>> >>> workgroup = CIFSALONE
>> >>> log file = /var/opt/samba/log.%m
>> >>> max log size = 1000
>> >>> security = USER
>> >>> idmap config * : backend = tdb
>> >>>
>> >>>
>> >>> [test1]
>> >>> comment = Temporary file space
>> >>> path = /test1
>> >>>
>> >>>
>> >>> [demoUser]
>> >>> comment = %U home directory
>> >>> path = %H
>> >>> #
>> >>>
>> >>> Below is the snippet of the debug logs.
>> >>>
>> >>> *HP-UX*
>> >>>
>> >>> canonicalise_acl: Access ace entries before arrange :
>> >>>
>> >>> [2016/11/21 09:06:12.999809, 10, pid=17019, effective(110, 20),
>> real(0,
>> >> 0),
>> >>> class=acls] ../source3/smbd/posix_acls.c:2737(canonicalise_acl)
>> >>>
>> >>> canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER
>> >>> ace_flags = 0x0 perms ---
>> >>>
>> >>> [2016/11/21 09:06:12.999901, 10, pid=17019, effective(110, 20),
>> real(0,
>> >> 0),
>> >>> class=acls] ../source3/smbd/posix_acls.c:2737(canonicalise_acl)
>> >>>
>> >>> canon_ace index 1. Type = allow SID = S-1-22-2-3 gid 3 (sys)
>> >>> SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms ---
>> >>>
>> >>> [2016/11/21 09:06:13.000204, 10, pid=17019, effective(110, 20),
>> real(0,
>> >> 0),
>> >>> class=acls] ../source3/smbd/posix_acls.c:2737(canonicalise_acl)
>> >>>
>> >>> canon_ace index 2. Type = allow SID = S-1-22-1-0 uid 0 (root)
>> >>> SMB_ACL_USER_OBJ ace_flags = 0x0 perms ---
>> >>>
>> >>> [2016/11/21 09:06:13.000413, 10, pid=17019, effective(110, 20),
>> real(0,
>> >> 0),
>> >>> class=acls] ../source3/smbd/posix_acls.c:848(print_canon_ace_list)
>> >>>
>> >>> print_canon_ace_list: canonicalise_acl: ace entries after arrange
>> >>>
>> >>> canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root)
>> >>> SMB_ACL_USER_OBJ ace_flags = 0x0 perms ---
>> >>>
>> >>> canon_ace index 1. Type = allow SID = S-1-22-2-3 gid 3 (sys)
>> >>> SMB_ACL_GROUP_OBJ ace_flags = 0x0 perms ---
>> >>>
>> >>> canon_ace index 2. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER
>> >>> ace_flags = 0x0 perms ---
>> >>>
>> >>>
>> >>>
>> >>> P*lease suggest possible cause and solution for the same.*
>> >>>
>> >>> Arjit Kumar
>> >>>
>> >>
>> >> smbd seems to think the folder (/test1 or %H) is totally inaccessible.
>> >> That might be due to a build issue (not correctly detecting POSIX
>> ACLs).
>> >> Can you provide the output of "smbd -b" and also which (if any)
>> >> configure flags were used for the build? That could give a clue...
>> >>
>> >> Uri.
>> >>
>>
>>
>
More information about the samba-technical
mailing list