Sorry for the delay, I was out of the office.
Here's smb4.conf file: Note, I try to control the creation of cache files via veto parameters: I removed such functionality because it was giving me a lot of problems when copying files and folders.
The share named "Digital" is the one I found the problems on.
Code:
[global]
server max protocol = SMB3
encrypt passwords = yes
dns proxy = no
strict locking = no
oplocks = yes
deadtime = 15
max log size = 51200
max open files = 11070
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
getwd cache = yes
guest account = nobody
map to guest = Bad User
obey pam restrictions = Yes
directory name cache size = 0
kernel change notify = no
panic action = /usr/local/libexec/samba/samba-backtrace
server string = NASSamper FreeNAS Server
ea support = yes
store dos attributes = yes
time server = yes
acl allow execute always = true
idmap config *:backend = tdb
idmap config *:range = 90000000-100000000
server role = member server
netbios name = NASSAMPER
workgroup = DOMSAMPER
realm = DOMSAMPER.LAN
security = ADS
client use spnego = yes
cache directory = /var/tmp/.cache/.samba
local master = no
domain master = no
preferred master = no
acl check permissions = true
acl map full control = true
dos filemode = yes
winbind cache time = 7200
winbind offline logon = yes
winbind enum users = yes
winbind enum groups = yes
winbind nested groups = yes
winbind use default domain = no
winbind refresh tickets = yes
idmap config domsamper: backend = rid
idmap config domsamper: range = 20000-20000000
allow trusted domains = no
template shell = /bin/sh
template homedir = /home/%D/%U
pid directory = /var/run/samba
smb passwd file = /var/etc/private/smbpasswd
private dir = /var/etc/private
create mask = 0666
directory mask = 0777
client ntlmv2 auth = yes
dos charset = CP437
unix charset = UTF-8
log level = 10
[Backup]
path = /mnt/Backup/Backup
printable = no
veto files = /.snap/.windows/.zfs/
writeable = yes
browseable = yes
recycle:repository = .recycle/%U
recycle:keeptree = yes
recycle:versions = yes
recycle:touch = yes
recycle:directory_mode = 0777
recycle:subdir_mode = 0700
shadow:snapdir = .zfs/snapshot
shadow:sort = desc
shadow:localtime = yes
shadow:format = auto-%Y%m%d.%H%M-2w
vfs objects = shadow_copy2 zfsacl streams_xattr aio_pthread
hide dot files = yes
guest ok = no
nfs4:mode = special
nfs4:acedup = merge
nfs4:chown = yes
zfsacl:acesort = dontcare
veto files = /Temporary Items/.DS_Store/._.DS_Store/._.TemporaryItems/Thumbs.db/.Apdisk/.TemporaryItems/
delete veto files = yes
[Digital]
path = /mnt/STORAGE/Digital
printable = no
veto files = /.snap/.windows/.zfs/
writeable = yes
browseable = yes
recycle:repository = .recycle/%U
recycle:keeptree = yes
recycle:versions = yes
recycle:touch = yes
recycle:directory_mode = 0777
recycle:subdir_mode = 0700
shadow:snapdir = .zfs/snapshot
shadow:sort = desc
shadow:localtime = yes
shadow:format = auto-%Y%m%d.%H%M-2w
vfs objects = shadow_copy2 zfsacl streams_xattr aio_pthread
hide dot files = yes
guest ok = no
nfs4:mode = special
nfs4:acedup = merge
nfs4:chown = yes
zfsacl:acesort = dontcare
[STORAGE]
path = /mnt/STORAGE
printable = no
veto files = /.snap/.windows/.zfs/
writeable = no
browseable = yes
recycle:repository = .recycle/%U
recycle:keeptree = yes
recycle:versions = yes
recycle:touch = yes
recycle:directory_mode = 0777
recycle:subdir_mode = 0700
shadow:snapdir = .zfs/snapshot
shadow:sort = desc
shadow:localtime = yes
shadow:format = auto-%Y%m%d.%H%M-2w
vfs objects = shadow_copy2 zfsacl streams_xattr aio_pthread
hide dot files = no
guest ok = no
nfs4:mode = special
nfs4:acedup = merge
nfs4:chown = yes
zfsacl:acesort = dontcare
[Software]
path = /mnt/STORAGE/Software
printable = no
veto files = /.snap/.windows/.zfs/
writeable = yes
browseable = yes
recycle:repository = .recycle/%U
recycle:keeptree = yes
recycle:versions = yes
recycle:touch = yes
recycle:directory_mode = 0777
recycle:subdir_mode = 0700
shadow:snapdir = .zfs/snapshot
shadow:sort = desc
shadow:localtime = yes
shadow:format = auto-%Y%m%d.%H%M-2w
vfs objects = shadow_copy2 zfsacl streams_xattr aio_pthread
hide dot files = yes
guest ok = no
nfs4:mode = special
nfs4:acedup = merge
nfs4:chown = yes
zfsacl:acesort = dontcare
veto files = /Temporary Items/.DS_Store/._.DS_Store/._.TemporaryItems/Thumbs.db/.Apdisk/.TemporaryItems/
delete veto files = yes
The server is a Dell Power Edge 2950: 4x 1 TB HD on RAIDz (2.8Tb of available space)
14 Gb RAM
Freenas Version is the latest one. I usually upgrade a few days after new versions are released.
Since I disabled the veto files and the "export recycle bin" option, the problems seem to be gone: At least, some files that yesterday were "locked", today seem accessible and with a correct date.
Anyway, I get the message "Warning: the "acl check permissions" option is deprecated" a lot.
I didn't post the log messages because they don't show anything related to those files, since they don't seem locked anymore.
Weird: I'll keep an eye on the subject during the day and report back with logs if I see it happen again.
Thanks
EDIT: Also: I have some issues when copying files from these samba shares to other network shared folders shared via normal windows share (right click, share, on some computers)
If I try this from mac, it would ask me for elevated permissions (password) and then, complain that I don't have permissions to read the files.
Weird, because if i copy those files to my local Mac HD, I have no problem at all, but then, if I try to copy again to that other network shares, I still get the error message. Seems like a permissions issue to me, or some file creation mask or so.
BTW: I hate Mac myself, but I'm forced to use it. I suffer NONE of these problems on my windows machines....
The owner of the share is nobody:nogroup and I set permissions for everyone to be able to read, write and modify.
The Mac clients connect using an Active Directory account, but they use local users.