Can you cut/paste your full VFS options for gpfs and shadow copy from
smb.conf?
On 06/07/2016 10:37, Sobey, Richard A wrote:
Quick followup on this. Doing some more samba debugging (i.e.
increasing log levels!) and come up with the following:
[2016/07/06 10:07:35.602080, 3]
../source3/smbd/vfs.c:1322(check_reduced_name)
check_reduced_name:
admin/ict/serviceoperations/slough_project/Slough_Layout reduced to
/gpfs/prd/groupspace/ic/admin/ict/serviceoperations/slough_project/Slough_Layout
[2016/07/06 10:07:35.611881, 3] ../source3/smbd/dosmode.c:196(unix_mode)
unix_mode(admin/ict/serviceoperations/slough_project/Slough_Layout)
returning 0644
[2016/07/06 10:07:35.613374, 0]
../source3/modules/vfs_shadow_copy2.c:1211(check_access_snapdir)
* user does not have list permission on snapdir
/gpfs/prd/groupspace/ic/admin/ict/.snapshots*
[2016/07/06 10:07:35.613416, 0]
../source3/modules/vfs_shadow_copy2.c:1380(shadow_copy2_get_shadow_copy_data)
access denied on listing snapdir
/gpfs/prd/groupspace/ic/admin/ict/.snapshots
[2016/07/06 10:07:35.613434, 0]
../source3/modules/vfs_default.c:1145(vfswrap_fsctl)
FSCTL_GET_SHADOW_COPY_DATA: connectpath /gpfs/prd/groupspace/ic,
failed - NT_STATUS_ACCESS_DENIED.
[2016/07/06 10:07:47.648557, 3]
../source3/smbd/service.c:1138(close_cnum)
155.198.55.14 (ipv4:155.198.55.14:51298) closed connection to
service IPC$
Any takers? I cannot run mmgetacl on the .snapshots folder at all, as
root. A snapshot I just created to make sure I had full control on the
folder: (39367 is me, I didn’t run this command on a CTDB node so the
UID mapping isn’t working).
[root@icgpfs01 .snapshots]# mmgetacl -k nfs4 @GMT-2016.07.06-08.00.06
#NFSv4 ACL
#owner:root
#group:root
group:74036:r-x-:allow:FileInherit:DirInherit:Inherited
(X)READ/LIST (-)WRITE/CREATE (-)MKDIR (X)SYNCHRONIZE (X)READ_ACL
(X)READ_ATTR (X)READ_NAMED
(-)DELETE (-)DELETE_CHILD (-)CHOWN (X)EXEC/SEARCH (-)WRITE_ACL
(-)WRITE_ATTR (-)WRITE_NAMED
user:39367:rwxc:allow:FileInherit:DirInherit:Inherited
(X)READ/LIST (X)WRITE/CREATE (X)MKDIR (X)SYNCHRONIZE (X)READ_ACL
(X)READ_ATTR (X)READ_NAMED
(X)DELETE (X)DELETE_CHILD (X)CHOWN (X)EXEC/SEARCH (X)WRITE_ACL
(X)WRITE_ATTR (X)WRITE_NAMED
*From:*[email protected]
[mailto:[email protected]] *On Behalf Of
*Sobey, Richard A
*Sent:* 20 June 2016 16:03
*To:* gpfsug main discussion list <[email protected]>
*Subject:* Re: [gpfsug-discuss] Snapshots / Windows previous versions
Thanks Kevin. We are upgrading to GPFS 4.2 and CES in a few weeks but
our customers have come to like previous versions and indeed it is
sort of a selling point for us.
Samba is the only thing we’ve changed recently after the badlock
debacle so I’m tempted to blame that, but who knows.
If (when) I find out I’ll let everyone know.
Richard
*From:*[email protected]
[mailto:[email protected]] *On Behalf Of
*Buterbaugh, Kevin L
*Sent:* 20 June 2016 15:56
*To:* gpfsug main discussion list <[email protected]>
*Subject:* Re: [gpfsug-discuss] Snapshots / Windows previous versions
Hi Richard,
I can’t answer your question but I can tell you that we have
experienced either the exact same thing you are or something very
similar. It occurred for us after upgrading from GPFS 3.5 to 4.1.0.8
and it persists even after upgraded to GPFS 4.2.0.3 and the very
latest sernet-samba.
And to be clear, when we upgraded from GPFS 3.5 to 4.1 we did *not*
upgrade SAMBA versions at that time. Therefore, I believe that
something changed in GPFS. That doesn’t mean it’s GPFS’ fault, of
course. SAMBA may have been relying on a
bug<ctrl-h><ctrl-h><ctrl-h>undocumented feature in GPFS that IBM fixed
for all I know, and I’m obviously speculating here.
The problem we see is that the .snapshots directory in each folder can
be cd’d to but is empty. The snapshots are all there, however, if you:
cd /<mount point of fs>/.snapshots/<data and time snapshot was
taken>/rest/of/path/to/folder/in/question
This obviously prevents users from being able to do their own recovery
of files unless you do something like what you describe, which we are
unwilling to do for security reasons. We have a ticket open with DDN…
Kevin
On Jun 20, 2016, at 8:45 AM, Sobey, Richard A
<[email protected] <mailto:[email protected]>> wrote:
Hi all
Can someone clarify if the ability for Windows to view snapshots
as Previous Versions is exposed by SAMBA or GPFS? Basically, if
suddenly my users cannot restore files from snapshots over a CIFS
share, where should I be looking?
I don’t know when this problem occurred, but within the last few
weeks certainly our users with full control over their data now
see no previous versions available, but if we export their fileset
and set “force user = root” all the snapshots are available.
I think the answer is SAMBA, right? We’re running GPFS 3.5 and
sernet-samba 4.2.9.
Many thanks
Richard
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss atspectrumscale.org <http://spectrumscale.org/>
http://gpfsug.org/mailman/listinfo/gpfsug-discuss
—
Kevin Buterbaugh - Senior System Administrator
Vanderbilt University - Advanced Computing Center for Research and
Education
[email protected]
<mailto:[email protected]> - (615)875-9633
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss
--
Barry Evans
Technical Director & Co-Founder
Pixit Media
Mobile: +44 (0)7950 666 248
http://www.pixitmedia.com
--
This email is confidential in that it is intended for the exclusive
attention of the addressee(s) indicated. If you are not the intended
recipient, this email should not be read or disclosed to any other person.
Please notify the sender immediately and delete this email from your
computer system. Any opinions expressed are not necessarily those of the
company from which this email was sent and, whilst to the best of our
knowledge no viruses or defects exist, no responsibility can be accepted
for any loss or damage arising from its receipt or subsequent use of this
email.
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss
