[Samba] Permission Issue

[Benedikt Kaleß]

Hi,

in the glusterfs log I can find thatmany of these entries:

[2019-08-28 12:01:27.429078] W [fuse-bridge.c:4169:fuse_xattr_cbk]
0-glusterfs-fuse: 1009932: GETXATTR(user.DOSATTRIB) /zfd => -1
(permission denied)

Might that be a path to investigate further?

The Gluster-Volume for the data is mounted like this:

glusterX:/gv-ho on /data/ho type fuse.glusterfs
(rw,relatime,user_id=0,group_id=0,allow_other,max_read=131072,_netdev)

Best

Bene



Best

Bene

Am 28.08.19 um 11:22 schrieb Benedikt Kaleß via samba:
> Hi again,
>
> regarding my post "plenty of vacuuuming process" a "gluster volume heal"
> seems to improve the situation.
>
> But I still have a strange problem:
>
> Sometimes a user don't have permissions to  a restricted folder when h
> connects to a share or logs in at a windows client. In some times all
> permissions are granted. If the user creates a file, the user and group
> is correctly set.
>
> Im running Samba version 4.9.12-SerNet-Debian-15.stretch on all 3 nodes.
>
> I tried to enlarge the id range with no effects.
>
> This is the output off net conf list:
>
> [global]
>     winbind refresh tickets = Yes
>     winbind use default domain = yes
>     template shell = /bin/bash
>     idmap config * : range = 1000000 - 1999999
>     idmap config DOMAINNAME : backend = rid
>     idmap config DOMAINNAME : range = 1000 - 999999
>     hide dot files = yes
>     server string = Daten server %h (Samba %v)
>     vfs objects = acl_xattr
>     map acl inherit = yes
>     workgroup = DOMAINNAME
>     netbios name = cluster-ho
>     clustering = yes
>     security = ads
>     realm = zfd.forumzfd.de
>     smbd:search ask sharemode = no
>
> [home]
>     path = /data/ho/
>     comment = Home Directories
>     read only = no
>     browseable = yes
>
> [Ablage]
>     comment = DATA_Share
>     path = /data/ho/data
>     read only = no
>
>
> This is is the message in /var/log/samba/log.smbd:
>
>  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_getinfo.c:159
>
> Thank you again for ideas or comments.
>
>
> Best regards
>
> Bene
>
-- 
forumZFD
Entschieden für Frieden|Committed to Peace

Benedikt Kaleß
Leiter Team IT|Head team IT

Forum Ziviler Friedensdienst e.V.|Forum Civil Peace Service
Am Kölner Brett 8 | 50825 Köln | Germany  

Tel 0221 91273233 | Fax 0221 91273299 | 
http://www.forumZFD.de 

Vorstand nach § 26 BGB, einzelvertretungsberechtigt|Executive Board:
Oliver Knabe (Vorsitz|Chair), Sonja Wiekenberg-Mlalandle, Alexander Mauz  
VR 17651 Amtsgericht Köln

Spenden|Donations: IBAN DE37 3702 0500 0008 2401 01 BIC BFSWDE33XXX