[Samba] Log entries meaning what?

[Anders Östling]

I have asked this question before, a couple of months ago, and the only reply I got was to to update from an earlier (4.12.x) to a newer Samba version. I did that, at the time to 4.13.something, but the entries keep coming in the log.
Now I am at 4.14.5 and nothing has changed. I tried to bump up logging to level in hope of identifying the problem. But that did not give any more information.

[2021/06/11 10:23:33.255584,  1] ../../source3/smbd/vfs.c:1037(vfs_GetWd)  vfs_GetWd: couldn't stat "." error Permission denied (NFS problem ?)
[2021/06/11 10:23:34.930718,  0] ../../source3/smbd/service.c:167(chdir_current_service)
  chdir_current_service: vfs_ChDir(/share2/Program) failed: Permission denied. Current token: uid=31653, gid=30515, 5 groups: 31653 30515 10003 10004 10006
[2021/06/11 10:31:49.582967,  1] ../../source3/smbd/vfs.c:1037(vfs_GetWd)  vfs_GetWd: couldn't stat "." error Permission denied (NFS problem ?)
[2021/06/11 10:31:49.582967, 1] ../../source3/smbd/vfs.c:1037(vfs_GetWd) vfs_GetWd: couldn't stat "." error Permission denied (NFS problem ?)
[2021/06/11 10:31:49.593047, 1] ../../source3/smbd/vfs.c:1037(vfs_GetWd  vfs_GetWd: couldn't stat "." error Permission denied (NFS problem ?)
[2021/06/11 10:31:49.594157, 1] ../../source3/smbd/vfs.c:1037(vfs_GetWd) vfs_GetWd: couldn't stat "." error Permission denied (NFS problem ?)
(100’s more as I watch)

So, the users are not having any (known) problems, so this might not be a problem at all, but still - clean logs are of course to prefer.

The file share that is almost exclusively used by the client is this one.

[Dokument]
	comment = "Dokument"
	guest ok = No
	path = /share2/Dokument
	read only = No
	acl_xattr:ignore system acl = yes

The root of the share is set to
Domain users, read and execute this folder only
Domain admins, full access this folder, subfolders and files

Subfolders in Document shows this

root at hp-srv03:/var/log/samba# smbcacls //hp-srv03/Dokument -U administrator Ekonomi
Enter HPLTS\administrator's password:
REVISION:1
CONTROL:SR|PD|SI|DI|DP
OWNER:HPLTS\Administrator
GROUP:HPLTS\Domain Users
ACL:HPLTS\Ekonomi Full:ALLOWED/OI|CI/FULL
ACL:HPLTS\Ekonomi Läs:ALLOWED/OI|CI/READ
ACL:HPLTS\Domain Admins:ALLOWED/OI|CI/FULL
ACL:Creator Owner:ALLOWED/OI|CI|IO/FULL

root at hp-srv03:/var/log/samba# smbcacls //hp-srv03/Dokument -U administrator Produkter
Enter HPLTS\administrator's password:
REVISION:1
CONTROL:SR|PD|SI|DI|DP
OWNER:HPLTS\Administrator
GROUP:HPLTS\Domain Users
ACL:HPLTS\Produkter Full:ALLOWED/OI|CI/FULL
ACL:HPLTS\Produkter Läs:ALLOWED/OI|CI/READ
ACL:Creator Owner:ALLOWED/OI|CI|IO/FULL
ACL:HPLTS\Domain Admins:ALLOWED/OI|CI/FULL

There are 10 more folders under Dokument, all with the same pattern (two specific groups with RO vs RW rights)

I can’t say for sure that the Dokument share is the source of the “problem”, but most likely due to the frequency of errors in the log file. Again, no user has indicated that they are denied access during the last week.

/Anders

Anders Östling

Dämmegatan 11
SE-25442 Helsingborg
Sweden
Phone: +46 768 716 165
Skype: anders.ostling at outlook.com