[Samba] Permission denied when chainbuilding packages with mock

Tue Sep 28 09:28:55 UTC 2021

W dniu 28.09.2021 o 11:08, Rowland Penny via samba pisze:
> On Tue, 2021-09-28 at 10:53 +0200, Julian Sikorski via samba wrote:
>> Hi list,
>>
>> since a few weeks I am no longer able to chainbuild packages with
>> mock
>> when localrepo is pointed to a samba share.
> 
> Has anything changed, any updares etc ?

On the client samba packages were updated from 4.14.6 to 4.14.7 on 1st 
September, but looking at my history it appears that the chainbuilds 
were working at least shortly after 16th September. I do not have the 
history for the server because /var/log is stored in a ramdisk by armbian.
If I am not mistaken, I have deleted the repodata folder on the samba 
share before the issue started happening and since then the chainbuilds 
stopped working. I am not 100% sure though.

> 
>>   The client error is:
>>
>> Error calculating checksum
>> /mnt/openmediavault/kernel/results/fedora-34-x86_64/pesign-113-
>> 16.fc35/pesign-113-16.fc34.x86_64.rpm:
>> (39, fsync failed: Permission denied)
>>
>> I was able to get the server to generate a log, there are
>> NT_STATUS_NO_EAS_ON_FILE and NT_STATUS_ACCESS_DENIED errors present.
>> My
>> client is a Fedora 34 x86_64 machine, the server is
>> armbian/openmediavault. Does anybody have any ideas what is going on,
>> or
>> how can I check which request is getting access denied exactly?
>>
> 
> Can you post the two smb.conf files and the Samba versions.
Sure. Versions are as follows:

Client: samba-client-4.14.7-0.fc34.x86_64
Server: samba-common/oldstable,oldstable,now 2:4.9.5+dfsg-5+deb10u1

smb.conf files are attached. The share is mounted on the client with the 
following /etc/fstab entry:
//odroidxu4.local/julian /mnt/openmediavault    cifs 
credentials=/home/julas/.credentials,uid=julas,gid=julas,vers=3.1.1,nobrl,_netdev,auto 
0 0

> 
> Rowland
> 
> 
> 
-------------- next part --------------
# See smb.conf.example for a more detailed config file or
# read the smb.conf manpage.
# Run 'testparm' to verify the config is correct after
# you modified it.
#
# Note:
# SMB1 is disabled by default. This means clients without support for SMB2 or
# SMB3 are no longer able to connect to smbd (by default).

[global]
	workgroup = SAMBA
	security = user

	passdb backend = tdbsam

	printing = cups
	printcap name = cups
	load printers = yes
	cups options = raw

[homes]
	comment = Home Directories
	valid users = %S, %D%w%S
	browseable = No
	read only = No
	inherit acls = Yes

[printers]
	comment = All Printers
	path = /var/tmp
	printable = Yes
	create mask = 0600
	browseable = No

[print$]
	comment = Printer Drivers
	path = /var/lib/samba/drivers
	write list = @printadmin root
	force group = @printadmin
	create mask = 0664
	directory mask = 0775
-------------- next part --------------
# This file is auto-generated by openmediavault (https://www.openmediavault.org)
# WARNING: Do not edit this file, your changes will get lost.
#======================= Global Settings =======================
[global]
workgroup = WORKGROUP
server string = %h server
dns proxy = no
log level = 0
log file = /var/log/samba/log.%m
max log size = 1000
logging = syslog
panic action = /usr/share/samba/panic-action %d
encrypt passwords = true
passdb backend = tdbsam
obey pam restrictions = no
unix password sync = no
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
pam password change = yes
socket options = TCP_NODELAY IPTOS_LOWDELAY
guest account = nobody
load printers = no
disable spoolss = yes
printing = bsd
printcap name = /dev/null
unix extensions = yes
wide links = no
create mask = 0777
directory mask = 0777
use sendfile = yes
aio read size = 16384
aio write size = 16384
time server = no
wins support = no
multicast dns register = no
# Special configuration for Apple's Time Machine
fruit:aapl = yes
# Extra options
min receivefile size = 16384
write cache size = 524288
getwd cache = yes
socket options = TCP_NODELAY IPTOS_LOWDELAY
#======================= Share Definitions =======================
[julian]
path = /srv/dev-disk-by-label-omv/julian/
guest ok = no
guest only = no
read only = no
browseable = yes
inherit acls = yes
inherit permissions = no
ea support = no
store dos attributes = no
vfs objects = 
printable = no
create mask = 0664
force create mode = 0664
directory mask = 0775
force directory mode = 0775
hide special files = yes
follow symlinks = yes
hide dot files = yes
valid users = "julas"
invalid users = 
read list = 
write list = "julas"

[yasy]
path = /srv/dev-disk-by-label-omv/yasy/
guest ok = no
guest only = no
read only = no
browseable = yes
inherit acls = yes
inherit permissions = no
ea support = no
store dos attributes = no
vfs objects = 
printable = no
create mask = 0664
force create mode = 0664
directory mask = 0775
force directory mode = 0775
hide special files = yes
follow symlinks = yes
hide dot files = yes
valid users = "yasy"
invalid users = 
read list = 
write list = "yasy"

[austausch]
path = /srv/dev-disk-by-label-omv/austausch/
guest ok = no
guest only = no
read only = no
browseable = yes
inherit acls = yes
inherit permissions = no
ea support = no
store dos attributes = no
vfs objects = 
printable = no
create mask = 0664
force create mode = 0664
directory mask = 0775
force directory mode = 0775
hide special files = yes
follow symlinks = yes
hide dot files = yes
valid users = "julas","yasy"
invalid users = 
read list = 
write list = "julas","yasy"

[Bilder2019]
path = /srv/dev-disk-by-label-omv/julian/Pictures/2019/
guest ok = no
guest only = no
read only = no
browseable = yes
inherit acls = yes
inherit permissions = no
ea support = no
store dos attributes = no
vfs objects = 
printable = no
create mask = 0664
force create mode = 0664
directory mask = 0775
force directory mode = 0775
hide special files = yes
follow symlinks = yes
hide dot files = yes
valid users = "julas","yasy"
invalid users = 
read list = 
write list = "julas","yasy"