Having major issues with cifs/smb and permissions

Status
Not open for further replies.

Laser411

Dabbler
Joined
Dec 26, 2015
Messages
44
Sorry for the lengthy wait, it took me a while to get the new UPS as it wasn't the battery. Here is the CIFS dump in the debug. Appears to contain the CIFS config as well in it.

Code:
+--------------------------------------------------------------------------------+
+  CIFS Status  +
+--------------------------------------------------------------------------------+
CIFS is ENABLED


+--------------------------------------------------------------------------------+
+  /usr/local/etc/smb4.conf  +
+--------------------------------------------------------------------------------+
[global]
  server max protocol = SMB2
  encrypt passwords = yes
  dns proxy = no
  strict locking = no
  oplocks = yes
  deadtime = 15
  max log size = 51200
  max open files = 939431
  syslog only = no
  syslog = 1
  load printers = no
  printing = bsd
  printcap name = /dev/null
  disable spoolss = yes
  getwd cache = yes
  guest account = nobody
  map to guest = Bad User
  obey pam restrictions = no
  directory name cache size = 0
  kernel change notify = no
  panic action = /usr/local/libexec/samba/samba-backtrace
  nsupdate command = /usr/local/bin/samba-nsupdate -g
  server string = FreeNAS Server
  ea support = yes
  store dos attributes = yes
  lm announce = yes
  hostname lookups = yes
  time server = yes
  acl allow execute always = true
  acl check permissions = true
  dos filemode = yes
  multicast dns register = yes
  domain logons = no
  local master = yes
  idmap config *: backend = tdb
  idmap config *: range = 90000001-100000000
  server role = standalone
  netbios name = FREENAS
  workgroup = WORKGROUP
  security = user
  pid directory = /var/run/samba
  create mask = 0666
  directory mask = 0777
  client ntlmv2 auth = yes
  dos charset = CP437
  unix charset = UTF-8
  log level = 1
 

[Camera]
  path = /mnt/RaidReds/Camera
  printable = no
  veto files = /.snapshot/.windows/.mac/.zfs/
  writeable = yes
  browseable = yes
  vfs objects = zfs_space zfsacl aio_pthread streams_xattr
  hide dot files = yes
  guest ok = yes
  nfs4:mode = special
  nfs4:acedup = merge
  nfs4:chown = true
  zfsacl:acesort = dontcare
 

[Media]
  path = /mnt/RaidReds/media
  printable = no
  veto files = /.snapshot/.windows/.mac/.zfs/
  writeable = yes
  browseable = yes
  vfs objects = zfs_space zfsacl aio_pthread streams_xattr
  hide dot files = yes
  guest ok = yes
  nfs4:mode = special
  nfs4:acedup = merge
  nfs4:chown = true
  zfsacl:acesort = dontcare
 

[Private]
  path = /mnt/RaidReds/Private
  printable = no
  veto files = /.snapshot/.windows/.mac/.zfs/
  writeable = yes
  browseable = yes
  vfs objects = zfs_space zfsacl aio_pthread streams_xattr
  hide dot files = yes
  guest ok = no
  nfs4:mode = special
  nfs4:acedup = merge
  nfs4:chown = true
  zfsacl:acesort = dontcare
 

[jails]
  path = /mnt/RaidReds/jails
  printable = no
  veto files = /.snapshot/.windows/.mac/.zfs/
  writeable = yes
  browseable = yes
  vfs objects = zfs_space zfsacl aio_pthread streams_xattr
  hide dot files = yes
  guest ok = no
  nfs4:mode = special
  nfs4:acedup = merge
  nfs4:chown = true
  zfsacl:acesort = dontcare


+--------------------------------------------------------------------------------+
+  CIFS Shares & Permissions  +
+--------------------------------------------------------------------------------+
+--------------------------------------------------------------------------------+
+  Camera:/mnt/RaidReds/Camera  +
+--------------------------------------------------------------------------------+
drwxrwxr-x+ 15 house  Chris  16 Feb  9 14:12 /mnt/RaidReds/Camera

# file: /mnt/RaidReds/Camera
# owner: house
# group: Chris
  owner@:rwxpDdaARWcCos:fd-----:allow
  group@:rwxpDdaARWcCos:fd-----:allow
  everyone@:r-x---a-R-c---:fd-----:allow

+--------------------------------------------------------------------------------+
+  jails:/mnt/RaidReds/jails  +
+--------------------------------------------------------------------------------+
drwxr-xr-x  12 Chris  wheel  12 Mar 14 17:44 /mnt/RaidReds/jails

# file: /mnt/RaidReds/jails
# owner: Chris
# group: wheel
  owner@:rwxp--aARWcCos:-------:allow
  group@:r-x---a-R-c--s:-------:allow
  everyone@:r-x---a-R-c--s:-------:allow

+--------------------------------------------------------------------------------+
+  Media:/mnt/RaidReds/media  +
+--------------------------------------------------------------------------------+
drwxr--r--  26 Chris  transmission  41 Nov 16 06:42 /mnt/RaidReds/media

# file: /mnt/RaidReds/media
# owner: Chris
# group: transmission
  owner@:rwxp--aARWcCos:-------:allow
  group@:r-----a-R-c--s:-------:allow
  everyone@:r-----a-R-c--s:-------:allow

+--------------------------------------------------------------------------------+
+  Private:/mnt/RaidReds/Private  +
+--------------------------------------------------------------------------------+
drwxrwx---  21 Chris  Chris  40 Feb  9 15:02 /mnt/RaidReds/Private

# file: /mnt/RaidReds/Private
# owner: Chris
# group: Chris
  owner@:rwxp--aARWcCos:-------:allow
  group@:rwxp--a-R-c--s:-------:allow
  everyone@:------a-R-c--s:-------:allow



+--------------------------------------------------------------------------------+
+  net getlocalsid  +
+--------------------------------------------------------------------------------+
Environment LOGNAME is not defined. Trying anonymous access.
SID for domain FREENAS is: S-1-5-21-888486220-3172031362-1221335497


+--------------------------------------------------------------------------------+
+  net getdomainsid  +
+--------------------------------------------------------------------------------+
Environment LOGNAME is not defined. Trying anonymous access.
Could not fetch domain SID
SID for local machine FREENAS is: S-1-5-21-888486220-3172031362-1221335497


+--------------------------------------------------------------------------------+
+  net usersidlist  +
+--------------------------------------------------------------------------------+
Environment LOGNAME is not defined. Trying anonymous access.
FREENAS\transmission
S-1-5-21-888486220-3172031362-1221335497-1003
S-1-1-0
S-1-5-2
S-1-5-11
FREENAS\root
S-1-5-21-888486220-3172031362-1221335497-1005
S-1-1-0
S-1-5-2
S-1-5-11
FREENAS\house
S-1-5-21-888486220-3172031362-1221335497-1006
S-1-1-0
S-1-5-2
S-1-5-11
S-1-5-21-888486220-3172031362-1221335497-1002
FREENAS\chris
S-1-5-21-888486220-3172031362-1221335497-1007
S-1-1-0
S-1-5-2
S-1-5-11
S-1-5-21-888486220-3172031362-1221335497-1001
S-1-5-21-888486220-3172031362-1221335497-1004


+--------------------------------------------------------------------------------+
+  net groupmap list  +
+--------------------------------------------------------------------------------+
Environment LOGNAME is not defined. Trying anonymous access.
Chris (S-1-5-21-888486220-3172031362-1221335497-1001) -> Chris
public (S-1-5-21-888486220-3172031362-1221335497-1002) -> public
transmission (S-1-5-21-888486220-3172031362-1221335497-1004) -> transmission


+--------------------------------------------------------------------------------+
+  net status sessions  +
+--------------------------------------------------------------------------------+
Environment LOGNAME is not defined. Trying anonymous access.
PID  Username  Group  Machine 
-------------------------------------------------------------------


+--------------------------------------------------------------------------------+
+  net status shares  +
+--------------------------------------------------------------------------------+
Environment LOGNAME is not defined. Trying anonymous access.

Service  pid  machine  Connected at
-------------------------------------------------------


+--------------------------------------------------------------------------------+
+  Users and Groups  +
+--------------------------------------------------------------------------------+
+--------------------------------------------------------------------------------+
+  Users  +
+--------------------------------------------------------------------------------+
Error looking up domain users
+--------------------------------------------------------------------------------+
+  Groups  +
+--------------------------------------------------------------------------------+
failed to call wbcListGroups: WBC_ERR_DOMAIN_NOT_FOUND
Error looking up domain groups



I really want it to go back to the old behavior of asking for credentials only if access was denied and not attempting to access the list of shares.
 
Status
Not open for further replies.
Top