[Samba] Mapping subfolder of a samba share in Windows fails with access denied

[Rowland Penny]

On Tue, 22 Aug 2017 10:59:53 +0200
Nicolas Zuber via samba <samba at lists.samba.org> wrote:

> Hi,
> 
> I am trying to map a network drive on a Windows 7 client. It is
> possible to map the shared folder, but as soon as I try to map a
> subfolder, Windows shows an access denied message and prompts for
> another username and password. The user has full control over the
> subfolder (configured via the Windows security tab). The samba.log
> shows:
> 
> Aug 22 10:25:19 FILESERVER smbd[5409]:  Could not close dir!
> fname=Software, fd=-1, err=1=Operation not permitted
> 
> if the user tries to map the subfolder "Software" of the share
> "\\file\data". Similar log messages can be seen in the logs of our
> fileserver (Centos 7, Samba 4.6.6) if the user logs in/out on the
> windows machine (roaming profiles and mapped Documents folder). This
> happens in principle for all shares on our server (also the user and
> profiles shares which where set up as described in the samba wiki) and
> all users including the administrator account.
> 
> The configuration of the samba active directory domain controller with
> two example shares (Centos 7, Samba 4.6.6):
> 

I take that the workgroup name should be 'PI5' instead of 'TEST'
Also you have 'vfs objects = acl_xattr' in [global], so you don't need
it in the shares. Both shares seem to be the same path, so why two
shares ?

As you seem to be using Posix ACLs on the shares, have you read this
wiki page:

https://wiki.samba.org/index.php/Setting_up_a_Share_Using_POSIX_ACLs

Rowland