[Samba] Users, home directories and profiles

[Rowland penny]

On 01/07/2020 09:03, Enrico Morelli wrote:
> On Wed, 1 Jul 2020 08:43:37 +0100
> Rowland penny via samba <samba at lists.samba.org> wrote:
>
>> On 01/07/2020 08:36, Enrico Morelli via samba wrote:
>>> On Tue, 30 Jun 2020 10:28:41 -0700
>>> Jeremy Allison via samba <samba at lists.samba.org> wrote:
>>>   
>>>> On Tue, Jun 30, 2020 at 02:41:46PM +0200, Enrico Morelli via samba
>>>> wrote:
>>>>> On Tue, 30 Jun 2020 11:01:27 +0100
>>>>> Rowland penny via samba <samba at lists.samba.org> wrote:
>>>>>       
>>>>>> On 30/06/2020 10:40, Enrico Morelli via samba wrote:
>>>>>>> At the end I'll to abandon samba :-((
>>>>>>> I'm really sad
>>>>>> One last thought, have you touched the 'share' tab ?
>>>>>>
>>>>>> For instance, have you removed 'Everyone' from it ?
>>>>>>
>>>>>> If so, put it back.
>>>>>>
>>>>>> Rowland
>>>>>>
>>>>>>
>>>>>>       
>>>>> Everyone is present. Clicking on the security tab, the window
>>>>> crash.
>>>> The window crashing is a Windows bug. Whatever we send it
>>>> shouldn't do that. Do you have a wireshark trace of the
>>>> SMB2 reply that crashes the tab ?
>>>>   
>>> A friend saw me that is a "bug" of the debian package. He sent me a
>>> package with a patch that should solve the problem.
>>>   
>> If it is a Samba bug, why is it that you seem to be amongst the
>> select few that it affects ?
>>
>> I am not saying it isn't a possible bug, but I cannot recreate it,
>> perhaps if you share the patch, we can see what the 'problem'
>> actually is.
>>
>> Rowland
>>
>>
>>
> I don't know if it's a samba bug or something related to the debian
> repackage, but with the patch I'm able to open security tab
> without crash.
>
> This what my friend mailed me:
>
> The problem is that the owner (or group) is not root and then the
> explorer is crashing when you try to look at the security tab I found a
> patch from Julia Bremer
> https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwiTx5Hv3anqAhVTT8AKHZgfCl8QFjAAegQIARAB&url=https%3A%2F%2Fbugzilla.samba.org%2Fattachment.cgi%3Fid%3D15746&usg=AOvVaw1jdLcM0ngv0tgjAyuuH35N
>
OK, from that, I have traced it to Samba bug 14213, but what I do not 
understand is, if I connect from explorer -> Network -> computer -> 
share and right click on the share and select 'Properties' it does not 
crash for me. The permissions on the share are:

pi at raspberrypi:~ $ ls -lad /home/test/
drwxrwxr-x+ 3 root domain users 4096 May 26 10:01 /home/test/

pi at raspberrypi:~ $ getfacl /home/test/
getfacl: Removing leading '/' from absolute path names
# file: home/test/
# owner: root
# group: domain\040users
user::rwx
user:root:rwx
group::r-x
group:domain\040users:r-x
group:unix\040admins:r-x
mask::rwx
other::r-x
default:user::rwx
default:user:root:rwx
default:group::rwx
default:group:domain\040users:rwx
default:group:unix\040admins:r-x
default:mask::rwx
default:other::---

pi at raspberrypi:~ $ sudo samba-tool ntacl get /home/test --as-sddl

..................

O:S-1-22-1-0G:DUD:PAI(A;;0x001200a9;;;WD)(A;;0x001f01ff;;;S-1-22-1-0)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001f01ff;;;CG)(A;;0x001200a9;;;DU)(A;OICI;0x001200a9;;;S-1-5-21-1768301897-3342589593-1064908849-2122)

So, whilst Samba shouldn't cause anything on Windows to crash, if you 
follow the wiki it doesn't crash (not for me anyway) . Who owns your 
share that you are trying to connect to ?

Rowland