On 28/07/15 01:37, Steve Ankeny wrote:
This was initially sent to the wrong mailing list.  Updated at bottom.
------------------------------------------------------------------------------------------------------------------------------------------

Over the weekend, I configured OpenChange, OCS Manager & RPC Proxy in the manner described in the Outlook Configuration Guide to work with Samba in anticipation of setting up my first Outlook 2010 profile.

Specifically, I followed the instructions on pg. 10-17 with reference to 'smb.conf' & 'ocsmanager.ini'

When I initially configured Samba AD DC, I inserted the language on pg. 10 & 13 in 'smb.conf' but commented it out so Samba-AD-DC would work correctly. That was prior to the upgrade to SOGo & OpenChange 2.3

I also initially provisioned OpenChange & created the 'openchange' DB in MySQL

When I completed my configuration of OpenChange & OCS Manager, my Samba services stopped running.

The only working solution is to comment out the OpenChange lines in 'smb.conf'

Here's my 'smb.conf' --

[global]
    workgroup = SMBDOMAIN
    realm = smbdomain.com
    netbios name = SOGO
    server role = active directory domain controller
    dns forwarder = 192.168.121.1
    idmap_ldb:use rfc2307 = yes
    passdb backend = samba
    allow dns updates = nonsecure

    ### Configuration required by OpenChange server ###
    #dsb:shema update allowed = true
    #dcerpc endpoint servers = +epmapper, +mapiproxy
    #dcerpc_mapiproxy:server = true
#dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp, exchange_ds_rfr
    ### Configuration required by OpenChange server ###

    #mapistore:namedproperties = mysql
    #namedproperties:mysql_user = openchange-user
    #namedproperties:mysql_pass = $passwd
    #namedproperties:mysql_host = localhost
    #namedproperties:mysql_db = openchange
#mapistore:indexing_backend = mysql://openchange-user:$passwd@localhost/openchange #mapiproxy:openchangedb = mysql://openchange-user:$passwd@localhost/openchange

[netlogon]
        path = /var/lib/samba/sysvol/smbdomain.com/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No

And, my 'ocsmanager.ini' --

[DEFAULT]
debug = true
email_to = [email protected]
smtp_server = localhost
error_email_from = paste@localhost

[main]
auth = ldap
mapistore_root = /var/lib/samba/private
mapistore_data = /var/lib/samba/private/mapistore
debug = yes

[auth:file]

[auth:ldap]
host = ldap://127.0.0.1
port = 389
bind_dn = cn=Administrator,cn=Users,dc=smbdomain,dc=com
bind_pw = $passwd
basedn = cn=Users,dc=smbdomain,dc=com

[auth:single]
username = openchange
# password is test
*#password = {SSHA}I6Hy5Wv0wuxyXvMBFWFQDVVN12_CLaX9* *(Is this a problem?)*
password = $passwd

[server:main]
use = egg:Paste#http
host = 127.0.0.1
port = 5000
protocol_version = HTTP/1.1

[app:main]
use = egg:ocsmanager
full_stack = true
static_files = true
cache_dir = %(here)s/data
beaker.session.key = ocsmanager
beaker.session.secret = SDyKK3dKyDgW0mlpqttTMGU1f
app_instance_uuid = {ee533ebc-f266-49d1-ae10-d017ee6aa98c}
NTLMAUTHHANDLER_WORKDIR = /var/cache/ntlmauthhandler
SAMBA_HOST = 127.0.0.1

[rpcproxy:ldap]
host = localhost
port = 389
*basedn = CN=Users,DC=example,DC=com   (Is this a problem?)*
set debug = true

[autodiscover]

[autodiscover:rpcproxy]
enabled = true

[outofoffice]

[outofoffice:file]
sieve_script_path = /var/vmail/$domain/$user/sieve-script
sieve_script_path_mkdir = false

[outofoffice:managesieve]
secret = secret

[loggers]
keys = root

[handlers]
keys = console

[formatters]
keys = generic

[logger_root]
level = INFO
handlers = console

[handler_console]
class = StreamHandler
secret = secret

# Logging configuration
[loggers]
keys = root

[handlers]
keys = console

[formatters]
keys = generic

[logger_root]
level = INFO
handlers = console

[handler_console]
class = StreamHandler
args = (sys.stderr,)
level = NOTSET
formatter = generic

[formatter_generic]
format = %(asctime)s %(levelname)-5.5s [%(name)s] [%(threadName)s] %(message)s


Notice the *em**boldened* lines in 'ocsmanager.ini'

*Could those errors turn off my Samba services?*


With the OpenChange lines uncommented in 'smb.conf,' I see the following --

adam@sogo:~$ sudo initctl list | egrep 'samba|smb|nmb|winbind'
nmbd start/running
winbind stop/waiting
smbd stop/waiting
reload-smbd stop/waiting
samba-ad-dc stop/running
adam@sogo:~$

With those same lines commented out, I see the following --

adam@sogo:~$ sudo initctl list | egrep 'samba|smb|nmb|winbind'
nmbd start/running
winbind stop/waiting
smbd stop/waiting
reload-smbd stop/waiting
samba-ad-dc start/running, process 875
adam@sogo:~$

Here's my package selections --

adam@sogo:~$ sudo dpkg --get-selections | egrep 'samba|smb|nmb|winbind'
libnss-winbind:amd64                            install
libpam-winbind:amd64                            install
libsmbclient:amd64                              install
python-samba                                    install
samba                                           install
samba-common                                    install
samba-common-bin                                install
samba-dev                                       install
samba-dsdb-modules                              install
samba-libs:amd64                                install
samba-vfs-modules                               install
smbclient                                       install
winbind                                         install
adam@sogo:~$ sudo dpkg --get-selections | egrep 'openchange|ocs'
openchange-ocsmanager                           install
openchange-rpcproxy                             install
openchangeproxy                                 install
openchangeserver                                install
python-ocsmanager                               install
sogo-openchange:amd64                           install
adam@sogo:~$


*update* --

I made the corrections to 'ocsmanager.ini' noted above to no avail.

IMO the 'dcerpc' calls in 'smb.conf' are shutting down Samba services.

    ### Configuration required by OpenChange server ###
    #dsb:shema update allowed = true

You have a typo, it should be 'dsb:schema update allowed = true'

    #dcerpc endpoint servers = +epmapper, +mapiproxy

Not sure you need '+epmapper' , I think if you run:

samba-tool testparm -v | grep 'dcerpc endpoint servers'

You will need to press enter twice, the result should show just what servers are running now (of course you need to run the test with the openchange lines commented out)

Rowland

#dcerpc_mapiproxy:server = true
#dcerpc_mapiproxy:interfaces = exchange_emsmdb, exchange_nsp, exchange_ds_rfr
    ### Configuration required by OpenChange server ###

    #mapistore:namedproperties = mysql
    #namedproperties:mysql_user = openchange-user
    #namedproperties:mysql_pass = $passwd
    #namedproperties:mysql_host = localhost
    #namedproperties:mysql_db = openchange
#mapistore:indexing_backend = mysql://openchange-user:$passwd@localhost/openchange #mapiproxy:openchangedb = mysql://openchange-user:$passwd@localhost/openchange

With the lines above commented out, Samba services work perfectly.

When I provisioned Samba-AD-DC, I had the same problem and commented them out of 'smb.conf'

Any suggestions would be appreciated. Or, any corrections on my setup. Thx

I will continue to experiment with each line.


--
[email protected]
https://inverse.ca/sogo/lists

Reply via email to