Re: [Samba] Access rights from ACLs not honored when setting file attributes?

2011-06-01 Thread Felix Brack (Mailinglist)

Finally! Many thanks, that did it.

The option 'store dos attributes' was not enabled. After I did enable it 
everything works as expected.


I did just a little research on 3 servers here and this is the result: 
on samba 3.2.5 the problem dose not show up if 'store dos attributes' is 
disabled. However on samba 3.5.6 and 3.5.8 this option is definitely 
required for my setup. I must have missed somewhere between samba 
version 3.2.5 and 3.5.6 that this option became mandatory for my kind of 
setup, shame on me.


You saved my weekend which starts right now!

Felix


On 01.06.2011 17:37, TAKAHASHI Motonobu wrote:

From: "Felix Brack (Mailinglist)"
Date: Wed, 01 Jun 2011 12:31:34 +0200


This is somewhat a reincarnation of a problem I am facing since
upgrading to samba 3.5.6 (3.5.8 is identical).


(snip)


However using the windows function 'SetFileAttributes' fails in case the
user who is connected to the samba server and executes the function is
not either the owner of the file/directory or member of the owning group
of the file/directory. Therefore it looks like samba is ignoring any ACL
entry when using the windows function 'SetFileAttributes'. No matter if
there is an ACE granting the proper access right, samba fails.


Can you set file attributes with GUI and Is "store dos attributes"
set?

As far as I examined at Samba 3.5.6, I can manually set attributes.

I accessed with user monyo to test2.doc whose ACL is set as below:

-
# getfacl test2.doc
# file: test2.doc
# owner: tako
# group: root
user::rw-
group::rw-
group:aclshare3ro:r-x
group:aclshare3rw:rwx
mask::rwx
other::---
# id ika
uid=2018(ika) gid=2030(ika) groups=2030(ika),2005(aclshare3rw)
-

My smb.conf is :
[global]
   (nothing is defined)

[aclshare3]
   path = /var/lib/samba/shares/aclshare3
   writeable = yes

   force group = root
   inherit permissions = yes

   store dos attributes = yes
   map archive = no
   map read only = no

---
TAKAHASHI Motonobu

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Access rights from ACLs not honored when setting file attributes?

2011-06-01 Thread Felix Brack (Mailinglist)
This is somewhat a reincarnation of a problem I am facing since 
upgrading to samba 3.5.6 (3.5.8 is identical).


I use samba on an ext3 ACL enabled file system. Typically a users access 
rights are determined by his or her membership in different groups. The 
access right is therefore defined and granted by/to the group, not the 
user. These groups then appear in the ACL of directories and files 
whereby the access is granted.


This system works perfect when creating, modifying and delete files or 
directories - no issues at all.


However using the windows function 'SetFileAttributes' fails in case the 
user who is connected to the samba server and executes the function is 
not either the owner of the file/directory or member of the owning group 
of the file/directory. Therefore it looks like samba is ignoring any ACL 
entry when using the windows function 'SetFileAttributes'. No matter if 
there is an ACE granting the proper access right, samba fails.


Is there a principle difference in how samba interprets access rights 
depending on whom (user, primary group membership or ACL) grants them?
Why do file/directory operations such as create/modify/delete work, no 
matter how the access right was granted (including from ACL)?


regards Felix
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Can't get 'dos filemode' to work as expected

2011-04-05 Thread Felix Brack

On 24.03.2011 10:09, Felix Brack wrote:

Hello,

After an upgrade to samba 3.5.8 (from 3.2.5) the option 'dos filemode'
does not seem to work anymore. If I (as a user) do not own the file I
can't change permissions.

I am user 'felix' and member of supplementary group 'Development'. To
test things I use the following share definition:

[Temp]
path = /srv/samba/file-shares/tmp
browseable = yes
read only = no
invalid users = root administrator
delete readonly = yes
inherit owner = yes
force group = Development
dos filemode = yes

A 'getfacl' on /srv/samba/file-shares/tmp returns:

# file: srv/samba/file-shares/tmp
# owner: root
# group: root
# flags: -s-
user::rwx
group::r-x
group:Development:rwx
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:Development:rwx
default:mask::rwx
default:other::---

 From the 'smb.conf' man page concerning option 'dos filemode':

...
Enabling this parameter allows a user who has write access to the file
(by whatever means, including an ACL permission) to modify the
permissions (including ACL) on it.
...

My understanding: as a member of group 'Development' I do have write
access to '/srv/samba/file-shares/tmp' by means of the ACL.

Trying to modify permissions on a directory or file I create in that
share does not work and reports access denied, no matter if I use
Windows Explorer or smbclient from an other linux box.

What am I misunderstanding here?

Many thanks, Felix



I finally manged to write some code for my Windows box that shows the error:

#include 
#include 
#include 

// directory name --
// share name   |
// server name    | |
// |  | |
// v  v v
const wchar_t strFirName[]= L"JUPITER\\testshare\\test-dir";

int main(void)
{
BOOL bRet;
DWORD dwError;

// create the directory
bRet= CreateDirectory(strFirName, NULL);
if (bRet != TRUE) {
dwError= GetLastError();
return -1;
}

// now set the file attribute of the newly created directory
bRet= SetFileAttributes(strFirName, FILE_ATTRIBUTE_NORMAL);
if (bRet != TRUE) {
// dwError will be 6 (ERROR_INVALID_HANDLE) in  case of failure
dwError= GetLastError();
return -1;
}

return 0;
}

That's it! Creating a directory and then manipulating the attributes.

The server path to the share is /srv/samba/file-shares/testshare.

The code above fails while setting the attribute if the user (felix) 
connecting to the samba share is _not_ the owner (root) of 
/srv/samba/file-shares/testshare.

'getfacl /srv/samba/file-shares/testshare' returns:
# file: srv/samba/file-shares/testshare
# owner: root
# group: root
# flags: -s-
user::rwx
group::rwx
group:Development:rwx
mask::rwx
other::---
default:user::rwx
default:group::rwx
default:group:Development:rwx
default:mask::rwx
default:other::---

If I type 'chown felix:root /srv/samba/file-shares/testshare' on the 
samba server and then execute the code above, everything is fine.

'getfacl /srv/samba/file-shares/testshare' returns:
# file: srv/samba/file-shares/testshare
# owner: felix
# group: root
# flags: -s-
user::rwx
group::rwx
group:Development:rwx
mask::rwx
other::---
default:user::rwx
default:group::rwx
default:group:Development:rwx
default:mask::rwx
default:other::---

As already stated 'felix' is member of group 'Development'.

Can somebody confirm that the code above works in case the user 
connecting to the share is _not_ owning the share?


Felix

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Can't get 'dos filemode' to work as expected

2011-04-04 Thread Felix Brack

On 04.04.2011 18:25, Chris Smith wrote:

On Mon, Apr 4, 2011 at 11:41 AM, Felix Brack  wrote:

# file: test-file
# owner: root
# group: root
user::rwx
group::rwx  #effective:r--
group:Development:rwx   #effective:r--
mask::r--
other::---


That's the same thing you would get if were logged into the system as
root and created the file. So it is an ACL issue.


# file: test-file
# owner: root
# group: root
user::rwx
group::rwx
group:Development:rwx
mask::rwx
other::---

At least now , If I am member of supplementary group 'Development', I should
have the same rights in directory 'test-directory' as if this was owned by
me (felix), right?


I would think so.

I don't know entirely what you want to accompplish, but it may be better to:
chgrp -R Development test-directory

What I am trying to accomplish is pretty simple: assigning access rights 
to one ore more groups instead user(s).


Therefore changing the group with chgrp to 'Development' is most 
definitely not what I want: what if there is more then one group? This 
is what ACLs are used for: giving additional groups and users special 
rights to access files. Moreover changing the group does not work, only 
changing the owner (I already tried that). This is in fact what the 
problem is all about. To put it simple: samba only seems to care about 
the _user_ connecting to the share and ignores any other rights for that 
user that might be assigned to him or her by means of group membership 
(normal or defined by ACLs).



And eliminate:
force group = Development
invalid users = root administrator
from the share.
While adding:
valid users = +Development (and any other groups you want have access)

Eliminating 'force group' is not a good idea (for now) since it tells 
smbd that connections should be established using group 'Development'. 
It has nothing to do with access rights and I use it just as safety 
precaution to make sure my client does not get connect as member of 
group 'Domain Users'; if this would really happen I (or samba) could 
have serious problems accessing the share.



The -s- flag will propagate new files and directories with the
Development group.

Basically a performance issue. See the section "Override controls" in:
http://samba.org/samba/docs/man/Samba-Guide/kerberos.html#id2613307

Agreed. As soon as everything is working I will try to remove 'force 
group' and look if samba accesses the share with access rights defined 
for group 'Development' instead of group 'Domain Users'.


Felix

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Can't get 'dos filemode' to work as expected

2011-04-04 Thread Felix Brack

On 04.04.2011 17:09, Chris Smith wrote:

On Thu, Mar 24, 2011 at 5:09 AM, Felix Brack  wrote:

A 'getfacl' on /srv/samba/file-shares/tmp returns:

# file: srv/samba/file-shares/tmp
# owner: root
# group: root
# flags: -s-
user::rwx
group::r-x
group:Development:rwx
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:Development:rwx
default:mask::rwx
default:other::---


Are you sure this is a Samba issue? What does a 'getfacl' on the files
you create in the share look like?


I am not sure anymore that it is a samba problem. Perhaps my understand 
of how ACLs are supposed to work is entirely wrong. Anyway: creating a 
file 'test-file' and a directory 'test-directory' from a Windows XP 
client's Explorer creates this:


# file: test-directory
# owner: root
# group: root
# flags: -s-
user::rwx
group::r-x
group:Development:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:group:Development:rwx
default:mask::rwx
default:other::---

# file: test-file
# owner: root
# group: root
user::rwx
group::rwx  #effective:r--
group:Development:rwx   #effective:r--
mask::r--
other::---

This is not what I wanted so I used the following two options on the share:

force create mode = 0660
force directory mode = 0770

With this getfacl returns the following:

# file: test-directory
# owner: root
# group: root
# flags: -s-
user::rwx
group::rwx
group:Development:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:group:Development:rwx
default:mask::rwx
default:other::---

# file: test-file
# owner: root
# group: root
user::rwx
group::rwx
group:Development:rwx
mask::rwx
other::---

At least now , If I am member of supplementary group 'Development', I 
should have the same rights in directory 'test-directory' as if this was 
owned by me (felix), right?


Felix



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Can't get 'dos filemode' to work as expected

2011-04-04 Thread Felix Brack

On 03.04.2011 17:24, TAKAHASHI Motonobu wrote:

From: Felix
Date: Wed, 30 Mar 2011 17:05:53 + (UTC)


On Fri, 25 Mar 2011 22:43:38 +0900, TAKAHASHI Motonobu wrote:


From: Felix Brack
Date: Thu, 24 Mar 2011 10:09:53 +0100


After an upgrade to samba 3.5.8 (from 3.2.5) the option 'dos filemode'
does not seem to work anymore. If I (as a user) do not own the file I
can't change permissions.

(snip)

I just double checked but the problem remains: I can do things if the
share is owned by myself ('felix') but not if it is owned by 'root' if me
having access by being a member of supplementary group 'Development'.

Using debug level 3 on the samba server I found this:

(snip)

Please show the minimum set to reproduce for example smb.conf
including [global] section.

As I showed in my previous mail, in order to reproduce, I set the
empty [global] section.

And what is your platform? / The shared file path is located locally?


Sorry, forgot to answer this: yes, the shared file path is local.

Felix


---
TAKAHASHI Motonobu



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Can't get 'dos filemode' to work as expected

2011-04-04 Thread Felix Brack

On 03.04.2011 17:24, TAKAHASHI Motonobu wrote:
> From: Felix
> Date: Wed, 30 Mar 2011 17:05:53 + (UTC)
>
>> On Fri, 25 Mar 2011 22:43:38 +0900, TAKAHASHI Motonobu wrote:
>>
>>> From: Felix Brack
>>> Date: Thu, 24 Mar 2011 10:09:53 +0100
>>>
>>>> After an upgrade to samba 3.5.8 (from 3.2.5) the option 'dos filemode'
>>>> does not seem to work anymore. If I (as a user) do not own the file I
>>>> can't change permissions.
> (snip)
>> I just double checked but the problem remains: I can do things if the
>> share is owned by myself ('felix') but not if it is owned by 'root' 
if me

>> having access by being a member of supplementary group 'Development'.
>>
>> Using debug level 3 on the samba server I found this:
> (snip)
>
> Please show the minimum set to reproduce for example smb.conf
> including [global] section.
>
My minimum set is not really small but all settings related to the role 
of the server and to LDAP are irrelevant when it comes to the problem I 
am investigating (at least I think they are irrelevant!?). Anyway, here 
is my entire global:


[global]
### Naming, domain and browesing ###
workgroup = LTEC
netbios name = Jupiter
server string = TEST Samba %v server
domain master = yes
preferred master = yes
os level = 65
domain logons = yes
logon path = \\%L\Profiles\%U\%m\%a
logon drive = H:

