Good morning,

 

I got 11 Unraid servers and on about 50% of them I am unable to access the flash drive via SMB share. The following error message repeats ~20 times in /var/log/syslog:

 

smbd[20582]: [2021/09/24 08:58:06.709121,  0] ../../source3/smbd/service.c:168(chdir_current_service)

smbd[20582]:   chdir_current_service: vfs_ChDir(/boot) failed: Permission denied. Current token: uid=872942130, gid=872940033, 10 groups: 872940033 0 1 2 3 4 6 10 17 281

 

A diagnostic file is attached.

 

As the error message is about switching to /boot, I already checked:

• the share settings for the flash drive
• sharing / unsharing works without errors, all servers have the same settings
• permissions of /boot: identical on all servers (drwx, root:root)
• mtab shows the same entry for /boot on all servers: 

/dev/sda1 /boot vfat rw,noatime,nodiratime,flush,dmask=77,fmask=177,shortname=mixed 0 0

 

Any idea where to look next?

 

bye

Volker

cineplex02-diagnostics-20210924-0900.zip

One person found a solution for somewhat similar problem: 

 

      https://forums.unraid.net/topic/113812-can-not-write-on-the-flash-volume-from-windows-or-macos/?tab=comments#comment-1036598

 

I have no explanation for why it worked for him...

 

EDIT:  Make sure you have enabled this setting:

Edited September 24, 20214 yr by Frank1940

Hi,

 

thanks for your input, but Settings/SMB "Enhanced macOS interoperability:" was already set to "No" and enabling disk shares did not help either.

 

Some more information:

• I can see the FLASH share via network and can even mount it, but I cannot access it ("access denied" in Windows) on ~50% of the Unraid servers
• All 11 servers have the same SMB / disk / flash share settings
• All servers are on Unraid 6.9.2

 

 

3 hours ago, imrevo said:

I can see the FLASH share via network and can even mount it, but I cannot access it ("access denied" in Windows) on ~50% of the Unraid servers

Perhaps, a stupid question....  Do you have a valid login to SMB on those servers?  By default, Windows denies  insecure access (Often called 'Guest') to any server.  You must have a SMB login to those servers to satisfy this Windows requirement.  Then depending on the Unraid security setup of the Flash share for that user, the Unraid server may  grant access to that share.

Edited September 24, 20214 yr by Frank1940

10 hours ago, Frank1940 said:

Perhaps, a stupid question....  Do you have a valid login to SMB on those servers?  By default, Windows denies  insecure access (Often called 'Guest') to any server.  You must have a SMB login to those servers to satisfy this Windows requirement.  Then depending on the Unraid security setup of the Flash share for that user, the Unraid server may  grant access to that share.

 

The servers are all joined to Active Directory. I just tested the connection from a Linux box:

root@cineplex01:~# mount -t cifs //cineplex07.celtic-ads.xxxx.xxxx/flash /07 -o username=imrevo,password=xxxx,domain=celtic-ads
root@cineplex01:~# mount -t cifs //cineplex08.celtic-ads.xxxx.xxxx/flash /08 -o username=imrevo,password=xxxx,domain=celtic-ads
mount error(13): Permission denied
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) and kernel log messages (dmesg)

 

So the issue is not related to Windows or "the client" but to the server.

I will remove one of the servers from AD, add a local user and try the connection again. I'll keep you posted.

[...some time later: ...]

Tests revealed:

As soon as I set the SMB Settings to "Enable SMB: Yes (Workgroup)", I can access the SMB share FLASH with the local user I created on Unraid.

When the setting is "Yes (Active Directory)", I cannot connect to the share with any user, AD or local: Permission denied. Unjoins, rejoins and reboots did not help.

 

Edited September 25, 20214 yr by imrevo
Performed some tests

I have never used Active Directory.  Might I suggest that you edit your first post and change the 'Title' of this thread to indicate that you have a problem getting to Unraid servers using Active Directory.

1 hour ago, Frank1940 said:

I have never used Active Directory.  Might I suggest that you edit your first post and change the 'Title' of this thread to indicate that you have a problem getting to Unraid servers using Active Directory.

 

Well, but this is not the case. I can access all shares on all servers BUT the share of the flash drive on SOME servers. And the error message (permission denied when changing directory to /boot) indicates a permission problem with the flash drive's share / mount point. 

 

But I thought you said you could get to the Flash Drive using standard SMB access methods.  When you tried AD you had the problem.  I didn't say the AD was the problem and Unraid was totally blameless but if you are being denied access when using AD, you need help from someone who has experience with AD/Unraid problems (which I do not have!!!).  They may be able to provide with help as to how to set things up so they will work.