Re: [Samba] Samba Upgrade 3.0.33 to 3.6.13.

2013-04-03 Thread Rodney Green
On Wed, Apr 3, 2013 at 1:34 PM, TAKAHASHI Motonobu  wrote:
> From: Rodney Green 
> Date: Wed, 3 Apr 2013 08:27:57 -0400
>
>> My problem is that the SID to UID
>> mappings and permissions aren't carrying over to the new version.
>
> (snip)
>
>> Current config (3.0.33):
>>
>> [global]
>>
>> workgroup = domain
>
> (snip)
>
>> winbind separator = +
>> idmap uid = 1-2
>> idmap gid = 1-2
>> ---
>> New config (3.6.13):
>>
>> [global]
>> netbios name = test-samba
>> security = domain
>> realm = domain1.domain.com
>> password server = domain-server
>> idmap config * : backend = tdb
>> idmap config * : range = 10001-2
>> idmap config domain : backend = rid
>> idmap config domain : range = 1-2
>> idmap config domain : base_rid = 0
>> workgroup = domain
> (snip)
>> encrypt passwords = yes
>> winbind use default domain = yes
>> restrict anonymous = 2
>> passdb backend = tdbsam
>
> Because you use default idmap (tdb) in Samba 3.0.33 and use idmap_rid for
> "domain" domain in Samba 3.6.13.
>
> If you use same mappings, use same winbindd_idmap.tdb file or manually set
> the mapping with using wbinfo command.
>
> ---
> TAKAHASHI Motonobu  / @damemonyo
>facebook.com/takahashi.motonobu
>

Thanks, Takahashi. That's seems to have gotten things working
properly. I noticed that the tdb files for 3.0.33 are in the
/var/cache/samba directory. I copied winbindd_idmap.tdb from
/var/cache/samba to /var/lib/samba and the mappings problem was
corrected.

Do you think I should copy all of the tdb files from /var/cache/samba
to /var/lib/samba?

Thanks again,
Rodney
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Samba Upgrade 3.0.33 to 3.6.13.

2013-04-03 Thread TAKAHASHI Motonobu
From: Rodney Green 
Date: Wed, 3 Apr 2013 08:27:57 -0400

> My problem is that the SID to UID
> mappings and permissions aren't carrying over to the new version.

(snip)

> Current config (3.0.33):
> 
> [global]
> 
> workgroup = domain

(snip)

> winbind separator = +
> idmap uid = 1-2
> idmap gid = 1-2
> ---
> New config (3.6.13):
> 
> [global]
> netbios name = test-samba
> security = domain
> realm = domain1.domain.com
> password server = domain-server
> idmap config * : backend = tdb
> idmap config * : range = 10001-2
> idmap config domain : backend = rid
> idmap config domain : range = 1-2
> idmap config domain : base_rid = 0
> workgroup = domain
(snip)
> encrypt passwords = yes
> winbind use default domain = yes
> restrict anonymous = 2
> passdb backend = tdbsam

Because you use default idmap (tdb) in Samba 3.0.33 and use idmap_rid for
"domain" domain in Samba 3.6.13.

If you use same mappings, use same winbindd_idmap.tdb file or manually set
the mapping with using wbinfo command.

---
TAKAHASHI Motonobu  / @damemonyo 
   facebook.com/takahashi.motonobu

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Samba Upgrade 3.0.33 to 3.6.13.

2013-04-03 Thread Rodney Green
Hello,

I'm attempting to upgrade a server from Samba 3.0.33 to Samba 3.6.13.
I'm testing the upgrade on a virtual machine with the same set up  and
data as the production server. My problem is that the SID to UID
mappings and permissions aren't carrying over to the new version.


Here's what I'm doing:

- Uninstall previous version RPMs (This is a CentOS 5.5 server)
- Install new 3.6.13 packages
- Run net rpc join to join the machine to our domain (haven't been
able to make anything work with ADS security.
- Reboot

After doing the above, I currently have to set permissions for the
shares so I can access them from Windows machines.

Please look at my configurations below. A point in the right direction
would be most welcome!

Current config (3.0.33):

[global]

workgroup = domain
server string = Samba

netbios name = fileserver


hosts allow = 127. 192.168.115.
encrypt passwords = yes

security = domain
passdb backend = tdbsam

password server = *
log level = 2
log file = /var/log/samba/samba.log.%m

winbind separator = +
idmap uid = 1-2
idmap gid = 1-2
---
New config (3.6.13):

[global]
netbios name = test-samba
security = domain
realm = domain1.domain.com
password server = domain-server
idmap config * : backend = tdb
idmap config * : range = 10001-2
idmap config domain : backend = rid
idmap config domain : range = 1-2
idmap config domain : base_rid = 0
workgroup = domain

winbind enum users = yes
winbind enum groups = yes
winbind refresh tickets = yes
template homedir = /shared/HOMEDIRS/%U
template shell = /bin/bash
client use spnego = yes
client ntlmv2 auth = yes
encrypt passwords = yes
winbind use default domain = yes
restrict anonymous = 2
passdb backend = tdbsam

log level = 2
log file = /var/log/samba/samba.log.%m
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba