Samba Share Group Problems

[steve]

Hi Guys,
I wondered anybody could shine some light on a problem I got below. Thanks in advance.

The setup I have 2 Data servers and few application servers. The data servers one OD master the other OD Replicator with OD Groups with Active Directory user accounts. The problem seemed to appear after the 10.3.9 update, but the problem could have been there before the update as I have no need to setup share often and I could of missed this. All the departmental shares are not affected and work fine. But if I create new share this where my problems appears. If the share is created with:
Owner admin R/W
Group Terra R/W
Other R.
When a group member accesses the share, they can mount read but do not have permission to write to the folder. If I check the permission using ls –al everything seems fine. When the user accesses the department folder and does Apple Info, this indicated that they have full access. But if I login onto the share with the owner account then I have write access. The problem only effects the Group permissions.

Comparing the shares that do work with the ones that do not the smb_config setup they are the same and I cannot see any difference. After running testparm (below are the results) this has not shown any problems either. The new share Terra does not work but all other shares work fine. I put the system in debug 4 mode and include the results below when I write file to the Terra Share.
I have feeling that the problem is with OpenLdap not with Samba it self and effect the others servers as well.

Please if anybody could help I would be very grateful.

Cheers

Steve

Testparm Results

peridot:~ root# testparm
Load smb config files from /private/etc/smb.conf
Processing section “[Ko-Ferrigno]”
Processing section “[FACS]”
Processing section “[Public]”
Processing section “[homes]”
Processing section “[Bell]”
Processing section “[printers]”
Processing section “[Aparicio]”
Processing section “[Laskey]”
Processing section “[Groups]”
Processing section “[Users]”
Processing section “[Directors]”
Processing section “[Terra]”
Processing section “[Cueva-Mendez]”
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

# Global parameters
[global]
dos charset = CP437
unix charset = UTF-8-MAC
display charset = UTF-8-MAC
workgroup = *****
realm = UserAccount**
server string = Mac OS X
security = ADS
auth methods = guest, opendirectory
allow trusted domains = No
passdb backend = opendirectorysam, guest
guest account = unknown
log level = 2
defer sharing violations = No
printcap name =
local master = No
domain master = No
wins server = ***.***.***.***
printer admin = @admin, @staff
printing = bsd
print command = lpr -r -P’%p’ %s
lpq command = /usr/sbin/PrintServiceAccess jobs %p
lprm command = lprm -P’%p’ %j
lppause command = /usr/sbin/PrintServiceAccess hold %p %j
lpresume command = /usr/sbin/PrintServiceAccess release %p %j

[Ko-Ferrigno]
comment = macosx
path = /Volumes/XServeData1/Ko-Ferrigno
read only = No
create mask = 0644
map archive = No

[FACS]
comment = macosx
path = /Volumes/XServeData3/FACS
read only = No
create mask = 0644
map archive = No
strict locking = No

[Public]
comment = macosx
path = /Shared Items/Public
read only = No
create mask = 0644
map archive = No
strict locking = No

[homes]
comment = User Home Directories
read only = No
browseable = No
level2 oplocks = No

[Bell]
comment = macosx
path = /Volumes/XServeData1/Bell
read only = No
create mask = 0644
map archive = No
strict locking = No

[printers]
path = /tmp
printable = Yes
browseable = No
level2 oplocks = No

[Aparicio]
comment = macosx
path = /Volumes/XServeData3/Aparicio
read only = No
create mask = 0644
map archive = No
strict locking = No

[Laskey]
comment = macosx
path = /Volumes/XServeData2/Laskey
read only = No
create mask = 0644
map archive = No
strict locking = No

[Groups]
comment = macosx
path = /Groups
read only = No
create mask = 0664
directory mask = 0775
map archive = No
strict locking = No

[Users]
comment = macosx
path = /Users
read only = No
create mask = 0644
map archive = No
strict locking = No

[Directors]
comment = macosx
path = /Volumes/XServeData4/Directors
read only = No
create mask = 0644
map archive = No
strict locking = No

[Terra]
comment = macosx
path = /Volumes/XServeData5/Terra
read only = No
create mask = 0644
map archive = No
strict locking = No

[Cueva-Mendez]
comment = macosx
path = /Volumes/XServeData1/Cueva-Mendez
read only = No
create mask = 0644
map archive = No
strict locking = No
peridot:~ root#
peridot:~ root#

Terra SMB Errors

===== Tue May 10 2005 ===== 12:50:44 Europe/London =====
[2005/05/10 12:50:49, 2] /SourceCache/samba/samba-60.2/samba/source/passdb/pdb_interface.c:make_pdb_methods_name(654)
No builtin backend found, trying to load plugin
[2005/05/10 12:50:49, 2] /SourceCache/samba/samba-60.2/samba/source/lib/module.c:do_smb_load_module(63)
Module ‘/usr/lib/samba/pdb/opendirectorysam.so’ loaded
[2005/05/10 12:50:49, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/reply.c:reply_special(235)
netbios connect: name1=PERIDOT name2=SYSTEMS10
[2005/05/10 12:50:49, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/reply.c:reply_special(242)
netbios connect: local=peridot remote=systems10, name type = 0
[2005/05/10 12:50:53, 1] /SourceCache/samba/samba-60.2/samba/source/smbd/service.c:make_connection_snum(648)
systems10 (131.111.21.192) connect to service Terra initially as user *****\***** (uid=UserAccount*, gid=20) (pid 10909)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/open.cpen_file(245)
UserAccount opened file .DS_Store read=Yes write=No (numopen=1)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/close.c:close_normal_file(270)
*****\UserAccount closed file .DS_Store (numopen=0)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/open.cpen_file(245)
UserAccount opened file ._cotvnc-20b2.dmg read=Yes write=No (numopen=1)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/close.c:close_normal_file(270)
*****\UserAccount closed file ._cotvnc-20b2.dmg (numopen=0)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/open.cpen_file(245)
UserAccount opened file ._ServerAdminTools10.4.dmg read=Yes write=No (numopen=1)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/close.c:close_normal_file(270)
*****\UserAccount closed file ._ServerAdminTools10.4.dmg (numopen=0)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/open.cpen_file(245)
UserAccount opened file ._cotvnc-20b2.dmg read=Yes write=No (numopen=1)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/close.c:close_normal_file(270)
*****\UserAccount closed file ._cotvnc-20b2.dmg (numopen=0)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/open.cpen_file(245)
UserAccount opened file ._ServerAdminTools10.4.dmg read=Yes write=No (numopen=1)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/close.c:close_normal_file(270)
*****\UserAccount closed file ._ServerAdminTools10.4.dmg (numopen=0)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/open.cpen_file(245)
UserAccount opened file ._cotvnc-20b2.dmg read=Yes write=No (numopen=1)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/close.c:close_normal_file(270)
*****\UserAccount closed file ._cotvnc-20b2.dmg (numopen=0)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/open.cpen_file(245)
UserAccount opened file ._ServerAdminTools10.4.dmg read=Yes write=No (numopen=1)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/close.c:close_normal_file(270)
*****\UserAccount closed file ._ServerAdminTools10.4.dmg (numopen=0)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/open.cpen_file(245)
UserAccount opened file ._cotvnc-20b2.dmg read=Yes write=No (numopen=1)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/close.c:close_normal_file(270)
*****\UserAccount closed file ._cotvnc-20b2.dmg (numopen=0)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/open.cpen_file(245)
UserAccount opened file ._ServerAdminTools10.4.dmg read=Yes write=No (numopen=1)
[2005/05/10 12:50:53, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/close.c:close_normal_file(270)
*****\UserAccount closed file ._ServerAdminTools10.4.dmg (numopen=0)
[2005/05/10 12:50:57, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/open.cpen_file(245)
UserAccount opened file ._cotvnc-20b2.dmg read=Yes write=No (numopen=1)
[2005/05/10 12:50:57, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/close.c:close_normal_file(270)
*****\UserAccount closed file ._cotvnc-20b2.dmg (numopen=0)
[2005/05/10 12:50:57, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/open.cpen_file(245)
UserAccount opened file ._ServerAdminTools10.4.dmg read=Yes write=No (numopen=1)
[2005/05/10 12:50:57, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/close.c:close_normal_file(270)
*****\UserAccount closed file ._ServerAdminTools10.4.dmg (numopen=0)
[2005/05/10 12:50:57, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/open.cpen_file(245)
UserAccount opened file ._cotvnc-20b2.dmg read=Yes write=No (numopen=1)
[2005/05/10 12:50:57, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/close.c:close_normal_file(270)
*****\UserAccount closed file ._cotvnc-20b2.dmg (numopen=0)
[2005/05/10 12:50:57, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/open.cpen_file(245)
UserAccount opened file ._ServerAdminTools10.4.dmg read=Yes write=No (numopen=1)
[2005/05/10 12:50:57, 2] /SourceCache/samba/samba-60.2/samba/source/smbd/close.c:close_normal_file(270)
*****\UserAccount closed file ._ServerAdminTools10.4.dmg (numopen=0)

[Author]

Posts