[Samba] Permission Issue

[Rowland penny]

On 29/08/2019 11:17, Benedikt Kaleß via samba wrote:
> Hi,
>
> I don't have the user root.
>
> No changes :( Sometimes a user gets permissions, sometimes not.
>
> This net conf is now running:
>
> [global]
>      winbind refresh tickets = Yes
>      winbind use default domain = yes
>      template shell = /bin/bash
>      idmap config * : range = 1000000 - 1999999
>      idmap config EXAMPLE : backend = rid
>      idmap config EXAMPLE : range = 500 - 200000
>      hide dot files = yes
>      server string = FileServer %h (Samba %v)
>      map acl inherit = yes
>      inherit permissions = yes
>      workgroup = ZFD
>      netbios name = CLUSTER-HO
>      clustering = yes
>      security = ads
>      realm = EXAMPLE.com
>      store dos attributes = Yes
>      log level = 3
>      vfs objects = acl_xattr
>
> [home]
>      comment = Home Directories
>      read only = no
>      browseable = yes
>      vfs objects = acl_xattr glusterfs
>      glusterfs:volume = gv-ho
>      glusterfs:logfile = /var/log/samba/glusterfs-gv-ho.log
>      glusterfs:loglevel = 3
>      glusterfs:volfile_server = gluster1 gluster3
>      kernel share modes = no
>      path = /
>
> [Fileshare]
>      comment = Fileshare
>      read only = no
>      vfs objects = acl_xattr glusterfs
>      glusterfs:volume = gv-ho
>      glusterfs:logfile = /var/log/samba/glusterfs-gv-ho.log
>      glusterfs:loglevel = 10
>      glusterfs:volfile_server = gluster1 gluster3
>      kernel share modes = no
>      path = /data/Files
>
> Does this error in log.smbd give a hint?
>
> [2019/08/29 12:14:24.765433,  2] ../source3/smbd/open.c:4045(open_directory)
>    open_directory: unable to create
> testuser/AppData/Roaming/Microsoft/Windows/Recent/AutomaticDestinations.
> Error was NT_STATUS_OBJECT_NAME_COLLISION
> [2019/08/29 12:14:24.765472,  3]
> ../source3/smbd/smb2_server.c:3214(smbd_smb2_request_error_ex)
>    smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> status[NT_STATUS_OBJECT_NAME_COLLISION] || at
> ../source3/smbd/smb2_create.c:296
> [2019/08/29 12:14:24.767517,  2] ../source3/smbd/dosmode.c:136(unix_mode)
>   
> unix_mode(testuser/AppData/Roaming/Microsoft/Windows/Recent/AutomaticDestinations/f18460fded109990.automaticDestinations-ms)
> inheriting from
> testuser/AppData/Roaming/Microsoft/Windows/Recent/AutomaticDestinations
> [2019/08/29 12:14:24.767603,  2] ../source3/smbd/dosmode.c:161(unix_mode)
>   
> unix_mode(testuser/AppData/Roaming/Microsoft/Windows/Recent/AutomaticDestinations/f18460fded109990.automaticDestinations-ms)
> inherit mode 40770
> [2019/08/29 12:14:24.767690,  3]
> ../source3/smbd/smb2_server.c:3214(smbd_smb2_request_error_ex)
>    smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
> status[NT_STATUS_OBJECT_NAME_NOT_FOUND] || at
> ../source3/smbd/smb2_create.c:296
> [2019/08/29 12:14:35.232651,  2]
> ../source3/smbd/close.c:802(close_normal_file)
>    ZFD\testuser closed file
> testuser/AppData/Roaming/Microsoft/Windows/Recent/CustomDestinations/f18460fded109990.customDestinations-ms
> (numopen=26) NT_STATUS_OK
>
> Best regards
>
> Bene
>
>
>
Are you using the same Samba version & smb.conf on all ctdb cluster members.

If you run 'getent passwd testuser' on each cluster member, do you get 
identical results ?

Have you read this: 
https://wiki.samba.org/index.php/CTDB_and_Clustered_Samba

Rowland