[Samba] Office files open blocked for editing

[Dante F. B. Colò]

Hello , 

I have a issue with office files 2 Samba servers version 4.3.11 compiled from source ( the same problem with sernet samba 4.2 binaries) running as active directory controller but also used as a file server, files frequently open as read-only even if there are opened sessions of them on Samba, at least doesn't appear on smbstatus output , it happens on all Windows machines with any user including administrator, every share have vfs_acl_xattr enabled. I have tried things like disabling file locking on shares but it had no effect . Here is the smb.conf of one of the servers . Any ideas ? 

Best Regards 

[global] 
workgroup = AM 
realm = AM.LOCAL 
server string = AM-PDC 
server role = active directory domain controller 
passdb backend = samba_dsdb 
log file = /var/log/samba43/log.%I 
max log size = 4096 
debug prefix timestamp = Yes 
debug class = Yes 
time server = Yes 
load printers = No 
printcap name = /dev/null 
disable spoolss = Yes 
os level = 255 
dns forwarder = 172.16.1.1 
rpc_server:tcpip = no 
rpc_daemon:spoolssd = embedded 
rpc_server:spoolss = embedded 
rpc_server:winreg = embedded 
rpc_server:ntsvcs = embedded 
rpc_server:eventlog = embedded 
rpc_server:srvsvc = embedded 
rpc_server:svcctl = embedded 
rpc_server:default = external 
winbindd:use external pipes = true 
idmap config * : backend = tdb 
printing = bsd 
map archive = No 
map readonly = no 
store dos attributes = Yes 
oplocks = No 
level2 oplocks = No 
strict locking = No 
vfs objects = dfs_samba4 acl_xattr 


[netlogon] 
path = /var/lib/samba43/sysvol/am.local/scripts 
read only = No 
browseable = No 


[sysvol] 
path = /var/lib/samba43/sysvol 
read only = No 
browseable = No 


[Homedirs] 
path = /data/samba/homedirs 
read only = No 
map acl inherit = Yes 
browseable = No 
vfs objects = acl_xattr 


[Juridico] 
path = /data/samba/juridico 
read only = No 
ea support = Yes 
map acl inherit = Yes 
vfs objects = full_audit acl_xattr 
full_audit:priority = NOTICE 
full_audit:facility = LOCAL0 
full_audit:failure = rmdir rename unlink 
full_audit:success = rmdir rename unlink 
full_audit:prefix = "%I|%u|%P" 


[RH] 
path = /data/samba/rh 
read only = No 
ea support = Yes 
map acl inherit = Yes 
vfs objects = full_audit acl_xattr 
full_audit:priority = NOTICE 
full_audit:facility = LOCAL0 
full_audit:failure = rmdir rename unlink 
full_audit:success = rmdir rename unlink 
full_audit:prefix = "%I|%u|%P" 


[TI] 
path = /data/samba/ti 
read only = No 
ea support = Yes 
map acl inherit = Yes 
vfs objects = full_audit acl_xattr 
full_audit:priority = NOTICE 
full_audit:facility = LOCAL0 
full_audit:failure = rmdir rename unlink 
full_audit:success = rmdir rename unlink 
full_audit:prefix = "%I|%u|%P" 


[Publico] 
path = /data/samba/publico 
read only = No 
ea support = Yes 
map acl inherit = Yes 
vfs objects = full_audit acl_xattr 
full_audit:priority = NOTICE 
full_audit:facility = LOCAL0 
full_audit:failure = rmdir rename unlink 
full_audit:success = rmdir rename unlink 
full_audit:prefix = "%I|%u|%P"