Mobile Access portal error: Insufficient permissions to move uploaded "Array" file.

[CheckMate-R77]

Hello.

On Mobile Access portal we use file shares functionality. It opens CheckPoint Capsule and we can browse our folders and download files. We can also create new folders, but when we try to upload anything we get following error:

"Insufficient permissions to move uploaded "Array" file".

Does anybody has this error?

On local access (through Windows shares) we have all necessary permissions and we can upload without errors.

Regards

Mirek

[PhoneBoy]

What version of Security Gateway?
And I’m not sure what you mean by Check Point Capsule in this context.
What specific client on what platform?

[CheckMate-R77]

Security Gateway R80.10

Gaia Kernel: 2.6.18-92cpx86_64

Build number: 479

CheckPoint Capsule as a default file share browser. Besides no matter what web browser I use (Mozilla, Chrome, Edge) it's still the same error.

However there is another issue

I have following file share on windows server:

\\192.168.1.23\fs

but when I try to get to

\\192.168.1.23\fs\PI\SEKRETARIAT

through CheckPoint Capsule I need click 3 times on PI folder to get to SEKRETARIAT folder (shown by the red circle on screenshot). But normally/locally from windows workstation I need to click only once to get from PI to SEKRETARIAT below it.

[PhoneBoy]

You should probably work with the TAC to troubleshoot this.
That said, I highly recommend upgrading your gateway to R80.40.
This uses a newer Linux kernel (3.10), which allows newer versions of SMB to be used, which may resolve the issues you're seeing.

[Wolfgang]

@CheckMate-R77 

does your file share support only SMB v3?

This is not supported. As mentioned by @PhoneBoy only GAiA kernel 3.10 support this.

If you are accessing your fileshare via DFS, this is too not supported.

Try accessing the file share with an user with more rights, most of the errors I‘ve seen are with wrong filesystem and fileshare permissions.

Have a look on the gateway with „mount“ command after trying access to the fileshare. There should be a CIFS-Mount point with your share.

Can you please share the error Message in the logs of your SMS.

Wolfgang

[CheckMate-R77]

Currently I'm testing 2 different file shares on 2 different servers

This is what mount command shows:

[Expert@gw1:0]# mount

//192.168.1.23/fs on /opt/CPcvpn-R80/mnt/cvpn_mnt/ml24 type cifs (rw,mand)

//192.168.1.53/test on /opt/CPcvpn-R80/mnt/cvpn_mnt/ml25 type cifs (rw,mand)

.. (rest omitted)

Share //192.168.1.23/fs is on Windows Server 2008 R2 Enterprise (64-bit)

C:\Users>sc.exe qc lanmanworkstation
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: lanmanworkstation
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\System32\svchost.exe -k NetworkService
LOAD_ORDER_GROUP : NetworkProvider
TAG : 0
DISPLAY_NAME : Workstation
DEPENDENCIES : Bowser
: MRxSmb10
: MRxSmb20
: NSI
SERVICE_START_NAME : NT AUTHORITY\NetworkService

and no SMB key in HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters

And Share //192.168.1.53/test is on Windows Server 2016 Datacenter (64-bit)

According to docs.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-s...

PS C:\Users> Get-WindowsFeature FS-SMB1

Display Name Name Install State
------------ ---- -------------
[X] SMB 1.0/CIFS File Sharing Support FS-SMB1 Installed

And

PS C:\Users> Get-SmbServerConfiguration | Select EnableSMB2Protocol

EnableSMB2Protocol
------------------
True

Thank You very much

Mirek