Samba4 : Problem setting folder and file permissions from windows box

classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

Samba4 : Problem setting folder and file permissions from windows box

micmac
Hi, this is my first message here. I need help, the reason is in the title.
The version running is SAMBA_4.0.0ALPHA18_DEVELOPERBUILD

It was running just fine until I had (for some reason) had to transfer all the system (ubuntu 11.10 server)
to another clean hard drive. I used  "rsync -rltgoHDv /olddriveroot /newdriveroot" to copy the files,
and installed grub on the new disk.

Now the problem is that  samba4 works, domain users can log on and access files, but the permissions
have been reset to some basic values (different from all the ones I had set before), and I can not
change them at all from a windows7 box as I could before. When I apply the changes, it takes a while
to process the files, then the "basic" permissions are set again (my changes lost).

Here is my /usr/local/samba/etc/smb.conf :


[global]
        interfaces = 127.0.0.1/8 192.168.1.0/24
        server role = domain controller
        workgroup = ACEIUBUNTU
        realm = ACEI2
        netbios name = ubuntuserveur
        passdb backend = samba4
        security = ADS
        domain master = yes
        local master = yes
        wins support = yes
        browseable = yes
        log file = /var/log/samba/smbd.log
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE SO_RCVBUF=4096 SO_SNDBUF=4096

[netlogon]
        path = /usr/local/samba/var/locks/sysvol/acei2/scripts
        read only = no

[sysvol]
        path = /usr/local/samba/var/locks/sysvol
        read only = no

[profiles]
        path = /usr/local/samba/var/profiles
        read only = no

[homes]
        path = /home/windows
        read only = no

-------------------------------------------------------------------------

The AD database is readable, since I can edit users and computers with the administration toolkit
from windows7 box.

/usr/local/samba/bin/testparm gives the following result :

Load smb config files from /usr/local/samba/etc/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[netlogon]"
Processing section "[sysvol]"
Processing section "[profiles]"
Processing section "[homes]"
Loaded services file OK.
Server role: ROLE_DOMAIN_BDC
Press enter to see a dump of your service definitions

[global]
        workgroup = ACEIUBUNTU
        realm = ACEI2
        interfaces = 127.0.0.1/8, 192.168.1.0/24
        server role = domain controller
        security = ADS
        passdb backend = samba4
        log file = /var/log/samba/smbd.log
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE SO_RCVBUF=4096 SO_SNDBUF=4096
        domain master = Yes
        wins support = Yes
        idmap config * : backend = tdb

[netlogon]
        path = /usr/local/samba/var/locks/sysvol/acei2/scripts
        read only = No

[sysvol]
        path = /usr/local/samba/var/locks/sysvol
        read only = No

[profiles]
        path = /usr/local/samba/var/profiles
        read only = No

[homes]
        path = /home/windows
        read only = No
------------------------------------------------------------------------------------

Also, user_xattr and acl are enabled on the ext4 file system, and the home folder on which I can
not set permission has root:users ownership with rwx rights (which was working before).

Since it is a recopy from a working system, maybe there is a problem with some file permission
on the linux system, but I have searched a lot without finding any solution. Any help would be
greatly appreciated.

Regards,
micmac


Reply | Threaded
Open this post in threaded view
|

Re: Samba4 : Problem setting folder and file permissions from windows box

micmac
I have just tried to set permissions on folders present inside
"profiles" share,
and there it works! I can add users, change permissions and so on.

The ownership of /usr/local/samba/var/profiles is also root:users with
same rights as my /home/windows folder (which is "homes" share).
So I don't get why I can set permissions and edit users in the profiles
share, and not in the homes share.

/home is not on a separate partition, everything is on the same
partition, so not a filesystem issue.
hope it can help to pinpoint the issue...

micmac

Le 24/05/2012 10:14, micmac a écrit :

