Bug 6039 - Unable to change permissions on "file owner" and "group owner" on files and folder from windows explorer
Unable to change permissions on "file owner" and "group owner" on files and f...
Status: RESOLVED INVALID
Product: Samba 3.2
Classification: Unclassified
Component: User & Group Accounts
3.2.7
x86 Linux
: P3 normal
: ---
Assigned To: Samba Bugzilla Account
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2009-01-15 11:33 UTC by Erik Sørnes
Modified: 2009-02-06 02:24 UTC (History)
1 user (show)

See Also:


Attachments
level 10 log.smbd while trying to change "admin-erso" (owner) from "Full Control - This Folder Only" to "Full Control - This Folder, subfolders and files" on folder "test" (227.31 KB, text/plain)
2009-01-15 11:47 UTC, Erik Sørnes
no flags Details
level 10 log.winbindd while trying to change "admin-erso" (owner) from "Full Control - This Folder Only" to "Full Control - This Folder, subfolders and files" on folder "test" (255.86 KB, text/plain)
2009-01-15 11:48 UTC, Erik Sørnes
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Erik Sørnes 2009-01-15 11:33:28 UTC
When we try to change permissions for "file owner" and "group owner" on a file or folder on a samba-3.2.7 share from a windows 2003 client, the changes does not get applied. The "windows explorer security properties gui" does not return enny errors, the security settings just doesn't get applied. I have run a check with "getfacl" on the linux-samba-server and verified that they actually does not get applied. The same operation on users and groups other than "file owner" and "group owner" gets applied without any problems whatsoever. 

We have this problem on samba-servers running:

sles10sp2/x64 samba 3.2.4
sles9sp3/x86 samba 3.2.6 and 3.2.7
sles9sp1/x86 samba 3.2.4

On a server running sles9sp3/x86 samba 3.0.26a these operations, changing permissions for "file owner" and "group owner" goes without any problems whatsoever.

All these serveres are joined to a windows2003-domain or a windows 2003R2-domain using "net ads join". 

This is smb.conf from the testserver LORDVADER (joined to a windows 2003 domain), where we have reproduced the problem whith sles9sp3/x86 + samba 3.2.7:

[global]
	workgroup = ahus
	netbios name = lordvader
	security = ADS
	realm = AHUS.NO
	encrypt passwords = yes
	lock directory = /var/lock/samba
	log level = 3
	name resolve order = host
	wins server = 10.225.3.6
	ldap admin dn= cn=Manager,dc=ahus,dc=no
	ldap idmap suffix = ou=Idmap
	ldap suffix = dc=ahus,dc=no
	idmap backend = ldap:ldap://127.0.0.1
	idmap uid = 10000-200000
    	idmap gid = 10000-200000
    	winbind enum users = no
    	winbind enum groups = no
    	winbind separator = +
    	winbind use default domain = yes
	winbind nested groups = yes
    	template shell = /bin/bash
    	template homedir = /home/%U
	default devmode = yes
   	socket options = TCP_NODELAY
	host msdfs = no

[testshare]
        path=/testshare
        force security mode = 0660
        writable=yes
        browsable=yes
        create mask = 7770
        directory mask = 7770
        hide unreadable = yes

regards
Erik
Comment 1 Erik Sørnes 2009-01-15 11:47:43 UTC
Created attachment 3877 [details]
level 10 log.smbd while  trying to change "admin-erso" (owner) from "Full Control - This Folder Only" to "Full Control - This Folder, subfolders and files" on folder "test"

level 10 log.smbd while  trying to change "admin-erso" (owner) from "Full Control - This Folder Only" to "Full Control - This Folder, subfolders and files" on folder "test" on LORDVADER
Comment 2 Erik Sørnes 2009-01-15 11:48:43 UTC
Created attachment 3878 [details]
level 10 log.winbindd while  trying to change "admin-erso" (owner) from "Full Control - This Folder Only" to "Full Control - This Folder, subfolders and files" on folder "test"

level 10 log.winbindd while  trying to change "admin-erso" (owner) from "Full Control - This Folder Only" to "Full Control - This Folder, subfolders and files" on folder "test"
Comment 3 Erik Sørnes 2009-01-15 11:52:36 UTC
Sorry about the double attachment-comments.

In the test, which the logs are from, I try to add "inheritence" to the folder. Other tests, like removing writepermissions give the same results.

-kind regards
Erik
Comment 4 Erik Sørnes 2009-02-06 02:24:45 UTC
I understand now that this is behavior is by design. 
Also, this does not work in 3.0.26a as I claim in the bugreport.

I will put it to "invalid"

-kind regards
Erik