[Samba] [samba] Linux acls problem with windows 7 and vista

sisu . npillao at hotmail.com
Mon Jan 24 17:02:37 MST 2011

Hei all,
Today I upgraded my samba which was a really old version 3.0.33 (I know)  to 3.5. The upgraded seemed alright  since I realize that I got a problem with the linux acls, I wanna say that I only have this problem with windows 7 and Vista, however windows xp works alright
To try to be concreted I will try to expose the problem with an example, the point is that I have a directory called 'shared', which is set as:
[shared]    comment =  Shared directory    path = /samba/shared    read only = no    force create mode = 0770    force directory mode = 0770    force group = root    locking = no    oplocks = no    veto oplock files = /*.txt/
and the acl's I set are the following:
 getfacl shared/
# file: shared# owner: root# group: rootuser::rwxgroup::---group:company:r-xgroup:helpdesk:r-xgroup:sysadmin:r-xgroup:tech:r-xmask::rwxother::---default:user::rwxdefault:group::---default:group:company:rwxdefault:mask::rwxdefault:other::---
I have an user called user1 who has "company" as a primary group, and I have a user2 who has "company" as a primary group and sysadmin as  secondary group. The fact is that the user2 is able to get on the shared directory and user1 not, but if I set the user1 on the tech group then this user1 is able to get on the directory. weird huh?
So weird ! I spent a lot of time with it and I'm not able to find out what is going on :( I thought even that it could be a bug but I didn't find any case exactly like that.
The only suspicious line I fond in may samba log are:
[2011/01/24 16:27:11.098007,  3] smbd/sec_ctx.c:418(pop_sec_ctx)  pop_sec_ctx (1030, 0) - sec_ctx_stack_ndx = 0[2011/01/24 16:27:11.098046,  3] smbd/error.c:80(error_packet_set)  error packet at smbd/error.c(160) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED[2011/01/24 16:27:11.098107,  3] smbd/process.c:1485(process_smb)  Transaction 39 of length 114 (0 toread)[2011/01/24 16:27:11.098124,  3] smbd/process.c:1294(switch_message)  switch message SMBntcreateX (pid 10278) conn 0x2b841d0f2200[2011/01/24 16:27:11.098139,  4] smbd/uid.c:257(change_to_user)  change_to_user: Skipping user change - already user
I will appreciate so much any help !!!
c u !


More information about the samba mailing list