Issue with Samba on OpenSuse Leap 15.1

[shocker]

Hello,
I just enabled samba with a basic configuration.
It seems that if you want to login from mac/windows the access is always denied.

Removing those lines from rockstor smb.conf configuration fix the issue:
root preexec = “/opt/rockstor/bin/mnt-share sharename”
root preexec close = yes

There are no errors in the logs except the permission denied to login.

Can anyone else reproduce this?

[Flox]

Hi @shocker,

That furiously looks similar to a recently identified particularity for samba in our “Built on openSUSE” with regards to AppArmor. See the post below:

Built on openSUSE testing channel live (early-adopters/developers only)

Thanks to @def_monk and @Flox for finding another requirement relevant to trialling our current “Built on openSUSE” rpms out. I’ve updated the canonical “openSUSE dev notes and status” technical wiki entry accordingly and further emphasised that doc’s changing nature in this threads original post. In short the addition, a hard won finding, is as follows: systemctl stop apparmor systemctl disable apparmor for Rockstor initiated samba shares to be accessible. Please read the dev notes for our p…

…and the detailed instructions written by @phillxnet in the dev notes, in particular the section entitled “Stop and Disable AppArmor”:

Built on openSUSE dev notes and status

This document represents the current and pending state of our move to openSUSE as our linux distro base for Rockstor and is not an endorsement of it’s use or support status but is simply intended to share the progress and development made to date. It is intended as a developers document so any changes made should be in accordance with keeping this text up to date with the current code state, including in this case pending pr’s. If you wish to comment on our openSUSE move in general, as opposed …

Try these first and make sure AppArmor is disabled after a reboot; it should at least help with your issues.

[shocker]

Thanks @Flox
Wasn’t aware about that post I have disabled it but unfortunately I cannot reboot the system right now. Only stopping the apparmour is not fixing the issue. Also disabled the ipv6 via sysctl -w for the moment.

I’ll come back with a feedback after my btrfs delete comand will end. I think it will take a week or so

P.S. I think a warning in rockstor web gui that the apparmour is not disabled will help users a lot

[Flox]

Yeah that should help.

P.S. I think a warning in rockstor web gui that the apparmour is not disabled will help users a lot

As explained by @phillxnet, AppArmor will be disabled by default in the new installer so that shouldn’t be a problem for now. I believe the goal would be to make Rockstor compatible with AppArmor in the future, though, so that can of indicator would definitely be a good idea.