nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

CIFS not working for me after upgrade to 3.4b

ghernando

I am running Alfresco community 3.4b on a WIndows XP machine.
I've upgraded from Alfresco 3.4a. A lot of the bugs that I saw in 3.4a seem to be fixed.
But I now have a problem with CIFS. It had been working for me with 3.4a.

I have CIFS configured in the alfresco-global.properties file with just this:

cifs.enabled=true
cifs.serverName=alfrepo

After startup Alfresco I can see that it is running OK.

With nbtstat -n I see the following:
                NetBIOS Local Name Table

       Name               Type         Status
    ———————————————
    ALFREPO        <20> UNIQUE      Registered
    ALFREPO        <00> UNIQUE      Registered

I actually seem to be able to map the drive successfully. It shows up in my computer folder list.
After I start navigating (as admin) through about the first two folders (Company Home and Sites) I start getting the following error.
Once I get the error I get the error on every folder that I click on, even ones that it let me navigate before the error happened.
Note that admin is the creator (Site Management) of the Share sites, so he should have authorization.

15:55:18,546 User:admin ERROR [org.alfresco.fileserver] org.alfresco.repo.security.permissions.AccessDeniedException: 10090002 Access Denied. You do not have the appropriate permissions to perform this operation.
org.alfresco.repo.security.permissions.AccessDeniedException: 10090002 Access Denied. You do not have the appropriate permissions to perform this operation.
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:48)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.audit.AuditMethodInterceptor.proceed(AuditMethodInterceptor.java:167)
   at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:137)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
   at $Proxy45.getStoreFreeSpace(Unknown Source)
   at org.alfresco.filesys.repo.ContentDiskDriver.getDiskInformation(ContentDiskDriver.java:3972)
   at org.alfresco.jlan.smb.server.ProtocolHandler.getDiskInformation(ProtocolHandler.java:157)
   at org.alfresco.jlan.smb.server.NTProtocolHandler.procTrans2QueryFileSys(NTProtocolHandler.java:4030)
   at org.alfresco.jlan.smb.server.NTProtocolHandler.processTransactionBuffer(NTProtocolHandler.java:1773)
   at org.alfresco.jlan.smb.server.NTProtocolHandler.procTransact2(NTProtocolHandler.java:1600)
   at org.alfresco.jlan.smb.server.NTProtocolHandler.runProtocol(NTProtocolHandler.java:232)
   at org.alfresco.jlan.smb.server.SMBSrvSession.runHandler(SMBSrvSession.java:1366)
   at org.alfresco.jlan.smb.server.SMBSrvSession.processPacket(SMBSrvSession.java:1458)
   at org.alfresco.jlan.smb.server.CIFSThreadRequest.runRequest(CIFSThreadRequest.java:59)
   at org.alfresco.jlan.server.thread.ThreadRequestPool$ThreadWorker.run(ThreadRequestPool.java:153)
   at java.lang.Thread.run(Thread.java:619)
Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.
   at net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86)
   at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:394)
   at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.model.ml.MLContentInterceptor.invoke(MLContentInterceptor.java:125)
   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
   at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44)
   … 19 more

A.) What is wrong? Why don't I have permission?
B.) How can I fix this?

Find more posts tagged with

Comments

gnyce

I'm seeing something very similar here with CIFS and 3.4b out of the box, no customization… either in a User Home, or a newly-created Share site, I can open a .doc/.xls/.txt file directly, but trying to save gets me a AccessDeniedException: 10110004…. dont' quite see how this is truly a permissions problem, but will do some more digging.

ghernando

Let me know if you can figure anything out about this.
Right now for me 3.4b is looking good except for this problem. This may cause me to go back to an earlier release.

