M. D. Parker
2006-Aug-10 17:44 UTC
[Samba] FW: HELP -- Problem with access list on samba 3.0.23b but not on 3.0.20c PDC
-----Original Message----- From: M. D. Parker [mailto:mike.parker@ga.com] Sent: Thursday, August 10, 2006 9:02 AM To: 'samba@lists.samba.org' Subject: HELP -- Problem with access list on samba 3.0.23b but not on 3.0.20c PDC I am using samba with NO windbind and a configuration file that has worked for years stopped working at 3.0.23b. The affect was that my [netlogon] area was not being executed. I do have an access list for this share, but any share containing the syntax was failing. The specific line: valid users = @users, hplab, hpmtr, hpytr But I did notice that write/admin user lines were treated similarly. I have a local group called users, and so the manual page states that @users calls in the UNIX users. This syntax seems not to do the right thing in 3.0.23b. Other shares using @<unix-groupname> fail as well. Since this is a PRODUCTION PDC, this prevents me from upgrading to 3.0.23b. HELP! I have a limited level 10 dump and will send the configuration file over if requested. ========================================= M. D. Parker Systems Administrator General Atomics / Electromagnetic Systems +1 858 455 2877 mike.parker@ga.com
Michael Gasch
2006-Aug-10 18:17 UTC
[Samba] FW: HELP -- Problem with access list on samba 3.0.23b but not on 3.0.20c PDC
did you try putting the domain component in front of groups/users? if you comment out "valid users" it works, right? micha M. D. Parker wrote:> -----Original Message----- > From: M. D. Parker [mailto:mike.parker@ga.com] > Sent: Thursday, August 10, 2006 9:02 AM > To: 'samba@lists.samba.org' > Subject: HELP -- Problem with access list on samba 3.0.23b but not on > 3.0.20c PDC > > I am using samba with NO windbind and a configuration file that has worked > for years stopped working at 3.0.23b. The affect was that my [netlogon] > area was not being executed. I do have an access list for this share, but > any share containing the syntax was failing. The specific line: > > valid users = @users, hplab, hpmtr, hpytr > > But I did notice that write/admin user lines were treated similarly. > > I have a local group called users, and so the manual page states that @users > calls in the UNIX users. This syntax seems not to do the right thing in > 3.0.23b. Other shares using @<unix-groupname> fail as well. > > Since this is a PRODUCTION PDC, this prevents me from upgrading to 3.0.23b. > HELP! > > I have a limited level 10 dump and will send the configuration file over if > requested. > > =========================================> > M. D. Parker > Systems Administrator > General Atomics / Electromagnetic Systems > +1 858 455 2877 > mike.parker@ga.com > >
Gerald (Jerry) Carter
2006-Aug-10 20:59 UTC
[Samba] FW: HELP -- Problem with access list on samba 3.0.23b but not on 3.0.20c PDC
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 M. D. Parker wrote:> I am using samba with NO windbind and a configuration file > that has worked for years stopped working at 3.0.23b. > The affect was that my [netlogon] area was not being > executed. I do have an access list for this share, but > any share containing the syntax was failing. The > specific line: > > valid users = @users, hplab, hpmtr, hpytr > > But I did notice that write/admin user lines were > treated similarly. > > I have a local group called users, and so the manual > page states that @users calls in the UNIX users. This > syntax seems not to do the right thing in 3.0.23b. > Other shares using @<unix-groupname> fail as well.Please send me a level 10 debug log from smbd of the access failure. Thanks. cheers, jerry ====================================================================Samba ------- http://www.samba.org Centeris ----------- http://www.centeris.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFE254RIR7qMdg1EfYRAhsBAKCts0tomDhdgSX9eBnwRUcm+cw9hACbBNkq CgGdf620xWlB1ZCS+zrJrRo=KpKA -----END PGP SIGNATURE-----
M. D. Parker
2006-Aug-14 06:55 UTC
[Samba] FW: HELP -- Problem with access list on samba 3.0.23b but not on 3.0.20c PDC
-----Original Message----- From: M. D. Parker [mailto:mike.parker@ga.com] Sent: Thursday, August 10, 2006 9:02 AM To: 'samba@lists.samba.org' Subject: HELP -- Problem with access list on samba 3.0.23b but not on 3.0.20c PDC I am using samba with NO windbind and a configuration file that has worked for years stopped working at 3.0.23b. The affect was that my [netlogon] area was not being executed. I do have an access list for this share, but any share containing the syntax was failing. The specific line: valid users = @users, hplab, hpmtr, hpytr But I did notice that write/admin user lines were treated similarly. I have a local group called users, and so the manual page states that @users calls in the UNIX users. This syntax seems not to do the right thing in 3.0.23b. Other shares using @<unix-groupname> fail as well. Since this is a PRODUCTION PDC, this prevents me from upgrading to 3.0.23b. HELP! I have a limited level 10 dump and will send the configuration file over if requested. ========================================= M. D. Parker Systems Administrator General Atomics / Electromagnetic Systems +1 858 455 2877 mike.parker@ga.com
Gerald (Jerry) Carter
2006-Aug-23 16:55 UTC
[Samba] FW: HELP -- Problem with access list on samba 3.0.23b but not on 3.0.20c PDC
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 M. D. Parker wrote:> -----Original Message----- > From: M. D. Parker [mailto:mike.parker@ga.com] > Sent: Thursday, August 10, 2006 9:02 AM > To: 'samba@lists.samba.org' > Subject: HELP -- Problem with access list on samba 3.0.23b but not on > 3.0.20c PDC > > I am using samba with NO windbind and a configuration file that has worked > for years stopped working at 3.0.23b. The affect was that my [netlogon] > area was not being executed. I do have an access list for this share, but > any share containing the syntax was failing. The specific line: > > valid users = @users, hplab, hpmtr, hpytrMike, I think we have all the issues resolved now. Could you test the preliminary 3.0.23c patch at : http://samba.org/~jerry/patches/patch-3.0.23b-3.0.23c-gwc-1.diffs.gz And let me know if we still have problems. cheers, jerry ====================================================================Samba ------- http://www.samba.org Centeris ----------- http://www.centeris.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFE7IhUIR7qMdg1EfYRAtLXAKC/F2BdPnmOLd49J/Sox/kB/40XLgCeKtK/ wHTJn+FrU3Aqr+UuOP//cak=WALx -----END PGP SIGNATURE-----
Reasonably Related Threads
- Problem using 2.0.23 client in a domain with a Samba 2.0.20c PDC.
- FW: Problem using 3.0.23 client in a domain with a Samba 3.0.20c PDC. -- REVISED I am using V3.x.x
- Best way to update old Mdk box w/2.09 to 3.06??
- ADS WKGUID error
- mod_smbfilepwd_entry: Using old smbpasswd format. This is no longer supported.! ?????