[Samba] "No previous versions" - GPFS 3.5 and shadow

Sobey, Richard A

2016-07-06 13:13:04 UTC

I forgot to add, my Samba version is sernet-samba-4.2.9, also tested 4.2.13 which has the same behaviour.

GPFS is 3.5.0.22.

Richard

-----Original Message-----
From: samba [mailto:samba-***@lists.samba.org] On Behalf Of Sobey, Richard A
Sent: 06 July 2016 13:29
To: samba <***@lists.samba.org>
Subject: [Samba] "No previous versions" - GPFS 3.5 and shadow_copy2

Hi all,

At some point recently my customers can no longer see GPFS snapshots under the Windows Previous Versions tab. It simply says "No previous versions available". If a fileset is exported with the flag "force user = root" then Previous Versions *are* displayed.

[2016/07/06 10:07:35.602080, 3] ../source3/smbd/vfs.c:1322(check_reduced_name)

check_reduced_name: admin/ict/serviceoperations/slough_project/Slough_Layout reduced to /gpfs/prd/groupspace/ic/admin/ict/serviceoperations/slough_project/Slough_Layout

[2016/07/06 10:07:35.611881, 3] ../source3/smbd/dosmode.c:196(unix_mode)

unix_mode(admin/ict/serviceoperations/slough_project/Slough_Layout) returning 0644

[2016/07/06 10:07:35.613374, 0] ../source3/modules/vfs_shadow_copy2.c:1211(check_access_snapdir)

user does not have list permission on snapdir /gpfs/prd/groupspace/ic/admin/ict/.snapshots

[2016/07/06 10:07:35.613416, 0] ../source3/modules/vfs_shadow_copy2.c:1380(shadow_copy2_get_shadow_copy_data)

access denied on listing snapdir /gpfs/prd/groupspace/ic/admin/ict/.snapshots

[2016/07/06 10:07:35.613434, 0] ../source3/modules/vfs_default.c:1145(vfswrap_fsctl)

FSCTL_GET_SHADOW_COPY_DATA: connectpath /gpfs/prd/groupspace/ic, failed - NT_STATUS_ACCESS_DENIED.

[2016/07/06 10:07:47.648557, 3] ../source3/smbd/service.c:1138(close_cnum)

x.x.x.x (ipv4:x.x.x.x:51298) closed connection to service IPC$

That's a sample log excerpt from when I increased log level to 10 on a dev machine in the same cluster.

I cannot list permissions at all on the .snapshots folder, is this normal?

[***@server ict]# mmgetacl -k nfs4 .snapshots/

.snapshots/: Operation not permitted

There have been no changes made to our smb.conf recently, so we're extremely baffled why this should have suddenly broken.

Can someone please have a look at the smb.conf to see if any glaring mistakes are present, or suggest how I can troubleshoot the problem?

[global]
netbios name = store
workgroup = IC
security = ads
realm = IC.AC.UK
kerberos method = secrets and keytab

vfs objects = shadow_copy2 syncops gpfs fileid
ea support = yes
store dos attributes = yes
map readonly = no
map archive = no
map system = no
map hidden = no
unix extensions = no
allocation roundup size = 4096

disable netbios = yes
smb ports = 445
# server signing = mandatory

template shell = /bin/bash
interfaces = eth0 lo
allow trusted domains = no

printing = bsd
printcap name = /dev/null
load printers = no
disable spoolss = yes

idmap config IC : default = yes
idmap config IC : cache time = 180
idmap config IC : backend = ad
idmap config IC : schema_mode = rfc2307
idmap config IC : range = 500 - 2000000
idmap config * : range = 3000000 - 3500000
idmap config * : backend = tdb2
winbind refresh tickets = yes
winbind nss info = rfc2307
winbind use default domain = true
winbind offline logon = true
winbind separator = /
winbind enum users = true
winbind enum groups = true
winbind nested groups = yes
winbind expand groups = 2

clustering = yes
ctdbd socket = /tmp/ctdb.socket
gpfs:sharemodes = yes
gpfs:winattr = yes
gpfs:leases = yes
gpfs:dfreequota = yes
nfs4:mode = simple
nfs4:chown = yes
nfs4:acedup = merge
fileid:algorithm = fsname
force unknown acl user = yes

shadow:snapdir = .snapshots
shadow:fixinodes = yes
shadow:snapdirseverywhere = yes
shadow:sort = desc

syncops:onclose = no
syncops:onmeta = no
kernel oplocks = yes
level2 oplocks = yes
oplocks = yes
notify:inotify = no
wide links = no
async smb echo handler = yes
dmapi support = yes

aio write size = 1
aio read size = 1

socket options = IPTOS_LOWDELAY TCP_NODELAY

enable core files = no

#debug logging
log level = 10
log file = /var/log/samba.log.%m
max log size = 1024
debug timestamp = yes

[IC]
comment = Unified Group Space Area
path = /gpfs/prd/groupspace/ic
public = no
read only = no
valid users = "@domain users"
browseable = no

I'm investigating this on the GPFS list as well but it looks to me like the error lies with Samba, not GPFS.

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba