[Bug 250953] net/samba413 - cannot modify files with Linux clients

Sun Nov 8 14:54:12 UTC 2020

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250953

            Bug ID: 250953
           Summary: net/samba413 - cannot modify files with Linux clients
           Product: Ports & Packages
           Version: Latest
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: timur at FreeBSD.org
          Reporter: johannes.kunde at gmail.com
          Assignee: timur at FreeBSD.org
             Flags: maintainer-feedback?(timur at FreeBSD.org)

I recently upgraded my Samba installation from net/samba412 to net/samba413
without any changes to smb4.conf. After the upgrade I can no longer modify
files when accessing my share with Linux clients (tested with Fedora and
Ubuntu). The server log shows a NT_STATUS_OBJECT_NAME_COLLISION and
NT_STATUS_ACCESS_DENIED flag. However, creating new files is still possible.
Accessing the share and modyfing files with Windows works without any issues.
With a rollback to net/samba412 the problem immediately disappears.

My configuration looks like this:

```
[TestShare]
guest ok = no
comment = Test Share
path = /srv/nas/test
browseable = yes
read only = no
create mask = 0755
force user = smb_owner
force group = smb_owner
```

The log output from my Samba server:

```
[2020/11/07 18:20:18.371535,  4]
../../source3/auth/pampass.c:485(smb_pam_start)
  smb_pam_start: PAM: Init user: testuser
[2020/11/07 18:20:18.377050,  4]
../../source3/auth/pampass.c:494(smb_pam_start)
  smb_pam_start: PAM: setting rhost to: 192.168.178.157
[2020/11/07 18:20:18.377079,  4]
../../source3/auth/pampass.c:503(smb_pam_start)
  smb_pam_start: PAM: setting tty
[2020/11/07 18:20:18.377100,  4]
../../source3/auth/pampass.c:511(smb_pam_start)
  smb_pam_start: PAM: Init passed for user: testuser
[2020/11/07 18:20:18.377121,  4]
../../source3/auth/pampass.c:648(smb_internal_pam_session)
  smb_internal_pam_session: PAM: tty set to: smb/3094293754
[2020/11/07 18:20:18.377287,  4] ../../source3/auth/pampass.c:467(smb_pam_end)
  smb_pam_end: PAM: PAM_END OK.
[2020/11/07 18:20:18.378350,  3] ../../lib/util/access.c:371(allow_access)
  Allowed connection from 192.168.178.157 (192.168.178.157)
[2020/11/07 18:20:18.378419,  3]
../../source3/smbd/service.c:618(make_connection_snum)
  make_connection_snum: Connect path is '/tmp' for service [IPC$]
[2020/11/07 18:20:18.378471,  3] ../../source3/smbd/vfs.c:115(vfs_init_default)
  Initialising default vfs hooks
[2020/11/07 18:20:18.378508,  3] ../../source3/smbd/vfs.c:141(vfs_init_custom)
  Initialising custom vfs hooks from [/[Default VFS]/]
[2020/11/07 18:20:18.378658,  3]
../../source3/smbd/service.c:861(make_connection_snum)
  testuser-virtualbox (ipv4:192.168.178.157:36750) connect to service IPC$
initially as user testuser (uid=1001, gid=1001) (pid 68515)
[2020/11/07 18:20:18.379326,  3]
../../source3/smbd/msdfs.c:1028(get_referred_path)
  get_referred_path: |testshare| in dfs path \nasify.local\testshare is not a
dfs root.
[2020/11/07 18:20:18.379368,  3]
../../source3/smbd/smb2_server.c:3863(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
status[NT_STATUS_NOT_FOUND] || at ../../source3/smbd/smb2_ioctl.c:313
[2020/11/07 18:20:18.380016,  3] ../../source3/smbd/service.c:1136(close_cnum)
  testuser-virtualbox (ipv4:192.168.178.157:36750) closed connection to service
IPC$
[2020/11/07 18:20:18.380587,  3] ../../lib/util/access.c:371(allow_access)
  Allowed connection from 192.168.178.157 (192.168.178.157)
[2020/11/07 18:20:18.380856,  3]
../../source3/passdb/lookup_sid.c:1606(get_primary_group_sid)
  Forcing Primary Group to 'Domain Users' for smb_owner
[2020/11/07 18:20:18.381077,  3]
../../source3/passdb/lookup_sid.c:1606(get_primary_group_sid)
  Forcing Primary Group to 'Domain Users' for smb_owner
[2020/11/07 18:20:18.381425,  1]
../../source3/param/loadparm.c:2517(lp_idmap_range)
  idmap range not specified for domain '*'
[2020/11/07 18:20:18.381750,  3]
