[Samba] Getting 'Access Denied' under Offline mode (Offline Files)

[Rowland Penny]

On Tue, 10 Sep 2024 15:32:46 +1200
June Chong | TechnologyWise via samba <samba at lists.samba.org> wrote:

> Hi team,
> 
> Hoping someone from the community would be able to help.
> 
> Samba version *: 4.19.5*
> 
> OS *: Ubuntu 24.04*
> 
> We have a perculiar situation where users are getting /Access Denied/
> on their roaming user profiles. These profiles are redirected using
> Windows GPOs with Offline Files enabled. We could replicate these on
> several instances that we manage.
> 
> On version 4.15.13, when 'Offline Files' are in /offline mode /users
> can still work on their files under their profile and once /online/,
> the files will be synced back with the new changes.
> 
> Now on Samba 4.19.5, users are getting these errors /Access Denied/ / 
> /You will need permission to make changes onto the folder /under 
> /offline mode/. However, if it is a file within the top level folder, 
> they are ok to make changes to.
> 
> E.g.  \\server\profiles\user\Desktop\Folder 1    (Changes can't be
> made. Access Denied.)
> 
>          \\server\profiles\user\Desktop\File 1    (Changes can't be 
> made. Access Denied.)
> 
>          \\server\profiles\user\Desktop\Folder 1\File 1 (Changes can
> be made. No issues. Same thing goes for another folder instead of
> file.)
> 
> Once the Sync Centre is shown to be back in /Online mode/ everything 
> works fine.
> 
> Nothing in the Windows Event Logs could specify. SMB connections are 
> using version SMB3 as it should be on both versions (seen via 
> smbstatus). The release notes did not mention anything that might
> effect this.
> 
> Would someone be able to point us in the right direction?
> 
> Kind regards,
> 

I think we need to see your smb.conf (to see just how you are sharing
the profiles), please post the output of 'testparm -s'

Rowland