Re: [Samba] still ACL bug in 3.0.14a

2005-04-20 Thread Bolke de Bruin
Hi, I can confirm this bug for 3.0.11 as well. We are treating the unix permissions as a mask for the ACLs at the moment, otherwise we end up with readonly files etc etc. I think Peters impression is correct: unix permissions get checked first and if no 'normal' user has access rights ACL's

Re: [Samba] still ACL bug in 3.0.14a

2005-04-19 Thread Peter Kruse
Hello again, Jeremy Allison wrote: On Mon, Apr 18, 2005 at 06:35:12PM +0200, Peter Kruse wrote: bad news, my problem is not fixed with 3.0.14a The log file helped. Try this patch (applies against raw 3.0.14a). Problem was Solaris was returning 2 in a place I expected a 1 tried it, makes no

Re: [Samba] still ACL bug in 3.0.14a

2005-04-19 Thread Yannick Bergeron
-To: Jeremy Allison [EMAIL PROTECTED] To: Yannick Bergeron [EMAIL PROTECTED] CC: [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Re: [Samba] still ACL bug in 3.0.14a Date: Mon, 18 Apr 2005 16:14:50 -0700 On Mon, Apr 18, 2005 at 07:07:45PM -0400, Yannick Bergeron wrote: I will be able to give you the info

Re: [Samba] still ACL bug in 3.0.14a

2005-04-19 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yannick Bergeron wrote: | I can't find any info on the silent delete fail | bug (how can I reproduce it? what is the impact?) https://bugzilla.samba.org/show_bug.cgi?id=2227 cheers, jerry

Re: [Samba] still ACL bug in 3.0.14a

2005-04-18 Thread Yannick Bergeron
/error.c:error_packet(129) error packet at smbd/nttrans.c(800) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED From: Gerald (Jerry) Carter [EMAIL PROTECTED] To: Jeremy Allison [EMAIL PROTECTED] CC: Yannick Bergeron [EMAIL PROTECTED] Subject: Re: [Samba] still ACL bug in 3.0.14a Date: Sat, 16 Apr 2005 11

Re: [Samba] still ACL bug in 3.0.14a

2005-04-18 Thread Peter Kruse
Hello, bad news, my problem is not fixed with 3.0.14a Jeremy Allison wrote: On Sat, Apr 16, 2005 at 08:29:31PM -0500, Schaefer Jr, Thomas R. wrote: I'm modifying what I wrote this morning. Compiling --with-acl-support DOES fix the problem on Linux. Jeremy is right. Although I had compiled it

Re: [Samba] still ACL bug in 3.0.14a

2005-04-18 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peter Kruse wrote: | Hello, | | bad news, my problem is not fixed with 3.0.14a Looking back at your configs. You need the force group patch that jeremy posted over the weekend. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.5

Re: [Samba] still ACL bug in 3.0.14a

2005-04-18 Thread Tom Schaefer
Hi Peter, Bad news at this end too. Peter, Jeremy put out a patch over the weekend, if you browse back through this thread a little bit you should find it. He actually posted it twice as I recall. Perhaps the patch would fix things for you. It fixed things for at least the one person, Eric

Re: [Samba] still ACL bug in 3.0.14a

2005-04-18 Thread Jeremy Allison
On Mon, Apr 18, 2005 at 12:41:06PM -0500, Tom Schaefer wrote: I have yet to get it work properly on Solaris. I'm in the process of putting together a level 10 debug log and anything else I think might be useful for him and sending it off to Jeremy. Jeremy had suggested that the patch he

Re: [Samba] still ACL bug in 3.0.14a

2005-04-18 Thread Jeremy Allison
On Mon, Apr 18, 2005 at 06:35:12PM +0200, Peter Kruse wrote: Hello, bad news, my problem is not fixed with 3.0.14a The log file helped. Try this patch (applies against raw 3.0.14a). Problem was Solaris was returning 2 in a place I expected a 1 Jeremy. Index: smbd/posix_acls.c

Re: [Samba] still ACL bug in 3.0.14a

2005-04-18 Thread Jeremy Allison
On Mon, Apr 18, 2005 at 11:06:01AM -0400, Yannick Bergeron wrote: I've tried 3.0.14a this morning with --with-acl-support and it wasn't working. I've applied your patch to posix_acls.c, rebuild everything from scratch and the problem persist. I need more info than your log file shows I'm

Re: [Samba] still ACL bug in 3.0.14a

2005-04-18 Thread Yannick Bergeron
fileserver which provide extended acl that could have the same problem (AFS, GPFS) From: Jeremy Allison [EMAIL PROTECTED] Reply-To: Jeremy Allison [EMAIL PROTECTED] To: Yannick Bergeron [EMAIL PROTECTED] CC: [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: Re: [Samba] still ACL bug in 3.0.14a Date: Mon, 18

Re: [Samba] still ACL bug in 3.0.14a

2005-04-18 Thread Jeremy Allison
On Mon, Apr 18, 2005 at 07:07:45PM -0400, Yannick Bergeron wrote: I will be able to give you the info tomorrow after 07:30 EDT, just ask for what you need. As I said to jerry, we are running on AIX (4.3.3, 5.2 and 5.3 soon). Samba is used to access DFS fileserver which has its own extended

RE: [Samba] still ACL bug in 3.0.14a

2005-04-18 Thread Schaefer Jr, Thomas R.
@lists.samba.org Subject: Re: [Samba] still ACL bug in 3.0.14a On Mon, Apr 18, 2005 at 12:41:06PM -0500, Tom Schaefer wrote: I have yet to get it work properly on Solaris. I'm in the process of putting together a level 10 debug log and anything else I think might be useful for him and sending

Re: [Samba] still ACL bug in 3.0.14a

2005-04-17 Thread Jeremy Allison
On Sat, Apr 16, 2005 at 11:42:33PM -0400, Stewart, Eric wrote: If someone has this working on Red Hat Enterprise Linux 3, I'd like a few pointers. I've changed defaults in /etc/fstab for the affected partition to defaults,acl,user_xattr and rebooted the box. I've gone so far as

Re: [Samba] still ACL bug in 3.0.14a

2005-04-17 Thread Jeremy Allison
On Sat, Apr 16, 2005 at 11:42:33PM -0400, Stewart, Eric wrote: If someone has this working on Red Hat Enterprise Linux 3, I'd like a few pointers. I've changed defaults in /etc/fstab for the affected partition to defaults,acl,user_xattr and rebooted the box. I've gone so far as

RE: [Samba] still ACL bug in 3.0.14a

2005-04-17 Thread Tony Earnshaw
søn, 17.04.2005 kl. 05.42 skrev Stewart, Eric: If someone has this working on Red Hat Enterprise Linux 3, I'd like a few pointers. I'm not sure what the problem is, but I have Samba 3.0.11 with ACL support working on 2 RHAS3 servers. I've changed defaults in /etc/fstab for the

RE: [Samba] still ACL bug in 3.0.14a

2005-04-17 Thread Stewart, Eric
, April 17, 2005 3:54 AM To: Stewart, Eric Cc: samba@lists.samba.org Subject: Re: [Samba] still ACL bug in 3.0.14a On Sat, Apr 16, 2005 at 11:42:33PM -0400, Stewart, Eric wrote: If someone has this working on Red Hat Enterprise Linux 3, I'd like a few pointers. I've changed defaults

RE: [Samba] still ACL bug in 3.0.14a

2005-04-17 Thread Tony Earnshaw
søn, 17.04.2005 kl. 15.37 skrev Stewart, Eric: Actually I did that - covered it in an earlier message in the thread, as Samba won't compile in libacl without the libacl-devel package (that's where the header file it's looking for is). I installed it via up2date. I missed the thread,

RE: [Samba] still ACL bug in 3.0.14a

2005-04-16 Thread Tony Earnshaw
lør, 16.04.2005 kl. 06.04 skrev Stewart, Eric: Ah ha! Okay it turns out libacl-devel wasn't installed on my system. And Red Hat says you need to add acl to /etc/fstab. Well, I can get the compile done but I can't (well, won't) test from home. If it doesn't work Monday and I

RE: [Samba] still ACL bug in 3.0.14a

2005-04-16 Thread Schaefer Jr, Thomas R.
Just making sure everyone knows before I get on the plane :-). You *must* have configured with --with-acl-support for this to successfully work with ACLs on 3.0.14a. If you don't you get the symptoms you're reporting. Jeremy. Aaarrrggghhh!! No no no, I can hardly believe this. I've

Re: [Samba] still ACL bug in 3.0.14a

2005-04-16 Thread Doug VanLeuven
Schaefer Jr, Thomas R. wrote: Just making sure everyone knows before I get on the plane :-). You *must* have configured with --with-acl-support for this to successfully work with ACLs on 3.0.14a. If you don't you get the symptoms you're reporting. Jeremy. So the configure option seems to be

RE: [Samba] still ACL bug in 3.0.14a

2005-04-16 Thread Stewart, Eric
:[EMAIL PROTECTED] On Behalf Of Schaefer Jr, Thomas R. Sent: Saturday, April 16, 2005 11:00 AM To: Jeremy Allison Cc: samba@lists.samba.org Subject: RE: [Samba] still ACL bug in 3.0.14a Just making sure everyone knows before I get on the plane :-). You *must* have configured

