[Samba] Weird, sudden 3.4 problem.

[Don Krause]

On Apr 11, 2013, at 11:10 AM, Jeremy Allison wrote:

> On Thu, Apr 11, 2013 at 10:44:11AM -0700, Don Krause wrote:
>> We've had basically no issues with an older samba 3.4 installation working with Win 7, but suddenly this morning, "homes" shares are acting strange.
>> 
>> I can create new folders, I can create new documents. However, any attempt to rename the newly created file gives me access denied problems.
>> 
>> I can edit and save the file if it's text, from notepad, but Word and Excel documents fail to save with access denied. GVIM has no problems creating
>> backup files, Word creates tmp files ok.
>> 
>> Other, non-home shares are working as expected.
>> 
>> I did restart samba, reboot the server, restart the win 7 clients, no change. This has worked for more than 2 years. Suggestions?
> 
> What changed ? Something did :-).
> 

As far as we can tell, all of the affected clients rebooted due to updates…

It's weird, it ONLY affects the [homes] share, nothing else is affected. It only affects user initiated changes,

for example, you right click in the share, create a new word doc. The document gets created. Edit the doc, and try to save, you'll get permission denied, however, Word successfully creates both a tmp file and a backup file.

Right click on the share, create new text file, you can open, edit, save no problems. Gvim even manages to create backup and swp files. But you cannot rename the text file.

For the affected folks, I've created their own share [dkrause] pointing to the exact same directory, then the problems go away. But I'd rather not do that for 60 people.

Our security is ADS, the testjoin succeeds, all non-home shares still behave.

The relevant portion of the smb.conf: (the dkrause share is a test, which works..)

Thanks!

# Samba config file created using SWAT
# from UNKNOWN (172.24.2)
# Date: 2010/07/23 15:01:27

[global]
        workgroup = OPTIVUS
        realm = OPTIVUS.COM
        security = ADS
        password server = optad.optivus.com
        log level = 10
        log file = /var/log/samba/%m.log
        max log size = 5000
        unix extensions = No
        template shell = /bin/bash
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = Yes
        hosts allow =  172.24.0.0/16
        oplocks = No
        level2 oplocks = No
        posix locking = No

[dkrause]
        read only = No
        valid users = OPTIVUS\dkrause 
        path = /home/towelie/dkrause


[homes]
       admin users = %S
#       valid users = %S
        read only = No
        force create mode = 0660
        force directory mode = 0770
        browseable = No
       



--
Don Krause