Re: [Samba] Installing Samba with ADS

2011-12-19 Thread Daniel Müller
Hello,
first of all we need some configuration of your smb.conf.
Is winbind running?
Which linux,unix are you running?
Did you join your samba to windows ads?
What  about getent groups ; getent passwd ?

---
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: muel...@tropenklinik.de
Internet: www.tropenklinik.de
---
-Ursprüngliche Nachricht-
Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im
Auftrag von Steve Swanekamp
Gesendet: Montag, 19. Dezember 2011 23:30
An: samba@lists.samba.org
Betreff: [Samba] Installing Samba with ADS

I am having troubles with file permissions after installing Samba with ADS. 
Samba does not seem to recognize the Windows users properly.  Are there 
detailed ADS instructions out there.  I followed some instructions from a 
colleague but he is no more experienced than me at getting this all to work.

Thanks in advance to those who take to time to read this post and muchismas 
gracias to those who respond.
Steve Swanekamp

Dr. Stephen B. Swanekamp
Plasma Physics Division
Washington, DC 20375
202-404-4361
steve.swanek...@nrl.navy.mil 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Installing Samba with ADS

2011-12-19 Thread Steve Swanekamp
I am having troubles with file permissions after installing Samba with ADS. 
Samba does not seem to recognize the Windows users properly.  Are there 
detailed ADS instructions out there.  I followed some instructions from a 
colleague but he is no more experienced than me at getting this all to work. 
Thanks in advance to those who take to time to read this post and muchismas 
gracias to those who respond.

Steve Swanekamp

Dr. Stephen B. Swanekamp
Plasma Physics Division
Washington, DC 20375
202-404-4361
steve.swanek...@nrl.navy.mil 



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] All read and write

2011-12-19 Thread Jessica Guynn
Hi guys,

oops... it does work when I type in guest as login. lol.. I did make guest
only...lol  Anyways, still gives me locking when trying to write to the
directory.  Should I just have any window users have full write and read
and take ownership because when checking for the ownership of the files and
folders created by the windows program, it points to nobody instead of the
window users. Any ideas and solutions??

Thanks again for all your help.

Jess
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] "getpeername failed" error when signed communicationspolicy enabled

2011-12-19 Thread Jeremy Allison
On Fri, Dec 16, 2011 at 02:00:17PM -0500, Allen Chen wrote:

> I have the same message in samba log file, even though I set up "log
> level =  0".
> My Samba 3.4.5 PDC is listening on both ports 139 and 445 under
> CentOS 5.6 32bits.
> Here is the message:
> [2011/10/26 16:02:05,  0] lib/util_sock.c:539(read_fd_with_timeout)
> [2011/10/26 16:02:05,  0] lib/util_sock.c:1491(get_peer_addr_internal)
>  getpeername failed. Error was Transport endpoint is not connected
>  read_fd_with_timeout: client 0.0.0.0 read error = Connection reset
> by peer.
> [2011/10/26 16:02:05,  0] lib/util_sock.c:1491(get_peer_addr_internal)
>  getpeername failed. Error was Transport endpoint is not connected
> [2011/10/26 16:02:05,  0] lib/util_sock.c:1491(get_peer_addr_internal)
>  getpeername failed. Error was Transport endpoint is not connected

We're going to need debug level 10 log output to even begin
to look into this.

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba 4 does not survive a restart

2011-12-19 Thread steve

Hi everyone

The first time after a new build, Samba 4 works fine. After restarting, 
it doesn't.


openSUSE 12.1, bind 9.8.1-SP and Kerberos all working as per the samba wiki.

sudo samba -i -M single
root's password:
samba version 4.0.0alpha18-GIT-bfc7481 started.
Copyright Andrew Tridgell and the Samba Team 1992-2011
samba: using 'single' process model
WARNING: no socket to connect to

Kill that and restart and there is /usr/local/samba/var/run/samba.pid 
but wbinfo does not work nor does smbclient.


What is preventing it from working? Where can I start to look?

Thanks.
Steve
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 WBC_ERR_DOMAIN_NOT_FOUND

2011-12-19 Thread steve

On 19/12/11 19:16, steve wrote:

On 19/12/11 11:06, Matthieu Patou wrote:

Hi Steve

For me it's ok unless I ask for an unknown user:

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i administrator
TEST\Administrator:*:0:100::/home/TEST/Administrator:/bin/false

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i ares
failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for user ares

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i administrator
TEST\Administrator:*:0:100::/home/TEST/Administrator:/bin/false

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -u
Administrator
Guest
krbtgt
dns-ares

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i Guest
TEST\Guest:*:313:314::/home/TEST/Guest:/bin/false

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i dns-ares
TEST\dns-ares:*:315:100::/home/TEST/dns-ares:/bin/false


what wbinfo -u gives on your domain ?



Steve





/usr/local/samba/bin is in PATH

steve@hh3:~$ wbinfo -u
Error looking up domain users

root@hh3:/home/steve# wbinfo -u
Error looking up domain users


What is returned by which wbinfo ?



Some other stuff:

FQDN hh3.site
domain SITE

steve@hh3:~$  host -t SRV _kerberos._udp.hh3.site.
_kerberos._udp.hh3.site has SRV record 0 100 88 hh3.hh3.site.

steve@hh3:~$ kinit ste...@hh3.site
Password for ste...@hh3.site:
Warning: Your password will expire in 40 days on Sat Jan 28 20:18:06 
2012


steve@hh3:~$ host hh3
hh3.hh3.site has address 192.168.1.3

steve@hh3:~$ smbclient //localhost/home -Usteve2
Password for [SITE\steve2]:
smb: \>

steve@hh3:~$ smbclient //hh3/home -Usteve2
Password for [SITE\steve2]:
Password for [SITE\steve2]:
Password for [SITE\steve2]:
Connection to \\hh3\home failed - NT_STATUS_LOGON_FAILURE

hh3 resolves fine, but hh3 is not resolved when using smbclient.

steve@hh3:~$ smbclient //192.168.1.3/home -Usteve2
Password for [SITE\steve2]:
smb: \>

DNS and kerberos seem OK. Is this Samba 4?

Now with everything as root:

root@hh3:/home/steve# smbclient //hh3.site/home -Uadministrator
Password for [SITE\administrator]:
Password for [SITE\administrator]:
Password for [SITE\administrator]:
Connection to \\hh3.site\home failed - NT_STATUS_LOGON_FAILURE

Increase log level and try to understand what's wrong in your log


root@hh3:/home/steve# smbclient //localhost/home -Uadministrator
Password for [SITE\administrator]:
smb: \>

This suggests DNS is failing.

Adding winbind here makes no difference:(


It's useless in your problem.

/etc/nsswitch.conf

passwd: files ldap lsass
group: files ldap lsass
hosts:  files dns mdns4_minimal [NOTFOUND=return] mdns4

Agghh!!
Steve.







After new install.

Works fine up until samba is restarted. That is when wbinfo and all 
else fails. Samba does not survive the restart and nothing works 
thereafter.


Where can I start looking?


Thanks, Steve.


Will start new thread.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba 4 WBC_ERR_DOMAIN_NOT_FOUND

2011-12-19 Thread steve

On 19/12/11 11:06, Matthieu Patou wrote:

Hi Steve

For me it's ok unless I ask for an unknown user:

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i administrator
TEST\Administrator:*:0:100::/home/TEST/Administrator:/bin/false

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i ares
failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for user ares

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i administrator
TEST\Administrator:*:0:100::/home/TEST/Administrator:/bin/false

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -u
Administrator
Guest
krbtgt
dns-ares

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i Guest
TEST\Guest:*:313:314::/home/TEST/Guest:/bin/false

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i dns-ares
TEST\dns-ares:*:315:100::/home/TEST/dns-ares:/bin/false


what wbinfo -u gives on your domain ?



Steve





/usr/local/samba/bin is in PATH

steve@hh3:~$ wbinfo -u
Error looking up domain users

root@hh3:/home/steve# wbinfo -u
Error looking up domain users


What is returned by which wbinfo ?



Some other stuff:

FQDN hh3.site
domain SITE

steve@hh3:~$  host -t SRV _kerberos._udp.hh3.site.
_kerberos._udp.hh3.site has SRV record 0 100 88 hh3.hh3.site.

steve@hh3:~$ kinit ste...@hh3.site
Password for ste...@hh3.site:
Warning: Your password will expire in 40 days on Sat Jan 28 20:18:06 
2012


steve@hh3:~$ host hh3
hh3.hh3.site has address 192.168.1.3

steve@hh3:~$ smbclient //localhost/home -Usteve2
Password for [SITE\steve2]:
smb: \>

steve@hh3:~$ smbclient //hh3/home -Usteve2
Password for [SITE\steve2]:
Password for [SITE\steve2]:
Password for [SITE\steve2]:
Connection to \\hh3\home failed - NT_STATUS_LOGON_FAILURE

hh3 resolves fine, but hh3 is not resolved when using smbclient.

steve@hh3:~$ smbclient //192.168.1.3/home -Usteve2
Password for [SITE\steve2]:
smb: \>

DNS and kerberos seem OK. Is this Samba 4?

Now with everything as root:

root@hh3:/home/steve# smbclient //hh3.site/home -Uadministrator
Password for [SITE\administrator]:
Password for [SITE\administrator]:
Password for [SITE\administrator]:
Connection to \\hh3.site\home failed - NT_STATUS_LOGON_FAILURE

Increase log level and try to understand what's wrong in your log


root@hh3:/home/steve# smbclient //localhost/home -Uadministrator
Password for [SITE\administrator]:
smb: \>

This suggests DNS is failing.

Adding winbind here makes no difference:(


It's useless in your problem.

/etc/nsswitch.conf

passwd: files ldap lsass
group: files ldap lsass
hosts:  files dns mdns4_minimal [NOTFOUND=return] mdns4

Agghh!!
Steve.







After new install.

Works fine up until samba is restarted. That is when wbinfo and all else 
fails. Samba does not survive the restart and nothing works thereafter.


Where can I start looking?


Thanks, Steve.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] winbindd/idmap_ldap.c:472(idmap_ldap_allocate_id) Cannot allocate gid above 20000!

2011-12-19 Thread Jelle de Jong
On 19/12/11 11:22, Jelle de Jong wrote:
> On 23/05/11 13:37, Jelle de Jong wrote:
>> I got a few servers that where running stable and somehow winbindd
>> started complaining. There were no users added or any samba related
>> updates. Also the problems did not started on the same day one of the
>> servers started today and on other one months ago...
>>
>> winbindd[14450]: [2011/05/23 13:33:13.442070,  0]
>> winbindd/idmap_ldap.c:472(idmap_ldap_allocate_id)
>> winbindd[14450]:   Cannot allocate gid above 2!
>>
>> # winbindd --version
>> Version 3.5.6
> 
> I am still having these errors and I keep increasing the values:
> 
>idmap uid = 1-60500
>idmap gid = 1-60500
> 
> I started with 2 and I am now on 60500...
> 
> Dec 19 11:01:15 stayce winbindd[23861]: [2011/12/19 11:01:15.569602,  0]
> winbindd/idmap_ldap.c:472(idmap_ldap_allocate_id)
> Dec 19 11:01:15 stayce winbindd[23861]:   Cannot allocate gid above 60500!
> 
> # winbindd --version
> Version 3.5.6

I found the following:

samba (2:3.5.8~dfsg-1) unstable; urgency=low
  * New upstream release. This fixes the following bugs:
- Winbind leaks gids with idmap ldap backend (upstrem #)
  Closes: #613624

Upgraded to:

# winbindd --version
Version 3.5.11

Hopefully this will fix my issues.

Kind regards,

Jelle de Jong



signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] All read and write

2011-12-19 Thread Jessica Guynn
Hey Guys,

this is my updated smb.conf.  I am mapping any windows users to ubuntu user
nobody.  So I added a username map to file smbusers with (nobody = *).
 When I try to mount the volume in windows, gives me a login window.  None
of the windows users work and I tried using the ubuntu users as well, does
not work.  Any ideas???


Takahashi Motonobu,  I did also grant SeTakeOwnershipPrivilege
and SeRestorePrivilege user rights to nobody and Everyone.

/etc/samba/smbusers
nobody = *

[global]
username map = /etc/samba/smbusers
   netbios name = ARCHPROJFC
   workgroup = WORKGROUP
   server string = %h server (Samba, Ubuntu)
   dns proxy = no
   interfaces = lo eth0
  bind interfaces only = yes
   log file = /var/log/samba/log.%m
   max log size = 1000
   syslog = 0
   security = user

 map to guest = bad user
 guest account = nobody
# kernel oplocks = no
# level2 oplocks = no
# oplocks = no
  share modes = no

   encrypt passwords = true
   obey pam restrictions = yes

   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .

   pam password change = yes


#=== Share Definitions ===

# Un-comment the following (and tweak the other settings below to suit)
# to enable the default home directory shares. This will share each
# user's home director as \\server\username
[Workspace]
;   comment = Home Directories
 #   kernel oplocks = no
 #   level2 oplocks = no
 #   oplocks = no
 dos filemode = yes
path = /home/archproj/Workspace
veto oplock files = /*.avs/*.avp/
read only = no
browseable = yes
guest ok = yes
guest only = yes
inherit owner = yes
inherit permissions= yes
force user = nobody
locking = no
write list = nobody
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] sambaPwdMustChange

2011-12-19 Thread Adam Tauno Williams
On Sun, 2011-12-18 at 20:31 -0800, yudi shiddiq wrote:
> I want to ask something about implementing sambapwdmustchange, my goal
> is to force user to change password, then i setting on
> pla(phpldapadmin) on "sambaPwdMustChange" to "0", but there's no
> affect to user, what's the problem occure?

It works; although you don't need to set it to "0".  It is a timestamp,
any low value will work.

But this setting doesn't mean anything if you haven't defined a password
policy for the domain.

-- 
System & Network Administrator [ LPI & NCLA ]

OpenGroupware Developer 
Adam Tauno Williams

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] oplocks issue when trying to copy file

2011-12-19 Thread Joschi Brauchle

I reported the issue here:
https://bugzilla.samba.org/show_bug.cgi?id=8670

Please find level-10 logs and strace there.

Best regards,
Joschi Brauchle

On 12/19/2011 10:57 AM, Volker Lendecke wrote:

Hi!

More interesting would be a debug level 10 logfile together
with a "strace -ttT -o /tmp/smbd.strace -p" on
the smbd relevant for the client.

Volker

On Fri, Dec 16, 2011 at 06:44:10PM +0100, Joschi Brauchle wrote:

Hello everyone,

I would like to follow up on the thread "[Samba] oplocks issue when
trying to copy file", which I found while googling for a problem.

We have the same setup and problem mentioned in that thread:
Our Samba server (version 3.5.12) exports a share that was mounted
via NFS from another machine. We are using SUSE Linux Enterprise and
this setup used to work with "kernel oplocks = yes" in SLES10, but
not in SLES11SP1.

I did some research and found that the kernel commit
http://kernel.opensuse.org/cgit/kernel/commit/?h=SLE11-SP1&id=dd143426eaaadea159c8dd2d3c9ff5e9da94bcfd
mentioned in this thread is included in SLES11SP1 kernel 2.6.32.29.

So I downgraded to SLES11SP1 2.6.32.12 on a test-machine and can
confirm that the problem goes away with kernel oplocks turned on!

As a workaround, one can disable kernel oplocks or use the "-o
nolock" option when mounting via NFS.

I guess this kernel regression should be reported to Novell. I can
provide the samba-level-10 logfiles for 2.6.32.12 (working) and
2.6.32.29 (not working).

Best regards,   
--
Dipl.-Ing. Joschi Brauchle, M.Sc.

Institute for Communications Engineering (LNT)
Technische Universitaet Muenchen (TUM)
80290 Munich, Germany

Tel (work): +49 89 289-23474
Fax (work): +49 89 289-23490
E-mail: joschi.brauc...@tum.de
Web: http://www.lnt.ei.tum.de/





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba





--
Dipl.-Ing. Joschi Brauchle, M.Sc.

Institute for Communications Engineering (LNT)
Technische Universitaet Muenchen (TUM)
80290 Munich, Germany

Tel (work): +49 89 289-23474
Fax (work): +49 89 289-23490
E-mail: joschi.brauc...@tum.de
Web: http://www.lnt.ei.tum.de/

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] winbindd/idmap_ldap.c:472(idmap_ldap_allocate_id) Cannot allocate gid above 20000!

2011-12-19 Thread Jelle de Jong
On 23/05/11 13:37, Jelle de Jong wrote:
> I got a few servers that where running stable and somehow winbindd
> started complaining. There were no users added or any samba related
> updates. Also the problems did not started on the same day one of the
> servers started today and on other one months ago...
> 
> winbindd[14450]: [2011/05/23 13:33:13.442070,  0]
> winbindd/idmap_ldap.c:472(idmap_ldap_allocate_id)
> winbindd[14450]:   Cannot allocate gid above 2!
> 
> # winbindd --version
> Version 3.5.6

I am still having these errors and I keep increasing the values:

   idmap uid = 1-60500
   idmap gid = 1-60500

I started with 2 and I am now on 60500...

Dec 19 11:01:15 stayce winbindd[23861]: [2011/12/19 11:01:15.569602,  0]
winbindd/idmap_ldap.c:472(idmap_ldap_allocate_id)
Dec 19 11:01:15 stayce winbindd[23861]:   Cannot allocate gid above 60500!

# winbindd --version
Version 3.5.6

How can I fix my this in a more permanent way?

Kind regards,

Jelle de Jong



signature.asc
Description: OpenPGP digital signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] Samba 4 WBC_ERR_DOMAIN_NOT_FOUND

2011-12-19 Thread Matthieu Patou

Hi Steve

For me it's ok unless I ask for an unknown user:

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i administrator
TEST\Administrator:*:0:100::/home/TEST/Administrator:/bin/false

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i ares
failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for user ares

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i administrator
TEST\Administrator:*:0:100::/home/TEST/Administrator:/bin/false

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -u
Administrator
Guest
krbtgt
dns-ares

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i Guest
TEST\Guest:*:313:314::/home/TEST/Guest:/bin/false

mat@ares:/usr/local/src/samba4$ ./bin/wbinfo -i dns-ares
TEST\dns-ares:*:315:100::/home/TEST/dns-ares:/bin/false


what wbinfo -u gives on your domain ?



Steve





/usr/local/samba/bin is in PATH

steve@hh3:~$ wbinfo -u
Error looking up domain users

root@hh3:/home/steve# wbinfo -u
Error looking up domain users


What is returned by which wbinfo ?



Some other stuff:

FQDN hh3.site
domain SITE

steve@hh3:~$  host -t SRV _kerberos._udp.hh3.site.
_kerberos._udp.hh3.site has SRV record 0 100 88 hh3.hh3.site.

steve@hh3:~$ kinit ste...@hh3.site
Password for ste...@hh3.site:
Warning: Your password will expire in 40 days on Sat Jan 28 20:18:06 2012

steve@hh3:~$ host hh3
hh3.hh3.site has address 192.168.1.3

steve@hh3:~$ smbclient //localhost/home -Usteve2
Password for [SITE\steve2]:
smb: \>

steve@hh3:~$ smbclient //hh3/home -Usteve2
Password for [SITE\steve2]:
Password for [SITE\steve2]:
Password for [SITE\steve2]:
Connection to \\hh3\home failed - NT_STATUS_LOGON_FAILURE

hh3 resolves fine, but hh3 is not resolved when using smbclient.

steve@hh3:~$ smbclient //192.168.1.3/home -Usteve2
Password for [SITE\steve2]:
smb: \>

DNS and kerberos seem OK. Is this Samba 4?

Now with everything as root:

root@hh3:/home/steve# smbclient //hh3.site/home -Uadministrator
Password for [SITE\administrator]:
Password for [SITE\administrator]:
Password for [SITE\administrator]:
Connection to \\hh3.site\home failed - NT_STATUS_LOGON_FAILURE

Increase log level and try to understand what's wrong in your log


root@hh3:/home/steve# smbclient //localhost/home -Uadministrator
Password for [SITE\administrator]:
smb: \>

This suggests DNS is failing.

Adding winbind here makes no difference:(


It's useless in your problem.

/etc/nsswitch.conf

passwd: files ldap lsass
group: files ldap lsass
hosts:  files dns mdns4_minimal [NOTFOUND=return] mdns4

Agghh!!
Steve.






--
Matthieu Patou
Samba Team
http://samba.org

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] oplocks issue when trying to copy file

2011-12-19 Thread Volker Lendecke
Hi!

More interesting would be a debug level 10 logfile together
with a "strace -ttT -o /tmp/smbd.strace -p " on
the smbd relevant for the client.

Volker

On Fri, Dec 16, 2011 at 06:44:10PM +0100, Joschi Brauchle wrote:
> Hello everyone,
> 
> I would like to follow up on the thread "[Samba] oplocks issue when
> trying to copy file", which I found while googling for a problem.
> 
> We have the same setup and problem mentioned in that thread:
> Our Samba server (version 3.5.12) exports a share that was mounted
> via NFS from another machine. We are using SUSE Linux Enterprise and
> this setup used to work with "kernel oplocks = yes" in SLES10, but
> not in SLES11SP1.
> 
> I did some research and found that the kernel commit
> http://kernel.opensuse.org/cgit/kernel/commit/?h=SLE11-SP1&id=dd143426eaaadea159c8dd2d3c9ff5e9da94bcfd
> mentioned in this thread is included in SLES11SP1 kernel 2.6.32.29.
> 
> So I downgraded to SLES11SP1 2.6.32.12 on a test-machine and can
> confirm that the problem goes away with kernel oplocks turned on!
> 
> As a workaround, one can disable kernel oplocks or use the "-o
> nolock" option when mounting via NFS.
> 
> I guess this kernel regression should be reported to Novell. I can
> provide the samba-level-10 logfiles for 2.6.32.12 (working) and
> 2.6.32.29 (not working).
> 
> Best regards, 
> -- 
> Dipl.-Ing. Joschi Brauchle, M.Sc.
> 
> Institute for Communications Engineering (LNT)
> Technische Universitaet Muenchen (TUM)
> 80290 Munich, Germany
> 
> Tel (work): +49 89 289-23474
> Fax (work): +49 89 289-23490
> E-mail: joschi.brauc...@tum.de
> Web: http://www.lnt.ei.tum.de/
> 


> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba


-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-37-0, fax: +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kont...@sernet.de
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba + acl,user_xattr

2011-12-19 Thread Dmitry Mordovin



At first, has your file system already enabled xattr?
For example, are following commands successfull?

  # touch test.txt
  # setfattr -n user.test -v test test.txt
  # setfattr -n security.test -v test2 test.txt
  # getfattr -d test.txt
  # getfattr -n security.test -d test.txt

And your Samba (smbd) is xattr-ready?
For example the following commands show HAVE_*XATTR line?

# smbd -b | grep SETXATTR
HAVE_FSETXATTR
HAVE_LSETXATTR
HAVE_SETXATTR

---
TAKAHASHI Motonobu

All commands successfull.

#mount
/dev/sda4 on /mnt/public type ext3 (rw,nosuid,nodev,acl,user_xattr)

#cd /mnt/public


#getfattr -d hello.txt
# file: hello.txt
user.test="test"

#getfattr -n security.test -d hello.txt
# file: hello.txt
security.test="test2"


#smbd -b|grep SETXATTR
   HAVE_FSETXATTR
   HAVE_LSETXATTR
   HAVE_SETXATTR

SAMBA ready, but don't change xattr. Very strange with my system.
Also, I joined TT 8414 where is strange with file access rights.

https://bugzilla.samba.org/show_bug.cgi?id=8414

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba