[Samba] Users, home directories and profiles

[Enrico Morelli]

On Wed, 1 Jul 2020 10:04:07 +0100
Rowland penny via samba <samba at lists.samba.org> wrote:

> On 01/07/2020 09:03, Enrico Morelli wrote:
> > On Wed, 1 Jul 2020 08:43:37 +0100
> > Rowland penny via samba <samba at lists.samba.org> wrote:
> >  
> >> On 01/07/2020 08:36, Enrico Morelli via samba wrote:  
> >>> On Tue, 30 Jun 2020 10:28:41 -0700
> >>> Jeremy Allison via samba <samba at lists.samba.org> wrote:
> >>>     
> >>>> On Tue, Jun 30, 2020 at 02:41:46PM +0200, Enrico Morelli via
> >>>> samba wrote:  
> >>>>> On Tue, 30 Jun 2020 11:01:27 +0100
> >>>>> Rowland penny via samba <samba at lists.samba.org> wrote:
> >>>>>         
> >>>>>> On 30/06/2020 10:40, Enrico Morelli via samba wrote:  
> >>>>>>> At the end I'll to abandon samba :-((
> >>>>>>> I'm really sad  
> >>>>>> One last thought, have you touched the 'share' tab ?
> >>>>>>
> >>>>>> For instance, have you removed 'Everyone' from it ?
> >>>>>>
> >>>>>> If so, put it back.
> >>>>>>
> >>>>>> Rowland
> >>>>>>
> >>>>>>
> >>>>>>         
> >>>>> Everyone is present. Clicking on the security tab, the window
> >>>>> crash.  
> >>>> The window crashing is a Windows bug. Whatever we send it
> >>>> shouldn't do that. Do you have a wireshark trace of the
> >>>> SMB2 reply that crashes the tab ?
> >>>>     
> >>> A friend saw me that is a "bug" of the debian package. He sent me
> >>> a package with a patch that should solve the problem.
> >>>     
> >> If it is a Samba bug, why is it that you seem to be amongst the
> >> select few that it affects ?
> >>
> >> I am not saying it isn't a possible bug, but I cannot recreate it,
> >> perhaps if you share the patch, we can see what the 'problem'
> >> actually is.
> >>
> >> Rowland
> >>
> >>
> >>  
> > I don't know if it's a samba bug or something related to the debian
> > repackage, but with the patch I'm able to open security tab
> > without crash.
> >
> > This what my friend mailed me:
> >
> > The problem is that the owner (or group) is not root and then the
> > explorer is crashing when you try to look at the security tab I
> > found a patch from Julia Bremer
> > https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&cad=rja&uact=8&ved=2ahUKEwiTx5Hv3anqAhVTT8AKHZgfCl8QFjAAegQIARAB&url=https%3A%2F%2Fbugzilla.samba.org%2Fattachment.cgi%3Fid%3D15746&usg=AOvVaw1jdLcM0ngv0tgjAyuuH35N
> >  
> OK, from that, I have traced it to Samba bug 14213, but what I do not 
> understand is, if I connect from explorer -> Network -> computer -> 
> share and right click on the share and select 'Properties' it does
> not crash for me. The permissions on the share are:
> 
> pi at raspberrypi:~ $ ls -lad /home/test/
> drwxrwxr-x+ 3 root domain users 4096 May 26 10:01 /home/test/
> 
> pi at raspberrypi:~ $ getfacl /home/test/
> getfacl: Removing leading '/' from absolute path names
> # file: home/test/
> # owner: root
> # group: domain\040users
> user::rwx
> user:root:rwx
> group::r-x
> group:domain\040users:r-x
> group:unix\040admins:r-x
> mask::rwx
> other::r-x
> default:user::rwx
> default:user:root:rwx
> default:group::rwx
> default:group:domain\040users:rwx
> default:group:unix\040admins:r-x
> default:mask::rwx
> default:other::---
> 
> pi at raspberrypi:~ $ sudo samba-tool ntacl get /home/test --as-sddl
> 
> ..................
> 
> O:S-1-22-1-0G:DUD:PAI(A;;0x001200a9;;;WD)(A;;0x001f01ff;;;S-1-22-1-0)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001f01ff;;;CG)(A;;0x001200a9;;;DU)(A;OICI;0x001200a9;;;S-1-5-21-1768301897-3342589593-1064908849-2122)
> 
> So, whilst Samba shouldn't cause anything on Windows to crash, if you 
> follow the wiki it doesn't crash (not for me anyway) . Who owns your 
> share that you are trying to connect to ?
> 
> Rowland
> 
> 
> 
root at localhost:~# getfacl /home/samba/users/
getfacl: Removing leading '/' from absolute path names
# file: home/samba/users/
# owner: root
# group: root
user::rwx
group::rwx
other::rwx

root at localhost:~# samba-tool ntacl get /home/samba/users --as-sddl
O:LAG:S-1-22-2-0D:(A;;0x001f01ff;;;LA)(A;;0x001f01ff;;;S-1-22-2-0)(A;;0x001f01ff;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD)





-- 
-----------------------------------------------------------
  Enrico Morelli
  System Administrator | Programmer | Web Developer

  CERM - Polo Scientifico
  via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY
------------------------------------------------------------