[Samba] access denied with "hide dot files = Yes"

[mathias dufresne]

File server : samba 4.4.3 connected to AD.

First test:
Client : linux box, using locally declared user to create file, AD user to
mount the share.

With that linux client and the usage configuration described when I create
a file I get "permission denied" error and the file is created. It is
created owned by AD user (the one mounting the share), not by locally
declared user.

Second test:
Client : Windows 7 connected to AD. User mounting the share is the one
connected to the client and is declared into AD.

Creating a file with a dot as first character does not give me error.

This happens with or without "hide dot files = yes".

Hoping this could help you to find root cause of your issue...

mathias


2016-06-02 22:38 GMT+02:00 <samba.20.andwin at spamgourmet.com>:

> On Thu, Jun 2, 2016 at 7:58 PM, Jeremy Allison - jra at samba.org <
> samba.andwin.dacc010f26.jra#samba.org at ob.0sg.net> wrote:
>
> >
> > > If I understand this correctly, the stored DOS attributes didn't
> contain
> > > the H attribute and this did override (prior to the bug fix) the
> forced H
> > > attribute from "hide dot files = yes". But if this was the case, why
> did
> > > the Windows Explorer show these files then as hidden?
> >
> > The stored DOS attributes may or may not have stored
> > the H attribute. The problem was that the file name
> > was being ignored when deciding whether to return H
> > or not - making the parameter non-functional in that
> > case.
> >
>
> OK, so it seems that samba additionally sets the H attribute in the stored
> DOS attributes when creating a dot file and having set "hide dot files =
> yes". So, from a users point of view, the parameter "hide dot files" was
> functional prior to bug 11645, too: Create a file beginning with a dot on
> the Samba share -> Windows will report that the H attribute is set (using
> attrib)
> Btw, the original problem after bug 11645 can be easily reproduced using
> Notepad++: Create a file beginning with a dot on the Samba share ("hide dot
> files = yes" and "store dos attributes = yes"), edit it with Notepad++ and
> you will not be able to save it (Notepad++ will report that it is
> protected).
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>