Re: [Samba] smbldaptools not creating unix group/users

2008-09-12 Thread David Collins
Tc,

I think you might be expecting these commands to do something more than
they will do.

smbldap-populate will create 4 OUs and the standard windows groups
("Domain Users", "Backup Operators", etc.) and a sambaDomainName object.
smbldap-useradd will only create a new posix user (with or without
Samba/windows attributes depending on the -a option) in the LDAP tree.

If you want to create a new group in LDAP, use smbldap-groupadd.
If you want to migrate existing linux groups from /etc/group then you
can use the smbldap-migrate-unix-groups script, that is part of the
smbldap-tools package.

Maybe this article written for Hardy Ubuntu might clarify things a
bit ..
https://help.ubuntu.com/community/OpenLDAP-SambaPDC-OrgInfo-Posix

Regards,
David Collins


On Fri, 2008-09-12 at 09:03 +0800, Tc Chung wrote:

> Dear all,
> 
> I have setup a samba PDC on a debian lenny machine and everything works fine.
> Recently, i want to integrate Samba with LDAP. When I use smbldap-populate,
> the corresponding structures are created in the LDAP tree, however,
> the unix groups
> are not created at all! smbldap-populate did not complaint anything.
> 
> I have tested by using smbldap-useradd. The same problem appears. What are the
> possible reasons for this?
> 
> Thanks in advance.
> 
> Regards,
> Tc Chung
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problems getting list of shares

2008-09-12 Thread Jon Wilson
smbtree may do what you are looking for.

Jon

2008/9/12 Steve Gehrman <[EMAIL PROTECTED]>:
> I'm trying to do something that should be simple, but my current solution
> isn't working 100%
>
> All I need is a list of smb shares on the network.
>
> I'm doing this:
>
> /usr/bin/nmblookup -M -- -
>
> and then use this on each ip returned:
>
> /usr/bin/smbclient -g -p 139 -NL 
>
> That works for most cases but it fails to find all the shares (compared to
> the mac Finder)
>
> -steve
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problems getting list of shares

2008-09-12 Thread Steve Gehrman
I'm trying to do something that should be simple, but my current  
solution isn't working 100%


All I need is a list of smb shares on the network.

I'm doing this:

/usr/bin/nmblookup -M -- -

and then use this on each ip returned:

/usr/bin/smbclient -g -p 139 -NL 

That works for most cases but it fails to find all the shares  
(compared to the mac Finder)


-steve
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Solaris 10 - Samba authentication Question

2008-09-12 Thread CT

Greetings list:

OS :Solaris 10 (sparc)05/08
Samba version: 11.10.0,REV=2005.01.08.05.16
  I think his equates to on version 3.28

Overview
We have 2 shares on UNIX side that are used
to transfer files from Windows to Solaris.
One share is read-only and the other is writable
This is working great for the users.
The current setting is :
security=share

All clients are Windows XP.

-
Change We want to make
-
We want to add a protected share for a certain number
of users to access via password.

While not affecting the other shares
or
requiring users to enter a password.

I know we will have to change to :
security=user

After several attempts to accomplish this but have not had any success..

What I have done:
Added a UNIX user to smbpasswd
Added a UNIX group to /etc/group and added the UNIX user.

The below smb.conf does not work for the private area (logs).
It seems to *behave like* the security =share
as it pops up a "Greyed out box" with Guest in it
and prompts for a password.

Thx
Charles

Particulars
/etc/group logs::700:charles
/etc/sfw/private/smbpasswd 
charles:104:9CEBF93A3F7BA80A8B0EA5A7DF135B03:7112CEA3B9A87EBEC3B84CC6066091DE:[U 
]:LCT-48CA6DF5:


smb.conf (not working)

[global]
netbios name = samba
server string = Samba Server
workgroup = Workgroup
security = user
guest ok = yes
map to guest = Bad User
log file = /var/samba/log/log.%m
dos filemode = Yes
hide unreadable = Yes
wins server = xxx.xxx.xxx.xxx
encrypt passwords = Yes
null passwords = Yes
domain master = No
dns proxy = No
os level = 50
hide special files = Yes
dont descend = lost+found
preferred master = no
max log size = 50
log level = 9

[SUNshare]
comment = SUN Share (read-only)
path = /export/sunfiles
force user = nobody4
force group = nogroup
inherit permissions = Yes
inherit acls = Yes
inherit owner = Yes
dont descend =

[WINshare]
comment = Windows Share (write)
path = /export/winfiles
force user = nobody4
force group = nogroup
read only = No
dont descend =

[logs]
comment = Logs Share
path = /export/logs
force group = logs
guest ok = no
write list = charles



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba write performance in kernel

2008-09-12 Thread Jeremy Allison
On Fri, Sep 12, 2008 at 02:43:25PM +0800, Lin Mac wrote:

> 1. If splice works, can memory copy be avoided?

Yes, that's the whole point of splice - copy from the
socket buffer directly to the disk buffer cache without
going through userspace.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Shortfalls?

2008-09-12 Thread John Drescher
On Fri, Sep 12, 2008 at 11:35 AM, Adam Tauno Williams
<[EMAIL PROTECTED]> wrote:
> On Sat, 2008-09-13 at 00:23 +1000, Tim Bates wrote:
>> Justin Piszcz wrote:
>> > 1) Can not support .chm help files
>> They're just files. In what way aren't they supported?
>
> Ditto.
>
This is a result of a security policy and will happen on all network
shares windows, samba or other:

http://www.west-wind.com/Weblog/posts/2928.aspx

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Shortfalls?

2008-09-12 Thread Adam Tauno Williams
On Sat, 2008-09-13 at 00:23 +1000, Tim Bates wrote:
> Justin Piszcz wrote:
> > 1) Can not support .chm help files
> They're just files. In what way aren't they supported?

Ditto.

> > 2) Does not support locks for multi-user access to Access
> Access doesn't really support that either. But 2 staff at the school I 
> work for often have the same Access file open. Not sure if they both get 
> read/write, but as I understand it, MS limited Access network 
> performance by design to encourage people to use MS-SQL Server instead.

I don't think the above is true;  Multi-user Access works without issue.
Whatever limitations it has are just specific to the product and its
architecture;  you can't expect a shared-file system to have the same
performance metrics as a client/server system.

> > 3) Does support URLs from windows with '%' in the path 
> I just renamed a file to have a % in it's name, so yes, it works.

Ditto, works fine.

> > 4) Numerous problems with multiple users accessing same folder.
> We use Samba at a school, where often students are saving work into the 
> one folder for staff to mark. Works fine.

Ditto, works fine.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Shortfalls?

2008-09-12 Thread John Drescher
On Fri, Sep 12, 2008 at 11:09 AM, Brian H. Nelson <[EMAIL PROTECTED]> wrote:
> Justin Piszcz wrote:
>>
>> Hello,
>>
>> 1) Can not support .chm help files
>
> I am unable to use .chm files even when shared from a 'real' windows 2000
> machine either. I believe the limitation is in the help file viewer, not in
> the server (samba or otherwise).
http://www.west-wind.com/Weblog/posts/2928.aspx

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Shortfalls?

2008-09-12 Thread Brian H. Nelson

Justin Piszcz wrote:

Hello,

1) Can not support .chm help files


I am unable to use .chm files even when shared from a 'real' windows 
2000 machine either. I believe the limitation is in the help file 
viewer, not in the server (samba or otherwise).


-Brian

--
---
Brian H. Nelson Youngstown State University
System Administrator   Media and Academic Computing
 bnelson[at]cis.ysu.edu
---

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Shortfalls?

2008-09-12 Thread Tim Bates

Justin Piszcz wrote:

1) Can not support .chm help files

They're just files. In what way aren't they supported?


2) Does not support locks for multi-user access to Access
Access doesn't really support that either. But 2 staff at the school I 
work for often have the same Access file open. Not sure if they both get 
read/write, but as I understand it, MS limited Access network 
performance by design to encourage people to use MS-SQL Server instead.


3) Does support URLs from windows with '%' in the path 

I just renamed a file to have a % in it's name, so yes, it works.


4) Numerous problems with multiple users accessing same folder.
We use Samba at a school, where often students are saving work into the 
one folder for staff to mark. Works fine.


TB
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Shortfalls?

2008-09-12 Thread John H Terpstra
On Friday 12 September 2008 08:46:34 Justin Piszcz wrote:
> Hello,
>
> 1) Can not support .chm help files
> 2) Does not support locks for multi-user access to Access
This is an MS Access configuration issue.  I have a large customer who has no 
problems with an MS Access application that resides on a Samba 3.2.3 server.

Is it possible that you have changed the path (URI path) for the MDB file?  If 
so,  you need to get into MS Access to reset the multi-user access settings.

> 3) Does support URLs from windows with '%' in the path
> 4) Numerous problems with multiple users accessing same folder.
The large site has up to 400 users accessing a single folder (directory) 
without any problems.  

> Comments/suggestions for fixing the above mentioned problems?

- John T.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Shortfalls?

2008-09-12 Thread John Drescher
> 1) Can not support .chm help files
This works on my network

> 2) Does not support locks for multi-user access to Access
This too works on my network

> 3) Does support URLs from windows with '%' in the path
Have not tested this

> 4) Numerous problems with multiple users accessing same folder.
>
Not really any problems here.
> Comments/suggestions for fixing the above mentioned problems?
>
For any help you need to provide what version of samba you are using,
what you tried and how it failed and most likely you will have to
provide your configuration file. Also if you are using an ancient
version of samba for example any version less than 3.0.24, you
probably will not get much help.

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba Shortfalls?

2008-09-12 Thread Volker Lendecke
On Fri, Sep 12, 2008 at 09:46:34AM -0400, Justin Piszcz wrote:
> 1) Can not support .chm help files
> 2) Does not support locks for multi-user access to Access
> 3) Does support URLs from windows with '%' in the path
> 4) Numerous problems with multiple users accessing same folder.
> 
> Comments/suggestions for fixing the above mentioned problems?

Can you be a bit more specific? For example, multi-user
access to .mdb files is definitely correctly supported and
runs as fine as it can run against a CIFS share. So I'd say
the general statement 2) needs at least a bit more of an
explanation, as do your statements 1, 3 and 4.

Thanks,

Volker


pgpVeydKTCyDg.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] CUPS log files flooding

2008-09-12 Thread Margaret Doll
The latest updates to my 2.6.9-78.ELsmp system has caused the /var/log/ 
cups/access_log files to fill up the /var partition in short order.   
This causes havoc with samba connections to Windows computers and  
printing through the RedHat server stops  working after awhile.


Thanks, Adrian Sender, for the temporary fix, ie. modifying /etc/cups/ 
cupsd.conf to set the LogLevel to none.


When will a fix be out for this problem?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba Shortfalls?

2008-09-12 Thread Justin Piszcz

Hello,

1) Can not support .chm help files
2) Does not support locks for multi-user access to Access
3) Does support URLs from windows with '%' in the path
4) Numerous problems with multiple users accessing same folder.

Comments/suggestions for fixing the above mentioned problems?

Justin.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re : Re : [Samba] Solaris nss_ldap vs PADL nss_ldap

2008-09-12 Thread albanperso-zatoo
Thanks Duncan.

Before going to get the nss_ldap, I just create fresh user accounts in my AD 
and it works fine!
I recreate the existing ones everything is OK. There is no difference detected 
with the former accounts. so it's an unexplained working tips

So, as an advice from the filed, for future readres of this message, check the 
entire line of responsablity, starting from the infra to the data (ALL kind of 
involved data)

Best regards

Alban



- Message d'origine 
> De : Duncan Brannen <[EMAIL PROTECTED]>
> À : [EMAIL PROTECTED]
> Cc : samba@lists.samba.org
> Envoyé le : Vendredi, 12 Septembre 2008, 13h20mn 30s
> Objet : Re: Re : [Samba] Solaris nss_ldap vs PADL nss_ldap
> 
> 
> Hi Alban,
> You can download padl's nss_ldap library from 
> http://www.padl.com/Contents/OpenSourceSoftware.html
> 
> If you've already configured solaris for groups and password in LDAP, it 
> should just work once you replace the Solaris
> nss_ldap with the padl one ( back it up first ;)  and add / configure 
> /etc/ldap.conf
> 
> mine looks like
> 
> > TLS_CACERT /etc/certs/cacert.pem
> > TLSCIPHERSUITE TLSv1
> > host ldap.st-andrews.ac.uk
> > rootbinddn 
> > base ou=People,dc=st-andrews,dc=ac,dc=uk
> > ldap_version 3
> > nss_base_passwd ou=People,dc=st-andrews,dc=ac,dc=uk?one
> > nss_base_shadow ou=People,dc=st-andrews,dc=ac,dc=uk?one
> > nss_base_group  ou=Groups,dc=st-andrews,dc=ac,dc=uk?one
> > ssl start_tls
> > tls_cacertfile /etc/certs/
> > certificate?
> > tls_cacertdir /etc/certs
> > tls_ciphers TLSv1
> With the admin user password in /etc/ldap.secret permission 600.
> 
> 
> You could also try  group: compat as suggested by Douglas Engert,  I've 
> not managed to get back to trying this yet.
> 
> > Have you tried using Solaris version withthis in the nsswitch.conf:
> >
> >  group: compat
> >  group_compat ldap
> >
> > and adding the + in the /etc/group file.
> >
> > This appears to work as expected, getting groups info from both
> > local and ldap.
> >
> > Or (I have not tried this):
> >
> >  group: files [SUCCESS=continue] ldap
> 
> Cheers,
>   Duncan
> 
> 
> 
> [EMAIL PROTECTED] wrote:
> > Hi Duncan,
> >
> > I have the same issue on Solaris and Samba (3.028a and 3.31) that is OK for 
> primary groups but not for secondaries.
> >
> > can you describe how do you get / configurePADL's nss_ldap?
> >
> > Thanks in advance
> >
> > Regards
> >
> > Alban
> >
> >
> > - Message d'origine 
> >  
> >> De : Duncan Brannen 
> >> À : samba@lists.samba.org
> >> Envoyé le : Mercredi, 27 Août 2008, 18h09mn 55s
> >> Objet : [Samba] Solaris nss_ldap vs PADL nss_ldap
> >>
> >>
> >>
> >> Hi All,
> >>   Any thoughts on why, while everything seems ok at the OS level 
> >> (getent , id -a ) Samba
> >> doesn't pickup any supplementary groups when Solaris is configured with 
> >> 'group: files ldap' in
> >> nsswitch.conf and using it's own native nss_ldap.so.1 but does when 
> >> using PADL's nss_ldap?
> >> Everything else is equal.
> >>
> >> Do they use/accept different calls or could it be an openldap vs native 
> >> ldap incompatibility,
> >> Samba being compiled against the openldap libraries.
> >>
> >> Samba seems not to compile against the native libraries due to a lack of 
> >> ldap_start_tls_s
> >>
> >> Solaris 10 and Samba 3.2.2
> >>
> >> Cheers,
> >>   Duncan
> >>
> >> -- 
> >> The University of St Andrews is a charity registered in Scotland : No 
> SC013532
> >>
> >> -- 
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions:  https://lists.samba.org/mailman/listinfo/samba
> >>
> >
> >
> >
> >  
> >  
> 
> 
> -- 
> The University of St Andrews is a charity registered in Scotland : No SC013532




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] NT_STATUS_MEDIA_WRITE_PROTECTED

2008-09-12 Thread Ben Tisdall
Shot in the dark, it's not app-armor related is it?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: Re : [Samba] Solaris nss_ldap vs PADL nss_ldap

2008-09-12 Thread Duncan Brannen


Hi Alban,
   You can download padl's nss_ldap library from 
http://www.padl.com/Contents/OpenSourceSoftware.html


If you've already configured solaris for groups and password in LDAP, it 
should just work once you replace the Solaris
nss_ldap with the padl one ( back it up first ;)  and add / configure 
/etc/ldap.conf


mine looks like


TLS_CACERT /etc/certs/cacert.pem
TLSCIPHERSUITE TLSv1
host ldap.st-andrews.ac.uk
rootbinddn 
base ou=People,dc=st-andrews,dc=ac,dc=uk
ldap_version 3
nss_base_passwd ou=People,dc=st-andrews,dc=ac,dc=uk?one
nss_base_shadow ou=People,dc=st-andrews,dc=ac,dc=uk?one
nss_base_group  ou=Groups,dc=st-andrews,dc=ac,dc=uk?one
ssl start_tls
tls_cacertfile /etc/certs/certificate?

tls_cacertdir /etc/certs
tls_ciphers TLSv1

With the admin user password in /etc/ldap.secret permission 600.


You could also try  group: compat as suggested by Douglas Engert,  I've 
not managed to get back to trying this yet.



Have you tried using Solaris version withthis in the nsswitch.conf:

 group: compat
 group_compat ldap

and adding the + in the /etc/group file.

This appears to work as expected, getting groups info from both
local and ldap.

Or (I have not tried this):

 group: files [SUCCESS=continue] ldap


Cheers,
 Duncan



[EMAIL PROTECTED] wrote:

Hi Duncan,

I have the same issue on Solaris and Samba (3.028a and 3.31) that is OK for 
primary groups but not for secondaries.

can you describe how do you get / configurePADL's nss_ldap?

Thanks in advance

Regards

Alban


- Message d'origine 
  

De : Duncan Brannen <[EMAIL PROTECTED]>
À : samba@lists.samba.org
Envoyé le : Mercredi, 27 Août 2008, 18h09mn 55s
Objet : [Samba] Solaris nss_ldap vs PADL nss_ldap



Hi All,
  Any thoughts on why, while everything seems ok at the OS level 
(getent , id -a ) Samba
doesn't pickup any supplementary groups when Solaris is configured with 
'group: files ldap' in
nsswitch.conf and using it's own native nss_ldap.so.1 but does when 
using PADL's nss_ldap?

Everything else is equal.

Do they use/accept different calls or could it be an openldap vs native 
ldap incompatibility,

Samba being compiled against the openldap libraries.

Samba seems not to compile against the native libraries due to a lack of 
ldap_start_tls_s


Solaris 10 and Samba 3.2.2

Cheers,
  Duncan

--
The University of St Andrews is a charity registered in Scotland : No SC013532

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba





  
  



--
The University of St Andrews is a charity registered in Scotland : No SC013532

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba write performance in kernel

2008-09-12 Thread Lin Mac

hi,

> Ok, this is different. I had missed that you are talking
> about a small device with slow memory bandwith. In that
> case, you might certainly gain something by avoiding the
> copies. If you are really memcpy-bound, you should
> definitely make splice work.

yes, but the question is by how much can it improve. We would like to see it 
reach 7Mbps in 2 or 3 months, can't just waiting for linux kernel fix the 
problem. Is there any individuals/company capable of doing such performance 
improvement for charge?


> At the high end, latencies is mostly what kills your
> performance. Mostly you have enough bandwidth, but if you
> just do a simple request->response scheme, you can't get
> beyond a certain overall bandwith that is way below the
> theoretical network bandwith. To fill that, you need to make
> the client issue parallel requests. Multi-threaded windows
> client apps can do it, smbclient from 3.2 does it.

I have tried multiple threads but it doesn't help the performance in my case. 
The delay caused by memory copy seems dominate.

Best Regards,
Mac Lin> Date: Fri, 12 Sep 2008 09:45:32 +0200
> From: [EMAIL PROTECTED]
> To: [EMAIL PROTECTED]
> CC: [EMAIL PROTECTED]; samba@lists.samba.org
> Subject: Re: [Samba] Samba write performance in kernel
> 
> On Fri, Sep 12, 2008 at 02:43:25PM +0800, Lin Mac wrote:
> > well, in my condition, it might be 30% instead of 5%, IF
> > splice can cover advantage 1 and 2.
> > 1. I'm using a slow CPU (FA526) , and the memory copy is even slower. 
> > 2. The reading performance is over 7 MB/s, with mmap and
> > sendfile enabled, while writing is only 4-5 MB/s. Without
> > mmap and sendfile, reading from samba is also about 4-5
> > MB/s. 
> > 3. I used Oprofile to profile writing file to samba and
> > found that CPU takes over 30% CPU time on
> > copy_from/to_user, so I think going to user space and back
> > again is the bottleneck.
> > 4. My device is only 100Mbps Ethernet
> > 5. I uses Windows client to measure throughput
> 
> Ok, this is different. I had missed that you are talking
> about a small device with slow memory bandwith. In that
> case, you might certainly gain something by avoiding the
> copies. If you are really memcpy-bound, you should
> definitely make splice work.
> 
> > > here, but the network latencies together with non-optimally
> > > queued requests by the client have a MUCH greater influence.
> > 1. If splice works, can memory copy be avoided?
> > 2. Sorry I don't really get what the "non-optimally queued
> > requests" means. And what could I do to make it optimized?
> 
> At the high end, latencies is mostly what kills your
> performance. Mostly you have enough bandwidth, but if you
> just do a simple request->response scheme, you can't get
> beyond a certain overall bandwith that is way below the
> theoretical network bandwith. To fill that, you need to make
> the client issue parallel requests. Multi-threaded windows
> client apps can do it, smbclient from 3.2 does it.
> 
> Volker



_
聰明搜尋和瀏覽網路的免費工具列 — MSN 搜尋工具列 
http://toolbar.live.com/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: samaba winwind

2008-09-12 Thread Michael Adam
Hi,

Andreas Ladanyi wrote:
> vishesh schrieb:
> >dear all
> >i am running samba 3.0.28 on two server and using winbind to get active 
> >directory users and group. the problem i facing is attach the uid 
> >assigned for same user is diffrent on samba servers.
> 
> The uid saved in the Active Directory is different from the winbind 
> Linux side ?

No, the problem is that the uids on the two samba servers are
different for the same user. This is because you are using
(the default of) "idmap backend = tdb". This assigns increasing
uids (per server) to users in the the order the access the server.

If you need the same user ids, you have (at least) the following
two options:

1. Use "idmap backend = rid". Then a user gets the the
   uid built as LOW_RANGE_UID + RID.
   Here LOW_RANGE_UID is the lower bound of the range
   "idmap uid = LOW_RANGE_UID - HIGH_RANGE_UID"
   and RID is the "relative identifyer": the user SID
   is built as follows: DOMAIN_SID-RID. i.e. the rid
   is the last block of digits of the user's sid, hence
   is unique inside one domain, and users will get the
   same uid on all samba servers using "idmap backend = rid".
   See the man paget idmap_rid(8).

2. Use "idmap backend = ad":
   When you install the SFU (Services For Unix) schema
   extensions, then you can set unix attributes for users
   and groups in actice directory. and the same uid is
   obtained for users on all samba servers using this backend.
  
Hope this helps,

Michael

-- 
Michael Adam <[EMAIL PROTECTED]>  <[EMAIL PROTECTED]>
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.SerNet.DE, mailto: Info @ SerNet.DE


pgp4tb4JCb8le.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re : [Samba] Solaris nss_ldap vs PADL nss_ldap

2008-09-12 Thread albanperso-zatoo
Hi Duncan,

I have the same issue on Solaris and Samba (3.028a and 3.31) that is OK for 
primary groups but not for secondaries.

can you describe how do you get / configurePADL's nss_ldap?

Thanks in advance

Regards

Alban


- Message d'origine 
> De : Duncan Brannen <[EMAIL PROTECTED]>
> À : samba@lists.samba.org
> Envoyé le : Mercredi, 27 Août 2008, 18h09mn 55s
> Objet : [Samba] Solaris nss_ldap vs PADL nss_ldap
> 
> 
> 
> Hi All,
>   Any thoughts on why, while everything seems ok at the OS level 
> (getent , id -a ) Samba
> doesn't pickup any supplementary groups when Solaris is configured with 
> 'group: files ldap' in
> nsswitch.conf and using it's own native nss_ldap.so.1 but does when 
> using PADL's nss_ldap?
> Everything else is equal.
> 
> Do they use/accept different calls or could it be an openldap vs native 
> ldap incompatibility,
> Samba being compiled against the openldap libraries.
> 
> Samba seems not to compile against the native libraries due to a lack of 
> ldap_start_tls_s
> 
> Solaris 10 and Samba 3.2.2
> 
> Cheers,
>   Duncan
> 
> -- 
> The University of St Andrews is a charity registered in Scotland : No SC013532
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba write performance in kernel

2008-09-12 Thread Volker Lendecke
On Fri, Sep 12, 2008 at 02:43:25PM +0800, Lin Mac wrote:
> well, in my condition, it might be 30% instead of 5%, IF
> splice can cover advantage 1 and 2.
> 1. I'm using a slow CPU (FA526) , and the memory copy is even slower. 
> 2. The reading performance is over 7 MB/s, with mmap and
> sendfile enabled, while writing is only 4-5 MB/s. Without
> mmap and sendfile, reading from samba is also about 4-5
> MB/s. 
> 3. I used Oprofile to profile writing file to samba and
> found that CPU takes over 30% CPU time on
> copy_from/to_user, so I think going to user space and back
> again is the bottleneck.
> 4. My device is only 100Mbps Ethernet
> 5. I uses Windows client to measure throughput

Ok, this is different. I had missed that you are talking
about a small device with slow memory bandwith. In that
case, you might certainly gain something by avoiding the
copies. If you are really memcpy-bound, you should
definitely make splice work.

> > here, but the network latencies together with non-optimally
> > queued requests by the client have a MUCH greater influence.
> 1. If splice works, can memory copy be avoided?
> 2. Sorry I don't really get what the "non-optimally queued
> requests" means. And what could I do to make it optimized?

At the high end, latencies is mostly what kills your
performance. Mostly you have enough bandwidth, but if you
just do a simple request->response scheme, you can't get
beyond a certain overall bandwith that is way below the
theoretical network bandwith. To fill that, you need to make
the client issue parallel requests. Multi-threaded windows
client apps can do it, smbclient from 3.2 does it.

Volker


pgpLIonfsRTrR.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba