[Bugs] [Bug 1484427] New: Cannot map subfolder of gluster/ samba share when using vfs objects = glusterfs

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1484427

            Bug ID: 1484427
           Summary: Cannot map subfolder of gluster/samba share when using
                    vfs objects = glusterfs
           Product: GlusterFS
           Version: 3.10
         Component: libgfapi
          Assignee: bugs at gluster.org
          Reporter: d.weller at physik.uni-stuttgart.de
        QA Contact: bugs at gluster.org
                CC: bugs at gluster.org



Description of problem:
Cannot map subfolder of gluster/samba share when using vfs objects = glusterfs
in windows.
Mapping the parent folder works fine.

Version-Release number of selected component (if applicable):
Gluster: CentOS 3.10.5 (centos-release-gluster310)
Samba: 4.6.7 

How reproducible:
always

Steps to Reproduce:
0.a. Have samba Active Directory controller configured
0.b. Create file-server, join domain as member
1. create share (see additional info)
2. configure ACLs in windows client (as recommended in samba wiki)
3. map network drive: \\fileserver\share\subfolder


Actual results:
windows gets 'access denied' for user/pass that works with the root-folder of
the share
log-files (samba) shows: Could not close dir! fname=<subfoldername>, fd=-1,
err=1=Operation not permitted

Expected results:
Subfolder is mapped as network drive

Additional info:

testparm:
[global]
        netbios name = FILE
        realm = MY.REALM
        workgroup = MY
        log file = /var/log/samba.log
        clustering = Yes
        registry shares = Yes
        security = ADS
        template homedir = /gluster/mnt/users/%U
        template shell = /bin/bash
        winbind refresh tickets = Yes
        winbind use default domain = Yes
        idmap config my:range = 20000-1999999
        idmap config my:backend = rid
        idmap config *:range = 10000-19999
        idmap config * : backend = tdb
        store dos attributes = Yes
        map acl inherit = Yes
        inherit acls = Yes
        vfs objects = acl_xattr

[profiles]
        comment = User Profile Directories
        path = /
        kernel share modes = No
        read only = No
        vfs objects = glusterfs
        glusterfs:loglevel = 3
        glusterfs:logfile = /var/log/samba/glusterfs-profiles.log
        glusterfs:volfile_server = 172.17.1.3 172.17.1.4
        glusterfs:volume = profiles


getfacl profiles/
# file: profiles/
# owner: administrator
# group: domain\040admins
user::rwx
user:20512:rwx
user:20513:rwx
group::rwx
group:10006:rwx
group:administrator:rwx
group:domain\040admins:rwx
group:domain\040users:rwx
mask::rwx
other::---
default:user::rwx
default:user:administrator:rwx
default:user:20512:rwx
default:group::---
default:group:10006:rwx
default:group:domain\040admins:rwx
default:mask::rwx
default:other::---

getfacl profiles/Administrator.V2/
# file: profiles/Administrator.V2/
# owner: administrator
# group: domain\040users
user::rwx
user:20512:rwx
group::---
group:10006:rwx
group:administrator:rwx
group:domain\040admins:rwx
group:domain\040users:---
mask::rwx
other::---
default:user::rwx
default:user:administrator:rwx
default:user:20512:rwx
default:group::---
default:group:10006:rwx
default:group:domain\040admins:rwx
default:group:domain\040users:---
default:mask::rwx
default:other::---

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are on the CC list for the bug.
You are the assignee for the bug.