../../source3/auth/token_util.c:689(finalize_local_nt_token)
  Failed to fetch domain sid for WORKGROUP
[2020/11/07 18:20:18.382042,  3]
../../source3/smbd/service.c:433(set_conn_force_user_group)
  Forced user smb_owner
[2020/11/07 18:20:18.382139,  3]
../../source3/smbd/service.c:323(find_forced_group)
  Forced group smb_owner
[2020/11/07 18:20:18.382168,  3]
../../source3/smbd/service.c:618(make_connection_snum)
  make_connection_snum: Connect path is '/srv/nas/exchange' for service
[TestShare]
[2020/11/07 18:20:18.382209,  3] ../../source3/smbd/vfs.c:115(vfs_init_default)
  Initialising default vfs hooks
[2020/11/07 18:20:18.382231,  3] ../../source3/smbd/vfs.c:141(vfs_init_custom)
  Initialising custom vfs hooks from [/[Default VFS]/]
[2020/11/07 18:20:18.382417,  2]
../../source3/smbd/service.c:861(make_connection_snum)
  testuser-virtualbox (ipv4:192.168.178.157:36750) connect to service TestShare
initially as user smb_owner (uid=1003, gid=1003) (pid 68515)
[2020/11/07 18:20:18.384552,  3]
../../source3/smbd/trans2.c:3637(smbd_do_qfsinfo)
  smbd_do_qfsinfo: level = 1005
[2020/11/07 18:20:18.387531,  2] ../../source3/smbd/open.c:1523(open_file)
  smb_owner opened file test/test/Textdatei.txt read=No write=No (numopen=1)
[2020/11/07 18:20:18.388986,  2]
../../source3/smbd/close.c:823(close_normal_file)
  smb_owner closed file test/test/Textdatei.txt (numopen=0) NT_STATUS_OK
[2020/11/07 18:20:18.390875,  3]
../../source3/smbd/smb2_server.c:3863(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
status[NT_STATUS_OBJECT_NAME_COLLISION] || at
../../source3/smbd/smb2_create.c:334
[2020/11/07 18:20:18.392160,  2] ../../source3/smbd/open.c:1523(open_file)
  smb_owner opened file test/test/~gvfUNjT.tmp read=Yes write=Yes (numopen=1)
[2020/11/07 18:20:18.394268,  3] ../../source3/lib/util.c:1079(fcntl_getlock)
  fcntl_getlock: fd 7 is returned info 2 pid 0
[2020/11/07 18:20:18.394553,  3]
../../source3/smbd/smb2_write.c:215(smb2_write_complete_internal)
  smb2: fnum 286895378, file test/test/~gvfUNjT.tmp, length=46 offset=0
wrote=46
[2020/11/07 18:20:18.396691,  2]
../../source3/smbd/close.c:823(close_normal_file)
  smb_owner closed file test/test/~gvfUNjT.tmp (numopen=0) NT_STATUS_OK
[2020/11/07 18:20:18.397616,  2] ../../source3/smbd/open.c:1523(open_file)
  smb_owner opened file test/test/Textdatei.txt read=No write=No (numopen=1)
[2020/11/07 18:20:18.399528,  2]
../../source3/smbd/close.c:823(close_normal_file)
  smb_owner closed file test/test/Textdatei.txt (numopen=0)
NT_STATUS_ACCESS_DENIED
[2020/11/07 18:20:18.399631,  3]
../../source3/smbd/smb2_server.c:3863(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
status[NT_STATUS_ACCESS_DENIED] || at ../../source3/smbd/smb2_close.c:111
[2020/11/07 18:20:18.400474,  2] ../../source3/smbd/open.c:1523(open_file)
  smb_owner opened file test/test/Textdatei.txt read=No write=No (numopen=1)
[2020/11/07 18:20:18.402078,  2]
../../source3/smbd/close.c:823(close_normal_file)
  smb_owner closed file test/test/Textdatei.txt (numopen=0) NT_STATUS_OK
[2020/11/07 18:20:18.403077,  2] ../../source3/smbd/open.c:1523(open_file)
  smb_owner opened file test/test/~gvfUNjT.tmp read=No write=No (numopen=1)
[2020/11/07 18:20:18.403884,  2]
../../source3/smbd/close.c:823(close_normal_file)
  smb_owner closed file test/test/~gvfUNjT.tmp (numopen=0)
NT_STATUS_ACCESS_DENIED
[2020/11/07 18:20:18.403928,  3]
../../source3/smbd/smb2_server.c:3863(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1]
status[NT_STATUS_ACCESS_DENIED] || at ../../source3/smbd/smb2_close.c:111
[2020/11/07 18:20:18.404805,  2] ../../source3/smbd/open.c:1523(open_file)
  smb_owner opened file test/test/~gvfUNjT.tmp read=No write=No (numopen=1)
[2020/11/07 18:20:18.406367,  2]
../../source3/smbd/close.c:823(close_normal_file)
  smb_owner closed file test/test/~gvfUNjT.tmp (numopen=0) NT_STATUS_OK
```

-- 
You are receiving this mail because:
You are the assignee for the bug.