• Please help support our sponsors by considering their products and services.
    Our sponsors enable us to serve you with this high-speed Internet connection and fast webservers you are currently using at ADSM.ORG.
    They support this free flow of information and knowledge exchange service at no cost to you.

    Please welcome our latest sponsor Tectrade . We can show our appreciation by learning more about Tectrade Solutions
  • Community Tip: Please Give Thanks to Those Sharing Their Knowledge.

    If you receive helpful answer on this forum, please show thanks to the poster by clicking "LIKE" link for the answer that you found helpful.

  • Community Tip: Forum Rules (PLEASE CLICK HERE TO READ BEFORE POSTING)

    Click the link above to access ADSM.ORG Acceptable Use Policy and forum rules which should be observed when using this website. Violators may be banned from this website. This notice will disappear after you have made at least 3 posts.

SMB Share Restore Fails with ANS5250E and ANS2627W

#1
SMB Share Restore Fails with ANS5250E and ANS2627W

The SMB shares are on a Dell FS7610 NAS.

Spectrum Protect Server Version 7, Release 1, Level 7.200 running on Windows Server 2008 R2.
Spectrum Protect Client Version 7 Release 1 Level 8.0 running on Windows Server 2016.

Domain statement in dsm.opt:
DOMAIN "\\FS7610NAS\ShareName"

Backup of the share is successful, with no errors or warnings.

I log onto the client (Windows Server 2016) with a Domain Admin account that has full control of the share, share and NTFS permissions.

If I restore to the client's local drive, it is successful with no errors or warnings.

When I restore back to the NAS I get the following:

Restore command:
restore \\FS7610NAS\ShareName\Dir1\Fs7610Test.txt

*** Backup-Archive Command Line output:

tsm> restore \\FS7610NAS\ShareName\Dir1\Fs7610Test.txt
Restore function invoked.

ANS2627W The NTFS security attributes for object '\\FS7610NAS\ShareName\Dir1\Fs7610Test.txt' could not be set. Windows system error code: 5; reason: 'Access is denied.'. Default NTFS

security attributes have been set.
Restoring 15 \\FS7610NAS\ShareName\Dir1\Fs7610Test.txt [Done]

Restore processing finished.

Total number of objects restored: 1
Total number of objects failed: 0
Total number of bytes transferred: 298 B
Data transfer time: 0.00 sec
Network data transfer rate: 0.00 KB/sec
Aggregate data transfer rate: 0.08 KB/sec
Elapsed processing time: 00:00:03
tsm>

*** dsmerror.log:

07/31/2018 09:29:36 ANS5250E An unexpected error was encountered.
TSM function name : SetFileSecurityInfo
TSM function : SetKernelObjectSecurity() returned '5' for file '\\FS7610NAS\ShareName\Dir1\Fs7610Test.txt'
TSM return code : 106
TSM file : ..\..\common\fio\ntfileio.cpp (10014)
07/31/2018 09:29:36 ANS2627W The NTFS security attributes for object '\\FS7610NAS\ShareName\Dir1\Fs7610Test.txt' could not be set. Windows system error code: 5; reason: 'Access is denied.'.

Default NTFS security attributes have been set.
 

marclant

ADSM.ORG Moderator
#2
Being Domain Admins doesn't always mean full access to the files.

On \\FS7610NAS is Domain Admins part of the local Administrators group?

On \\FS7610NAS does Doman Admins and/or local Administrators have Full permissions on the share "ShareName"?

On \\FS7610NAS, does Doman Admins and/or local Administrators have Full permissions on the directory path associated with the share "ShareName"?
 
#3
Thank you for posting. The answer to all three of your questions is yes.

If I add "-SKIPNTPermissions=yes" to the restore it is successful.

I've done some RoboCopy testing and the problem appears to be with the auditing information:
If I create a text file on my Windows server and RoboCopy /COPYALL it to the FS7610 it is successful.

I created a text file on the FS7610, backed it up and then restored it to the Windows server successfully. Then I run RoboCopy /COPYALL to the FS7610 and it errors with "access denied". I then run RoboCopy /copy:datso and it succeeds.

If I create a text file on the Windows server, back it up and then restore it to the FS7610 it errors with "access denied".

I've been working with Dell on this and they say they do not support writing auditing information.

I have a case open with IBM asking if there is any way not to write auditing information but have not heard back.
 

Advertise at ADSM.ORG

If you are reading this, so are your potential customer. Advertise at ADSM.ORG right now.

UpCloud high performance VPS at $5/month

Get started with $25 in credits on Cloud Servers. You must use link below to receive the credit. Use the promo to get upto 5 month of FREE Linux VPS.

The Spectrum Protect TLA (Three-Letter Acronym): ISP or something else?

  • Every product needs a TLA, Let's call it ISP (IBM Spectrum Protect).

    Votes: 18 18.6%
  • Keep using TSM for Spectrum Protect.

    Votes: 59 60.8%
  • Let's be formal and just say Spectrum Protect

    Votes: 12 12.4%
  • Other (please comement)

    Votes: 8 8.2%

Forum statistics

Threads
31,665
Messages
134,993
Members
21,693
Latest member
bajakmk
Top