Another SMB/CIFS Permission Issues

Haris2887 · 23. Februar 2015

HI All.
After reading many threads. I am unable to solve my permissions problems with CIFS sharing.
I have a User called "Haris" who is part of the Group "users"

Here is my information, Again all permission look correct to me. But when I connect to SMB share from my windows 8 PC I cannot delete files.

Here my SMB.cfg

Code

#=======================
Global Settings =======================


[global]


workgroup = WORKGROUP


server string = %h server


dns proxy = no


log level = 0


syslog = 0


log file = /var/log/samba/log.%m


max log size = 1000


syslog only = yes


panic action = /usr/share/samba/panic-action %d


encrypt passwords = true


passdb backend = tdbsam


obey pam restrictions = yes


unix password sync = no


passwd program = /usr/bin/passwd %u


passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .


pam password change = yes


socket options = TCP_NODELAY IPTOS_LOWDELAY


guest account = nobody


load printers = no


disable spoolss = yes


printing = bsd


printcap name = /dev/null


unix extensions = yes


wide links = no


create mask = 0777


directory mask = 0777


use sendfile = yes


aio read size = 16384


aio write size = 16384


null passwords = no


local master = yes


time server = no


wins support = no


 


#=======================
Share Definitions =======================


[Share]


path = /media/bb8bfa67-c052-480f-be74-e0a0c6a13241//


guest ok = no


read only = no


browseable = yes


inherit acls = no


inherit permissions = no


ea support = no


store dos attributes = no


printable = no


create mask = 0755


force create mode = 0644


directory mask = 0755


force directory mode = 0755


hide dot files = yes


valid users = "Haris"


invalid users =


read list =


write list = "Haris"

Alles anzeigen

Here is the Permissions on the 2 Physical Disks and one AUFSPool

Here is what i have set in Users, User Haris is part of group Users.

User Haris has Write Access to Share...

I have reset permissions as below..

SMB config is below...

When I try to connect to the share is get prompted for credentials. As expected.

I can see the Share.

But I cannot see the permissions for this folder e.g

The permissions for the same folder is as below

When I try to delete the folder..

Clearly I am authenticated as Haris.

Any Ideas ?
Again all setting (file permission look Correct to me.

subzero79 · 23. Februar 2015

I am having some issues with ISP for displaying postimg images, routing problem probably. So i had to connect to a vpn to get the images. Everything seems ok for me except the little image of permissions of Taken in ssh

If you can enter ssh and post this ls -la Movies If the directory on top of Taken is 755 it won't allow deletion to the folders below it. Just check the whole tree that is 775 and root:users

You can test the deletion in ssh with the username
Just give Haris a bash shell in the users section of omv, then you login as root in ssh, then type su Haris and go to the folder in the pool and do rm -rfv Taken/

davidh2k · 23. Februar 2015

Subzero is right, your permissions are off. Use the reset permissions tab on shared folders and set group to write too.

Greetings
David

Haris2887 · 23. Februar 2015

Here is the output for the permissions of the Movies folder

I have already used the reset permission From the WebUI of Openfiler And the permissions are set as Administrators = Read + Write, Users = Read + Write..

Still cannot see where the permissions are incorrect.
Here is what I see when I reset the Permissions

subzero79 · 23. Februar 2015

In the web interface of OMV, create a share with the folder movie, not the whole pool. Then apply the reset to that share in particular

Haris2887 · 24. Februar 2015

OK Did the Above, Still having the same problems...

Haris2887 · 24. Februar 2015

Ok this is driving me nuts, The permissions Look right to me . I have a feeling the OpenmediaVault GUI is not resetting the Permissions correctly..

subzero79 · 24. Februar 2015

Only thing can occur to me is that the user is actually not in the group, which seems unlikely give the ss you post.

Just check with id Haris and cat /etc/group | grep users

Also i asked you before if you could login in ssh as root, then become Haris with su Haris and try to delete the folder with rm -rfv Taken/

Haris2887 · 24. Februar 2015

As requested Please see below screenshot.

Haris2887 · 24. Februar 2015

Absolutely stumped on this.
root account can delete file no problems.
I have even tried making new user account making new groups .
Chown the folders to the new account and still nothing..

i have even tried setfacl -b revoved all acls.

davidh2k · 24. Februar 2015

Are you really sure that all ACLs are removed? Looks like it still blocks the file deletion. Please also check the movie file directly which permissions it has. It may have different then the parent folder.

Greetings
David

subzero79 · 24. Februar 2015

As i understand you have two disks, and those two are a pool. Could you go to the disk that has the movie folder (not the pool) and try to delete from there as user Haris either using ssh or Samba, if you're gonna use samba, you have to make a share from the disk.

I see no ACL present there, thing is AUFS doesn't support ACL, but i don't know if a disk containing those would expose the ACL to the pool. So in this case we need to check the individual disk folders that don't have ACL. You can identify ACL present in a folder or file when they display a plus sign after the permission mode

drwxrwsr-x+ 1 root users 24 Feb 23 23:02 misc

PD: please use imgur to post images please I am having trouble displaying postimg pictures.

Edit: I confirmed that a disk containing ACL would not expose the acl in the pool, but it would act effectively in the pool, for example try to delete files

Haris2887 · 25. Februar 2015

THANKS FOR YOU HELP GUYS./....
Problem Solved...
I went to the physical Disk and the Permissions were still Screwed.
Fixed the Permissions from Disk level (Not AUFS Pool Level)...

Everything is not working :)...

davidh2k · 25. Februar 2015

Glad you figured it out

Greetings
David

dcbasso · 27. März 2015

Haris, can you explain better how you fix your problem?
THanks

davidh2k · 28. März 2015

He used the fixed permissions feature on his whole disk (you may need to add another shared folder to do that) instead of just resetting permissions on his pool.

Greetings
David

Jetzt mitmachen!