SMB Share Restore Fails with ANS5250E and ANS2627W

SAmaro

Newcomer
Joined
Sep 29, 2009
Messages
3
Reaction score
0
Points
0
PREDATAR Control23

SMB Share Restore Fails with ANS5250E and ANS2627W

The SMB shares are on a Dell FS7610 NAS.

Spectrum Protect Server Version 7, Release 1, Level 7.200 running on Windows Server 2008 R2.
Spectrum Protect Client Version 7 Release 1 Level 8.0 running on Windows Server 2016.

Domain statement in dsm.opt:
DOMAIN "\\FS7610NAS\ShareName"

Backup of the share is successful, with no errors or warnings.

I log onto the client (Windows Server 2016) with a Domain Admin account that has full control of the share, share and NTFS permissions.

If I restore to the client's local drive, it is successful with no errors or warnings.

When I restore back to the NAS I get the following:

Restore command:
restore \\FS7610NAS\ShareName\Dir1\Fs7610Test.txt

*** Backup-Archive Command Line output:

tsm> restore \\FS7610NAS\ShareName\Dir1\Fs7610Test.txt
Restore function invoked.

ANS2627W The NTFS security attributes for object '\\FS7610NAS\ShareName\Dir1\Fs7610Test.txt' could not be set. Windows system error code: 5; reason: 'Access is denied.'. Default NTFS

security attributes have been set.
Restoring 15 \\FS7610NAS\ShareName\Dir1\Fs7610Test.txt [Done]

Restore processing finished.

Total number of objects restored: 1
Total number of objects failed: 0
Total number of bytes transferred: 298 B
Data transfer time: 0.00 sec
Network data transfer rate: 0.00 KB/sec
Aggregate data transfer rate: 0.08 KB/sec
Elapsed processing time: 00:00:03
tsm>

*** dsmerror.log:

07/31/2018 09:29:36 ANS5250E An unexpected error was encountered.
TSM function name : SetFileSecurityInfo
TSM function : SetKernelObjectSecurity() returned '5' for file '\\FS7610NAS\ShareName\Dir1\Fs7610Test.txt'
TSM return code : 106
TSM file : ..\..\common\fio\ntfileio.cpp (10014)
07/31/2018 09:29:36 ANS2627W The NTFS security attributes for object '\\FS7610NAS\ShareName\Dir1\Fs7610Test.txt' could not be set. Windows system error code: 5; reason: 'Access is denied.'.

Default NTFS security attributes have been set.
 
PREDATAR Control23

Being Domain Admins doesn't always mean full access to the files.

On \\FS7610NAS is Domain Admins part of the local Administrators group?

On \\FS7610NAS does Doman Admins and/or local Administrators have Full permissions on the share "ShareName"?

On \\FS7610NAS, does Doman Admins and/or local Administrators have Full permissions on the directory path associated with the share "ShareName"?
 
PREDATAR Control23

Thank you for posting. The answer to all three of your questions is yes.

If I add "-SKIPNTPermissions=yes" to the restore it is successful.

I've done some RoboCopy testing and the problem appears to be with the auditing information:
If I create a text file on my Windows server and RoboCopy /COPYALL it to the FS7610 it is successful.

I created a text file on the FS7610, backed it up and then restored it to the Windows server successfully. Then I run RoboCopy /COPYALL to the FS7610 and it errors with "access denied". I then run RoboCopy /copy:datso and it succeeds.

If I create a text file on the Windows server, back it up and then restore it to the FS7610 it errors with "access denied".

I've been working with Dell on this and they say they do not support writing auditing information.

I have a case open with IBM asking if there is any way not to write auditing information but have not heard back.
 
Top