Anyone else have any ideas?

gnyce

No success so far. It is, for all intents and purposes, unusable to edit files in-place using CIFS. My _hope_ is that there is some new security setting or something we are not aware of, but… I think that is a stretch.

davidbalt

Yes, this is definitely a bug. I found these bugs that relate:

http://issues.alfresco.com/jira/browse/ALF-4526
http://issues.alfresco.com/jira/browse/ALF-3188 ** can't actually see this bug, but allegedly it is the original bug from above **

hannesclp

We are having the very same issue with an out of the box installation of 3.4b on a Ubuntu 10.04 System. Downgrading to 3.4a fixes the issue.

loftux

What if you try adding to alfresco-global.properties
filesystem.acl.global.defaultAccessLevel=Write

and for a particular user, try

filesystem.acl.global.userAccessControls=peter
filesystem.acl.global.userAccessControls.value.peter.accessType=Write

At first I thought this helped, but might be worth trying for others.
The reason I thought it worked was that I tested applying this, and upon restart did test with a plain text document. This works fine, you can edit and update. But as soon as you try to edit a MS word document (in my case 2003 version), you get access denied. And from there on, nothing works.

loftux

It seems like it works if you are coordinator on the space, so that you have full access to everything created in the folder. If I set the user to have Contributor, it gave access denied. Probably because some temp files get created with other user or system, and MS word are unable to read/delete them. Looks like it is not the case if You are Coordinator.

So for CIFS, it looks like you either give users just consumer rights, or full Coordinator rights.

Can someone else test this and confirm?

gnyce

I can try sometime later today. I also note that there are new builds (dated Nov 15) in the nightly build directory for 3.4b. It is probably too much to hope for such a speedy correction, but… going to try it anyway

gnyce

There does not seem to be any change in behavior with the Nov15 nightly of 3.4b (linux 32-bit).

I also tried creating a site, made myself a Collaborator, and uploaded a txt file via CIFS…. opened, added some text, and when trying to save, alfresco.log recorded this immediately. No joy.

06:45:06,960 ERROR [org.alfresco.fileserver] org.alfresco.repo.security.permissions.AccessDeniedException: 10160004 Access Denied. You do not have the appropriate permissions to perform this operation.
org.alfresco.repo.security.permissions.AccessDeniedException: 10160004 Access Denied. You do not have the appropriate permissions to perform this operation.
        at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:48)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
        at org.alfresco.repo.audit.AuditMethodInterceptor.proceed(AuditMethodInterceptor.java:167)
        at org.alfresco.repo.audit.AuditMethodInterceptor.invoke(AuditMethodInterceptor.java:137)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
        at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:107)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
        at $Proxy45.getStoreFreeSpace(Unknown Source)
        at org.alfresco.filesys.repo.ContentDiskDriver.getDiskInformation(ContentDiskDriver.java:3972)
        at org.alfresco.jlan.smb.server.ProtocolHandler.getDiskInformation(ProtocolHandler.java:157)
        at org.alfresco.jlan.smb.server.NTProtocolHandler.procTrans2QueryFileSys(NTProtocolHandler.java:3991)
        at org.alfresco.jlan.smb.server.NTProtocolHandler.processTransactionBuffer(NTProtocolHandler.java:1773)
        at org.alfresco.jlan.smb.server.NTProtocolHandler.procTransact2(NTProtocolHandler.java:1600)
        at org.alfresco.jlan.smb.server.NTProtocolHandler.runProtocol(NTProtocolHandler.java:232)
        at org.alfresco.jlan.smb.server.SMBSrvSession.runHandler(SMBSrvSession.java:1366)
        at org.alfresco.jlan.smb.server.SMBSrvSession.processPacket(SMBSrvSession.java:1458)
        at org.alfresco.jlan.smb.server.nio.NIOCIFSThreadRequest.runRequest(NIOCIFSThreadRequest.java:105)
        at org.alfresco.jlan.server.thread.ThreadRequestPool$ThreadWorker.run(ThreadRequestPool.java:153)
        at java.lang.Thread.run(Thread.java:619)
Caused by: net.sf.acegisecurity.AccessDeniedException: Access is denied.
        at net.sf.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:86)
        at net.sf.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:394)
        at net.sf.acegisecurity.intercept.method.aopalliance.MethodSecurityInterceptor.invoke(MethodSecurityInterceptor.java:77)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
        at org.alfresco.repo.model.ml.MLContentInterceptor.invoke(MLContentInterceptor.java:125)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
        at org.alfresco.repo.security.permissions.impl.ExceptionTranslatorMethodInterceptor.invoke(ExceptionTranslatorMethodInterceptor.java:44)
        … 19 more

