Re: [OpenIndiana-discuss] Odd Samba/winbind issue

2013-06-21 Thread Laurent Blume

On 21/06/13 07:15, James Relph wrote:

Hi,

Apologies for cross posting, but I'm not sure if this is an Oi issue
or a cswsamba issue.  I've installed cswsamba (3.6.15) and
cswsamba_winbind on an OI box (151a7).  I've got it bound to AD fine,
and winbind itself seems to be operating perfectly (I've actually got
netatalk happily authenticating AD users via winbind).  If I run
wbinfo -u or getent passwd, I get the expected information back.


I'm maintaining that package, I do want to keep it running on OI as 
well, so it's good to know it's working there.



Oddly though Samba itself isn't authenticating users.  If I try and
login (with a few variations of DOMAIN\username or username@DOMAIN)
it just kicks it back as an unknown user (see below).  The only thing
that I can think of is that the cswsamba is actually still calling
the previously installed (but turned off) winbind that I installed
with the original OI samba install.  With that not running though I
wouldn't have thought that would have happened (but if that could be
it - how do I make sure that cswsamba uses  cswsamba_winbind).


It might be a Samba configuration issue, but before trying on a 
Samba-specific list, we can surely dig here first :-)

Can you post the output of:

ldd -v /opt/csw/sbin/smbd /opt/csw/sbin/nmbd /opt/csw/sbin/winbindd

ps -edf | egrep 'smbd|nmbd|winbind'

Also, do you have any log on the AD side about the try, and how it looked?


I have symlinked the csw nss_winbind libraries into /lib, I just don't
know if there's anything else that could cause this.


While it s probably not hurting, I think that's not a good idea, and 
should not be needed in any case.


Laurent

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Odd Samba/winbind issue

2013-06-21 Thread James Relph
Thanks Laurent, appreciate the help.

 I'm maintaining that package, I do want to keep it running on OI as well, so 
 it's good to know it's working there.

Both cswsamba and cswwinbind do seem to be working fine, they're just not 
talking to each other!

 It might be a Samba configuration issue, but before trying on a 
 Samba-specific list, we can surely dig here first :-)
 Can you post the output of:
 
 ldd -v /opt/csw/sbin/smbd /opt/csw/sbin/nmbd /opt/csw/sbin/winbindd

/opt/csw/sbin/smbd:

   find object=libc.so.1; required by /opt/csw/sbin/smbd
libc.so.1 = /lib/libc.so.1
   find version=libc.so.1
libc.so.1 (SUNW_1.18) = /lib/libc.so.1
libc.so.1 (SUNWprivate_1.1) =   /lib/libc.so.1

   object=/lib/libc.so.1; filter for /usr/lib/ld.so.1

   object=/lib/libc.so.1; filter for libm.so.2

   find object=libm.so.2; required by /lib/libc.so.1
libm.so.2 = /lib/libm.so.2

   find object=libc.so.1; required by /lib/libm.so.2
   find version=libc.so.1
libc.so.1 (SUNW_1.1) =  /lib/libc.so.1
libc.so.1 (SUNWprivate_1.1) =   /lib/libc.so.1
/opt/csw/sbin/nmbd:

   find object=libc.so.1; required by /opt/csw/sbin/nmbd
libc.so.1 = /lib/libc.so.1
   find version=libc.so.1
libc.so.1 (SUNW_1.18) = /lib/libc.so.1
libc.so.1 (SUNWprivate_1.1) =   /lib/libc.so.1

   object=/lib/libc.so.1; filter for /usr/lib/ld.so.1

   object=/lib/libc.so.1; filter for libm.so.2

   find object=libm.so.2; required by /lib/libc.so.1
libm.so.2 = /lib/libm.so.2

   find object=libc.so.1; required by /lib/libm.so.2
   find version=libc.so.1
libc.so.1 (SUNW_1.1) =  /lib/libc.so.1
libc.so.1 (SUNWprivate_1.1) =   /lib/libc.so.1
/opt/csw/sbin/winbindd:

