[Samba] Error since upgrade to Version 3.0.23a-1.fc4.1 - URGENT

[Travis Bullock]

Thanks Canuck!

Travis Bullock
Systems Administrator
Avmax Group Inc.


----- Original Message -----
From: Michael Coburn <mcoburn at jupiterimages.com>
To: Travis Bullock <tbullock at avmax.ca>
Sent: Thursday, December 14, 2006 1:56:49 PM GMT-0700 US/Mountain
Subject: Re: [Samba] Error since upgrade to Version 3.0.23a-1.fc4.1 - URGENT

Reply to the list.

In regards to this issue I'm stumped too, I'm really sorry.  We don't do 
extended ACLs here, so I'm clueless on this.

Just trying to help out a fellow Canadian! :)
--
Michael Coburn

Travis Bullock wrote:
> Hi Michael,
>
> I deleted the folder in question are recreated the ACL:
>
> [root at gfm-atlas Users]# getfacl Receiving/
> # file: Receiving
> # owner: root
> # group: AVMAX+domain\040admins
> user::rwx
> group::rwx
> other::---
> default:user::rwx
> default:user:AVMAX+gfreceiving:rwx
> default:group::rwx
> default:mask::rwx
> default:other::---
>
> That is the newly created ACL, so winbind is having no trouble getting group/user info from the PDC.
>
> Here is the log when I try and access it via the 'avmax+gfreceiving' user id:
>
> Dec 14 14:39:38 gfm-atlas smbd[15331]: [2006/12/14 14:39:38, 0] smbd/service.c:make_connection_snum(911)
> Dec 14 14:39:38 gfm-atlas smbd[15331]:   '/usr/GFM_Shares/Users/Receiving' does not exist or permission denied when connecting to [GF_Receiving] Error was Permission denied
> Dec 14 14:40:15 gfm-atlas smbd[15331]: [2006/12/14 14:40:15, 0] smbd/service.c:set_current_service(150)
> Dec 14 14:40:15 gfm-atlas smbd[15331]:   chdir (/usr/GFM_Shares/Users/Receiving) failed
> Dec 14 14:40:15 gfm-atlas smbd[15331]: [2006/12/14 14:40:15, 0] smbd/service.c:set_current_service(150)
> Dec 14 14:40:15 gfm-atlas smbd[15331]:   chdir (/usr/GFM_Shares/Users/Receiving) failed
> Dec 14 14:40:15 gfm-atlas smbd[15331]: [2006/12/14 14:40:15, 0] smbd/service.c:set_current_service(150)
> Dec 14 14:40:15 gfm-atlas smbd[15331]:   chdir (/usr/GFM_Shares/Users/Receiving) failed
>
> I am stumped.
>
>
> Travis Bullock
> Systems Administrator
> Avmax Group Inc.
>
>
> ----- Original Message -----
> From: Michael Coburn <mcoburn at jupiterimages.com>
> To: Travis Bullock <tbullock at avmax.ca>
> Cc: samba <samba at lists.samba.org>
> Sent: Thursday, December 14, 2006 12:41:37 PM GMT-0700 US/Mountain
> Subject: Re: [Samba] Error since upgrade to Version 3.0.23a-1.fc4.1 - URGENT
>
> Since it failed at the winbind step, could it be related to your Windows 
> PDC instead?  Can you create new shares and define new ACLs and confirm 
> that they work?
> --
> Michael Coburn
>
> Travis Bullock wrote:
>   
>> My samba shares aren't working with ACL access since the upgrade. Here is an example of the error from /var/log/messages 
>>
>> Dec 14 12:44:17 gfm-atlas smbd[14365]: [2006/12/14 12:44:17, 0] smbd/service.c:make_connection_snum(911) 
>> Dec 14 12:44:17 gfm-atlas smbd[14365]: '/usr/GFM_Shares/Users/Receiving' does not exist or permission denied when connecting to [GF_Receiving] Error was Permission denied 
>>
>> Here is the detailed ACL on that particular share: 
>>
>> [root at gfm-atlas Users]# getfacl Receiving/ 
>> # file: Receiving 
>> # owner: root 
>> # group: AVMAX+domain\040admins 
>> user::rwx 
>> group::rwx 
>> other::--- 
>> default:user::rwx 
>> default:user:AVMAX+gfreceiving:rwx 
>> default:group::rwx 
>> default:mask::rwx 
>> default:other::--- 
>>
>> Interestingly enough, the group "Domain Admins" can access this share no problem. But the lower level ACL for the user 'avmax+gfreceiving' generates that error in the messages log. 
>>
>> Some other errors in my /var/log/messages are: 
>>
>> Dec 14 12:20:22 gfm-atlas winbindd[14097]: [2006/12/14 12:20:22, 0] nsswitch/winbindd_dual.c:child_read_request(49) 
>> Dec 14 12:20:22 gfm-atlas winbindd[14097]: Got invalid request length: 0 
>> Dec 14 12:20:22 gfm-atlas winbindd[14084]: [2006/12/14 12:20:22, 0] nsswitch/winbindd_dual.c:child_read_request(49) 
>> Dec 14 12:20:22 gfm-atlas winbindd[14084]: Got invalid request length: 0 
>> Dec 14 12:21:33 gfm-atlas nmbd[14198]: [2006/12/14 12:21:33, 0] nmbd/asyncdns.c:start_async_dns(151) 
>> Dec 14 12:21:33 gfm-atlas nmbd[14198]: started asyncdns process 14199 
>> Dec 14 12:21:35 gfm-atlas winbindd[14196]: [2006/12/14 12:21:35, 0] rpc_client/cli_pipe.c:cli_rpc_pipe_open_noauth(2265) 
>> Dec 14 12:21:35 gfm-atlas winbindd[14196]: cli_rpc_pipe_open_noauth: rpc_pipe_bind for pipe \lsarpc failed with error NT_STATUS_BUFFER_TOO_SMALL 
>>
>> Please help. 
>>
>> Cheers, 
>>
>> Travis Bullock 
>> Systems Administrator 
>> Avmax Group Inc. 
>>
>>   
>>