We just noticed a strange problem where MacOS clients using Finder is enable to create new files/directories in some folders via Samba 4.19.9 even though the ACL/permssions is identical. The problem seems to be in the parsing of the data in the xattr "DOSATTRIB" set on the directory in questions, because if I remove with things begin to work correctly again. And the folders that work have a 32 bytes DOSATTRIB whereas the ones that don't work have a 24 byte DOSATTRIB.... # getextattr -x user DOSATTRIB ThisOneWorks ThisOneWorks 00 00 05 00 05 00 00 00 11 00 00 00 10 00 00 00 da a0 fc 93 fc ce db 01 # getextattr -x user DOSATTRIB Documents Documents 00 00 04 00 04 00 00 00 51 00 00 00 11 00 00 00 9e 55 d7 72 85 12 d8 01 9e 55 d7 72 85 12 d8 01 # getextattr -x user DOSATTRIB Desktop getextattr: Desktop: failed: Attribute not found Via "Finder" on the Mac I can create new directories in ThisOneWorks and Desktop but not in Documents (doesn't display a "New folder" option when "right-clicking"). But "mkdir foo" works fine in all folders... # lac ThisOneWorks Documents Desktop # file: ThisOneWorks # owner: peter86 # group: employee-liu.se everyone@:--------------:-------:allow owner@:rwxpDdaARWcCos:fd----I:allow # file: Documents # owner: peter86 # group: employee-liu.se everyone@:--------------:-------:allow owner@:rwxpDdaARWcCos:fd----I:allow # file: Desktop # owner: peter86 # group: employee-liu.se everyone@:--------------:-------:allow owner@:rwxpDdaARWcCos:fd----I:allow (This feels a bit like a MacOS bug but anyway, I see no errors in the Samba log files).
Sigh - the other way around. The ones that work have a 24 byte DOSATTRIB and the ones that don't a 32 byte one.
Seems it is a MacOS issue with the Finder that has been there for ages.. Closing this bug report. (Quick Solution is to just remove the DOSATTRIB attribute...) It might have been nice to have some way to override the readonly attribute in Samba but since most users never notice this it's no big deal.