CIFS not working for me after upgrade to 3.4b

[ghernando]

I am running Alfresco community 3.4b on a WIndows XP machine.
I've upgraded from Alfresco 3.4a.  A lot of the bugs that I saw in 3.4a seem to be fixed.
But I now have a problem with CIFS.  It had  been working for me with 3.4a.

I have CIFS configured in the alfresco-global.properties file with just this:

cifs.enabled=true
cifs.serverName=alfrepo

After startup Alfresco  I can see that it is running OK.

With nbtstat -n I see the following:
                NetBIOS Local Name Table

       Name               Type         Status
    ———————————————
    ALFREPO        <20>  UNIQUE      Registered
    ALFREPO        <00>  UNIQUE      Registered

I actually seem to be able to map the drive successfully.  It shows up in my computer folder list.
After I start navigating (as admin) through about the first two folders (Company Home and Sites) I start getting the following error.
Once I get the error I get the error on every folder that I click on, even ones that it let me navigate before the error happened.
Note that admin is the creator (Site Management) of the Share sites, so he should have authorization.

15:55:18,546 User:admin ERROR [org.alfresco.fileserver] org.alfresco.repo.security.permissions.AccessDeniedException: 10090002 Access Denied.  You do not have the appropriate permissions to perform this operation.
org.alfresco.repo.security.permissions.AccessDeniedException: 10090002 Access Denied.  You do not have the appropriate permissions to perform this operation.
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:48)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.audit.AuditMethodInterceptor.proceed(AuditMethodInterceptor.java:167)
   at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:137)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
   at $Proxy45.getStoreFreeSpace(Unknown Source)
   at org.alfresco.filesys.repo.ContentDiskDriver.getDiskInformation(ContentDiskDriver.java:3972)
   at org.alfresco.jlan.smb.server.ProtocolHandler.getDiskInformation(ProtocolHandler.java:157)
   at org.alfresco.jlan.smb.server.NTProtocolHandler.procTrans2QueryFileSys(NTProtocolHandler.java:4030)
   at org.alfresco.jlan.smb.server.NTProtocolHandler.processTransactionBuffer(NTProtocolHandler.java:1773)
   at org.alfresco.jlan.smb.server.NTProtocolHandler.procTransact2(NTProtocolHandler.java:1600)
   at org.alfresco.jlan.smb.server.NTProtocolHandler.runProtocol(NTProtocolHandler.java:232)
   at org.alfresco.jlan.smb.server.SMBSrvSession.runHandler(SMBSrvSession.java:1366)
   at org.alfresco.jlan.smb.server.SMBSrvSession.processPacket(SMBSrvSession.java:1458)
   at org.alfresco.jlan.smb.server.CIFSThreadRequest.runRequest(CIFSThreadRequest.java:59)
   at org.alfresco.jlan.server.thread.ThreadRequestPool$ThreadWorker.run(ThreadRequestPool.java:153)
   at java.lang.Thread.run(Thread.java:619)
Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.
   at net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86)
   at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:394)
   at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.model.ml.MLContentInterceptor.invoke(MLContentInterceptor.java:125)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44)
   … 19 more

A.)  What is wrong?  Why don't I have permission?
B.)  How can I fix this?

[loftux]

I've tested some more,
If you in Company Home for test purposes create a space, lets call it Test. Give the user you are accessing that folder via CIFS Collaborator rights on the Space. You can do that using Alfresco Explorer or Share Repository.
Now if you create and edit documents, it works.
If you only assign Collaborator on a specific document, it fails with access denied. Collaborator needs to be set on the space, so that temporary files that are created get Collaborator as well.

Also tested to set only Consumer rights on the Space, and Collaborator on a specific document. In that case you can open the document without error, but you cannot actually save the document. I guess that is hard to workaround, since word wants to write temp files, and you do not have those rights.

[loftux]

It is easy to mix Collaborator and Coordinator up, which I did. It is actually Coordinator you need to set.
Coordinator has
<permissionGroup name="Coordinator" allowFullControl="true" expose="true" /> (from permissionDefinitions.xml)
Collaborator has
      <permissionGroup name="Collaborator" allowFullControl="false" expose="true">
         <includePermissionGroup permissionGroup="Editor" type="cm:cmobject" />
         <includePermissionGroup permissionGroup="Contributor" type="cm:cmobject" />
      </permissionGroup>
SiteCollaborator has the same permissions as Collaborator. Neither of included permissions (editor and contributor) has delete rights. Delete rights comes by the fact that files you create you are the owner of, and owner have full rights. If it is delete right that is failing I dont know.

[romgo]

Hi,

this issue is made by the Resource Management module.  I installed alfresco 3.4b without this module and I don't have any more trouble with cifs.

See the following bug report for information :

https://issues.alfresco.com/jira/browse/ALF-5576

Regards,

[loftux]

I have raised a new issue on this http://issues.alfresco.com/jira/browse/ALF-5760

I did a test on a clean install of alfresco, no RM modules, no addons.
Still the same result, Works if you are Coordinator, if not cifs throws Access Denied.

[romgo]

Hello,

right I didn't saw this bug.
For information I don't have this issue with OpenOffice on Debian.


Regards,

[gnyce]

So I tested and found that if I assign Collaborator, CIFS editing files in place _does_ work, but only if I have not installed the Records Management module.  If I install RM, and still do the Collaborator assignation, I get the access-denied error…

[piski]

Hi all,

I've experienced the same issue … and I saw that's the bug is marked as solved :
https://issues.alfresco.com/jira/browse/ALF-5576
http://issues.alfresco.com/jira/browse/ALF-5760

This isn't clear for me ; this issue is caused by RM module, CIFS or both of them ?

Anyway, is there any chance, for Alfresco 3.4.b users (like me  ), to get an "individual" patch / fix (or a diff) to apply ourselves to correct the bug ?

Thanks a lot for your help !

[romgo]

Hello,

for the bug ALF-5576 they give a solution in order to solve the issue.

For the bug     ALF-5760 they don't give any solution at the moment. It will be available on the next release I guess.

According to me, we just have to wait…

[insrc]

Thanks y'all for the debugging: i've been struggling with this issue for some time on Alfresco Community 3.4c

Seems that this nasty bug has been fixed on 3.4 Enterprise but it sadly still there on Community 3.4c    I think that this bugs explains also the timeout i've been experiencing when browsing a Alfresco CIFS share and why CIFS browsing hangs for minutes

anyone experiencing it on 3.4c please ?

Thanks