loftux

I've tested some more,
If you in Company Home for test purposes create a space, lets call it Test. Give the user you are accessing that folder via CIFS Collaborator rights on the Space. You can do that using Alfresco Explorer or Share Repository.
Now if you create and edit documents, it works.
If you only assign Collaborator on a specific document, it fails with access denied. Collaborator needs to be set on the space, so that temporary files that are created get Collaborator as well.

Also tested to set only Consumer rights on the Space, and Collaborator on a specific document. In that case you can open the document without error, but you cannot actually save the document. I guess that is hard to workaround, since word wants to write temp files, and you do not have those rights.

loftux

It is easy to mix Collaborator and Coordinator up, which I did. It is actually Coordinator you need to set.
Coordinator has
<permissionGroup name="Coordinator" allowFullControl="true" expose="true" /> (from permissionDefinitions.xml)
Collaborator has
      <permissionGroup name="Collaborator" allowFullControl="false" expose="true">
         <includePermissionGroup permissionGroup="Editor" type="cm:cmobject" />
         <includePermissionGroup permissionGroup="Contributor" type="cm:cmobject" />
      </permissionGroup>
SiteCollaborator has the same permissions as Collaborator. Neither of included permissions (editor and contributor) has delete rights. Delete rights comes by the fact that files you create you are the owner of, and owner have full rights. If it is delete right that is failing I dont know.

romgo

Hi,

this issue is made by the Resource Management module. I installed alfresco 3.4b without this module and I don't have any more trouble with cifs.

See the following bug report for information :

https://issues.alfresco.com/jira/browse/ALF-5576

Regards,

loftux

I have raised a new issue on this http://issues.alfresco.com/jira/browse/ALF-5760

I did a test on a clean install of alfresco, no RM modules, no addons.
Still the same result, Works if you are Coordinator, if not cifs throws Access Denied.

romgo

Hello,

right I didn't saw this bug.
For information I don't have this issue with OpenOffice on Debian.

Regards,

gnyce

So I tested and found that if I assign Collaborator, CIFS editing files in place _does_ work, but only if I have not installed the Records Management module. If I install RM, and still do the Collaborator assignation, I get the access-denied error…

piski

Hi all,

I've experienced the same issue … and I saw that's the bug is marked as solved :
https://issues.alfresco.com/jira/browse/ALF-5576
http://issues.alfresco.com/jira/browse/ALF-5760

This isn't clear for me ; this issue is caused by RM module, CIFS or both of them ?

Anyway, is there any chance, for Alfresco 3.4.b users (like me

), to get an "individual" patch / fix (or a diff) to apply ourselves to correct the bug ?

Thanks a lot for your help !

romgo

Hello,

for the bug ALF-5576 they give a solution in order to solve the issue.

For the bug ALF-5760 they don't give any solution at the moment. It will be available on the next release I guess.

According to me, we just have to wait…

insrc

Thanks y'all for the debugging: i've been struggling with this issue for some time on Alfresco Community 3.4c

Seems that this nasty bug has been fixed on 3.4 Enterprise but it sadly still there on Community 3.4c

I think that this bugs explains also the timeout i've been experiencing when browsing a Alfresco CIFS share and why CIFS browsing hangs for minutes

anyone experiencing it on 3.4c please ?

Thanks