Bug 13117 - Don't descend
Summary: Don't descend
Status: RESOLVED WORKSFORME
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: Other (show other bugs)
Version: 4.1.12
Hardware: x86 Linux
: P5 major (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-11-03 11:36 UTC by Mathieu Desrosiers
Modified: 2019-01-06 22:26 UTC (History)
2 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mathieu Desrosiers 2017-11-03 11:36:01 UTC
Hello,

we are testing Samba v4.1.12 on RHEL 7.1 and we are having issues with the "dont descend" options. FYI, we are using the exact same configuration with Samba v.3.x.x on Solaris 10.3 and it is working fine.

Here is the configuration:

[Galilee]
        comment = Projet Galilee
        path = /share
        force user = swadmin
        force group = swgis
        guest ok = Yes
        dont descend = util 
        read only = Yes
        browseable = No

Here is the problem, the client can acces \\host\galilee\util without any issues. As expected, we can't see the content of the util folder.

If the client knows the path he is suppose to have access to it. Some client can acces \\host\galilee\util\dos without any issues and others can't access the content. All client runs on Windows 7.

The client who can't acces \\host\galilee\util\dos, can access \\host\galilee\util\dos\dos2unix without any issues. So it seems that all first level folders under a folder define in the "dont descend" are acting lilke that. The write access are ok on the folders because if I comment the "dont descend" line, I can access everything without any issues with every client.

Is it a known issues? Have you ever seen something like that?

Thanks for your help!
Comment 1 Björn Jacke 2019-01-06 22:26:33 UTC
as the man page says: "the server should always show as empty". This is what it does, it does not deny access.