[Samba] File permissions
Samba 3.4.7-58.fc12, windows 7 client. I have a share where, if I right-click and chose properties, everything shows up as read only. I can un-check that, hit apply, and if I view the properties again, they are read only. Interestingly enough, I can go in and create files, modify files, rename files, delete files, etc.. However, some of the users' software checks for read-only status, and is throwing errors. Here's the smb.conf section: [Apps] path=/home/apps force user=appsuser force group=appsuser read only=no writeable=yes oplocks = False level2 oplocks = False Directory looks like this: drwxrwxr-x 94 appsuser appsuser 20K 2010-06-02 14:32 apps Files inside of it have permissions similar to these: -rwxr-xr-x1 appsuser appsuser 424K 2009-10-01 15:54 AAUTOLN.DLL -rwxr-xr-x1 appsuser appsuser 894 2008-07-23 08:37 Accounting.HSICTB Any clues? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] File permissions
It's not installed. I logged on as a domain administrator and unchecked the read only, now it still appears on directories, but NOT on individual files. The software now succeeds. I'd still like to fix the issue if possible, but if not... employees are able to work. :-D On Wed, Jun 2, 2010 at 4:25 PM, Jorge Alberto Garcia jorge.garcia.gonza...@gmail.com wrote: Hi Steve, Do you have installed the acl ? also check if filesystem below have the option acl enabled. Saludos! 2010/6/3 Steve Wolfe bafena...@gmail.com Samba 3.4.7-58.fc12, windows 7 client. I have a share where, if I right-click and chose properties, everything shows up as read only. I can un-check that, hit apply, and if I view the properties again, they are read only. Interestingly enough, I can go in and create files, modify files, rename files, delete files, etc.. However, some of the users' software checks for read-only status, and is throwing errors. Here's the smb.conf section: [Apps] path=/home/apps force user=appsuser force group=appsuser read only=no writeable=yes oplocks = False level2 oplocks = False Directory looks like this: drwxrwxr-x 94 appsuser appsuser 20K 2010-06-02 14:32 apps Files inside of it have permissions similar to these: -rwxr-xr-x1 appsuser appsuser 424K 2009-10-01 15:54 AAUTOLN.DLL -rwxr-xr-x1 appsuser appsuser 894 2008-07-23 08:37 Accounting.HSICTB Any clues? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Upgrading Samba
I have a fairly old Samba server, 3.0.25, on CentOS 4.8. I'd like to update it to something more modern, so I grabbed the Enterprise Samba 3.5 RPMs for RHEL, and went to work on a test machine. After upgrading via rpm -U ./*.rpm, starting nmbd and smbd, I can no longer log in to the domain, I get: netlogon_creds_server_check failed. Rejecting auth request from client FREESCALE machine account FREESCALE$ While /etc/samba/smbpasswd remains seemingly untouched from the upgrade, I have to delete and recreate each account before it will let me log in to the domain. Since there are about a hundred workstations (and more accounts), I'd like to make this a more seamless transition... any tips for a newb? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Upgrading Samba
Perfect! On the test server, I just upgraded, did 'pdbedit -i smbpasswd -e tdbsam', and everything seems to have worked. Thank you very much. steve On Mon, May 24, 2010 at 3:00 PM, Gaiseric Vandal gaiseric.van...@gmail.comwrote: On 05/24/2010 04:46 PM, Steve Wolfe wrote: I have a fairly old Samba server, 3.0.25, on CentOS 4.8. I'd like to update it to something more modern, so I grabbed the Enterprise Samba 3.5 RPMs for RHEL, and went to work on a test machine. After upgrading via rpm -U ./*.rpm, starting nmbd and smbd, I can no longer log in to the domain, I get: netlogon_creds_server_check failed. Rejecting auth request from client FREESCALE machine account FREESCALE$ While /etc/samba/smbpasswd remains seemingly untouched from the upgrade, I have to delete and recreate each account before it will let me log in to the domain. Since there are about a hundred workstations (and more accounts), I'd like to make this a more seamless transition... any tips for a newb? I am guessing that smbpasswd is not in the TDB format supported by Samba 3.5.I think the older format got dropped along the way. Are the user accounts OK? You could prob use pdbedit -w (from the old version) to dump the accounts to a text file. And then maybe write a script (perl has a nice split command) to parse the file into a list of machine names. And then run something like for i in `cat thelist.txt` do smbpasswd -x $i smbpaswd -m -a $i done The other option may be to use pdbedit to dump the passwd to a text or TDB file, backup /etc/smbpasswd and then use pdbedit (to reimport the accounts. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba 3.5, logon drive
I upgraded from 3.0.25 to 3.5.3, and all has been well, with one exception. In my smb.conf, I have the line: [global] logon drive = P: Under the old version, that would automatically map their home directory as their P drive. However, under 3.5, the P drive is no longer mapped. Are there any gotchas that I should be looking for? steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Win7 client, Samba PDC
I'm trying to set up Samba as a PDC for some Win7 clients, and could use some help. I can successfully join the domain, with the message Changing the primary domain DNS name of this computer to failed., but I am still told that it was successful. However, when I try to log in, I am told The trust relationship between this workstation and the primary domain failed. Looking in /var/log/samba/pi-69.log, I see: [2010/05/06 08:45:45, 0] rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3) _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client PI-69 machine account PI-69$ [2010/05/06 08:45:45, 0] rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3) _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client PI-69 machine account PI-69$ Trying: smbpasswd -x pi-69$ userdel -r pi-69$ useradd pi-69$ smbpasswd -a -m pi-69$ does no good. Client has : [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon\Parameters] “RequireSignOrSeal”=dword: “RequireStrongKey”=dword: and [HKLM\System\CCS\Services\LanmanWorkstation\Parameters] DWORD DomainCompatibilityMode = 1 DWORD DNSNameResolutionRequired = 0 Config/specs: Samba version 3.4.7-58.fc12 Widows 7 64-bit professional clients smb.conf: [global] netbios name = PinnacleFS workgroup = PinnacleDom logon drive= P: logon home = \\PinnacleFS\%u locking = yes server string = PDC hosts allow=10.0.0.0/255.255.255.0 load printers = no log file = /var/log/samba/%m.log security=user encrypt passwords=yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master = yes os level = 128 domain master = yes prefered master = yes domain logons = yes logon script = login.bat dns proxy = no idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 template shell = /bin/false winbind use default domain = no [homes] comment = Home Directories browseable = no writable = yes create mode = 0700 directory mode = 0700 # Un-comment the following and create the netlogon directory for Domain Logons [netlogon] comment = Network Logon Service path = /home/netlogon guest ok = yes writable = no share modes = no [Profiles] browseable = no guest ok = yes create mode = 0700 directory mode = 0700 default case = lower case sensitive = no [Apps] path=/home/apps force user=apps force group=apps -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win7 client, Samba PDC
Doh! Thank you. Setting those back fixed the problem. On Thu, May 6, 2010 at 9:10 AM, Evan Ingram evan.ing...@cariss.co.ukwrote: On Thu, 2010-05-06 at 08:59 -0600, Steve Wolfe wrote: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Netlogon \Parameters] “RequireSignOrSeal”=dword: “RequireStrongKey”=dword: on my win2008 server joined to samba domain these are ...01 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba