Zentyal Forum, Linux Small Business Server

Zentyal Server => Other modules => Topic started by: dzidek23 on December 15, 2022, 03:14:25 pm

Title: smbd_audit fails
Post by: dzidek23 on December 15, 2022, 03:14:25 pm
I created an AD user for and network enabled scanner to use (scan_user) and there is a network share with Read/Write permissions for that user (networkscan)

If I run journalctl -xe I get this:

Code: [Select]
Dec 15 14:00:10 dc01 smbd_audit[219339]: domain\scan_user|x.x.x.x|getxattr|fail (No data available)|/home/samba/shares/networkscan|security.NTACL
Dec 15 14:00:10 dc01 smbd_audit[219339]: domain\scan_user|x.x.x.x|getxattr|fail (No data available)|/home/samba/shares/networkscan|security.NTACL
Dec 15 14:00:10 dc01 smbd_audit[219339]: domain\scan_user|x.x.x.x|getxattr|fail (No data available)|/home/samba/shares/networkscan|user.DOSATTRIB
Dec 15 14:00:10 dc01 smbd_audit[219339]: domain\scan_user|x.x.x.x|get_dos_attributes|fail (No data available)|/home/samba/shares/networkscan
Dec 15 14:00:10 dc01 smbd_audit[219339]: domain\scan_user|x.x.x.x|get_shadow_copy_data|fail (Function not implemented)|
Dec 15 14:00:10 dc01 smbd_audit[219339]: domain\scan_user|x.x.x.x|fsctl|fail (Function not implemented)|

It does NOT affect operation and users can scan to the share but why am I getting the smbd_audit fails?
Title: Re: smbd_audit fails
Post by: aetcoadmin on December 19, 2022, 03:17:11 am
I am seeing the same.  I recently updated 3 servers from Zentyal 6.2 to 7.0 and here is a scrubbed snippet from /var/log/syslog:

Code: [Select]
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|getxattr|fail (No data available)|/home/samba/shares/sharename|user.DOSATTRIB
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|get_dos_attributes|fail (No data available)|/home/samba/shares/sharename
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|create_file|fail (Is a directory)|0x100080|file|open|/home/samba/shares/sharename
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|getxattr|fail (No data available)|/home/samba/shares/sharename|user.DOSATTRIB
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|get_dos_attributes|fail (No data available)|/home/samba/shares/sharename
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|getxattr|fail (No data available)|/home/samba/shares/sharename|user.DOSATTRIB
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|get_dos_attributes|fail (No data available)|/home/samba/shares/sharename
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|getxattr|fail (No data available)|/home/samba/shares/sharename|user.DOSATTRIB
Dec 18 21:01:09 dc_name smbd_audit: DOMAIN\username|xx.xx.xx.xx|get_dos_attributes|fail (No data available)|/home/samba/shares/sharename

The server seems to work correctly, and I've tried a few ideas ( apt install attr and apt install xattr) but nothing I've tried has helped.

Anyone have any ideas on how to fix tihs?
Title: Re: smbd_audit fails
Post by: aetcoadmin on July 12, 2023, 07:26:28 am
Great news!  This error seems to have finally been fixed with the latest update to Zentyal 7.0.6