[Samba] 3.5.5 on Solaris 10 - Doesn't expose all content (NFS)

2013-08-21 Thread Ray Van Dolson
So, we're doing a bad thing and re-exporting an NFS file system via Samba. For the most part it's always worked fairly well and we've been cognizant of the various locking scenarios that can come up. Recently, we've run into issues exposing NFS file systems sitting on RHEL6. Our Samba server

Re: [Samba] 3.5.5 on Solaris 10 - Doesn't expose all content (NFS)

2013-08-21 Thread Ray Van Dolson
On Wed, Aug 21, 2013 at 01:11:31PM -0700, Ray Van Dolson wrote: So, we're doing a bad thing and re-exporting an NFS file system via Samba. For the most part it's always worked fairly well and we've been cognizant of the various locking scenarios that can come up. Recently, we've run

[Samba] Understanding UID/GID mapping models.

2011-08-30 Thread Ray Van Dolson
I am using either DOMAIN or ADS for authentication and am trying to understand how UID/GID mapping rules are triggered. This[1] seems to suggest that if I do not specify the idmap uid/gid parameters in smb.conf, then authenticated usernames are mapped to local user accounts having the same name.

Re: [Samba] Samba upgrade question

2010-12-20 Thread Ray Van Dolson
On Thu, Dec 16, 2010 at 07:56:55AM -0800, Chernoguz, Inessa wrote: Hi All, I have a problem with upgrade samba on Solaris 10 (x86). The current version is 3.0.25b (distributed with Solaris 10). I am trying to upgrade version to 3.4.5. I compiled samba from sources, has not any problem with

Re: [Samba] troule switching winbind to use a new AD 2008

2010-11-11 Thread Ray Van Dolson
On Thu, Nov 11, 2010 at 08:09:50AM -0800, John Stile wrote: I have been using 2003 AD servers for winbind for many years, and now 2008 is phasing in, but I can't authenticate using the new servers, and I'm not sure what to do. All advice very welcome. This is a problem for me on both Gentoo

Re: [Samba] Samba 3.0.33, security = domain and Windows 2008 R2

2010-11-04 Thread Ray Van Dolson
On Thu, Nov 04, 2010 at 06:06:03AM -0700, Robert Freeman-Day wrote: Ray, There was indeed an issue with the old RHEL samba packages and 2008r2. There was a bug report issued about it and RHEL released a newer samba package that can talk 2008r2:

Re: [Samba] Samba 3.0.33, security = domain and Windows 2008 R2

2010-11-04 Thread Ray Van Dolson
On Thu, Nov 04, 2010 at 12:16:31PM -0700, Robert Freeman-Day wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/04/2010 11:49 AM, Ray Van Dolson wrote: On Thu, Nov 04, 2010 at 06:06:03AM -0700, Robert Freeman-Day wrote: Ray, There was indeed an issue with the old RHEL samba

[Samba] Samba 3.0.33, security = domain and Windows 2008 R2

2010-11-03 Thread Ray Van Dolson
I have a number of Samba servers on RHEL (Samba 3.0.33) in an AD environment using a mix of Windows 2008 and windows 2008 R2 servers. Configuration file is pretty minimal: [global] workgroup = AVWORLD security = DOMAIN log file = /var/log/samba/samba.log max log size = 500

Re: [Samba] Samba Serving NFS Mounted Directories

2010-01-22 Thread Ray Van Dolson
On Fri, Jan 22, 2010 at 04:49:33PM -0800, Jon Forrest wrote: I have a Sun 7310 storage server. This is running Solaris 10 but it's self-contained and I can't login to it or run Samba on it. I manage it with a web interface. I have a CentOS 5.3 machine that mounts a bunch of file systems

Re: [Samba] Tracking down rogue workgroup

2010-01-21 Thread Ray Van Dolson
On Thu, Jan 21, 2010 at 01:37:25AM -0800, Moray Henderson wrote: Ray Van Dolson wrote: Hi folks. Periodically a workgroup shows up on our network with an inappropriate name. We're trying to find the best way to track this down as it's quite intermittent. We can obviously look

Re: [Samba] Tracking down rogue workgroup

2010-01-21 Thread Ray Van Dolson
This seems to be a decent way to tell right when the workgroup shows up, but I don't think it helps us track down which IP address is responsible for generating it, or helping us narrow down the subnet its on even... (if I'm wrong, please correct me on that). Right now we're sifting through

Re: [Samba] Tracking down rogue workgroup

2010-01-21 Thread Ray Van Dolson
On Thu, Jan 21, 2010 at 09:18:13AM -0800, Moray Henderson wrote: Ray Van Dolson wrote: This seems to be a decent way to tell right when the workgroup shows up, but I don't think it helps us track down which IP address is responsible for generating it, or helping us narrow down the subnet

[Samba] Tracking down rogue workgroup

2010-01-19 Thread Ray Van Dolson
Hi folks. Periodically a workgroup shows up on our network with an inappropriate name. We're trying to find the best way to track this down as it's quite intermittent. We can obviously look for announcement messages (in broadcast packets on ports 138/139), but this must be done on each subnet

Re: [Samba] Question about Posix Locking and Windows XP/SP3 clients

2009-11-19 Thread Ray Van Dolson
On Thu, Nov 19, 2009 at 05:06:21AM -0800, Volker Lendecke wrote: On Thu, Nov 19, 2009 at 07:48:19AM -0500, john_debe...@notes.teradyne.com wrote: Hi Volker, Thanks for the response. To clarify, we are not re-exporting via NFS but via Samba. We've run in this mode for several years,

Re: [Samba] Question about Posix Locking and Windows XP/SP3 clients

2009-11-19 Thread Ray Van Dolson
On Thu, Nov 19, 2009 at 08:37:56AM -0800, john_debe...@notes.teradyne.com wrote: Hi Ray, Thanks for the reply. I'm trying to understand what the risk is of turning off the posix locking for the [home] shares? I don't fully understand the issue and further more, why this is now raising its

Re: [Samba] Question about Posix Locking and Windows XP/SP3 clients

2009-11-19 Thread Ray Van Dolson
On Thu, Nov 19, 2009 at 09:50:16AM -0800, john_debe...@notes.teradyne.com wrote: Thanks again for the reply Ray. We are running a current version on the Netapp side and from what I can tell, there is no tweaking we can do there. I'm looking into this with RedHat and thus far they have not

[Samba] tdb locking issue - Solaris 10 and Samba 3.0.33

2009-10-23 Thread Ray Van Dolson
(Yes, I should upgrade Samba to 3.0.35). We're running the Sun provided Samba daemon (SUNWsmbau and friends) on Solaris 10 Generic_13-08 (sparc). Lots of Windows clients (mixed XP, 2003, 2008) hit this server and periodically we'll start seeing smbd processes begin piling up. These

Re: [Samba] tdb locking issue - Solaris 10 and Samba 3.0.33

2009-10-23 Thread Ray Van Dolson
On Fri, Oct 23, 2009 at 02:41:46PM -0700, Volker Lendecke wrote: On Fri, Oct 23, 2009 at 02:18:19PM -0700, Ray Van Dolson wrote: # pfiles -F 25067 10: S_IFREG mode:0644 dev:85,60 ino:4630 uid:0 gid:0 size:327680 O_RDWR|O_LARGEFILE advisory read lock set by process 21130

Re: [Samba] tdb locking issue - Solaris 10 and Samba 3.0.33

2009-10-23 Thread Ray Van Dolson
On Fri, Oct 23, 2009 at 02:37:15PM -0700, Volker Lendecke wrote: On Fri, Oct 23, 2009 at 02:18:19PM -0700, Ray Van Dolson wrote: (Yes, I should upgrade Samba to 3.0.35). We're running the Sun provided Samba daemon (SUNWsmbau and friends) on Solaris 10 Generic_13-08 (sparc). Lots

Re: [Samba] tdb locking issue - Solaris 10 and Samba 3.0.33

2009-10-23 Thread Ray Van Dolson
On Fri, Oct 23, 2009 at 03:15:59PM -0700, Volker Lendecke wrote: On Fri, Oct 23, 2009 at 03:09:06PM -0700, Ray Van Dolson wrote: I'm not sure how to do this either. Guess I could pfiles on every other PID on the system. See my other mail, this looks like a good hint. BTW, you don't

Re: [Samba] tdb locking issue - Solaris 10 and Samba 3.0.33

2009-10-23 Thread Ray Van Dolson
On Fri, Oct 23, 2009 at 03:21:35PM -0700, Volker Lendecke wrote: On Fri, Oct 23, 2009 at 03:19:03PM -0700, Ray Van Dolson wrote: Hmm, yes, there is some of that. I guess I was thrown off by the fact that the lock appeared to be on the .tdb file and the .tdb file wouldn't be accessed by any

Re: [Samba] tdb locking issue - Solaris 10 and Samba 3.0.33

2009-10-23 Thread Ray Van Dolson
On Fri, Oct 23, 2009 at 03:34:29PM -0700, Volker Lendecke wrote: You need to find the one holding the lock the others are waiting for and see what that guy is blocking on. Everything else is pure speculation. It appears mdb is what I want to use. See this[1] page if anyone is curious.

[Samba] Samba server masquerading as another...

2009-09-14 Thread Ray Van Dolson
We're doing a test deployment of a Samba 3.0.33 server (RHEL 5.4) which is slated to replace two existing file servers -- one running Windows 2003 (known as qalab_server) and another running Samba (known as qalinux). We've brought the new server up and are trying to test client access to it to

Re: [Samba] Join AD: no logon server

2008-10-23 Thread Ray Van Dolson
On Thu, Oct 23, 2008 at 01:03:56AM -0700, Tam McLaughlin wrote: Hello, I am trying to join my server to a Win2k AD domain. I have configured kerberos and can get a ticket but when I try to join the AD I get the error Failed to join domain: No logon servers as detailed below. I have

[Samba] inherit acls and inherit permissions = execute bit always set?

2008-10-20 Thread Ray Van Dolson
Hi all, I have a share set up as follows: [images] path = /images read only = No create mask = 0660 directory mask = 2770 hide special files = yes hide files = /lost+found/ acl group control = yes inherit acls = yes map acl inherit = yes inherit permissions = yes map archive

[Samba] Problem joining domain.

2008-08-15 Thread Ray Van Dolson
Hi all, I'm trying to join several RHEL 4.7 based machines (Samba 3.0.28) to our domain here. I'm trying to do this via the net rpc commands as this has typically worked fine in the past (iow: not doing net ads join). My smb.conf is as follows: [global] workgroup = DOMAIN netbios name =

Re: [Samba] Problem joining domain.

2008-08-15 Thread Ray Van Dolson
On Fri, Aug 15, 2008 at 11:47:12AM -0700, Ray Van Dolson wrote: Hi all, I'm trying to join several RHEL 4.7 based machines (Samba 3.0.28) to our domain here. I'm trying to do this via the net rpc commands as this has typically worked fine in the past (iow: not doing net ads join). Follow-up

[Samba] Authenticating to AD server fails.

2007-09-07 Thread Ray Van Dolson
I'm trying to configure a Fedora 7 machine to authenticate access to shares via AD. This works fine on other RHEL machines, but the same configuration on Fedora maddeningly does not. I've tried oodles of different configurations, and am currently using something based on:

Re: [Samba] Authenticating to AD server fails.

2007-09-07 Thread Ray Van Dolson
On Fri, Sep 07, 2007 at 07:28:04AM -0500, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ray, Get_Pwnam_internals didn't find user [AVWORLD\ray5147]! Figure out why 'getent passwd AVWORLD\ray5147' fails. Make sure the libnww_winbind library is installed

[Samba] Request for explanation on NFS re-export issue

2007-08-06 Thread Ray Van Dolson
I have a situation involving Samba that I _believe_ may be the fault of a buggy or old NFS daemon, but am not sure. I'm hoping someone can explain to me what is going on here (I have found a workaround). I have a Samba server on Fedora 7 (3.0.25b + whatever patches Fedora includes). This server

[Samba] FC6 and winbind separator ignored?

2006-11-06 Thread Ray Van Dolson
I'm trying to join my FC6 box to our Active Directory domain. For the most part the setup was pretty straightforward, but it just doesn't seem like winbind separator is being honored. When I do a 'getent passwd' I get the following:

Re: [Samba] FC6 and winbind separator ignored?

2006-11-06 Thread Ray Van Dolson
On Mon, Nov 06, 2006 at 12:15:20PM -0700, Roland Hordos wrote: If I run a 'finger username' nothing is returned -- but if I run a 'finger AVWORLD\\username' the entry _is_ returned. I needed this to get around fully qualified user accounts on FC5 3.0.23c: winbind use default