Bug 13193 - samba warning that wide links disabled because smb1 unix extensions enabled
Summary: samba warning that wide links disabled because smb1 unix extensions enabled
Status: CLOSED FIXED
Alias: None
Product: IPFire
Classification: Unclassified
Component: --- (show other bugs)
Version: 2
Hardware: unspecified Unspecified
: - Unknown - Minor Usability
Assignee: Adolf Belka
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-07-26 15:40 UTC by Adolf Belka
Modified: 2023-09-28 10:47 UTC (History)
1 user (show)

See Also:


Attachments
smbd warning message (176 bytes, text/plain)
2023-07-26 15:40 UTC, Adolf Belka
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Adolf Belka 2023-07-26 15:40:41 UTC
Created attachment 1226 [details]
smbd warning message

The attached warning message is shown if a share in samba has a wide link in place.

wide links = yes is written into the smb.confg file by samba.cgi but smb1 unix extensions = yes by default which means that if there is a symlink in a samba share that points outside of the share directory tree then that symlink will never be shown.

This occurred around 3 years ago when the samba wui page was simplified. The wide links = yes was added but the smb1 unix extensions (originally synonymous with unix extensions) was not specified meaning that the default value was used which is yes.
Comment 1 Adolf Belka 2023-07-26 15:42:09 UTC
Patch will be created that adds smb1 unix extensions = no to the smb.conf file.

This has been confirmed to work on my vm testbed system with samba installed.
Comment 2 Adolf Belka 2023-07-26 15:48:23 UTC
This issue was flagged up in a forum post on another samba related issue.

https://community.ipfire.org/t/samba-performance-4-18-1/10086
Comment 3 Adolf Belka 2023-07-26 21:07:27 UTC
Patch has been created and tested and submitted to the dev mailing list and patchwork

https://lists.ipfire.org/pipermail/development/2023-July/016191.html
https://patchwork.ipfire.org/project/ipfire/patch/20230726210359.24473-1-adolf.belka@ipfire.org/
Comment 4 Michael Tremer 2023-07-31 13:33:39 UTC
I am not sure if this is free from any side-effects if we change defaults for shares. However, the UNIX extensions have always been causing trouble, so let's turn them off and be safe.

IPFire is not a fileserver. If people run into trouble, they might want to look at an alternative or (re-)enable this on a per-share basis.
Comment 7 Adolf Belka 2023-09-04 10:34:47 UTC
Verified that message about wide links = yes clashing with smb1 unix extensions = yes is no longer seen.