Quick followup on this. Doing some more samba debugging (i.e. increasing log levels!) and come up with the following:
[2016/07/06 10:07:35.602080, 3] ../source3/smbd/vfs.c:1322(check_reduced_name) check_reduced_name: admin/ict/serviceoperations/slough_project/Slough_Layout reduced to /gpfs/prd/groupspace/ic/admin/ict/serviceoperations/slough_project/Slough_Layout [2016/07/06 10:07:35.611881, 3] ../source3/smbd/dosmode.c:196(unix_mode) unix_mode(admin/ict/serviceoperations/slough_project/Slough_Layout) returning 0644 [2016/07/06 10:07:35.613374, 0] ../source3/modules/vfs_shadow_copy2.c:1211(check_access_snapdir) user does not have list permission on snapdir /gpfs/prd/groupspace/ic/admin/ict/.snapshots [2016/07/06 10:07:35.613416, 0] ../source3/modules/vfs_shadow_copy2.c:1380(shadow_copy2_get_shadow_copy_data) access denied on listing snapdir /gpfs/prd/groupspace/ic/admin/ict/.snapshots [2016/07/06 10:07:35.613434, 0] ../source3/modules/vfs_default.c:1145(vfswrap_fsctl) FSCTL_GET_SHADOW_COPY_DATA: connectpath /gpfs/prd/groupspace/ic, failed - NT_STATUS_ACCESS_DENIED. [2016/07/06 10:07:47.648557, 3] ../source3/smbd/service.c:1138(close_cnum) 155.198.55.14 (ipv4:155.198.55.14:51298) closed connection to service IPC$ Any takers? I cannot run mmgetacl on the .snapshots folder at all, as root. A snapshot I just created to make sure I had full control on the folder: (39367 is me, I didn’t run this command on a CTDB node so the UID mapping isn’t working). [root@icgpfs01 .snapshots]# mmgetacl -k nfs4 @GMT-2016.07.06-08.00.06 #NFSv4 ACL #owner:root #group:root group:74036:r-x-:allow:FileInherit:DirInherit:Inherited (X)READ/LIST (-)WRITE/CREATE (-)MKDIR (X)SYNCHRONIZE (X)READ_ACL (X)READ_ATTR (X)READ_NAMED (-)DELETE (-)DELETE_CHILD (-)CHOWN (X)EXEC/SEARCH (-)WRITE_ACL (-)WRITE_ATTR (-)WRITE_NAMED user:39367:rwxc:allow:FileInherit:DirInherit:Inherited (X)READ/LIST (X)WRITE/CREATE (X)MKDIR (X)SYNCHRONIZE (X)READ_ACL (X)READ_ATTR (X)READ_NAMED (X)DELETE (X)DELETE_CHILD (X)CHOWN (X)EXEC/SEARCH (X)WRITE_ACL (X)WRITE_ATTR (X)WRITE_NAMED From: [email protected] [mailto:[email protected]] On Behalf Of Sobey, Richard A Sent: 20 June 2016 16:03 To: gpfsug main discussion list <[email protected]> Subject: Re: [gpfsug-discuss] Snapshots / Windows previous versions Thanks Kevin. We are upgrading to GPFS 4.2 and CES in a few weeks but our customers have come to like previous versions and indeed it is sort of a selling point for us. Samba is the only thing we’ve changed recently after the badlock debacle so I’m tempted to blame that, but who knows. If (when) I find out I’ll let everyone know. Richard From: [email protected] [mailto:[email protected]] On Behalf Of Buterbaugh, Kevin L Sent: 20 June 2016 15:56 To: gpfsug main discussion list <[email protected]> Subject: Re: [gpfsug-discuss] Snapshots / Windows previous versions Hi Richard, I can’t answer your question but I can tell you that we have experienced either the exact same thing you are or something very similar. It occurred for us after upgrading from GPFS 3.5 to 4.1.0.8 and it persists even after upgraded to GPFS 4.2.0.3 and the very latest sernet-samba. And to be clear, when we upgraded from GPFS 3.5 to 4.1 we did *not* upgrade SAMBA versions at that time. Therefore, I believe that something changed in GPFS. That doesn’t mean it’s GPFS’ fault, of course. SAMBA may have been relying on a bug<ctrl-h><ctrl-h><ctrl-h>undocumented feature in GPFS that IBM fixed for all I know, and I’m obviously speculating here. The problem we see is that the .snapshots directory in each folder can be cd’d to but is empty. The snapshots are all there, however, if you: cd /<mount point of fs>/.snapshots/<data and time snapshot was taken>/rest/of/path/to/folder/in/question This obviously prevents users from being able to do their own recovery of files unless you do something like what you describe, which we are unwilling to do for security reasons. We have a ticket open with DDN… Kevin On Jun 20, 2016, at 8:45 AM, Sobey, Richard A <[email protected]<mailto:[email protected]>> wrote: Hi all Can someone clarify if the ability for Windows to view snapshots as Previous Versions is exposed by SAMBA or GPFS? Basically, if suddenly my users cannot restore files from snapshots over a CIFS share, where should I be looking? I don’t know when this problem occurred, but within the last few weeks certainly our users with full control over their data now see no previous versions available, but if we export their fileset and set “force user = root” all the snapshots are available. I think the answer is SAMBA, right? We’re running GPFS 3.5 and sernet-samba 4.2.9. Many thanks Richard _______________________________________________ gpfsug-discuss mailing list gpfsug-discuss at spectrumscale.org<http://spectrumscale.org/> http://gpfsug.org/mailman/listinfo/gpfsug-discuss — Kevin Buterbaugh - Senior System Administrator Vanderbilt University - Advanced Computing Center for Research and Education [email protected]<mailto:[email protected]> - (615)875-9633
_______________________________________________ gpfsug-discuss mailing list gpfsug-discuss at spectrumscale.org http://gpfsug.org/mailman/listinfo/gpfsug-discuss
