Bug 13193

Summary: samba warning that wide links disabled because smb1 unix extensions enabled
Product: IPFire Reporter: Adolf Belka <adolf.belka>
Component: ---Assignee: Adolf Belka <adolf.belka>
Status: CLOSED FIXED QA Contact:
Severity: Minor Usability    
Priority: - Unknown - CC: michael.tremer
Version: 2   
Hardware: unspecified   
OS: Unspecified   
Attachments: smbd warning message

Description Adolf Belka 2023-07-26 15:40:41 UTC
Created attachment 1226 [details]
smbd warning message

The attached warning message is shown if a share in samba has a wide link in place.

wide links = yes is written into the smb.confg file by samba.cgi but smb1 unix extensions = yes by default which means that if there is a symlink in a samba share that points outside of the share directory tree then that symlink will never be shown.

This occurred around 3 years ago when the samba wui page was simplified. The wide links = yes was added but the smb1 unix extensions (originally synonymous with unix extensions) was not specified meaning that the default value was used which is yes.
Comment 1 Adolf Belka 2023-07-26 15:42:09 UTC
Patch will be created that adds smb1 unix extensions = no to the smb.conf file.

This has been confirmed to work on my vm testbed system with samba installed.
Comment 2 Adolf Belka 2023-07-26 15:48:23 UTC
This issue was flagged up in a forum post on another samba related issue.

Comment 3 Adolf Belka 2023-07-26 21:07:27 UTC
Patch has been created and tested and submitted to the dev mailing list and patchwork

Comment 4 Michael Tremer 2023-07-31 13:33:39 UTC
I am not sure if this is free from any side-effects if we change defaults for shares. However, the UNIX extensions have always been causing trouble, so let's turn them off and be safe.

IPFire is not a fileserver. If people run into trouble, they might want to look at an alternative or (re-)enable this on a per-share basis.
Comment 7 Adolf Belka 2023-09-04 10:34:47 UTC
Verified that message about wide links = yes clashing with smb1 unix extensions = yes is no longer seen.