> Hi, this is my first message here. I need help, the reason is in the title.
> The version running is SAMBA_4.0.0ALPHA18_DEVELOPERBUILD
>
> It was running just fine until I had (for some reason) had to transfer all
> the system (ubuntu 11.10 server)
> to another clean hard drive. I used  "rsync -rltgoHDv /olddriveroot
> /newdriveroot" to copy the files,
> and installed grub on the new disk.
>
> Now the problem is that  samba4 works, domain users can log on and access
> files, but the permissions
> have been reset to some basic values (different from all the ones I had set
> before), and I can not
> change them at all from a windows7 box as I could before. When I apply the
> changes, it takes a while
> to process the files, then the "basic" permissions are set again (my changes
> lost).
>
> Here is my /usr/local/samba/etc/smb.conf :
>
>
> [global]
>          interfaces = 127.0.0.1/8 192.168.1.0/24
>          server role = domain controller
>          workgroup = ACEIUBUNTU
>          realm = ACEI2
>          netbios name = ubuntuserveur
>          passdb backend = samba4
>          security = ADS
>          domain master = yes
>          local master = yes
>          wins support = yes
>          browseable = yes
>          log file = /var/log/samba/smbd.log
>          socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
> SO_RCVBUF=4096 SO_SNDBUF=4096
>
> [netlogon]
>          path = /usr/local/samba/var/locks/sysvol/acei2/scripts
>          read only = no
>
> [sysvol]
>          path = /usr/local/samba/var/locks/sysvol
>          read only = no
>
> [profiles]
>          path = /usr/local/samba/var/profiles
>          read only = no
>
> [homes]
>          path = /home/windows
>          read only = no
>
> -------------------------------------------------------------------------
>
> The AD database is readable, since I can edit users and computers with the
> administration toolkit
> from windows7 box.
>
> /usr/local/samba/bin/testparm gives the following result :
>
> Load smb config files from /usr/local/samba/etc/smb.conf
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
> Processing section "[netlogon]"
> Processing section "[sysvol]"
> Processing section "[profiles]"
> Processing section "[homes]"
> Loaded services file OK.
> Server role: ROLE_DOMAIN_BDC
> Press enter to see a dump of your service definitions
>
> [global]
>          workgroup = ACEIUBUNTU
>          realm = ACEI2
>          interfaces = 127.0.0.1/8, 192.168.1.0/24
>          server role = domain controller
>          security = ADS
>          passdb backend = samba4
>          log file = /var/log/samba/smbd.log
>          socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
> SO_RCVBUF=4096 SO_SNDBUF=4096
>          domain master = Yes
>          wins support = Yes
>          idmap config * : backend = tdb
>
> [netlogon]
>          path = /usr/local/samba/var/locks/sysvol/acei2/scripts
>          read only = No
>
> [sysvol]
>          path = /usr/local/samba/var/locks/sysvol
>          read only = No
>
> [profiles]
>          path = /usr/local/samba/var/profiles
>          read only = No
>
> [homes]
>          path = /home/windows
>          read only = No
> ------------------------------------------------------------------------------------
>
> Also, user_xattr and acl are enabled on the ext4 file system, and the home
> folder on which I can
> not set permission has root:users ownership with rwx rights (which was
> working before).
>
> Since it is a recopy from a working system, maybe there is a problem with
> some file permission
> on the linux system, but I have searched a lot without finding any solution.
> Any help would be
> greatly appreciated.
>
> Regards,
> micmac
>
>
>
>
> --
> View this message in context: http://samba.2283325.n4.nabble.com/Samba4-Problem-setting-folder-and-file-permissions-from-windows-box-tp4632038.html
> Sent from the Samba - General mailing list archive at Nabble.com.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: Samba4 : Problem setting folder and file permissions from windows box

micmac
Ok it seems I have to also copy the extended attributes from the original folders.

Does anybody know how to copy xattr from some file/folder to another ? (I think it's still in the subject
and could be useful to anyone wanting to move files to another drive, right ?)...

The ideal would be knowing how to copy a file or a folder, together with its extended attributes,
and also how to copy extended attributes from existing files/folders to other files/folders.

micmac
Reply | Threaded
Open this post in threaded view
|

Re: Samba4 : Problem setting folder and file permissions from windows box

micmac
I found a Python script that can copy the xattr from one file to another,
sadly it didn't help at all...

I'm completely desperate about a solution... and apparently people don't care at all about what I'm
saying on this list.

Here is the script, if it can be of use to some:

http://game-sat.com/~brian/xattr.copy

micmac
Reply | Threaded
Open this post in threaded view
|

Re: Samba4 : Problem setting folder and file permissions from windows box

steve-2
On 05/24/2012 03:39 PM, micmac wrote:

> I found a Python script that can copy the xattr from one file to another,
> sadly it didn't help at all...
>
> I'm completely desperate about a solution... and apparently people don't
> care at all about what I'm
> saying on this list.
>
> Here is the script, if it can be of use to some:
>
> http://game-sat.com/~brian/xattr.copy
>
> micmac
>
>
> --
> View this message in context: http://samba.2283325.n4.nabble.com/Samba4-Problem-setting-folder-and-file-permissions-from-windows-box-tp4632038p4632070.html
> Sent from the Samba - General mailing list archive at Nabble.com.
Hi
I think you may be looking at the same bug as us:
https://bugzilla.samba.org/show_bug.cgi?id=8938

Briefly: posix to windows and windows to posix doesn't work at the
moment. I feel sure we are on the edge of an imminent fix. Please add
your test-case to 3938 if you think it relevant.

Cheers,
Steve

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: Samba4 : Problem setting folder and file permissions from windows box

micmac
Hi,

Thanks for pointing me to this bug. I'm not sure whether it's the same
thing happening here though.
Because at first everything was running fine. The only thing I did was
backing up the sytem using rsync, which
did not preserve the extended attributes.

But as I said, copying those extended attribute back on homes and other
folders didn't fix the issue either.
I may try to reboot the system maybe, but I also have another idea in
the meantime :

I see that the linux to windows accounts mapping is still working, for
example the "profiles" folder have users ownership like 3000029,
and the map correctly to AD users in windows.

So I might as well create linux groups including those numerical user
IDs, and apply them directly from command line in linux to files and
folders,
instead of using windows explorer and security tab.
And it would also solve the backups issue. Because I realize that my
"rsnaphot" incremental backups don't save those xattributes eiter...

I will look into it further into it, post to 3938 if it is relevant.
Thanks again for reading my post.

regards,
micmac

Le 24/05/2012 17:43, steve a écrit :

> On 05/24/2012 03:39 PM, micmac wrote:
>> I found a Python script that can copy the xattr from one file to
>> another,
>> sadly it didn't help at all...
>>
>> I'm completely desperate about a solution... and apparently people don't
>> care at all about what I'm
>> saying on this list.
>>
>> Here is the script, if it can be of use to some:
>>
>> http://game-sat.com/~brian/xattr.copy
>>
>> micmac
>>
>>
>> --
>> View this message in context:
>> http://samba.2283325.n4.nabble.com/Samba4-Problem-setting-folder-and-file-permissions-from-windows-box-tp4632038p4632070.html
>> Sent from the Samba - General mailing list archive at Nabble.com.
> Hi
> I think you may be looking at the same bug as us:
> https://bugzilla.samba.org/show_bug.cgi?id=8938
>
> Briefly: posix to windows and windows to posix doesn't work at the
> moment. I feel sure we are on the edge of an imminent fix. Please add
> your test-case to 3938 if you think it relevant.
>
> Cheers,
> Steve
>

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: Samba4 : Problem setting folder and file permissions from windows box

micmac
In reply to this post by steve-2
Hi

I have found the solution to my AD permissions problem. It was not
linked to samba, but I will post here
so that it could help someone in the same situation:

the permissions of my /sbin folder where not set correctly, and
especially the "unix_chkpwd" binary.
I set it with "chmod g+s", rebooted the system, and everything worked again.

I hope I did not bother the list with this problem not really related to
samba, and I'm sorry for not being patient
enough waiting for people to answer my question.

regards,
François Moyson

Le 24/05/2012 17:43, steve a écrit :

> On 05/24/2012 03:39 PM, micmac wrote:
>> I found a Python script that can copy the xattr from one file to
>> another,
>> sadly it didn't help at all...
>>
>> I'm completely desperate about a solution... and apparently people don't
>> care at all about what I'm
>> saying on this list.
>>
>> Here is the script, if it can be of use to some:
>>
>> http://game-sat.com/~brian/xattr.copy
>>
>> micmac
>>
>>
>> --
>> View this message in context:
>> http://samba.2283325.n4.nabble.com/Samba4-Problem-setting-folder-and-file-permissions-from-windows-box-tp4632038p4632070.html
>> Sent from the Samba - General mailing list archive at Nabble.com.
> Hi
> I think you may be looking at the same bug as us:
> https://bugzilla.samba.org/show_bug.cgi?id=8938
>
> Briefly: posix to windows and windows to posix doesn't work at the
> moment. I feel sure we are on the edge of an imminent fix. Please add
> your test-case to 3938 if you think it relevant.
>
> Cheers,
> Steve
>

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba