Failed to open: NT_STATUS_ACCESS_DENIED

[nvows]

I upgraded from Zentyal 3 to Zentyal 4 (I'm currently running 4.2.1.3 64-bit). After the upgrade the file sharing stopped working. Looking in the logs I'm seeing the following:

Code: [Select]

2016/01/20 17:10:59 INFO> GlobalImpl.pm:624 EBox::GlobalImpl::saveAllModules - Saving config and restarting services: firewall samba logs
2016/01/20 17:10:59 INFO> Base.pm:231 EBox::Module::Base::save - Restarting service for module: firewall
2016/01/20 17:10:59 INFO> Base.pm:231 EBox::Module::Base::save - Restarting service for module: samba
2016/01/20 17:11:01 INFO> Samba.pm:850 EBox::Samba::_postServiceHook - Setting roaming profiles...
2016/01/20 17:11:01 INFO> Samba.pm:919 EBox::Samba::_postServiceHook - Applying new permissions to the share 'Accounting'...
2016/01/20 17:11:01 INFO> SetUidGidNumbers.pm:195 EBox::Samba::SetUidGidNumbers::run - Samba uid and gid number check daemon started
2016/01/20 17:11:01 INFO> Samba.pm:1000 EBox::Samba::_postServiceHook - Applying ACLs for top-level share Accounting
2016/01/20 17:11:01 ERROR> Samba.pm:1019 EBox::Samba::_postServiceHook - Error setting security descriptor on share &#39;Accounting&#39;: Failed to open: NT_STATUS_ACCESS_DENIED at /usr/share/perl5/EBox/Samba.pm line 1017, <GEN0> line 1116.
2016/01/20 17:11:01 ERROR> GlobalImpl.pm:660 EBox::GlobalImpl::saveAllModules - Failed to save changes in module samba: Can't locate object method "throw" via package "Failed to list directory '/': NT_STATUS_ACCESS_DENIED at /usr/lib/perl5/Samba/Smb.pm line 154, <GEN0> line 1116.
" (perhaps you forgot to load "Failed to list directory '/': NT_STATUS_ACCESS_DENIED at /usr/lib/perl5/Samba/Smb.pm line 154, <GEN0> line 1116.
"?) at /usr/share/perl5/EBox/Module/Base.pm line 238, <GEN0> line 1123.
2016/01/20 17:11:01 INFO> Base.pm:231 EBox::Module::Base::save - Restarting service for module: logs
2016/01/20 17:11:01 ERROR> GlobalImpl.pm:735 EBox::GlobalImpl::saveAllModules - The following modules failed while saving their changes, their state is unknown: samba  at The following modules failed while saving their changes, their state is unknown: samba  at /usr/share/perl5/EBox/GlobalImpl.pm line 735
EBox::GlobalImpl::saveAllModules('EBox::GlobalImpl=HASH(0x432f290)', 'progress', 'EBox::ProgressIndicator=HASH(0x1ccaad8)') called at /usr/share/perl5/EBox/Global.pm line 95
EBox::Global::AUTOLOAD('EBox::Global=HASH(0x432ecd8)', 'progress', 'EBox::ProgressIndicator=HASH(0x1ccaad8)') called at /usr/share/zentyal/global-action line 32
eval {...} at /usr/share/zentyal/global-action line 30
I've tried searching the forums and Google for information, specifically with regard to the line mentioning "Failed to open: NT_STATUS_ACCESS_DENIED", but I'm coming up with nothing.

I also tried backing up the files and deleting all the shares. When all the shares are deleted everything saves properly, however, as soon as I add a share back I get the same error.

Any help would be appreciated.

[expertgeeks]

Did you try uninstalling & re-installing the samba package ? https://forum.zentyal.org/index.php/topic,6715.0.html

[nvows]

Yes, as found suggested somewhere, I tried:

Code: [Select]

sudo apt-get remove samba
sudo apt-get autoremove
Then re-installed the domain controller and file sharing module from the Zentyal web interface. The problem is not resolved when you re-add the shares.

[hieronymousch]

Hi,

I have the same problem after upgrading from 4.1 to 4.2
Very anoying, removing samba is not an option because this would remove (amongst others) the sogo-openchage etc and this doesn't seem right to me.

Any help?

[julio]

change the linux rights on your shared directory

Code: [Select]

sudo chown ebox:ebox /home/samba/yourshareddirectory

or if this directory on mounted harddisk:

Code: [Select]

sudo chown ebox:ebox /mountpoint/yourshareddirectory


[hieronymousch]

Thanks for your quick reply

Should this be a chown -R (so all files are set)?
I get the same error with the share folder set as ebox:ebox

drwxrwx---+ 14 ebox ebox         4096 Apr 18 10:03 clients

[hieronymousch]

Update: did a chown -R, no solution

2016/04/25 15:43:49 ERROR> Samba.pm:1004 EBox::Samba::_postServiceHook - Error setting security descriptor on share &#39;00_clients&#39;: Failed to open: NT_STATUS_ACCESS_DENIED at /usr/share/perl5/EBox/Samba.pm line 1002, <GEN0> line 1782.
2016/04/25 15:43:49 ERROR> GlobalImpl.pm:660 EBox::GlobalImpl::saveAllModules - Failed to save changes in module samba: Can't locate object method "throw" via package "Failed to list directory '/': NT_STATUS_ACCESS_DENIED at /usr/lib/perl5/Samba/Smb.pm line 154, <GEN0> line 1782.
" (perhaps you forgot to load "Failed to list directory '/': NT_STATUS_ACCESS_DENIED at /usr/lib/perl5/Samba/Smb.pm line 154, <GEN0> line 1782.
"?) at /usr/share/perl5/EBox/Module/Base.pm line 238, <GEN0> line 1789.

[hieronymousch]

And another update.
Did apt-get upgrade, installed the new zentyal-samba package.
No dice unfortunately:
2016/04/25 15:47:28 INFO> Samba.pm:904 EBox::Samba::_postServiceHook - Applying new permissions to the share '00_clients'...
2016/04/25 15:47:28 INFO> Samba.pm:985 EBox::Samba::_postServiceHook - Applying ACLs for top-level share 00_clients
2016/04/25 15:47:28 ERROR> Samba.pm:1004 EBox::Samba::_postServiceHook - Error setting security descriptor on share &#39;00_clients&#39;: Failed to open: NT_STATUS_ACCESS_DENIED at /usr/share/perl5/EBox/Samba.pm line 1002, <GEN0> line 1782.
2016/04/25 15:47:28 ERROR> GlobalImpl.pm:660 EBox::GlobalImpl::saveAllModules - Failed to save changes in module samba: Can't locate object method "throw" via package "Failed to list directory '/': NT_STATUS_ACCESS_DENIED at /usr/lib/perl5/Samba/Smb.pm line 154, <GEN0> line 1782.
" (perhaps you forgot to load "Failed to list directory '/': NT_STATUS_ACCESS_DENIED at /usr/lib/perl5/Samba/Smb.pm line 154, <GEN0> line 1782.
"?) at /usr/share/perl5/EBox/Module/Base.pm line 238, <GEN0> line 1789.

[hieronymousch]

Permissions didn't seem to be the problem.
I disabled and re-enabled the individual shares and got (with a few individual files with errros) samba running again.