[cifs-discuss] Backups and permission problems with Microsoft's robocopy.exe

[Ross Smith]

Cool, thanks for the reply.  Are you able to give me any pointers on how to run a trace from Solaris so I can confirm this is a known problem?
 
Do you know if these limitations something that Sun are going to be working to fix (I'm not in a huge rush, but it'd be nice to be able to use this by christmas)?  I wonder if they'd affect the data migration project that's being worked on.
 
> Date: Tue, 22 Jul 2008 11:13:18 -0700> From: Afshin.Ardakani at Sun.COM> Subject: Re: [cifs-discuss] Backups and permission problems with Microsoft's robocopy.exe> To: myxiplx at hotmail.com> CC: cifs-discuss at opensolaris.org> > We have some known limitations where backup/restore privileges are> needed to perform operations. I cannot say for sure that what you're> seeing is related but it's quite possible. Some network trace from> failed operations could be helpful to verify that (one file should be> enough so the trace is manageable).> > Only users can be added as member of CIFS local groups at this point.> You can monitor the following RFE if you're interested in this feature:> > 6656828 Should be able to add domain groups as member of local groups> > Afshin> > Ross wrote:> > I'm having a few permissions problems with a test CIFS server I've set up. I've joined the server to the domain, and from windows I don't appear to have any problems. I can connect to the share and set permissions from windows explorer fine.> > > > Right now I've set the permissions from Windows so that "Domain Admins" have full control over this folder, and that's the only entry in the ACL. Checking permissions in Solaris shows that as:> > 0:group:2147483660:list_directory/read_data...etc:file_inherit/dir_inherit:allow> > > > The problem I'm having is that I'm trying to use robocopy.exe from the windows resource kit to transfer a bunch of test files to the new server. I'm using the /B switch to get robocopy to work in backup mode, which should allow it to set permissions.> > > > The first time I attempted this, I had an error:> > "Error 1332 (0x00000534) Copying NTFS Security to Destination. No mapping between account names and security IDs was done"> > > > I then researched CIFS permissions, and added my user account to the "backup operators" group. Now when I use robocopy I get this error:> > "The access control list (ACL) structure is invalid."> > > > It is copying the files over, but they are simply inheriting the permissions I've already set on this folder, instead of applying the permissions from the old server.> > > > If I try to use windows backup instead of robocopy, permissions are set correctly, but as the restore starts it generates this warning:> > "Warning: The restore destination does not support some file system features of the original device. Some data may not be restored as a result."> > > > Does anybody know why Robocopy would be warning that the ACL structure is invalid, or what features windows Backup could be complaining about?> > > > thanks,> > > > Ross> > > > PS. Is there any way to add groups to the CIFS groups such as "backup operators"? I tried adding "domain admins" to that group but got the following error:> > # smbadm add-member -m "robinsons/domain admins" "backup operators"> > failed to add robinsons\domain admins (invalid member type)> > --> > This messages posted from opensolaris.org> > _______________________________________________> > cifs-discuss mailing list> > cifs-discuss at opensolaris.org> > http://mail.opensolaris.org/mailman/listinfo/cifs-discuss> 
_________________________________________________________________
The John Lewis Clearance - save up to 50% with FREE delivery
http://clk.atdmt.com/UKM/go/101719806/direct/01/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.opensolaris.org/pipermail/cifs-discuss/attachments/20080722/599d21d7/attachment-0001.html