Re: [Samba] vfs_ChDir fails, even though the share is read-write for that user

2007-12-13 Thread James R Grinter
On Wed, Dec 12, 2007 at 02:15:45PM -0800, Jeremy Allison wrote: No, sorry. You need to find out if the smbd server has the correct groups associated with it's token when it's representing the user. Not sure how to get ps to display this info. pcred(1) will show all process credentials, on

Re: [Samba] vfs_ChDir fails, even though the share is read-write for that user

2007-12-13 Thread Nathan VanHoudnos
(Forgot to copy the list.) Thanks for the info. I've opened a ticket with Sun to get a workaround resolved. I'll report back to the list with whatever I hear back. Thanks, Nathan On Thu, 2007-12-13 at 11:01 +, James R Grinter wrote: On Wed, Dec 12, 2007 at 02:15:45PM -0800, Jeremy

Re: [Samba] vfs_ChDir fails, even though the share is read-write for that user

2007-12-13 Thread Nathan VanHoudnos
I've verified that it is an ngroups_max issue. As it stands, Solaris cannot integrate with Active Directory if there exist users who are members of more then 32 groups. Worse, the number of groups is calculated by Samba by taking the number of groups a user is properly a member of PLUS the number

Re: [Samba] vfs_ChDir fails, even though the share is read-write for that user

2007-12-13 Thread Jeremy Allison
On Thu, Dec 13, 2007 at 11:01:12AM +, James R Grinter wrote: On Wed, Dec 12, 2007 at 02:15:45PM -0800, Jeremy Allison wrote: No, sorry. You need to find out if the smbd server has the correct groups associated with it's token when it's representing the user. Not sure how to get ps

Re: [Samba] vfs_ChDir fails, even though the share is read-write for that user

2007-12-13 Thread simo
On Thu, 2007-12-13 at 11:27 -0600, Nathan VanHoudnos wrote: My site has many OU's, and several OU admins have set groups with Domain Users as members. This is a design issue, Domain Users contains basically all domain users, so a group that includes Domain Users is simply a waste and a

[Samba] vfs_ChDir fails, even though the share is read-write for that user

2007-12-12 Thread Nathan VanHoudnos
Hi, I'm running Samba Version 3.0.25c on Solaris 10 8/07 on X86 hardware. It's successfully joined to AD. But, and there always is a but, if : * A user is a member of SomeGroup * and the share alllows SomeGroup to access it * and SomeGroup is NOT what the user has set as their Primary Group

Re: [Samba] vfs_ChDir fails, even though the share is read-write for that user

2007-12-12 Thread Jeremy Allison
On Wed, Dec 12, 2007 at 02:21:43PM -0600, Nathan VanHoudnos wrote: Hi, I'm running Samba Version 3.0.25c on Solaris 10 8/07 on X86 hardware. It's successfully joined to AD. But, and there always is a but, if : * A user is a member of SomeGroup * and the share alllows SomeGroup to

Re: [Samba] vfs_ChDir fails, even though the share is read-write for that user

2007-12-12 Thread Jeremy Allison
On Wed, Dec 12, 2007 at 01:38:43PM -0800, Jeremy Allison wrote: On Wed, Dec 12, 2007 at 02:21:43PM -0600, Nathan VanHoudnos wrote: Which is good. And, we can see that samba is correctly finding all of the groups that this user is a member of... [2007/12/12 10:09:17, 5]

Re: [Samba] vfs_ChDir fails, even though the share is read-write for that user

2007-12-12 Thread Nathan VanHoudnos
Jeremy, Thanks for the quick response! As per your suggestion, I edited /etc/system to include set ngroups_max = 100 And then rebooted the system. Unfortunately, it didn't work. The Samba logs look unchanged from before. Any other ideas? Cheers, Nathan On Wed, 2007-12-12 at 13:40

Re: [Samba] vfs_ChDir fails, even though the share is read-write for that user

2007-12-12 Thread simo
On Wed, 2007-12-12 at 16:06 -0600, Nathan VanHoudnos wrote: Jeremy, Thanks for the quick response! As per your suggestion, I edited /etc/system to include set ngroups_max = 100 And then rebooted the system. Unfortunately, it didn't work. The Samba logs look unchanged from before.

Re: [Samba] vfs_ChDir fails, even though the share is read-write for that user

2007-12-12 Thread Jeremy Allison
On Wed, Dec 12, 2007 at 04:06:03PM -0600, Nathan VanHoudnos wrote: Jeremy, Thanks for the quick response! As per your suggestion, I edited /etc/system to include set ngroups_max = 100 And then rebooted the system. Unfortunately, it didn't work. The Samba logs look unchanged from