several wired errors with samba4

[Andrew Bartlett]

On Thu, 2009-02-12 at 15:21 +0300, Matthieu Patou wrote:
> Dear all,
> 
> While trying to search a problem I had a look at my samba4 log today, 
> and I saw this errors:
> 
> * /usr/local/samba/private/smbd.tmp/messaging/names.tdb
> * keytab /usr/local/samba/private/secrets.keytab open failed: Permission 
> denied
> * 
> '/usr/local/samba/private/smbd.tmp/messaging/msg.0.0.146':NT_STATUS_ACCESS_DENIED
> 
> It seems to me that the samba process is started with root so unless it 
> tries to lower its rights I do not see a reason for this because all 
> files and folders (even parent folders) are owned by root with a least 
> rw rights.
> 
> Any idea of what could cause this problem ?

Are you sure it started as root?  

Is SeLinux or some other tool denying access?

Samba does change user to perform filesystem access (in the SMB server),
but should change back as soon as it needs to access anything else. 

In short, I'm a bit stumped - the best route forward would be to print
the real and effective UID in the debug messages. 

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20090213/3ee1d545/attachment.bin