The text capture is not really useful for our diagnosis purposes, please send a binary capture.
Afshin On 12/14/10 04:45 PM, Chidambaram Muthu wrote:
Hi, I have captured the network packets saved in text format and attached here. You could find some changes, since previous gendiag output is a modified one but this not so. Server: filerz02 (Opensolaris 134 server) IP address : 10.1.5.158 What's your client OS? Windows XP Professional What's your domain controller OS (for sas.cam)? Windows 2003 Standard Do you see this problem just from one client or you have tried other clients? In all the clients, I face the similar problem. Thanks, M.Chidambaram. -----Original Message----- From: Afshin Salek [mailto:afshin.sa...@oracle.com] Sent: Wednesday, December 15, 2010 5:22 AM To: Chidambaram Muthu Cc: cifs-discuss@opensolaris.org; Manikandan Palanimuthu Subject: Re: [cifs-discuss] Reg: opensolaris 134 , cifs and showing SUID I had a quick look at your configuration and it looked ok to me. I'll need a network capture to investigate this problem. Please start a network capture on your client before you map the share and then go ahead and try to add a domain user to an ACL, when you get to the point that you expect to see the domain but you don't see it, then stop the network capture. Also: What's your client OS? What's your domain controller OS (for sas.cam)? Do you see this problem just from one client or you have tried other clients? Afshin On 12/14/10 03:26 PM, Chidambaram Muthu wrote:Hi, Herewith the gendiag output is attached. Let me detail our issue: Setup a server with opensolaris snv134 builds. Configure NIS& CIFS with Kerberos auth. Enabled CIFS shares for few of the file system. Now I have to setup ACL's for the shares, so initially I have given full permission for a domain user to all the subfolders and files in the file system from unix. Then I logged in to a window client as the domain user, tried accessing the share where it works perfect as per the permissions set. But I am not able to add domain users, because it shows only the local computer account (fileserver) in Locations of Security tab in windows clients and not the windows AD domain (sas.com). So from a windows I am not able add a Domain user since windows domain is not available. And because of this the SID to domain user resolving is not happening in a windows client. We are wondering what went wrong and I have crossed checked the following: In unix, the idmap resolving for a domain user account is perfect. In my AD I am able to found a computer account for a fileserver and delegation is "Trust this computer for delegation to any service (kebereos only)". If I set an ACL from unix for domain user, he is able to access it from windows client as per the permission set. The only issue is not available of domain "sas.com" and resulted not able to set permission for a domain user from a windows client. Thanks, M.Chidambaram. -----Original Message----- From: cifs-discuss-boun...@opensolaris.org [mailto:cifs-discuss-boun...@opensolaris.org] On Behalf Of Afshin Salek Sent: Tuesday, December 14, 2010 11:49 PM To: Manikandan Palanimuthu Cc: cifs-discuss@opensolaris.org Subject: Re: [cifs-discuss] Reg: opensolaris 134 , cifs and showing SUID What do you mean by "enabled CIFS with Kerberos authentication"? Solaris CIFS server does not support Kerberos yet. Are you using Solaris CIFS server or Samba. If you're using Samba this is not the right forum. If you're not sure then run the following script on your Solaris box and post the output so we can take look at your configuration: http://hub.opensolaris.org/bin/download/Project+cifs%2Dserver/files/ci fs%2Dgendiag Afshin On 12/14/10 03:56 AM, Manikandan Palanimuthu wrote:Hi, I have installed opensolaris SNV134. Also I have enabled it with CIFS with kerbroes authentication. Though I am able to see the shares, I am not able to see the userid(It is shown as SID) in windows through properties -> security tab of the each shares. Please let us know, why I am not able to see the usernames? Instead only I can SID? Thanks and Regards Manikandan Palanimuthu Solaris System Administrator Sasken Network Engineering Limited Bangalore, karnataka. Ph: 9886688152 SASKEN BUSINESS DISCLAIMER: This message may contain confidential, proprietary or legally privileged information. In case you are not the original intended Recipient of the message, you must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message and you are requested to delete it and inform the sender. Any views expressed in this message are those of the individual sender unless otherwise stated. Nothing contained in this message shall be construed as an offer or acceptance of any offer by Sasken Communication Technologies Limited ("Sasken") unless sent with that express intent and with due authority of Sasken. Sasken has taken enough precautions to prevent the spread of viruses. However the company accepts no liability for any damage caused by any virus transmitted by this email. Read Disclaimer at http://www.sasken.com/extras/mail_disclaimer.html _______________________________________________ cifs-discuss mailing list cifs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/cifs-discuss_______________________________________________ cifs-discuss mailing list cifs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/cifs-discuss
_______________________________________________ cifs-discuss mailing list cifs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/cifs-discuss