### Interfaces to listen on ###
interfaces = eth0 127.0.0.0/8
bind interfaces only = true

### Logging configuration ###
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
log level = 3

### Authentication ###
passdb backend = ldapsam:ldap://localhost
ldap admin dn = "uid=srv-user,dc=ltec,dc=ch"
ldap delete dn = yes
ldap suffix = dc=ltec,dc=ch
ldap user suffix = ou=users
ldap group suffix = ou=groups
ldap machine suffix = ou=computers
ldap idmap suffix = ou=idmap
ldap ssl = off
ldap passwd sync = yes
obey pam restrictions = yes

### Users, groups and machines administration ###
add user script = /usr/sbin/smbldap-useradd -m "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
add machine script = /usr/sbin/smbldap-useradd -w -i "%u"
delete user from group script = //usr/sbin/smbldap-groupmod -x 
"%u" "%g"

delete user script = /usr/sbin/smbldap-userdel "%u"
delete group script =  /usr/sbin/smbldap-groupdel "%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
passwd program = /usr/sbin/smbldap-passwd -u %u

### Misc global options ###
wins support = yes
time server = yes
remote announce = 172.27.22.1
remote browse sync = 172.27.22.1
dns proxy = no
unix charset = 850

### Printing ###
load printers = no
disable spoolss = yes
printcap name = /dev/null

### Disable user shares
usershare max shares = 0

### Include the file-share definitions ###
include = /etc/samba/smbfs.conf

### !!! TESTING !!!
include = /etc/samba/smbfs-test.conf

The include file 'smbfs.conf' holds the share definitions in use. To 
keep it simple for testing I created a new include file defining just 
the one share on which I run all tests; this include file is called 
'smbfs-test.conf' and contains the following:


[testshare]
comment = Only use this shre for samba testing !
path = /srv/samba/file-shares/testshare
browseable = yes
read only = no
invalid users = root administrator
delete readonly = yes
inherit owner = yes
force group = Development
dos filemode = yes

> As I showed in my previous mail, in order to reproduce, I set the
> empty [global] section.
>
I agree that it is best to have an empty [global] to track down such a 
problem but as I am using LDAP that is not really possible. This is why 
I posted my entire [global]. Do you see anything there that might 
explain my problem?

By the why, 'id felix' returns the following:

uid=1000(felix) gid=513(Domain Users) 
groups=1004(Management),1005(Development),1007(EETS),513(Domain Users)


which is exactly what I like it to be.

> And what is your platform? / The shared file path is located locally?
>
The server is a a 64Bit Debian GNU/Linux 6.0 (Sqeeze) with kernel 
2.6.32. The entire server is a KVM guest. The KVM host is a multicore 
XEON system providing a soft RAID-5 disk system for the guests.


Felix

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Can't get 'dos filemode' to work as expected

2011-03-24 Thread Felix Brack

Hello,

After an upgrade to samba 3.5.8 (from 3.2.5) the option 'dos filemode' 
does not seem to work anymore. If I (as a user) do not own the file I 
can't change permissions.


I am user 'felix' and member of supplementary group 'Development'. To 
test things I use the following share definition:


[Temp]
path = /srv/samba/file-shares/tmp
browseable = yes
read only = no
invalid users = root administrator
delete readonly = yes
inherit owner = yes
force group = Development
dos filemode = yes

A 'getfacl' on /srv/samba/file-shares/tmp returns:

# file: srv/samba/file-shares/tmp
# owner: root
# group: root
# flags: -s-
user::rwx
group::r-x
group:Development:rwx
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:Development:rwx
default:mask::rwx
default:other::---

From the 'smb.conf' man page concerning option 'dos filemode':

...
Enabling this parameter allows a user who has write access to the file 
(by whatever means, including an ACL permission) to modify the 
permissions (including ACL) on it.

...

My understanding: as a member of group 'Development' I do have write 
access to '/srv/samba/file-shares/tmp' by means of the ACL.


Trying to modify permissions on a directory or file I create in that 
share does not work and reports access denied, no matter if I use 
Windows Explorer or smbclient from an other linux box.


What am I misunderstanding here?

Many thanks, Felix

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Bug 7892 fixed in Samba 3.5.6

2011-03-05 Thread Felix Brack

On 05.03.2011 16:19, Volker Lendecke wrote:

On Fri, Mar 04, 2011 at 04:33:43PM +0100, Felix Brack wrote:

Hello,

I use Debian Squeeze with Samba 3.5.6. I do experience problems that
might be related to those described in bug 7892 that can be found
found here: https://bugzilla.samba.org/show_bug.cgi?id=7892

I could not find any information about this bug being fixed in Samba
3.5.x. In the realease notes of Samba 3.4.10 I found this: '* BUG
7892: Fix stale lock in open_file_fchmod().' As version 3.4.10 is
smaller then version 3.5.6 I guess it is fixed.


3.5.6 was released Oct 8, 2010. The patch went into the tree
on Dec 31, 2010. 3.5.7 will be a pure security release, so
the fix will be in 3.5.8.

With best regards,

Volker Lendecke



Thank you very much for this information. I will then check if that 
release fixes my problem.


reagards, Felix

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Bug 7892 fixed in Samba 3.5.6

2011-03-04 Thread Felix Brack

Hello,

I use Debian Squeeze with Samba 3.5.6. I do experience problems that 
might be related to those described in bug 7892 that can be found found 
here: https://bugzilla.samba.org/show_bug.cgi?id=7892


I could not find any information about this bug being fixed in Samba 
3.5.x. In the realease notes of Samba 3.4.10 I found this: '* BUG 7892: 
Fix stale lock in open_file_fchmod().' As version 3.4.10 is smaller then 
version 3.5.6 I guess it is fixed.


Is this guess correct?

Many thanks, Felix

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba cd-rom share Problem

2005-12-27 Thread Felix Brack
Perhaps a stupid question: you are sure you DID mount the cdrom on the
linux console? If I do not mount it (or umount it) a can confirm the
symptom you are describing.

-

Felix

Andreas Bauer wrote:

AB> Hello NG,

AB> my network consists of AD/2003 as LDAP Server, SuSE 10.0 and xp
AB> clients and SuSE 9.3 Samba/NFS-Fileserver for the homes of SuSE clients and
AB> Samba
AB> shares for the Xp clients.
AB> My problem is the cd-rom samba share. All other samba shares except the
AB> cd-rom share are working for me.
AB> If I open the network environment in the windows explorer of a succeded
AB> logon xp client, I can access all shares except the cd-rom share.
AB> At accessing the cd-rom share in the windows explorer, I am getting no
AB> errormessage, but the directories and files of the shared cd do
AB> not appeare in the right side side of the win explorer. The right part of
AB> the
AB> windows exlorer is empty.

AB> The cd-rom section in the smb.conf is:
AB> [cdrom]
AB>path = /media/cdrom
AB>read only = yes
AB>browseable = yes
AB>locking = no

AB> Best regards and many thanks
AB> Andreas




AB> -- 
AB> To unsubscribe from this list go to the following URL and read the
AB> instructions:  https://lists.samba.org/mailman/listinfo/samba








-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re[4]: [Samba] VFS for encryption/decryption

2005-12-23 Thread Felix Brack
It's true (partially) that the administrator has access to all secrets
stored on the server. However the administrator does not _know_ a users
password or samba password. He can of course change those passwords.
This however would be noticed by the user who's password has been
changed and data encrypted with the users former password would still
not decrypt (with the new password) to some meaningful data, right?

If this is correct my requirements would be fulfilled.

I do not know at all how things are running within samba but fact is,
that any user authenticates himself when connecting to a server share
from his client. Wouldn't this be the method to tell a VFS module to
do encryption/decryption with the user's password? As I already
stated, I am aware that things are not that simple but the principle
should remain.

My PDC is setup to present the user a network drive H: that holds his
home directory; this is great and very simple to configure with samba.
Why not present the user, say network drive Q:, showing the decrypted
contents of a file stored on the server that is encrypted with the
users password? The user wouldn't 'see' any difference between
accessing files on H: or Q:. This would provide a truly transparent
access to encrypted data.

-

Felix

Andrew Bartlett wrote:

AB> We run into issues such as 'how do you key the crypto'.  The
AB> administrator has access to any secrets stored on the server, so how
AB> would Samba decrypt the data, but the administrator not?

AB> Without protocol modifications, or some extra client-side tool, this
AB> becomes quite a challenge.  And then the administrator could still
AB> subvert the whole thing.

AB> A slightly easier goal would be to protect files on a stolen hard disk
AB> (ie trust the admin, but not always the person with the server), but I
AB> still don't see how to do it without protocol modifications.

AB> Andrew Bartlett






-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re[2]: [Samba] VFS for encryption/decryption

2005-12-22 Thread Felix Brack
Hello Andrew,

In my case, clear over the network would be ok. The problem I am
trying to solve is: I can setup Samba PDC perfectly so every user
get's some space which is accessible by nobody else. The administrator
of the samba server however (at least the user root) has access to
all files of all users.
The normal user has no LINUX login account on the box running the
samba server.
I could ask the users to run TrueCrypt (www.truecrypt.org) and create
a encrypted file on their home directory on the Samba server. This
works perfect but I was just looking for an even more transparent
solution which I think could be provided by some sort of VFS module.

-

Felix

Andrew Bartlett wrote:

AB> On Mon, 2005-12-19 at 13:39 +0100, Felix Brack wrote:
>> Hello,
>> 
>> Does anybody know of an existing VFS module that allows on the fly
>> encryption of the contents of a samba file share?

AB> Encryption on disk, but clear over the network?

AB> (that is the main problem I see with this idea).

AB> Andrew Bartlett






-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] VFS for encryption/decryption

2005-12-19 Thread Felix Brack
Hello,

Does anybody know of an existing VFS module that allows on the fly
encryption of the contents of a samba file share?

thanks, Felix

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re[2]: [Samba] CVS checkout problems to Samba 3.0

2003-12-08 Thread Felix Brack
Everything is fine again with Samba 3.0.1rc1!

Many thanks for your help, Felix

GJC> -BEGIN PGP SIGNED MESSAGE-
GJC> Hash: SHA1

GJC> Felix Brack wrote:

GJC> | I normaly checkout starting from dir_1 so dir_2 and the files are
GJC> generated
GJC> | automatically. Trying to do so, when the target is on Samba 3.0.0 ends
GJC> with
GJC> | an error message, saying that dir_1 cannot be created. Any directory or
GJC> | file below dir_1 is mising after the ceckout.
GJC> | When I create the directory structure on the target Samba 3.0.0 server
GJC> | BEFORE running the above checkout, the checkout runs fine.
GJC> |
GJC> | As stated above, doing exactly the same thing (checking out dir_1) to a
GJC> | localy attached disk or a Samba 2.2.8 server works fine.
GJC> |
GJC> | Any idea what went wrong when configuring the samba server? Is there any
GJC> | new (relevant to this problem) option I should change or set in smb.conf?

GJC> This sounds like a similar bug fixed post 3.0.0.  Please test 3.0.1rc1.
GJC> Thanks.



GJC> cheers, jerry
GJC> -BEGIN PGP SIGNATURE-
GJC> Version: GnuPG v1.2.1 (GNU/Linux)
GJC> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

GJC> iD8DBQE/1IasIR7qMdg1EfYRAo0tAJ9SdxsgRZLBxGfmjf8YRuF9A017iQCgiD0T
GJC> KfDlPjMWWccFnex1etIZNd0=
GJC> =Kl0V
GJC> -END PGP SIGNATURE-




-
Felix Brack
LTEC AG
Hauptstrasse 66
CH-4436 Oberdorf
SWITZERLAND
Internet: www.ltec.ch

Tel. +41 61 9631414
Fax. +41 61 9631413
E-Mail: [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] CVS checkout problems to Samba 3.0

2003-12-08 Thread Felix Brack
After upgrading a Samba 2.2.8 to a 3.0.0 I am having problems to checkout
data from a CVS repository to a location on the Samba server. Checking out 
the same data to a local disk or to a location on a Samba 2.2.8 server does 
work without any problems.

Sample structure in CVS repository:

dir_1
  |dir_2
 |__file_1
 |__file_2

I normaly checkout starting from dir_1 so dir_2 and the files are generated 
automatically. Trying to do so, when the target is on Samba 3.0.0 ends with 
an error message, saying that dir_1 cannot be created. Any directory or 
file below dir_1 is mising after the ceckout.
When I create the directory structure on the target Samba 3.0.0 server 
BEFORE running the above checkout, the checkout runs fine.

As stated above, doing exactly the same thing (checking out dir_1) to a 
localy attached disk or a Samba 2.2.8 server works fine.

Any idea what went wrong when configuring the samba server? Is there any 
new (relevant to this problem) option I should change or set in smb.conf?

Many thanks, Felix


-
Felix Brack
LTEC AG
Hauptstrasse 66
CH-4436 Oberdorf
SWITZERLAND
Internet: www.ltec.ch

Tel. +41 61 9631414
Fax. +41 61 9631413
E-Mail: [EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba