Hi, I tried everything, I'm using the Administrator user in windows 10, I check and he has the rights to do everything, nevertheless in smbclient I have several ERRORS saying "NT_STATUS_ACCESS_DENIED listing" this is system files or system directories.
The backup I want to do is the users directories, and I can read that directories and files, it seems amanda fails because of the previous ERRORS. Even if I put something like this //pcwindows/c$/Users/user/files and I'm positive that I can read these dir and files, I still have error in //pcwindows/c$/Progranas NT_STATUS_ACCESS_DENIED listing \Programas\* And this is not in the PATH of the backup :( Cheers, Nuno On Mon, 2020-04-20 at 18:05 -0400, Nathan Stratton Treadway wrote: > On Sat, Apr 18, 2020 at 11:44:18 +0100, Nuno Dias wrote: > > Hi, > > > > The OS is Fedora 30 with amanda-3.5.1-19.fc30.x86_64 and samba- > > client-4.10.14-0.fc30.x86_64 (this are the packages from the OS). > > > > The error that I have is accessing some files, > > > > ERROR smbclient: NT_STATUS_ACCESS_DENIED listing > > Windows\\System32\\config\\systemprofile\\AppData\\Local\\Microsoft > > \\Wi > > ndows\\INetCache\\Content.IE5\\*" > > > > Can this be the reason all the estimates fails? > > Yes, it could be (though I would expect to see a more explict failure > message from the estimate phase later on in the log file if that were > the case). > > You will certainly need to connect to your Windows client using a > username which has sufficient permissions to read all files, and also > to > update the "archive bit" on the backed-up files so that level 1 dumps > work as expected. > > I haven't delived into the nuances of NTFS permissions and have only > gone through this on a single windows client machine, but in my > experimentation I found that setting the following permissions using > Server Manager for the particular shares in question produced a > working > level-1 backup with no error messages in the log, while also at least > preventing obvious editing of the share by the backup user : > permissions (for the smbclient user) enabled: > "Read & exectue", > "List folder contents", > "Read" > > Advanced Attributes enabled: > "Traverse folder/execute file", > "List folder/read data", > "Read attributes", > "Read extended attributes", > "Read permissions" > "Write attributes" > > (On this particular client box, then Sharing tab already had "Full > Control" granted to Everyone, so I did not have to fine-tune the > settings there to get Amanda working.) > > Hope that is at least somewhat helpful... > > > Nathan > > ------------------------------------------------------------------- > --------- > Nathan Stratton Treadway - natha...@ontko.com - Mid-Atlantic > region > Ray Ontko & Co. - Software consulting services - > http://www.ontko.com/ > GPG Key: http://www.ontko.com/~nathanst/gpg_key.txt ID: > 1023D/ECFB6239 > Key fingerprint = 6AD8 485E 20B9 5C71 231C 0C32 15F3 ADCD ECFB 6239 -- Nuno Dias <nd...@lip.pt> LIP