   find object=libc.so.1; required by /opt/csw/sbin/winbindd
libc.so.1 = /lib/libc.so.1
   find version=libc.so.1
libc.so.1 (SUNW_1.18) = /lib/libc.so.1
libc.so.1 (SUNWprivate_1.1) =   /lib/libc.so.1

   object=/lib/libc.so.1; filter for /usr/lib/ld.so.1

   object=/lib/libc.so.1; filter for libm.so.2

   find object=libm.so.2; required by /lib/libc.so.1
libm.so.2 = /lib/libm.so.2

   find object=libc.so.1; required by /lib/libm.so.2
   find version=libc.so.1
libc.so.1 (SUNW_1.1) =  /lib/libc.so.1
libc.so.1 (SUNWprivate_1.1) =   /lib/libc.so.1

 ps -edf | egrep 'smbd|nmbd|winbind'

root 19244 19243   0 06:37:01 ?   1:15 /opt/csw/sbin/winbindd -D
root 19260 19243   0 06:38:26 ?   0:02 /opt/csw/sbin/winbindd -D
root 19255 19243   0 06:38:26 ?   0:08 /opt/csw/sbin/winbindd -D
root 21427 19243   0 09:06:04 ?   1:02 /opt/csw/sbin/winbindd -D
root 19257 19243   0 06:38:26 ?   0:08 /opt/csw/sbin/winbindd -D
root 19239 17386   0 06:36:59 ?   0:00 /opt/csw/sbin/smbd -D
root 19258 19243   0 06:38:26 ?   0:02 /opt/csw/sbin/winbindd -D
root 19243 17386   0 06:37:01 ?   0:21 /opt/csw/sbin/winbindd -D
root 19240 19239   0 06:36:59 ?   0:00 /opt/csw/sbin/smbd -D
root 19251 19243   0 06:37:51 ?   0:00 /opt/csw/sbin/winbindd -D
root 19254 19243   0 06:38:26 ?   0:08 /opt/csw/sbin/winbindd -D
root 26205 26165   0 13:48:20 pts/1   0:00 egrep smbd|nmbd|winbind
root 19256 19243   0 06:38:26 ?   0:07 /opt/csw/sbin/winbindd -D
root 19261 19243   0 06:38:26 ?   0:08 /opt/csw/sbin/winbindd -D
root 19238 17386   0 06:36:59 ?   0:06 /opt/csw/sbin/nmbd -D
root 19252 19243   0 06:37:51 ?   0:00 /opt/csw/sbin/winbindd -D
root 19262 19243   0 06:38:26 ?   0:08 /opt/csw/sbin/winbindd -D
root 19259 19243   0 06:38:26 ?   0:08 /opt/csw/sbin/winbindd -D
root 26201 19239   0 13:48:07 ?   0:00 /opt/csw/sbin/smbd -D


 Also, do you have any log on the AD side about the try, and how it looked?

It didn't seem to even try the AD side, but I can check again.  Obviously just 
odd that it's working via other apps (ie. those using PAM) but not Samba itself.

 While it s probably not hurting, I think that's not a good idea, and should 
 not be needed in any case.

Using PAM with winbind didn't work until I made those symlinks (and they were 
recommended elsewhere)?

Thanks,

James.
___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


[OpenIndiana-discuss] Sun Fire

2013-06-21 Thread Gary Gendel
I have a possibility of picking up a decommissioned X4340 (thumper) w/o 
disks to replace my aging V20z ( and multiple external drive stacks 
cheap.  It looks like it should be supported by looking at the HCL.


Is there any gotchas I should be aware of before I commit to purchase?  
Is there something more modern I should be looking at instead?


Gary


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Odd Samba/winbind issue

2013-06-21 Thread Laurent Blume

On 21/06/13 14:50, James Relph wrote:

Both cswsamba and cswwinbind do seem to be working fine, they're just
not talking to each other!


Well, the lines you had shown appeared to show they were talking, just 
the answer was negative for some reason.





snip

Look all good.


