gmane.network.samba.general

Splitting up directories with Samba variables

Heather Choi — 2012-05-26T03:16:47

In my smb.conf file, I currently I have a user share definition as:


[userdir]
     path = /samba/%U
     writeable = yes

The problem is, the user pool is in the tens of thousands, so it is not 
practical to have that many directories within /samba.
I'd like to somehow dynamically configure the path with subdirectories, 
using the first, and second letter of the username as the first and 
second nested subdirectory.
So the share path for username  "JOHN" would point dynamically to  
/samba/J/O/JOHN.

Does anyone know how to accomplish this using the user session variable 
%U?  Is there any concept of using a sub-string for a Samba variable?

GPFS on Linux exported via Samba to Windows Clients,locking issue

Leonard Degollado — 2012-05-24T17:52:26

I have a 3-node GPFS on Linux Cluster (3.4.0-12) with Samba 3.6.5
The problem  is with file locking across the Cluster.
Windows Client-1 maps the GPFS directory-1 from GPFS node-1 and initiates a
Write of File-1
Windows Client-2 maps the GPFS directory-1 from GPFS node-2 and should only
have READ access but not Modify/Delete/Rename access to File-1.

However, Windows Client-2 is able to Modify, Delete and Rename File-1
instead of being prevented by the locks.

If both Windows Clients (1 and 2) both map to GPFS node-1, the locking
mechanism works as designed.  Client-2 can Read but cannot
Modify/Delete/Rename File-1.
What are all the required parameters that should be specified in the
smb.conf file to enable the locking to work across the GPFS Cluster when
various Clients map to different nodes?

I have defined and tested every smb locking parameter combination without
any success.



Leonard

errors during samba 3.6.5 compile

Derek Lewis — 2012-05-25T18:24:19

Hello,

I am trying to compile Samba 3.6.5 from the official tarball, I am
following the how-to from samba.org and run into several errors like the
following example when I try to run configure from the source3 directory:
configure: failed program was:
| /* confdefs.h */

I am running Ubuntu 10.04 LTS server edition.

I have compiled a previous version and ran into a similar problem, I
suspect I am missing some libraries.

Derek

Enabling winbind idmap_hash module

Marc Rechté — 2012-05-25T12:38:12

Hello,
I am using samba 3.5 (Red Hat Linux 6) which comes with idmap_hash plugin.

I have put the following in smb.conf:
    workgroup = WORKGROUP
    password server = *
    security = domain
    idmap backend = hash
    idmap uid = 500-33554431
    idmap gid = 500-33554431
    winbind nss info = hash
    winbind normalize names = yes
    idmap_hash:name_map = /etc/samba/name_map.cfg
    template shell = /bin/bash
    winbind use default domain = false
    winbind offline logon = no
    winbind enum users = true
    winbind enum groups = true
    log level = winbind:3

An abstract of /etc/samba/name_map.cfg is:
ntadmins=WORKGROUP\Domain Admins


I restarted winbind.

The problem is that the following command gives:
# getent group "WORKGROUP\Domain Admins"
WORKGROUP\domain_admins:*:16777224:

Instead of something like:
ntadmins:x:503:

The same problem with getent passwd.

I noticed that whatever value I put  for idmap backend (event a xrong 
value), it does not change anything nor produces any error message

Problem joining to a Samba PDC (Probably caused by "unixcharset")

Ralf Aumueller — 2012-05-25T10:56:50

Hello,

trying to join a Windows 7 64-Bit PC to a Samba PDC (3.6.5) fails with message
"Domain not found or no connection possible". After some testing I found that
the problem was caused by the Samba-parameter "unix charset = ISO8859-1".
When I start the nmbd with same config-file just without the "unix charset" the
PC can join the domain (smbd runs with org. config-file. Samba runs on CentOS6
(en_US.UTF-8)).

Is this the expected behavior?

(At the moment I need ISO8859-1 because the files were saved with this charset).

Best regards,

Ralf

3.2.15 sys_get_vfs_quota -- failed for mntpath[ a device ] bdev [ a device ] qtype[4] id[513]: Invalid argument

lejeczek — 2012-05-25T07:54:25

or/and
... qtype[2] id[501]: Invalid argument

above version of samba does not seem to be able to recognize 
FS(ext4) quotas,
could you gents.ladies shed some light please? very much 
appreciated.
regards

exported LDAP DB > file > smbpasswd?

aurfalien — 2012-05-24T20:25:12

Hi all,

I am using OpenLDAP and over have ~800 users in its DB.

I would like to simply use Samba as a file server, no PDC.

I have been able to export my LDAP DB to a file containing hashes of users passwords.

Is there a way I can import this file to smbpasswd or other file that Samba understands so that my 800 some odd users won't have to re register there passwords?

I would really love to avoid having 800 annoyed users retyping there passwords for accessing shares.

I have them currently authenticating on Windows via an LDAP client (pGina).

- aurf

Lots of NT_STATUS_OBJECT_NAME_COLLISION errors, harmless?

Paul Elliott — 2012-05-24T16:16:43

Hello all,

I'm attempting to setup a small Windows network using Samba as the PDC 
(and the only server involved). Clients are running Windows 7 (x86_64) 
and the server is running Debian Squeeze with samba 3.5.6. For now I'm 
just using tdmsam as the passwd backend.

The problem I have is that I see lots of errors involving 
NT_STATUS_OBJECT_NAME_COLLISION, here's an example at login time for 
user pre500 with roaming profiles enabled:

[2012/05/24 15:36:15.038884,  3] smbd/dosmode.c:166(unix_mode)
   unix_mode(pre500.V2) returning 0700
[2012/05/24 15:36:15.038902,  2] smbd/open.c:2505(open_directory)
   open_directory: unable to create pre500.V2. Error was 
NT_STATUS_OBJECT_NAME_COLLISION
[2012/05/24 15:36:15.038925,  3] smbd/error.c:80(error_packet_set)
   error packet at smbd/error.c(153) cmd=162 (SMBntcreateX) 
NT_STATUS_OBJECT_NAME_COLLISION

And similar errors at logout for every directory within the profile:

[2012/05/24 15:36:15.975852,  3] smbd/dosmode.c:166(unix_mode)
   unix_mode(pre500.V2/AppDa

Samba / LDAP : map uid to another field ?

Sylvain — 2012-05-24T13:39:50

Hi !

I have an OpenLDAP where users DN are in the form «
uid=P1234,ou=people,dc=example,dc=com » and where the login is in the «
eduPersonPrincipalName » attribute (ex : jdoe).
I have configured my system (Debian Squeeze) to authenticate against LDAP
(libpam-ldapd + libnss-ldapd with a mapping uid<->eduPersonPrincipalName),
if I do « ssh jdoe< at >server », it's works great.
Now I want to give Samba share to theses users so I configured Samba
(3.5.6) to connect to LDAP but I cannot authenticate with
eduPersonPrincipalName, if I use the « uid », it's works.
I have searched for a mapping option in samba but I didn't found...
Is it possible to map « uid » attribute to another attribute ? If yes, how ?

Here the smb.conf :

[global]
        server string = %h server
        obey pam restrictions = Yes
        passdb backend = ldapsam:"ldap://192.168.102.153"
        pam password change = Yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *Enter\snew\s*\spassword:* %n\n
*Retype\snew\s*\sp

cannot execute .exe files from a share

BeavieS — 2012-05-24T13:30:48

Hello, i've seen this error on the mailing list but no solutions.

Problem: No user can execute an .exe file from a group share under any
windows version (wXP til Windows 7).

Permisions: Every user can read, write, delete, etc in that share.
I've chmoded 777 the file but for nothing. The user can copy the .exe
file to another location like desktop and then can execute it (is a
portable aplication) with no problems.

Strange behaviour: The most strange is that if an user copies the .exe
file to their 'home' (his private share on the samba server) then they
CAN run it!.

Another clue: the admin users of the share CAN execute the .exe file

CONFIGUTARION
It's an standalone server joined on a Windows 2003 domain

[global]
        workgroup = HCG
        realm = SOME.ACTIVEDIRECTORY.DOMAIN
        server string = Servidor de Datos
        security = ADS
        map to guest = Bad User
        obey pam restrictions = Yes
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 1000

Could not find node to take over public address

Christoph Martin — 2012-05-24T13:23:42

Hi,

we run ctdb with samba on SLES11. It was running for some month ok but
after an update of the system and ctdb it fails to run.

I tried to setup a new ctdb setup on two other nodes and it still fails
with the same error.

After startup the status is:


I could not find out why the nodes are both disabled. So then I issue

# ctdb enable

on each node. After that ctdb will not be able to assign the public ip
addresses. On the first node I get repeatedly:


On the other node:


Do you have any idea what it could be?

Config and logs are attached.

CTDB version: 1.2.29-40.1

Any other information you need?

Christoph

Linux to Windows Interoperability

Knecht, Matthew J (AS — 2012-05-23T14:13:06

Hello,

Currently using a freely available MS Windows file system driver, Ext2Fsd, to communicate (read/write) with external media formatted EXT3 (Linux volume) from within MS Windows.

Curious to know if Samba is able to support communication (read/write) with external media formatted EXT3 (Linux volume) from within the MS Windows environment?

Looking forward to your reply.

Thanks.

Best,

Matthew Knecht
516-346-7264

Samba 4 Re-provisioning

Mike Howard — 2012-05-24T10:30:37

What's best practice when it comes to changing a samba4 provision, 
without screwing current domain objects (users, computers, policy etc)? 
If, for example, I wanted to change the DNS from internal to external 
bind9, is it just a case of re-running 'provision' with the different 
command line option or will that mangle the domain sid etc?

Cheers,
Mike.

Samba as member of multi domain AD (nss/pam)

Marcel Ritter — 2012-05-24T08:06:10

Hi list,

I'm looking for someone out there, using samba as a member
server in a multi-domain Active Directory forest (maybe even
with nss_/pam_winbind for unix users/groups).

It took quite a long time to get things working at all here, and we're
still not really comfortable with our current solution (especially
the unix nss/pam part).

I'd be glad if someone out there was interested in exchanging
information on that topic.
So please don't hesitate to contact me, if you are :)

Bye,
   Marcel

Samba4 : Problem setting folder and file permissions from windows box

micmac — 2012-05-24T08:14:16

Hi, this is my first message here. I need help, the reason is in the title.
The version running is SAMBA_4.0.0ALPHA18_DEVELOPERBUILD

It was running just fine until I had (for some reason) had to transfer all
the system (ubuntu 11.10 server)
to another clean hard drive. I used  "rsync -rltgoHDv /olddriveroot
/newdriveroot" to copy the files,
and installed grub on the new disk.

Now the problem is that  samba4 works, domain users can log on and access
files, but the permissions
have been reset to some basic values (different from all the ones I had set
before), and I can not
change them at all from a windows7 box as I could before. When I apply the
changes, it takes a while
to process the files, then the "basic" permissions are set again (my changes
lost).

Here is my /usr/local/samba/etc/smb.conf :


[global]
        interfaces = 127.0.0.1/8 192.168.1.0/24
        server role = domain controller
        workgroup = ACEIUBUNTU
        realm = ACEI2
        netbios name = ubuntuserveur
        passdb backend =

Is it possible to use quorum for CTDB to prevent split-brain and removing lockfile in the cluster file system

XW Huang — 2012-05-24T05:41:22

Hello list,

We know that CTDB uses lockfile in the cluster file system to prevent
split-brain.
It is a really good design when all nodes in the cluster can mount the
cluster file system (e.g. GPFS/GFS/GlusterFS) and CTDB can work happily in
this assumption.
However, when split-brain happens, the disconnected private network
violates this assumption usually.
For example, we have four nodes (A, B, C, D) in the cluster and GlusterFS
is the beckend.
GlusterFS and CTDB on all nodes communicate to each other via private
network and CTDB manages the public network.
If node A is disconnected in the private network, there will be group (A)
and group (B,C,D) in our cluster.
The election of recovery master will be triggered after the disconnected
determination of CTDB, i.e. the CTDB elects a new recovery master for each
group after 26 (KeepaliveInterval*KeepaliveLimits+1 by default) seconds.
Then node A will be the recovery master of group (A) and some node (e.g. B)
will be the recovery master of group (B,C,D).
Now, A

share access issue smbd/service.c:988

Muhammad Yousuf Khan — 2012-05-23T15:03:54

OK, my samba server was working fine i have 2TB RAID1 drive as a
storage and had 300gb sata drive for boot the Debian OS 6.0.4.
unfortunately my sata boot drive faild and i had to reinstall the OS
in new drive. now when i plug the old Raid drives the data was still
there. but permissions were a bit messed, it was showing numbers like
100015 or 100016 instead of owning user name or groups.
so i did  "chown root:root * -R" i thought that i will reassign the FS
rights to every individual folder again. so i did. but now the shares
in smb.conf that were working previously now they are throwing error
in log files and the same share was working perfectly before.


here is the error

smbd/service.c:988(make_connection_snum)
  canonicalize_connect_path failed for service Filesharing, path
/nas/backup/Filesharing

now i created a new folder on new driver which is the new OS drive. i
created a "test" folder at root
my users and i can access either we can create folders and delete

here is the folder at "/test" (we can

multi home dir locations

Collen — 2012-05-23T13:56:43

Hi all,

i've got samba 3.6 joined to a ad domain (s4 in this case)
running winbind
all looks ok, but i ran into a problem (for us that is)

i've got 2 groups (students and employes)
who have there home dirs in 2 different places.

/home/students/<user>
/home/employ/<user>

so far so good, but i can't make the [homes] work for both of them (just 
1 group)

in winbind template, i can only use %g, and that gives me an GID of 
domain users (since that's the default with samba 4)
no secondary groups ect.

putting "path = ..." in the [homes] section gives me the same problem.

how can i get the homedir to work, if the location is different per user ??

even a ambiguous attempt with: path = /homes/`id -g %u`/%u
did not work...

cheers, Collen

AD / new auxiliary class / vb script

Hervé Hénoch — 2012-05-23T13:48:56

Hello

I've modified AD schema by adding a new auxiliary class (iscA) with an 
auxilairy attribute (iscA1).

I've followed this explanation /_*entirely*_/ : 
http://semifershome.free.fr/semifer/index.php?2008/02/12/42-etendre-le-schema-active-directory-classes-attributs-et-display-specifiers

I've named the menu item with the same name (AllowedService). By 
right-clicking on a AD user then on the menu AllowedService, the 
following script is executed and it is intended to modify iscA1 
attribute. The script is :

/set args = WScript.arguments
Set user = GetObject(args(0))

temp = InputBox("iscA1 value", "Set iscA1", user.iscA1)
user.put "iscA1", temp
user.setInfo/

My first problem : when I right-click I've the message : "this object 
does not support this property or method".
Precision : i've linked my new auxiliary class with user class.

So i've created the following script which add iscA class and iscA1 
attribute to a specific user :
/
Set user = GetObject("LDAP://cn=toto,cn=users,<my domain>")
user.Get

NNTP server for Samba newsgroup

Avinash Gupta — 2012-05-23T00:21:57

I am trying to configure Newsgroup account in “Windows Live Mail”.
I will appreciate if someone could inform us the NNTP server for below Samba lists
1. samba-technical
2. samba

Does Samba4 support Cross forest trusts

Avinash Gupta — 2012-05-22T21:52:14

We have two Samba4 forest domains. We would like to establish trust between them (either at forest level or at domain level).
We are wondering if Samba4 supports this scenario.