Permissão negada para usuários comuns no diretório sysvol/netlogon samba4

jorgeeb4
(usa Linux Mint)

Enviado em 02/11/2015 - 18:05h

Eu fiz uma instalação limpa do samba 4.2.2 e após algum tempo percebi que os usuários comuns não tinham mais acesso ao compartilhamento sysvol e consequentemente o netlogon. O user administrator acessa normalmente. Eu realizei muitas pesquisas e tomei as seguintes medidas sem sucesso:

* Verificação das permissões no linux;
* samba-tool ntacl sysvolreset
* samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix
* samba-tool dbcheck --cross-ncs --fix
* Verificação dos parâmentos de ACL e demais opções no /etc/fstab. (/usr/local ext4 defaults,barrier=1,acl,user_xattr)
* samba-tool ntacl sysvolcheck - Não apresenta erros.

Além destas medidas, todos os testes sugeridos no procedimento de instalação foram novamente realizados com o objetivo de identificar algum problema causado por alguma suposta atualização.

Após algum tempo resolvi atualizar para última versão estável conforme procedimentos constantes em https://wiki.samba.org/index.php/Updating_Samba. Mesmo após a atualização para a versão 4.3.1 o problema continua.

Obs.: O problema de acesso está restrito aos compartilhamentos sysvol e netlogon. Os demais compartilhamentos usados no ambiente funcionam perfeitamente.

Segue descrição do ambiente:
SO: CentOS release 6.7 (Final)
Samba: Version 4.3.1

LOG.
[2015/11/02 16:42:40.971776, 2] ../source3/modules/vfs_acl_xattr.c:193(connect_acl_xattr)
connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service sysvol
[2015/11/02 16:42:40.974017, 2] ../source3/smbd/service.c:864(make_connection_snum)
192.168.1.5 (ipv4:192.168.1.5:49206) connect to service sysvol initially as user CMES\teste (uid=3000025, gid=100) (pid 3050)
[2015/11/02 16:42:40.982069, 3] ../source3/lib/access.c:338(allow_access)
Allowed connection from 192.168.1.5 (192.168.1.5)
[2015/11/02 16:42:40.982138, 3] ../source3/smbd/service.c:614(make_connection_snum)
Connect path is '/usr/local/samba/var/locks/sysvol/cmes.net/scripts' for service [netlogon]
[2015/11/02 16:42:40.982165, 3] ../source3/smbd/vfs.c:113(vfs_init_default)
Initialising default vfs hooks
[2015/11/02 16:42:40.982176, 3] ../source3/smbd/vfs.c:139(vfs_init_custom)
Initialising custom vfs hooks from [/[Default VFS]/]
[2015/11/02 16:42:40.982187, 3] ../source3/smbd/vfs.c:139(vfs_init_custom)
Initialising custom vfs hooks from [acl_xattr]
[2015/11/02 16:42:40.982197, 3] ../source3/smbd/vfs.c:139(vfs_init_custom)
Initialising custom vfs hooks from [dfs_samba4]
[2015/11/02 16:42:40.982209, 2] ../source3/modules/vfs_acl_xattr.c:193(connect_acl_xattr)
connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and 'force unknown acl user = true' for service netlogon
[2015/11/02 16:42:40.984340, 2] ../source3/smbd/service.c:864(make_connection_snum)
192.168.1.5 (ipv4:192.168.1.5:49206) connect to service netlogon initially as user CMES\teste (uid=3000025, gid=100) (pid 3050)
[2015/11/02 16:42:46.096019, 3] ../source3/smbd/service.c:198(set_current_service)
chdir (/usr/local/samba/var/locks/sysvol) failed, reason: Permission denied
[2015/11/02 16:42:46.278785, 3] ../source3/smbd/service.c:198(set_current_service)
chdir (/usr/local/samba/var/locks/sysvol) failed, reason: Permission denied
[2015/11/02 16:42:46.279790, 3] ../source3/smbd/service.c:198(set_current_service)
chdir (/usr/local/samba/var/locks/sysvol) failed, reason: Permission denied
[2015/11/02 16:42:46.280114, 3] ../source3/smbd/service.c:198(set_current_service)
chdir (/usr/local/samba/var/locks/sysvol) failed, reason: Permission denied
[2015/11/02 16:42:46.280407, 3] ../source3/smbd/service.c:198(set_current_service)
chdir (/usr/local/samba/var/locks/sysvol) failed, reason: Permission denied
[2015/11/02 16:42:46.281897, 3] ../source3/smbd/service.c:198(set_current_service)
chdir (/usr/local/samba/var/locks/sysvol) failed, reason: Permission denied
[2015/11/02 16:42:46.282168, 3] ../source3/smbd/service.c:198(set_current_service)
chdir (/usr/local/samba/var/locks/sysvol) failed, reason: Permission denied
[2015/11/02 16:42:48.060125, 3] ../source3/smbd/service.c:198(set_current_service)
chdir (/usr/local/samba/var/locks/sysvol) failed, reason: Permission denied
[2015/11/02 16:42:53.571083, 3] ../source3/smbd/service.c:1140(close_cnum)
192.168.1.5 (ipv4:192.168.1.5:49206) closed connection to service IPC$
[2015/11/02 16:42:53.571779, 3] ../source3/smbd/service.c:198(set_current_service)
chdir (/usr/local/samba/var/locks/sysvol/cmes.net/scripts) failed, reason: Permission denied

SMB.CONF
[global]
workgroup = CMES
realm = CMES.NET
netbios name = CMES1
netbios aliases = server
interfaces = lo eth0
bind interfaces only = Yes
server role = active directory domain controller
log level = 3
syslog = 3
log file = /var/log/samba/samba.log
max log size = 50
wins server = 192.168.1.2
wins support = Yes
winbind use default domain = Yes
dns forwarder = 192.168.1.1
idmap_ldb:use rfc2307 = yes

[netlogon]
path = /usr/local/samba/var/locks/sysvol/cmes.net/scripts
read only = No

[sysvol]
path = /usr/local/samba/var/locks/sysvol
read only = No

lucianoamed
(usa Linux Mint)

Enviado em 15/09/2016 - 10:01h

Bom dia

Estava com o mesmo problema, era incompatibilidade do windows 10, no 7 e no 8 funciona normalmente.
Solução: https://www.vivaolinux.com.br/dica/Windows-10-e-Netlogon