It didn't seem to even try the AD side, but I can check again.
Obviously just odd that it's working via other apps (ie. those using
PAM) but not Samba itself.


It might be Samba is asking for something in a wrong way.


Using PAM with winbind didn't work until I made those symlinks (and
they were recommended elsewhere)?


Do you remember where?
Have you tried the pam module from CSWwinbind or only the Solaris one?
It should be possible to configure them in /etc/pam.conf (I've not tried 
it yet myself).


And like Jonathan, I'd like to see the configuration.

Laurent

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Odd Samba/winbind issue

2013-06-21 Thread James Relph

 Well, the lines you had shown appeared to show they were talking, just the 
 answer was negative for some reason.

Interesting, odd that the PAM side is working though.  It's been very annoying 
I'll say that.

 Do you remember where?

Here:  https://www.opencsw.org/mantis/view.php?id=5020

 Have you tried the pam module from CSWwinbind or only the Solaris one?

I'm using the cswwinbind module, so for instance for netatalk I've got:

netatalk auth requisite pam_authtok_get.so.1
netatalk auth required  pam_dhkeys.so.1
netatalk auth required  pam_unix_cred.so.1
netatalk auth sufficient/opt/csw/lib/security/pam_winbind.so 
use_first_pass
netatalk account requisite  pam_roles.so.1
netatalk account sufficient /opt/csw/lib/security/pam_winbind.so

 It should be possible to configure them in /etc/pam.conf (I've not tried it 
 yet myself).
 
 And like Jonathan, I'd like to see the configuration.

Thanks again, output of testparm is below (sanitised a little):

Load smb config files from /etc/opt/csw/samba/smb.conf
rlimit_max: increasing rlimit_max (256) to minimum Windows limit (16384)
WARNING: The idmap uid option is deprecated
WARNING: The idmap gid option is deprecated
Processing section [FileShare]
Processing section [STUDIO]
Loaded services file OK.
WARNING: The setting 'security=ads' should NOT be combined with the 'password 
server' parameter.
(by default Samba will discover the correct DC to contact automatically).
WARNING: You have some share names that are longer than 12 characters.
These may not be accessible to some older clients.
(Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

[global]
workgroup = DOMAIN
realm = BURBERRY.CORP
server string = server01
security = ADS
password server = ukhfhwdct01.burberry.corp
map untrusted to domain = Yes
log file = /var/samba/samba.log
load printers = No
dns proxy = No
template homedir = /export/home/%U
template shell = /usr/bin/bash
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind expand groups = 5
idmap config * : range = 16777216-33554431
idmap config * : backend = tdb

[FileShare]
comment = FileShare
path = /shared/server01/FileShare
read only = No

[STUDIO]
comment = STUDIO
path = /shared/server01/STUDIO
read only = No



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Odd Samba/winbind issue

2013-06-21 Thread Laurent Blume

On 21/06/13 15:50, James Relph wrote:

Here: https://www.opencsw.org/mantis/view.php?id=5020


Ah, for nss, yes. That one is not a lib per se, but a module, so it does 
make sense. I don't thin Jan got over to document it before I took the 
packaging away from him, so I'll see what can be done.



I'm using the cswwinbind module, so for instance for netatalk I've got:

netatalk auth requisite pam_authtok_get.so.1
netatalk auth required  pam_dhkeys.so.1
netatalk auth required  pam_unix_cred.so.1
netatalk auth sufficient/opt/csw/lib/security/pam_winbind.so
use_first_pass
netatalk account requisite  pam_roles.so.1
netatalk account sufficient /opt/csw/lib/security/pam_winbind.so


I think might be a problem. Those are the 32 bit modules. I don't think 
you're running the system 32 bit, so apps requesting 64 bit pam will not 
be happy.
I think you should try with $ISA (implicit for the relative names), 
something like that:

/opt/csw/lib/$ISA/security/pam_winbind.so


Thanks again, output of testparm is below (sanitised a little):


I don't see anything trivially wrong, but it's been a while. My only 
concern is why are you using the tdb backend instead of something 
deterministic like rid? But it should not be an issue here. I hope you 
can get some details from the AD side.


Laurent

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] OpenSXCE 2013.05 for SPARC released

2013-06-21 Thread Daniel Kjar

Great!  Downloading now.

On 06/20/13 01:50 PM, ken mays wrote:

Greetings,

OpenSXCE2013.05 for SPARC EA was just RELEASED.

Notable achievements:
- Live DVD, Text, USB, and virtual HD versions
- Fully modernized PCI/USB device driver hardware data support for SPARC 
platform
- Dtrace support
- QEMU/KVM 1.5.0 support
- LDOM server virtualization and partitioning technology support
- full 2D hardware acceleration for all legacy GPUs
- Mesa 9.1.3 OpenGL-based 3D API graphics software support (experimental, WIP)

GNOME 2.28.2 and IceWM 1.3.7 are provided along with:
VIM 7.3, Samba 3.6.15, Firefox 21, Thunderbird 17.0.6esr, GIMP, Pidgin, 
Rhythmbox and Glade 3.

For office productivity, Apache OpenOffice 3.4.1 is included.

http://svr4.opensxce.org/sparc/5.11/ISO/
http://svr4.opensxce.org/sparc/5.11/USB/
http://svr4.opensxce.org/sparc/5.11/VHDD/


Enjoy,

Ken Mays
___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


--
Dr. Daniel Kjar
Associate Professor of Biology
Division of Mathematics and Natural Sciences
Elmira College
1 Park Place
Elmira, NY 14901
607-735-1826
http://faculty.elmira.edu/dkjar

...humans send their young men to war; ants send their old ladies
-E. O. Wilson



___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Odd Samba/winbind issue

2013-06-21 Thread James Relph

 I think might be a problem. Those are the 32 bit modules. I don't think 
 you're running the system 32 bit, so apps requesting 64 bit pam will not be 
 happy.
 I think you should try with $ISA (implicit for the relative names), something 
 like that:
 /opt/csw/lib/$ISA/security/pam_winbind.so

I initially dropped the 64-bit versions in and it freaked out big style 
(couldn't login initially).  The netatalk bit seems to be running fine with 
those as well.  Does samba even use PAM for talking with winbind or deal 
directly?

 Thanks again, output of testparm is below (sanitised a little):
 
 I don't see anything trivially wrong, but it's been a while. My only concern 
 is why are you using the tdb backend instead of something deterministic like 
 rid? But it should not be an issue here. I hope you can get some details from 
 the AD side.


It doesn't look like it's asking the AD oddly (yet the PAM modules do), I need 
to run Wireshark on there and see what's actually happening.

Thanksm

James.

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Sun Fire

2013-06-21 Thread Peter Tribble
On Fri, Jun 21, 2013 at 1:58 PM, Gary Gendel g...@genashor.com wrote:

 I have a possibility of picking up a decommissioned X4340 (thumper)


Hm. An X4340 is some sort of power transfer unit.

Thumper = X4500

Thor = X4540


 w/o disks


That's the killer. These boxes are very fussy about the drives that work;
the
real value of them now is for the disks they contain, you're going to have
trouble getting drives (and it's going to cost).


 to replace my aging V20z ( and multiple external drive stacks cheap.  It
 looks like it should be supported by looking at the HCL.

 Is there any gotchas I should be aware of before I commit to purchase?  Is
 there something more modern I should be looking at instead?


Probably look at something more modern, and something sized to suit.
It really needs to be full of 48 drives, only a couple of models are
supported,
and they're all getting a bit old.

-- 
-Peter Tribble
http://www.petertribble.co.uk/ - http://ptribble.blogspot.com/
___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Sun Fire

2013-06-21 Thread Gary Gendel

On 06/21/2013 11:56 AM, Peter Tribble wrote:

On Fri, Jun 21, 2013 at 1:58 PM, Gary Gendel g...@genashor.com wrote:


I have a possibility of picking up a decommissioned X4340 (thumper)


Hm. An X4340 is some sort of power transfer unit.

Thumper = X4500

Thor = X4540


Whoops, it's the X4540




w/o disks


That's the killer. These boxes are very fussy about the drives that work;
the
real value of them now is for the disks they contain, you're going to have
trouble getting drives (and it's going to cost).
Interesting.  I thought they used the same Marvell MV88SX6081 8-port 
controllers I picked up for the v20z.  I've been using that for modern 
WD and Seagate SATA drives without issue.




to replace my aging V20z ( and multiple external drive stacks cheap.  It
looks like it should be supported by looking at the HCL.

Is there any gotchas I should be aware of before I commit to purchase?  Is
there something more modern I should be looking at instead?


Probably look at something more modern, and something sized to suit.
It really needs to be full of 48 drives, only a couple of models are
supported,
and they're all getting a bit old.
Just looking for something cheap and big enough for at least 8 drives.  
I currently have two 5-drive external cases.  Since I haven't gotten the 
sata multiplexers to work, I have all 8 sata cables running out of the 
marvell controller directly to each drive, my own personal octopus.  
Can't get much more of a kludge than that.


Gary


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Sun Fire

2013-06-21 Thread Ben Taylor
x4540s use the LSI controller.  We got an upgrade on our x4500 because of
systemic problems with our Raid-z setup and the Marvel controllers and the
drivers (This has been several years, maybe 4)


On Fri, Jun 21, 2013 at 4:48 PM, Gary Gendel g...@genashor.com wrote:

 On 06/21/2013 11:56 AM, Peter Tribble wrote:

 On Fri, Jun 21, 2013 at 1:58 PM, Gary Gendel g...@genashor.com wrote:

  I have a possibility of picking up a decommissioned X4340 (thumper)


 Hm. An X4340 is some sort of power transfer unit.

 Thumper = X4500

 Thor = X4540


 Whoops, it's the X4540



  w/o disks


 That's the killer. These boxes are very fussy about the drives that work;
 the
 real value of them now is for the disks they contain, you're going to have
 trouble getting drives (and it's going to cost).

 Interesting.  I thought they used the same Marvell MV88SX6081 8-port
 controllers I picked up for the v20z.  I've been using that for modern WD
 and Seagate SATA drives without issue.



  to replace my aging V20z ( and multiple external drive stacks cheap.  It
 looks like it should be supported by looking at the HCL.

 Is there any gotchas I should be aware of before I commit to purchase?
  Is
 there something more modern I should be looking at instead?

  Probably look at something more modern, and something sized to suit.
 It really needs to be full of 48 drives, only a couple of models are
 supported,
 and they're all getting a bit old.

 Just looking for something cheap and big enough for at least 8 drives.  I
 currently have two 5-drive external cases.  Since I haven't gotten the sata
 multiplexers to work, I have all 8 sata cables running out of the marvell
 controller directly to each drive, my own personal octopus.  Can't get much
 more of a kludge than that.

 Gary



 __**_
 OpenIndiana-discuss mailing list
 OpenIndiana-discuss@**openindiana.orgOpenIndiana-discuss@openindiana.org
 http://openindiana.org/**mailman/listinfo/openindiana-**discusshttp://openindiana.org/mailman/listinfo/openindiana-discuss

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Sun Fire

2013-06-21 Thread Doug Hughes
Most of the early marvell problems have been addressed with software fixes in 
the oracle release of solaris. I couldnt say about OI. Yes, the 4540 is better 
all around.

Sent from my android device.

-Original Message-
From: Ben Taylor bentaylor.sol...@gmail.com
To: Discussion list for OpenIndiana openindiana-discuss@openindiana.org
Sent: Fri, 21 Jun 2013 1:34 PM
Subject: Re: [OpenIndiana-discuss] Sun Fire

x4540s use the LSI controller.  We got an upgrade on our x4500 because of
systemic problems with our Raid-z setup and the Marvel controllers and the
drivers (This has been several years, maybe 4)


On Fri, Jun 21, 2013 at 4:48 PM, Gary Gendel g...@genashor.com wrote:

 On 06/21/2013 11:56 AM, Peter Tribble wrote:

 On Fri, Jun 21, 2013 at 1:58 PM, Gary Gendel g...@genashor.com wrote:

  I have a possibility of picking up a decommissioned X4340 (thumper)


 Hm. An X4340 is some sort of power transfer unit.

 Thumper = X4500

 Thor = X4540


 Whoops, it's the X4540



  w/o disks


 That's the killer. These boxes are very fussy about the drives that work;
 the
 real value of them now is for the disks they contain, you're going to have
 trouble getting drives (and it's going to cost).

 Interesting.  I thought they used the same Marvell MV88SX6081 8-port
 controllers I picked up for the v20z.  I've been using that for modern WD
 and Seagate SATA drives without issue.



  to replace my aging V20z ( and multiple external drive stacks cheap.  It
 looks like it should be supported by looking at the HCL.

 Is there any gotchas I should be aware of before I commit to purchase?
  Is
 there something more modern I should be looking at instead?

  Probably look at something more modern, and something sized to suit.
 It really needs to be full of 48 drives, only a couple of models are
 supported,
 and they're all getting a bit old.

 Just looking for something cheap and big enough for at least 8 drives.  I
 currently have two 5-drive external cases.  Since I haven't gotten the sata
 multiplexers to work, I have all 8 sata cables running out of the marvell
 controller directly to each drive, my own personal octopus.  Can't get much
 more of a kludge than that.

 Gary



 __**_
 OpenIndiana-discuss mailing list
 OpenIndiana-discuss@**openindiana.orgOpenIndiana-discuss@openindiana.org
 http://openindiana.org/**mailman/listinfo/openindiana-**discusshttp://openindiana.org/mailman/listinfo/openindiana-discuss

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss
___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Sun Fire

2013-06-21 Thread Jim Klimov

On 2013-06-21 19:34, Doug Hughes wrote:

Most of the early marvell problems have been addressed with software fixes in 
the oracle release of solaris. I couldnt say about OI. Yes, the 4540 is better 
all around.


It should also be noted that X4500 were limited with 16Gb RAM officially
(I think there were modules that could push them to 32GB - maybe not);
the X4540 support 64Gb (unofficially maybe 128GB) RAM which is more
relevant for ZFS and good caching and/or for running more tasks on the
machine (which they were marketed as - server with lots of fast local
storage). Also, CPUs on X4540 have VT-X unlike X4500, so they should
run VMs better :)

I was not aware that the boxes were picky about HDDs, but we went on
to replace our Thumper's original 250Gb Seagates with 3Tb Ultrastars
with almost no hiccups (so far only one disk for testing, and it did
consistently participate in a CKSUM-mismatch on scrub, reporting 1-3
errors upon every pool scrub, though no errors on a testing pool which
covers the other 2.75Tb of the disk). Maybe the cause of the problem
was the HBA port or connector, where the original disk died earlier.

For second-hand servers, the problem may be with absent drive caddies,
so watch out to have all those in place. And it is not a box for home
use - loud as a jet ;)

//Jim

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Odd Samba/winbind issue

2013-06-21 Thread Laurent Blume
On 2013-06-21 5:53 PM, James Relph wrote:
 I initially dropped the 64-bit versions in and it freaked out big
 style (couldn't login initially).  The netatalk bit seems to be
 running fine with those as well.  Does samba even use PAM for talking
 with winbind or deal directly?

You need to have both, hence the $ISA, since 32 and 64 bits apps will
each need the proper binary.
And I realized I gave you a wrong path earlier for the ldd, forgotten I
had just introduced both 32/64 Samba binaries, I should have noticed it
was way too short:
/opt/csw/sbin/amd64 or /opt/csw/sbin/sparcv9 is where they are.

And it does link against libpam:
   find object=libpam.so.1; required by /opt/csw/sbin/amd64/smbd

 It doesn't look like it's asking the AD oddly (yet the PAM modules
 do), I need to run Wireshark on there and see what's actually
 happening.

Also raising the Samba debug level and trying to find some nuggets of
information there.

Laurent

___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] Odd Samba/winbind issue

2013-06-21 Thread James Relph
 You need to have both, hence the $ISA, since 32 and 64 bits apps will
 each need the proper binary.
 And I realized I gave you a wrong path earlier for the ldd, forgotten I
 had just introduced both 32/64 Samba binaries, I should have noticed it
 was way too short:
 /opt/csw/sbin/amd64 or /opt/csw/sbin/sparcv9 is where they are.
 
 And it does link against libpam:
   find object=libpam.so.1; required by /opt/csw/sbin/amd64/smbd
 

Sadly changing it to include $ISA doesn't make a difference, worth a try though.

 Also raising the Samba debug level and trying to find some nuggets of
 information there.

I'll bump it up again and run some more tests, see if anything different pops 
up.

Thanks,

James.
___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] WD reds any good for ZFS RAIDZ pools?

2013-06-21 Thread Ian Collins

Christopher Chan wrote:

On Saturday, June 08, 2013 05:23 AM, Paul B. Henson wrote:

For these large drives, raidz2 is recommended, as the likelihood of a
second drive failure during a rebuild starts to get pretty high.


What's wrong with striped mirrors? raidz2 does not like random i/o. I
happen to run raidz2 and regret it now.


Nothing much, it's just that 3TB drives can take a long time (days) to 
resilver on a moderately busy pool and raidz leaves you exposed to a 
second drive failure during that process.


There's still a risk of two dives in one mirror failing, but that would 
be less than the raidz case.


If someone is willing to suffer the performance of raidz, raidz2 is 
definitely a better choice!


--
Ian.


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss


Re: [OpenIndiana-discuss] WD reds any good for ZFS RAIDZ pools?

2013-06-21 Thread Russ Price

On 06/21/2013 06:48 PM, Ian Collins wrote:

Christopher Chan wrote:

On Saturday, June 08, 2013 05:23 AM, Paul B. Henson wrote:

For these large drives, raidz2 is recommended, as the likelihood of a
second drive failure during a rebuild starts to get pretty high.


What's wrong with striped mirrors? raidz2 does not like random i/o. I
happen to run raidz2 and regret it now.


Nothing much, it's just that 3TB drives can take a long time (days) to resilver
on a moderately busy pool and raidz leaves you exposed to a second drive failure
during that process.

There's still a risk of two dives in one mirror failing, but that would be less
than the raidz case.

If someone is willing to suffer the performance of raidz, raidz2 is definitely a
better choice!



Regardless of whether you run striped mirrors, RAIDZ, or RAIDZ2, beware of 
controller incompatibilities with 3 TB drives, especially if you're using an SAS 
HBA. I got bitten by that last week when trying to use 3 TB WD Reds on an Intel 
SASUC8I (reflashed with IT firmware that can properly negotiate link speed with 
6 GB/s drives).


In the process of trying to get to the reason why they were showing up as 2 TB 
drives and getting ashift=9 instead of ashift=12, I very nearly trashed my old 
storage pool (4x1.5 TB drives in striped mirrors). I'm just now recovering from 
that fiasco. Hint: DON'T DON'T DON'T futz with /kernel/drv/sd.conf unless you 
have up-to-date and OFFLINE backups! I don't care what the ZFS Advanced Format 
Disks wiki page says - you're looking at a world of hurt if you modify sd.conf.


Anyway, the 3 TB drives worked a lot better when connected to the motherboard 
SATA ports instead of the SASUC8I; I get ashift=12 and full capacity, no need to 
touch sd.conf at all.


Now I'm going to need to ditch the SASUC8I in favor of a 9211-8i. :/


___
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss