Re: [Samba] CIFS mount not applying setuids

2009-06-25 Thread Ben Tyger

hydr...@bran ~ $ cat /proc/config.gz |gunzip|grep -i cifs
CONFIG_CIFS=m
# CONFIG_CIFS_STATS is not set
# CONFIG_CIFS_WEAK_PW_HASH is not set
# CONFIG_CIFS_UPCALL is not set
CONFIG_CIFS_XATTR=y
CONFIG_CIFS_POSIX=y
# CONFIG_CIFS_DEBUG2 is not set
# CONFIG_CIFS_EXPERIMENTAL is not set


François Legal wrote:
 UNIX extension wouldn't be available if they're not built-in the kernel or
 as a module (I never used it in the modular form).

 However (that may not apply well in your case), you could use pam_mount to
 do the mounting with the correct user credentials.

   
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Very slow transfers to Samba on Ubuntu

2009-06-24 Thread Ben Tyger
What type of file processors are you running along with samba?. Are you
running the virus checking plugin or VFS(recycle bin)? Virus checking is
very cpu and disk I/O intensive these can really slow down a samba
server. I can't expect VFS is all that cheap either when moving big files.

Raghu A wrote:
 I mounted a samba volume on XP. XP and Ubuntu are connected over 100Mbps
 ethernet (router).

 I am writing a 4GB file from XP to Ubuntu and the transfer is extremely
 slow : only around 1-1.5 MB/s.

 This is not a network or disk issue since at the same time this transfer
 is gonig on, I can scp the same file from XP to Ubuntu at 3-4 times faster
 (around 6MB/s).

 What could be wrong? Even for this slow transfer, smbd seems to be taking
 quite a bit CPU (more than sshd for the transfer rate
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] CIFS mount not applying setuids

2009-06-24 Thread Ben Tyger
That's not a the problem.  I know the extensions are compiled in and
running on the client machine.  I can see the ACLs over the cifs mount
from the client machine.  It only becomes an issue when I try to write
files over the cifs mount.  At that point it writes the wrong
uid/gid/perms.  It even overwrites with the wrong permissions on an
existing file with the correct permissions.  I even tried loading the
cifs modules on the server, but that made no difference. 

François Legal wrote:
 UNIX extension wouldn't be available if they're not built-in the kernel or
 as a module (I never used it in the modular form).

 However (that may not apply well in your case), you could use pam_mount to
 do the mounting with the correct user credentials.
   
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] CIFS mount not applying setuids

2009-06-23 Thread Ben Tyger
Hello all,
I've been dealing with this problem for years now and I am a bit fed
up with it.  Maybe some of you all can shed some light on the situation.
I am having problems with my samba server setting the
uid/gid/permissions incorrectly when a file is written to the server
filesystem over cifs.   I currently use the account remotemounter for
mounting samba shares.   Even with the 'setuids' options set, it still
defaults back to writing files as the remotemounter's default
user:group:umask settings.  I know that samba will rollback to standard
UID/GID of the mounting username if CIFS Unix Extensions are
unavailable.  I don't know why CIFS Unix Extensions wouldn't be
available.  Anybody have any ideas?



---Client mount command ---
hydr...@bran ~ $ sudo mount -vv /mnt/Multimedia/
parsing options:
rw,credentials=/etc/samba/cred-remotemounter,setuids,acl,noperms

mount.cifs kernel mount options
unc=//brigid.tygerclan.local\multimedia,ip=192.168.1.4,user=remotemounter,pass={mypassword},ver=1,rw,credentials=/etc/samba/cred-remotemounter,setuids,acl,noperms

Client: Gentoo Linux
net-fs/mount-cifs-3.0.30
net-fs/samba-3.0.33
--

--- Server Config
[global]
dos charset = CP850
unix charset = UTF-8
display charset = LOCALE
workgroup = TYGERCLAN
realm =
netbios name = BRIGID
netbios aliases =
netbios scope =
server string = brigid.tygerclan.net
interfaces =
bind interfaces only = No
security = USER
auth methods =
encrypt passwords = Yes
update encrypted = No
client schannel = Auto
server schannel = Auto
allow trusted domains = Yes
map to guest = Bad User
null passwords = No
obey pam restrictions = No
password server = *
smb passwd file = /etc/samba/smbpasswd
private dir = /etc/samba
passdb backend = ldapsam:ldap://ldap-slave.tygerclan.local
algorithmic rid base = 1000
root directory =
guest account = nobody
enable privileges = Yes
pam password change = No
passwd program =
passwd chat = *new*password* %n\n *new*password* %n\n *changed*
passwd chat debug = No
passwd chat timeout = 2
check password script =
username map =
password level = 0
username level = 0
unix password sync = No
restrict anonymous = 0
lanman auth = No
ntlm auth = Yes
client NTLMv2 auth = No
client lanman auth = Yes
client plaintext auth = No
preload modules =
use kerberos keytab = No
log level = 0
syslog = 1
syslog only = No
log file = /var/log/samba/log.%m
max log size = 50
debug timestamp = Yes
debug prefix timestamp = No
debug hires timestamp = No
debug pid = No
debug uid = No
enable core files = Yes
smb ports = 445 139
large readwrite = Yes
max protocol = NT1
min protocol = CORE
read bmpx = No
read raw = Yes
write raw = Yes
disable netbios = No
reset on zero vc = No
acl compatibility = auto
defer sharing violations = Yes
nt pipe support = Yes
nt status support = Yes
announce version = 4.9
announce as = NT
max mux = 50
max xmit = 16644
name resolve order = lmhosts wins host bcast
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = No
unix extensions = Yes
use spnego = Yes
client signing = auto
server signing = No
client use spnego = Yes
enable asu support = No
svcctl list =
deadtime = 0
getwd cache = Yes
keepalive = 300
lpq cache time = 30
max smbd processes = 0
paranoid server security = Yes
max disk size = 0
max open files = 1
open files database hash size = 10007
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
use mmap = Yes
hostname lookups = No
name cache timeout = 660
load printers = Yes
printcap cache time = 750
printcap name = cups
cups server =
iprint server =
disable spoolss = No
addport command =
enumports command =
addprinter command =
deleteprinter command =
show add printer wizard = Yes
os2 driver map =
mangling method = hash2
mangle prefix = 1
max stat cache size = 1024
stat cache = Yes
machine password timeout = 604800
add user script = /usr/sbin/smbldap-useradd '%u'
rename user script =
delete user script = /usr/sbin/smbldap-userdel '%u'
add group script = /usr/sbin/smbldap-groupadd '%g'