[Samba] vfs_shadow_copy2 cannot read/find snapshots

[Anoop C S]

On Thu, 2023-05-25 at 16:45 +0200, Sebastian Neustein wrote:
> > Does it make a difference if you re-mount the volume without 'acl'
> > option? Even otherwise can you try listing the snapshot contents
> > from the server as a user(and not super user) who in reality tries
> > to list previous versions from Windows? I feel like it has
> > something to do with permissions setup for the user accessing the
> > share.
> 
> It does make a difference! First only when accessing the directory on
> the server itself as a non priviledged AD user. Without acl I can
> enter the .snaps dir, with acl I can not.
> 
> Using Windows I wasn't able to access the privious version, but 
> remembering Alexanders comment I could fix that aswell!

Hm.. that would require your snapshots to always start with "snap" and
not "snap1" or "snap101" etc. But I do think 'snapprefix' option to
vfs_shadow_copy2 module is working as expected(at least for me).

> Now I have to test if the missing acl options has any influence on
> the windows acls.

Since you have also stacked 'acl_xattr' vfs module, windows ACLs should
not get affected as they are stored as "security.NTACL" extended
attribute. If all users are expected to access the share via Samba you
can even think of setting "acl_xattr:ignore system acls = yes" option
for respective shares. More details on vfs_acl_xattr, see man page
https://www.samba.org/samba/docs/current/man-html/vfs_acl_xattr.8.html


Regards,
Anoop C S.