RE: [Samba] still ACL bug in 3.0.14a

2005-04-16 Thread Schaefer Jr, Thomas R.
I'm modifying what I wrote this morning. Compiling --with-acl-support DOES fix the problem on Linux. Jeremy is right. Although I had compiled it that way this morning I was accidentally running one of my earlier compiles. Sorry. Unfortunately for me, the fact that I've got it functioning

Re: [Samba] still ACL bug in 3.0.14a

2005-04-16 Thread Jeremy Allison
On Sat, Apr 16, 2005 at 08:29:31PM -0500, Schaefer Jr, Thomas R. wrote: I'm modifying what I wrote this morning. Compiling --with-acl-support DOES fix the problem on Linux. Jeremy is right. Although I had compiled it that way this morning I was accidentally running one of my earlier

RE: [Samba] still ACL bug in 3.0.14a

2005-04-16 Thread Stewart, Eric
users = @LIB+Technology read only = no -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeremy Allison Sent: Saturday, April 16, 2005 9:59 PM To: Schaefer Jr, Thomas R. Cc: samba@lists.samba.org; Jeremy Allison Subject: Re: [Samba] still ACL bug

[Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Tom Schaefer
Sparc Solaris / UFS file system. I have some ACL's set up for a handful of users and its all worked flawlessly with every incarnation of Samba I've used over the past couple years, which would be most. Last Friday evening I upgraded from 3.0.11 to 3.0.13 and some of the users I have some ACL's

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Jeremy Allison
On Fri, Apr 15, 2005 at 12:03:06PM -0500, Tom Schaefer wrote: The problem is totally reproducible across different boxes here and even using the most very basic of a smb.conf. User schaefer should be able to connect to his home share, go into his tmp/crap/ folder and create, modify, and

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Jeremy Allison
On Fri, Apr 15, 2005 at 12:03:06PM -0500, Tom Schaefer wrote: The problem is totally reproducible across different boxes here and even using the most very basic of a smb.conf. User schaefer should be able to connect to his home share, go into his tmp/crap/ folder and create, modify, and

RE: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Stewart, Eric
PROTECTED] On Behalf Of Jeremy Allison Sent: Friday, April 15, 2005 2:29 PM To: Tom Schaefer Cc: samba@lists.samba.org Subject: Re: [Samba] still ACL bug in 3.0.14a On Fri, Apr 15, 2005 at 12:03:06PM -0500, Tom Schaefer wrote: The problem is totally reproducible across different boxes here

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Peter Kruse
Hello, (please see below) Jeremy Allison wrote: [EMAIL PROTECTED]:/accounts/staff/schaefer/tmp bash# getfacl crap # file: crap # owner: root # group: root user::--- group::--- #effective:--- group:203:rwx #effective:rwx group:cfusion:rwx #effective:rwx mask:rwx

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Jeremy Allison
On Fri, Apr 15, 2005 at 08:49:10PM +0200, Peter Kruse wrote: User jeremy can create/delete and modify files from a cmd.exe shell and Windows explorer to his hearts content, no problems. The difference is that you gave write permissions to user jeremy. In the other example, permissions

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Peter Kruse
Jeremy Allison wrote: I'm beginning to think this is a Solaris specific problem. Can't be, because here is Linux 2.4.29, and have the same problem. Peter -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Tom Schaefer
Sigh. Good catch Peter but I set up my test environment (Sparc Solaris 8, UFS filesystem) to match what Jeremy used and still have the same problem. I set it up like this... [EMAIL PROTECTED]:/accounts/staff/schaefer/tmp bash# ls -ld crap d---rwx---+ 2 root root1024 Apr 15 13:53

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Peter Kruse
Hello again, Peter Kruse wrote: The difference is that you gave write permissions to user jeremy. In the other example, permissions are granted _only_ to the group the user belongs to. So you have to remove the user:jeremy:rwx to see the bug. Doesn't seem to make the difference, sorry, in my

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Peter Kruse
Tom Schaefer wrote: Sigh. Good catch Peter but I set up my test environment (Sparc Solaris 8, UFS filesystem) to match what Jeremy used and still have the same problem. but what permissions do the _files_ have that you can no longer modify? User schaefer still can't rename or delete files in the

RE: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Stewart, Eric
Kruse Sent: Friday, April 15, 2005 3:30 PM To: Tom Schaefer Cc: samba@lists.samba.org; [EMAIL PROTECTED] Subject: Re: [Samba] still ACL bug in 3.0.14a Tom Schaefer wrote: Sigh. Good catch Peter but I set up my test environment (Sparc Solaris 8, UFS filesystem) to match what Jeremy used

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Doug VanLeuven
Peter Kruse wrote: Hello, (please see below) Jeremy Allison wrote: [EMAIL PROTECTED]:/accounts/staff/schaefer/tmp bash# getfacl crap # file: crap # owner: root # group: root user::--- group::--- #effective:--- group:203:rwx #effective:rwx group:cfusion:rwx

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Peter Kruse
Stewart, Eric wrote: ... # l junk total 5560 drwxrwxr-x2 bb mysql4096 Apr 15 15:32 ./ drwxr-xr-x 11 root root 4096 Apr 15 15:21 ../ -rwxrw-r--1 LIB+eric mysql 5668947 Mar 25 09:11 HPLJ4250-070323-ILLiad.pdf* does solaris ls not indicate ACLs with a +? What

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Jeremy Allison
On Fri, Apr 15, 2005 at 09:29:58PM +0200, Peter Kruse wrote: Tom Schaefer wrote: Sigh. Good catch Peter but I set up my test environment (Sparc Solaris 8, UFS filesystem) to match what Jeremy used and still have the same problem. but what permissions do the _files_ have that you can no

[Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Yannick Bergeron
I still have the bug after upgrading to 3.0.14a logfile [2005/04/15 16:18:28, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [CBBSP/CBBSP6/NEW TEXT DOCUMENT.TXT] - [CBBSP/CBBSP6/New Text Document.txt] [2005/04/15 16:18:28, 10]

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Peter Kruse
Jeremy Allison wrote: Ah, I didn't know you were not using 3.0.14a. I'm testing against that release and also the current SAMBA_3_0 SVN and can't reproduce. That does make sense as I made changes in smbd/posix_acls.c for this very problem from 3.0.13 (and messed them up in the 3.0.14 original

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Jeremy Allison
On Fri, Apr 15, 2005 at 04:18:59PM -0400, Yannick Bergeron wrote: I still have the bug after upgrading to 3.0.14a logfile [2005/04/15 16:18:28, 10] smbd/statcache.c:stat_cache_lookup(243) stat_cache_lookup: lookup succeeded for name [CBBSP/CBBSP6/NEW TEXT DOCUMENT.TXT] -

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Jeremy Allison
On Fri, Apr 15, 2005 at 01:31:40PM -0700, Jeremy Allison wrote: I'm starting to think this is the cause of the problems for people. I can check this by compiling without acl support and seeing if I can reproduce the bug. Yep - confirmed it. For the people who are reporting this bug, you're

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Jacob Nielsen
Hello again list Here is my output from configure 3.0.13: g-file root # grep -i acl samba.log * myconf is: --with-acl-support --with-pam --with-pam_smbpass --disable-cups --with-ldap --without-ldapsam --with-quotas --with-sys-quotas --with-winbind --with-python=yes --with-readline --with-ads

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Jeremy Allison
On Fri, Apr 15, 2005 at 11:31:35PM +0200, Jacob Nielsen wrote: Hello again list Here is my output from configure 3.0.13: g-file root # grep -i acl samba.log * myconf is: --with-acl-support --with-pam --with-pam_smbpass --disable-cups --with-ldap --without-ldapsam --with-quotas

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Jacob Nielsen
Ah okay, I might have misunderstand something here, but thats okay. It's late in Denmark now. I will give it a shot when I have the time. Thanx again Jeremy. - Jacob Jeremy Allison wrote: On Fri, Apr 15, 2005 at 11:31:35PM +0200, Jacob Nielsen wrote: Hello again list Here is my output

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Jeremy Allison
On Fri, Apr 15, 2005 at 03:49:47PM -0400, Stewart, Eric wrote: Ignoring the minor issue of the created files perms not matching the force create mode (I know it's now an OR thing that I can fix), I should still be able to delete this file, as I've been forced to the mysql group

Re: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Jeremy Allison
On Fri, Apr 15, 2005 at 02:13:07PM -0500, Tom Schaefer wrote: Sigh. Good catch Peter but I set up my test environment (Sparc Solaris 8, UFS filesystem) to match what Jeremy used and still have the same problem. I set it up like this... [EMAIL PROTECTED]:/accounts/staff/schaefer/tmp bash#

RE: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Stewart, Eric
PM To: Stewart, Eric Cc: samba@lists.samba.org Subject: Re: [Samba] still ACL bug in 3.0.14a On Fri, Apr 15, 2005 at 03:49:47PM -0400, Stewart, Eric wrote: Ignoring the minor issue of the created files perms not matching the force create mode (I know it's now an OR thing that I can fix

RE: [Samba] still ACL bug in 3.0.14a

2005-04-15 Thread Stewart, Eric
message from me. -Original Message- From: Jeremy Allison [mailto:[EMAIL PROTECTED] Sent: Friday, April 15, 2005 6:28 PM To: Stewart, Eric Cc: samba@lists.samba.org Subject: Re: [Samba] still ACL bug in 3.0.14a On Fri, Apr 15, 2005 at 03:49:47PM -0400, Stewart, Eric wrote