Re: Permissions problem - odd setup
Andrew DeFaria wrote: Andrew DeFaria wrote: Andrew DeFaria wrote: Markus Schönhaber wrote: Don't know if this is of any help: you can set the SIDs for the user and the user's primary group on the Samba box with pdbedit ... -U SID -G SID ...Maybe it helps if you use the same SIDs your Windows Domain account has. OK, got the admin to do that command. Remapped the drive. Same problems. Any other ideas? It seems that this didn't work because we are using only smbpasswd and need to update to using tdbsam (http://swamp.chl.chalmers.se/samba/docs/man/Samba-HOWTO-Collection/passdb. html#pdbeditthing): Yes, should have mentioned that. Regards mks -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Permissions problem - odd setup
Andrew DeFaria wrote: Andrew DeFaria wrote: I have a somewhat odd setup here and am having a permissions problem with my userid and authentication. In general I'm trying to have one home directory that is shared between Windows and Linux. On Windows I use Cygwin. Normally this involves mounting my Windows oriented home directory and proper generation of my domain userid in /etc/passwd. Here things are a bit different. My home directory here is on a Linux box running Samba. I login as domain\defaria on my Windows box. I have generated my /etc/password entry with mkpasswd -d -u defaria /etc/passwd. However the Linux box running Samba does not participate in a domain rather it is using a workgroup. The symptoms that I see are as follows: While I can create a file in my home directory I cannot edit it - access denied: $ cp opts.cfg opts.cfg.new cp: cannot create regular file `opts.cfg.new': Permission denied $ ls -l opts.cfg* -rw-rw-r-- 1 98 Feb 14 11:17 opts.cfg -rwxr--r-- 1 0 Feb 15 16:01 opts.cfg.new* You'll note that the uid and gid is not correct. I suspect the problem is that /etc/passwd has my domain SID yet my home directory is on a samba server that is not in the domain. Is there any way to configure this properly? If so how? Thanks. Nobody has any ideas?!? OK I'm quite shocked that nobody has any ideas at all on this, nothing to try, no suggestions, etc. Is this even getting through at all or is everybody stumped? I'd really like to get this working for me. -- Why do people point to their wrist when asking for the time, but not to their crotch when they ask where the toilet is? -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Permissions problem - odd setup
I have a somewhat odd setup here and am having a permissions problem with my userid and authentication. In general I'm trying to have one home directory that is shared between Windows and Linux. On Windows I use Cygwin. Normally this involves mounting my Windows oriented home directory and proper generation of my domain userid in /etc/passwd. Here things are a bit different. My home directory here is on a Linux box running Samba. I login as domain\defaria on my Windows box. I have generated my /etc/password entry with mkpasswd -d -u defaria /etc/passwd. However the Linux box running Samba does not participate in a domain rather it is using a workgroup. I don't have access to a Samba mount point, so maybe my advice won't help much, but here goes anyways. The symptoms that I see are as follows: While I can create a file in my home directory I cannot edit it - access denied: $ cp opts.cfg opts.cfg.new cp: cannot create regular file `opts.cfg.new': Permission denied $ ls -l opts.cfg* -rw-rw-r-- 1 98 Feb 14 11:17 opts.cfg -rwxr--r-- 1 0 Feb 15 16:01 opts.cfg.new* You'll note that the uid and gid is not correct. First, have you run mkpasswd and mkgroup to create valid /etc/passwd and /etc/group files? Without a valid user database, cygwin gets lost when trying to check/display/modify permissions of an unknown user. http://cygwin.com/cygwin-ug-net/using-utils.html#mkpasswd has more details on running mkpasswd. I suspect the problem is that /etc/passwd has my domain SID yet my home directory is on a samba server that is not in the domain. Is there any way to configure this properly? If so how? Thanks. Nobody has any ideas?!? OK I'm quite shocked that nobody has any ideas at all on this, nothing to try, no suggestions, etc. Is this even getting through at all or is everybody stumped? I'd really like to get this working for me. Also, samba has special options in the CYGWIN environment variable. Check out http://cygwin.com/cygwin-ug-net/using-cygwinenv.html in regards to smbntsec. That may be impacting your permissions. Beyond that, maybe getfacl on the various pathname components may reveal what permissions are attributed to the various files. Again, there may be someone else that has more experience with samba to know how to answer you better, but at least now you know your request is not falling on deaf ears. -- Eric Blake -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Permissions problem - odd setup
Eric Blake wrote: I have a somewhat odd setup here and am having a permissions problem with my userid and authentication. In general I'm trying to have one home directory that is shared between Windows and Linux. On Windows I use Cygwin. Normally this involves mounting my Windows oriented home directory and proper generation of my domain userid in /etc/passwd. Here things are a bit different. My home directory here is on a Linux box running Samba. I login as domain\defaria on my Windows box. I have generated my /etc/password entry with mkpasswd -d -u defaria /etc/passwd. However the Linux box running Samba does not participate in a domain rather it is using a workgroup. I don't have access to a Samba mount point, so maybe my advice won't help much, but here goes anyways. The symptoms that I see are as follows: While I can create a file in my home directory I cannot edit it - access denied: $ cp opts.cfg opts.cfg.new cp: cannot create regular file `opts.cfg.new': Permission denied $ ls -l opts.cfg* -rw-rw-r-- 1 98 Feb 14 11:17 opts.cfg -rwxr--r-- 1 0 Feb 15 16:01 opts.cfg.new* You'll note that the uid and gid is not correct. First, have you run mkpasswd and mkgroup to create valid /etc/passwd and /etc/group files? Without a valid user database, cygwin gets lost when trying to check/display/modify permissions of an unknown user. http://cygwin.com/cygwin-ug-net/using-utils.html#mkpasswd has more details on running mkpasswd. I've run mkpasswd but the real question I believe is what domain should I run mkpasswd for? As I stated above I have run it for the Windows domain that I log into. However, again, my home directory is served by a Linux box using Samba but that link box does not participate in the Windows domain that I log into rather it just runs in it's own workgroup. I suspect the problem is that /etc/passwd has my domain SID yet my home directory is on a samba server that is not in the domain. Is there any way to configure this properly? If so how? Thanks. Nobody has any ideas?!? OK I'm quite shocked that nobody has any ideas at all on this, nothing to try, no suggestions, etc. Is this even getting through at all or is everybody stumped? I'd really like to get this working for me. Also, samba has special options in the CYGWIN environment variable. Check out http://cygwin.com/cygwin-ug-net/using-cygwinenv.html in regards to smbntsec. That may be impacting your permissions. I know about SMBNTSEC. I have SMBNTSEC set on. Beyond that, maybe getfacl on the various pathname components may reveal what permissions are attributed to the various files. Again, there may be someone else that has more experience with samba to know how to answer you better, but at least now you know your request is not falling on deaf ears. I will have to try those getfacl's when I get to work later. I will post them. However, which directories should I do this for? I mean my home directory's share point is \\server\share. I map this to my H drive then I mount H: /home/defaria. Thanks for acknowledging my post... -- Eric Blake Just a little note here but a proper signature delimiter is two dashes followed by a space. You lack a space. -- Assphasia- a condition where your face looks so much like your butt your bowels don't know which way to move. -- I like kids, but I don't think I could eat a whole one. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Permissions problem - odd setup
Andrew DeFaria wrote: Eric Blake wrote: I have a somewhat odd setup here and am having a permissions problem with my userid and authentication. In general I'm trying to have one home directory that is shared between Windows and Linux. On Windows I use Cygwin. Normally this involves mounting my Windows oriented home directory and proper generation of my domain userid in /etc/passwd. Here things are a bit different. My home directory here is on a Linux box running Samba. I login as domain\defaria on my Windows box. I have generated my /etc/password entry with mkpasswd -d -u defaria /etc/passwd. However the Linux box running Samba does not participate in a domain rather it is using a workgroup. I don't have access to a Samba mount point, so maybe my advice won't help much, but here goes anyways. The symptoms that I see are as follows: While I can create a file in my home directory I cannot edit it - access denied: $ cp opts.cfg opts.cfg.new cp: cannot create regular file `opts.cfg.new': Permission denied $ ls -l opts.cfg* -rw-rw-r-- 1 98 Feb 14 11:17 opts.cfg -rwxr--r-- 1 0 Feb 15 16:01 opts.cfg.new* You'll note that the uid and gid is not correct. First, have you run mkpasswd and mkgroup to create valid /etc/passwd and /etc/group files? Without a valid user database, cygwin gets lost when trying to check/display/modify permissions of an unknown user. http://cygwin.com/cygwin-ug-net/using-utils.html#mkpasswd has more details on running mkpasswd. I've run mkpasswd but the real question I believe is what domain should I run mkpasswd for? As I stated above I have run it for the Windows domain that I log into. However, again, my home directory is served by a Linux box using Samba but that link box does not participate in the Windows domain that I log into rather it just runs in it's own workgroup. Don't know if this is of any help: you can set the SIDs for the user and the user's primary group on the Samba box with pdbedit ... -U SID -G SID ... Maybe it helps if you use the same SIDs your Windows Domain account has. Regards mks -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Permissions problem - odd setup
Markus Schönhaber wrote: -- Why do women wear evening gowns to nightclubs? Shouldn't they be wearing night gowns? Andrew DeFaria wrote: Eric Blake wrote: I have a somewhat odd setup here and am having a permissions problem with my userid and authentication. In general I'm trying to have one home directory that is shared between Windows and Linux. On Windows I use Cygwin. Normally this involves mounting my Windows oriented home directory and proper generation of my domain userid in /etc/passwd. Here things are a bit different. My home directory here is on a Linux box running Samba. I login as domain\defaria on my Windows box. I have generated my /etc/password entry with mkpasswd -d -u defaria /etc/passwd. However the Linux box running Samba does not participate in a domain rather it is using a workgroup. I don't have access to a Samba mount point, so maybe my advice won't help much, but here goes anyways. The symptoms that I see are as follows: While I can create a file in my home directory I cannot edit it - access denied: $ cp opts.cfg opts.cfg.new cp: cannot create regular file `opts.cfg.new': Permission denied $ ls -l opts.cfg* -rw-rw-r-- 1 98 Feb 14 11:17 opts.cfg -rwxr--r-- 1 0 Feb 15 16:01 opts.cfg.new* You'll note that the uid and gid is not correct. First, have you run mkpasswd and mkgroup to create valid /etc/passwd and /etc/group files? Without a valid user database, cygwin gets lost when trying to check/display/modify permissions of an unknown user. http://cygwin.com/cygwin-ug-net/using-utils.html#mkpasswd has more details on running mkpasswd. I've run mkpasswd but the real question I believe is what domain should I run mkpasswd for? As I stated above I have run it for the Windows domain that I log into. However, again, my home directory is served by a Linux box using Samba but that link box does not participate in the Windows domain that I log into rather it just runs in it's own workgroup. Don't know if this is of any help: you can set the SIDs for the user and the user's primary group on the Samba box with pdbedit ... -U SID -G SID ...Maybe it helps if you use the same SIDs your Windows Domain account has. I'll have to ask the admin to try this. Thanks. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Permissions problem - odd setup
Andrew DeFaria wrote: Markus Schönhaber wrote: Don't know if this is of any help: you can set the SIDs for the user and the user's primary group on the Samba box with pdbedit ... -U SID -G SID ...Maybe it helps if you use the same SIDs your Windows Domain account has. OK, got the admin to do that command. Remapped the drive. Same problems. Any other ideas? -- Hit any user to continue. -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Permissions problem - odd setup
Andrew DeFaria wrote: Andrew DeFaria wrote: Markus Schönhaber wrote: Don't know if this is of any help: you can set the SIDs for the user and the user's primary group on the Samba box with pdbedit ... -U SID -G SID ...Maybe it helps if you use the same SIDs your Windows Domain account has. OK, got the admin to do that command. Remapped the drive. Same problems. Any other ideas? It seems that this didn't work because we are using only smbpasswd and need to update to using tdbsam (http://swamp.chl.chalmers.se/samba/docs/man/Samba-HOWTO-Collection/passdb.html#pdbeditthing): tdbsam This backend provides a rich database backend for local servers. This backend is not suitable for multiple domain controllers (i.e., PDC + one or more BDC) installations. The /tdbsam/ password backend stores the old / smbpasswd/ information plus the extended MS Windows NT/200x SAM information into a binary format TDB (trivial database) file. The inclusion of the extended information makes it possible for Samba-3 to implement the same account and system access controls that are possible with MS Windows NT4/200x-based systems. The inclusion of the /tdbsam/ capability is a direct response to user requests to allow simple site operation without the overhead of the complexities of running OpenLDAP. It is recommended to use this only for sites that have fewer than 250 users. For larger sites or implementations, the use of OpenLDAP or of Active Directory integration is strongly recommended. Additionally: The resolution of SIDs to UIDs is fundamental to correct operation of Samba. In both cases shown, if winbindd is not running or cannot be contacted, then only local SID/UID resolution is possible. See resolution of SIDs to UIDs http://swamp.chl.chalmers.se/samba/docs/man/Samba-HOWTO-Collection/passdb.html#idmap-sid2uid and resolution of UIDs to SIDs http://swamp.chl.chalmers.se/samba/docs/man/Samba-HOWTO-Collection/passdb.html#idmap-uid2sid diagrams. Apparently I need to have them switch to tdbsam style backend in order to set things like SIDs and the like. This might be a hard sell... -- Don't make no sense that common sense don't make no sense no more. - John Prine -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
Re: Permissions problem - odd setup
Andrew DeFaria wrote: I have a somewhat odd setup here and am having a permissions problem with my userid and authentication. In general I'm trying to have one home directory that is shared between Windows and Linux. On Windows I use Cygwin. Normally this involves mounting my Windows oriented home directory and proper generation of my domain userid in /etc/passwd. Here things are a bit different. My home directory here is on a Linux box running Samba. I login as domain\defaria on my Windows box. I have generated my /etc/password entry with mkpasswd -d -u defaria /etc/passwd. However the Linux box running Samba does not participate in a domain rather it is using a workgroup. The symptoms that I see are as follows: While I can create a file in my home directory I cannot edit it - access denied: $ cp opts.cfg opts.cfg.new cp: cannot create regular file `opts.cfg.new': Permission denied $ ls -l opts.cfg* -rw-rw-r-- 1 98 Feb 14 11:17 opts.cfg -rwxr--r-- 1 0 Feb 15 16:01 opts.cfg.new* You'll note that the uid and gid is not correct. I suspect the problem is that /etc/passwd has my domain SID yet my home directory is on a samba server that is not in the domain. Is there any way to configure this properly? If so how? Thanks. Nobody has any ideas?!? -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/
