Re: [Samba] Share permission problem if user is member in more than 16 groups on AD

2010-07-16 Thread Marcis Lielturks
Hi! First of all, thanks for replies to all ;)! Using GCC was a fail for me - too much errors and 2 additional things must be compiled (tdb talloc) . I only managed to compile using Sun's cc and gmake and will stick to them. I'm a bit further now. Now I don't get PKCS 11 erros, when trying

Re: [Samba] Share permission problem if user is member in more than 16 groups on AD

2010-07-16 Thread Gaiseric Vandal
Which version of Samba? I had more trouble with Samba 3.5.x. And I have never managed to get Samba to compile with sun cc. I figured Samba was written with gcc in mind. The failed to lookup DC info for domain 'mydomain.COM' over rpc: Logon failure' message is interesting - not sure if

Re: [Samba] Share permission problem if user is member in more than 16 groups on AD

2010-07-16 Thread Marcis Lielturks
Hi! Thanks! Version is 3.5.4, primary dns is AD server. AD is Win2003 server sp2. Domain functional level is windows server 2003, forest functional level is windows 2000. I think even 3.0.37 did use DNS (judging by network traffic it made). It's a pitty that there's no instructions how Sun

Re: [Samba] Share permission problem if user is member in more than 16 groups on AD

2010-07-15 Thread Gaiseric Vandal
I compiled Samba 3.4.x on Solaris 10.(I have a Samba 3.4.x pdc with two Samba 3.0.x BDC's.) Samba 3.0.x DCs will not support Windows 7 clients (don't have any yet but it is probably inevitable) and doesn't seem to support trusts with Windows 2003 Native domains (at least it didn't for

Re: [Samba] Share permission problem if user is member in more than 16 groups on AD [SEC=UNCLASSIFIED]

2010-07-15 Thread Wilkinson, Alex
0n Thu, Jul 15, 2010 at 12:26:05AM +0300, M??rcis Lielturks wrote: Can anybody share experience on compiling samba on OpenSolaris? What's the most painless way? I'm considering to use latest 3.5.5 but maybe I should use same version Sun (Oracle) is using - 3.0.37? I have to set

Re: [Samba] Share permission problem if user is member in more than 16 groups on AD

2010-07-15 Thread Marcis Lielturks
Compiled 3.5.4 successfully, but new binaries seem to be defective or missing something. I get errors about PKCS 11 library calls when trying to join domain. I've seen these errors with original Samba 3.0.37 in log.winbindd and log.wb-DOMAIN, but besides that, 3.0.37 worked and could join

[Samba] Share permission problem if user is member in more than 16 groups on AD

2010-07-14 Thread Marcis Lielturks
Hi! Running OpenSolaris snv_134 with Samba 3.0.37. Samba is successfully joined to AD domain. AD user user1 is member in 17 AD groups including group1, but he cannot access Samba share which have read permissions for group1. If user account is modified and group1 becomes users primary group,

Re: [Samba] Share permission problem if user is member in more than 16 groups on AD

2010-07-14 Thread Gaiseric Vandal
Here is the catch (at least for some people.) This can break NFS stuff.On my PDC I made a similar change. Home directories are not on the PDC. This fixed the problem of people getting login failures when logging into windows if they had more than 16 groups. But if a user tries to

Re: [Samba] Share permission problem if user is member in more than 16 groups on AD

2010-07-14 Thread Mārcis Lielturks
Thanks, machine wont provide NFS or ssh login services, so fiddling with max groups should do no harm! I googled a bit at found that samba should be recompiled to take advantage of new NGROUPS_MAX. ./configure logs also suggested that NGROUPS_MAX is evaluated only at compile time. Can anybody

Re: [Samba] Share permission problem if user is member in more than 16 groups on AD

2010-07-14 Thread Jeremy Allison
On Thu, Jul 15, 2010 at 12:26:05AM +0300, Mārcis Lielturks wrote: Thanks, machine wont provide NFS or ssh login services, so fiddling with max groups should do no harm! I googled a bit at found that samba should be recompiled to take advantage of new NGROUPS_MAX. ./configure logs also

Re: [Samba] Share permission problem if user is member in more than 16 groups on AD

2010-07-14 Thread Mārcis Lielturks
On 15 July 2010 00:28, Jeremy Allison j...@samba.org wrote: On Thu, Jul 15, 2010 at 12:26:05AM +0300, Mārcis Lielturks wrote: Thanks, machine wont provide NFS or ssh login services, so fiddling with max groups should do no harm! I googled a bit at found that samba should be recompiled