[Samba] Samba 4.12 network share issue

[Rowland penny]

On 23/04/2020 08:31, David Faller via samba wrote:
> Dear all,
>
> I would need some help if we’re running in issues ‘cause a wrong configuration of our shares, or it’s a bug in samba 4.12
> On samba 4.11 we have no issues with our network shares when Windows Clients connect them.
>
> After upgrade to 4.12 we run in to the issue that network shares which are mounted as drives per gpo not working well,
> We get on windows when we try to open the network drive the message : “Could not open drive, wrong handle” or the message “Another process is in use” and we can’t open the network share drive.
>
> Also I noticed that smbstatus tell’s me some deny_all and deny_write on some users like the Domain Admin:
>
> Pid          User(ID)   DenyMode   Access      R/W        Oplock           SharePath   Name   Time
> --------------------------------------------------------------------------------------------------
> 21715        0          DENY_ALL   0x100080    RDONLY     NONE             /mnt/data/shares/Verwaltung   .   Thu Apr 23 09:23:14 2020
> 21715        3000036    DENY_NONE  0x80        RDONLY     NONE             /mnt/data/shares/Verwaltung   .   Thu Apr 23 08:19:58 2020
> 17843        0          DENY_NONE  0x100080    RDONLY     NONE             /mnt/data/shares/Verwaltung   .   Wed Apr 22 12:04:08 2020
> 21715        0          DENY_ALL   0x100080    RDONLY     NONE             /mnt/data-old/oldshare   .   Thu Apr 23 09:23:14 2020
> 21715        3000036    DENY_NONE  0x80        RDONLY     NONE             /mnt/data-old/oldshare   .   Thu Apr 23 08:19:59 2020
> 21707        3000046    DENY_NONE  0x80        RDONLY     NONE             /mnt/data-old/oldshare   .   Thu Apr 23 08:18:38 2020
> 21511        3000047    DENY_NONE  0x80        RDONLY     NONE             /mnt/data-old/oldshare   .   Thu Apr 23 07:08:11 2020
> 20398        3000047    DENY_NONE  0x80        RDONLY     NONE             /mnt/data-old/oldshare   .   Thu Apr 23 01:16:57 2020
> 17843        0          DENY_NONE  0x100080    RDONLY     NONE             /mnt/data-old/oldshare   .   Wed Apr 22 12:04:08 2020
> 21715        0          DENY_ALL   0x100080    RDONLY     NONE             /mnt/data/shares/Management   .   Thu Apr 23 09:23:14 2020
> 21715        3000036    DENY_NONE  0x80        RDONLY     NONE             /mnt/data/shares/Management   .   Thu Apr 23 08:19:58 2020
> 17843        0          DENY_NONE  0x100080    RDONLY     NONE             /mnt/data/shares/Management   .   Wed Apr 22 12:04:08 2020
> 21715        0          DENY_ALL   0x100080    RDONLY     NONE             /mnt/data/shares/shares   .   Thu Apr 23 09:23:14 2020
> 21715        3000036    DENY_NONE  0x80        RDONLY     NONE             /mnt/data/shares/shares   .   Thu Apr 23 08:19:59 2020
> 21707        3000046    DENY_NONE  0x80        RDONLY     NONE             /mnt/data/shares/shares   .   Thu Apr 23 08:18:38 2020
> 21511        3000047    DENY_NONE  0x80        RDONLY     NONE             /mnt/data/shares/shares   .   Thu Apr 23 07:08:11 2020
> 20398        3000047    DENY_NONE  0x80        RDONLY     NONE             /mnt/data/shares/shares   .   Thu Apr 23 01:16:58 2020
> 17843        0          DENY_NONE  0x100080    RDONLY     NONE             /mnt/data/shares/shares   .   Wed Apr 22 12:04:08 2020
> 21715        0          DENY_NONE  0x80        RDONLY     NONE             /mnt/data/shares/wsusoffline   .   Thu Apr 23 09:23:11 2020
> 21715        3000036    DENY_NONE  0x80        RDONLY     NONE             /mnt/data/shares/wsusoffline   .   Thu Apr 23 08:19:59 2020
> 21707        3000046    DENY_NONE  0x80        RDONLY     NONE             /mnt/data/shares/wsusoffline   .   Thu Apr 23 08:18:38 2020
> 21511        3000047    DENY_NONE  0x80        RDONLY     NONE             /mnt/data/shares/wsusoffline   .   Thu Apr 23 07:08:11 2020
> 20398        3000047    DENY_NONE  0x80        RDONLY     NONE             /mnt/data/shares/wsusoffline   .   Thu Apr 23 01:16:57 2020
> 17843        0          DENY_NONE  0x100080    RDONLY     NONE             /mnt/data/shares/wsusoffline   .   Wed Apr 22 12:04:08 2020
>
>
>
> Share Permissions are set to Everyone can read write and change, under the security tab we have the domain users and domain admins as groups for example.
>
> My question would be here how I can debug this issue, we needed to downgrade samba to 4.11 ‘cause our employees can’t work with broken shares. Sometimes they can open the share sometimes not. It looks like a delay.
>
> Best Regards and I hope for help here,
> David Faller

About all I can tell from that is that you are using the DC as a 
fileserver, can you please give us a bit more info:

What OS ?

What is in your smb.conf ?

Also change the 'share' tab back to 'Everyone' 'allow' 'Full Control, 
Change, Read'

Rowland