Kevin Brouelette escreveu:

Try
valid users = @grupoteste

I think the + is what is breaking this.
See 'man smb.conf' for the correct syntax of all samba directives.
Be sure to run 'testparm' for syntax check etc.

Kevin B



On Fri, 2005-08-26 at 19:46 -0300, William Marques wrote:
Hi list,

I have a problem here that's make me insane...
I have to make a share only available to persons in a group, it means that the directory have to be 0770 permission o Linux, right?
Here is my situation:
I use samba with LDAP, and everithing is working fine.
With smbldap-tools, I created the group and with <net groupmap list>
I see that it maps rigth to Unix Group:

grupoteste (S-1-5-21-980314579-3254781846-1046201792-3071) -> grupoteste

I putt all the people who should have acces to the share inside the group, as I can see with smbldap-groupshow grupoteste:

dn: cn=grupoteste,ou=Groups,dc=feam,dc=br
objectClass: posixGroup,sambaGroupMapping
cn: grupoteste
gidNumber: 1035
memberUid: william,lvlira
sambaSID: S-1-5-21-980314579-3254781846-1046201792-3071
sambaGroupType: 2
displayName: grupoteste
description: Local Unix group
with getent group grupoteste I have:
grupoteste:x:1035:william,lvlira

The share:
ls -ald /home/pasta-teste
drwxrwx---    2 root     grupoteste     4096 Ago 26 18:10 /home/pasta-teste/

In smb.conf:

[global]
       workgroup = HOSPITAL
       netbios name = FEAM001
       server string = Servidor FEAM
       encrypt passwords = Yes
       update encrypted = Yes

security = user
#       unix password sync = Yes
os level = 255
log level = 1
time server = yes
#time offset = 60
passwd program = /usr/local/sbin/smbldap-passwd -u %U
passwd chat = "Mudando a senha para*\nNew password*" %n\n "*Digite novamente a senha*" %n\n"
min passwd length = 6
       ldap passwd sync = yes
       passdb backend = ldapsam:ldap://127.0.0.1/
       ldap admin dn = cn=Manager,dc=feam,dc=br
       ldap suffix = dc=feam,dc=br
       ldap group suffix = ou=Groups
       ldap user suffix = ou=Users
       ldap machine suffix = ou=Computers
       ldap ssl = no
logon home =
logon path =
       log file = /var/log/samba/samba-all.log
       max log size = 0
       name resolve order = wins lmhosts host bcast
       socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
       oplocks = yes
veto oplock files = /*.idx/*.ind/*.IDX/*.IND/*.db/*.DB/*.mdb/*.MDB/*.px/*.PX/*.seq/*.SEQ/*.int/*.INT/
       read raw = yes
       write raw = yes
       max xmit = 65535
       dead time = 15
       getwd cache = yes
       logon script = %U.bat
       domain logons = Yes
       preferred master = Yes
       domain master = Yes
       dns proxy = No
       wins support = Yes
       printing = lprng
       preserve case = No
       short preserve case = No
       unix charset = UTF8
       display charset = UTF8
       dos charset = cp850

[pastateste]
comment = teste
path = /home/pasta-teste
create mask = 0770
force create mode = 0770
preserve case = yes

I have also tried put in the share:
valid users = +grupotest

But the same error occours:
I Can't open the share using samba...
In logs:

chdir (/home/pasta-teste) failed

Any clues about that?

Regards,

--
William Henrique Siqueira Marques
[EMAIL PROTECTED]


        
        
                
_______________________________________________________ Yahoo! Acesso Grátis - Internet rápida e grátis. Instale o discador agora! http://br.acesso.yahoo.com/

I tried this too, withou success...
Follows some logs:
[2005/08/29 10:45:35, 0] smbd/service.c:set_current_service(51)
 chdir (/home/pasta-teste) failed
UNIX token of user 0
 Primary group is 0 and contains 0 supplementary groups
[2005/08/29 10:53:53, 5] smbd/uid.c:change_to_root_user(296)
 change_to_root_user: now uid=(0,0) gid=(0,0)
[2005/08/29 10:53:53, 4] smbd/reply.c:reply_tcon_and_X(408)
 Client requested device type [?????] for share [PASTATESTE]
[2005/08/29 10:53:53, 5] smbd/service.c:make_connection(813)
 making a connection to 'normal' service pastateste
[2005/08/29 10:53:53, 10] lib/username.c:user_in_list(529)
 user_in_list: checking user lvlira in list
[2005/08/29 10:53:53, 10] lib/username.c:user_in_list(533)
 user_in_list: checking user |lvlira| against |@grupoteste|
[2005/08/29 10:53:53, 5] lib/username.c:user_in_netgroup_list(315)
Unable to get default yp domain < ---- Try to acces NIS, what I dont have....
[2005/08/29 10:53:53, 2] smbd/service.c:make_connection_snum(314)
user 'lvlira' (from session setup) not permitted to access this share (pastateste)
[2005/08/29 10:53:53, 3] smbd/error.c:error_packet(129)
error packet at smbd/reply.c(416) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED

Well it seems like it try to just look into NIS Directory, but I usuing LDAP.
with the option +grupoteste fails too....


I'm in troubles....

Any other suggestions?

Best Regards,

--
William Henrique Siqueira Marques
[EMAIL PROTECTED]






_______________________________________________________
Yahoo! Acesso Gr�tis - Internet r�pida e gr�tis.
Instale o discador agora! http://br.acesso.yahoo.com/
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to