Thanks Afshin, that was the direction I needed pointing in.  After  
mapping the new ephemeral id's to a group and fixing the permissions  
on the shared directory I have the share working from both Mac OS and  
Windows.  In this case "access denied" really meant access denied.

Your CIFS server - Very nice!

Thanks again,

nola


On Nov 28, 2007, at 3:14 PM, Afshin Salek wrote:

> Rob,
>
> pam.conf needs to be modified only if you want to access CIFS shares
> as a Solaris local user. If you're using domain users you don't need
> to change pam.conf
>
> If you don't define any name-mapping rules which is the default  
> status,
> eph-IDs will be generated for all Windows users/groups that require
> mapping
>
> How do permissions look like on the directory that you've shared as
> karapool_home_nola? Make sure the mapped UID for the Administrator
> has enough permission to access this directory. You can find out
> what the mapped UID is by running "idmap dump"
>
> Afshin
>
> Rob Nelson wrote:
>> I have read all the posts and blogs regarding CIFS server setup.   
>> Seems that a few of us are struggling with getting it to work.
>> My issue: "access denied" when logging into share from Mac OS X  
>> 10.4.10:
>> Nov 28 13:27:17 kara smbsrv: [ID 138215 kern.notice] NOTICE: smbd 
>> [GREENBYTES\Administrator]: karapool_home_nola access denied
>> Seems like the join to domain went smoothly.  If I want to use  
>> Ephemeral ID mapping is there anything special to be done with  
>> idmap or pam.conf?  Do I need to have the windows user  
>> "Administrator" own the share directory /karapool/home/nola?  If  
>> so how?
>> Also on start of smb/server I get:
>> Nov 28 14:00:49 kara smbd[1320]: [ID 995127 daemon.error] dyndns:  
>> UDP send error (Bad file number)
>> Nov 28 14:00:49 kara smbd[1320]: [ID 342079 daemon.error] smb_ads:  
>> send/receive error
>> Nov 28 14:00:49 kara smbsrv: [ID 852980 kern.notice] NOTICE:  
>> SmbOplocks: disabled
>> Issues here?
>> I'm missing something here in the setup, but what?
>>   This message posted from opensolaris.org
>> _______________________________________________
>> storage-discuss mailing list
>> [email protected]
>> http://mail.opensolaris.org/mailman/listinfo/storage-discuss
>

_______________________________________________
storage-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/storage-discuss

Reply via email to