On 14/12/2020 07:11, Maurizio Caloro wrote:> Dear Roland > I try this version, add on my smb.conf..... > > Here this memer server are joint to domain and > /etc/samba# smbd -V = Version 4.9.5-DebianI know that 4.9.5 is the latest version available on Debian, but it is very old, you can find later versions here: http://apt.van-belle.nl/> > root at srar:/etc/samba# cat smb.conf > [global] > realm = CARAG.LOCAL > security = ADS > encrypt password = yes > workgroup = CARAG.LOCAL > server role = member server > vfs objects = acl_xattr > map acl inherit = yesFirst, the workgroup cannot be the same as the realm and the realm must be the dns domain name in uppercase. By default the workgroup name is the lefthand portion of the realm (in your case 'CARAG'), but it can be anything and it must not contain dots. If your TLD is '.local' then it really shouldn't be and you will have to turn off Avahi You also seem to not have any 'idmap config' lines, are you using sssd or similar ? Rowland
>First, the workgroup cannot be the same as the realm and the realm must bethe dns domain name in uppercase. By default the workgroup name is the lefthand portion of the realm (in your case 'CARAG'), but it can be anything and it >must not contain dots. If your TLD is '.local' then it really shouldn't be and you will have to turn off Avahi> >You also seem to not have any 'idmap config' lines, are you using sssd orsimilar ?> >RowlandThanks for you quick Answer! Add this to smb.conf [global] realm = CARAG.LOCAL workgroup = CARAG netbios name = SRVCAR005 security = domain vfs objects = acl_xattr idmap config * : backend = tdb idmap config * : range 10000-199999 idmap config DOMAIN : backend = autorid idmap config DOMAIN : range = 200000-2147483647 [USERHOME] path = /shares/Userhome/ read only = no And now the SAMBA Service will not start anymore.... root at srvcar005:/home/caragadm# systemctl status smbd ? smbd.service - Samba SMB Daemon Loaded: loaded (/lib/systemd/system/smbd.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Mon 2020-12-14 09:34:01 CET; 11min ago Docs: man:smbd(8) man:samba(7) man:smb.conf(5) Process: 639 ExecStartPre=/usr/share/samba/update-apparmor-samba-profile (code=exited, status=0/SUCCESS) Process: 643 ExecStart=/usr/sbin/smbd --foreground --no-process-group $SMBDOPTIONS (code=exited, status=255/EXCEPTION) Main PID: 643 (code=exited, status=255/EXCEPTION) Dec 14 09:34:00 srvcar005.carag.local systemd[1]: Starting Samba SMB Daemon... Dec 14 09:34:01 srvcar005.carag.local smbd[643]: [2020/12/14 09:34:01.312274, 0] ../source3/auth/auth_util.c:1382(make_new_session_info_guest) Dec 14 09:34:01 srvcar005.carag.local smbd[643]: create_local_token failed: NT_STATUS_NO_MEMORY Dec 14 09:34:01 srvcar005.carag.local smbd[643]: [2020/12/14 09:34:01.314853, 0] ../source3/smbd/server.c:2000(main) Dec 14 09:34:01 srvcar005.carag.local smbd[643]: ERROR: failed to setup guest info. Dec 14 09:34:01 srvcar005.carag.local systemd[1]: smbd.service: Main process exited, code=exited, status=255/EXCEPTION Dec 14 09:34:01 srvcar005.carag.local systemd[1]: smbd.service: Failed with result 'exit-code'. Dec 14 09:34:01 srvcar005.carag.local systemd[1]: Failed to start Samba SMB Daemon. root at srvcar005:/home/caragadm# Thanks for your help Regards Mauri
Change autorid to rid.>> fileserver running 4.9.5upgrade that one. And then im 99.99% sure its fixed. Greez, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Maurizio Caloro > via samba > Verzonden: maandag 14 december 2020 9:46 > Aan: 'Rowland penny' > CC: samba at lists.samba.org > Onderwerp: Re: [Samba] rights -- structures > > > >First, the workgroup cannot be the same as the realm and the realm must > be > the dns domain name in uppercase. By default the workgroup name is the > lefthand portion of the realm (in your case 'CARAG'), but it can be > anything > and it >must not contain dots. If your TLD is '.local' then it really > shouldn't be and you will have to turn off Avahi > > > >You also seem to not have any 'idmap config' lines, are you using sssd or > similar ? > > > >Rowland > > Thanks for you quick Answer! > > Add this to smb.conf > [global] > realm = CARAG.LOCAL > workgroup = CARAG > netbios name = SRVCAR005 > security = domain > vfs objects = acl_xattr > > idmap config * : backend = tdb > idmap config * : range 10000-199999 > idmap config DOMAIN : backend = autorid > idmap config DOMAIN : range = 200000-2147483647 > > [USERHOME] > path = /shares/Userhome/ > read only = no > > And now the SAMBA Service will not start anymore.... > > root at srvcar005:/home/caragadm# systemctl status smbd > ?$B!| smbd.service - Samba SMB Daemon > Loaded: loaded (/lib/systemd/system/smbd.service; enabled; vendor > preset: > enabled) > Active: failed (Result: exit-code) since Mon 2020-12-14 09:34:01 CET; > 11min ago > Docs: man:smbd(8) > man:samba(7) > man:smb.conf(5) > Process: 639 ExecStartPre=/usr/share/samba/update-apparmor-samba-profile > (code=exited, status=0/SUCCESS) > Process: 643 ExecStart=/usr/sbin/smbd --foreground --no-process-group > $SMBDOPTIONS (code=exited, status=255/EXCEPTION) > Main PID: 643 (code=exited, status=255/EXCEPTION) > > Dec 14 09:34:00 srvcar005.carag.local systemd[1]: Starting Samba SMB > Daemon... > Dec 14 09:34:01 srvcar005.carag.local smbd[643]: [2020/12/14 > 09:34:01.312274, 0] > ../source3/auth/auth_util.c:1382(make_new_session_info_guest) > Dec 14 09:34:01 srvcar005.carag.local smbd[643]: create_local_token > failed: NT_STATUS_NO_MEMORY > Dec 14 09:34:01 srvcar005.carag.local smbd[643]: [2020/12/14 > 09:34:01.314853, 0] ../source3/smbd/server.c:2000(main) > Dec 14 09:34:01 srvcar005.carag.local smbd[643]: ERROR: failed to setup > guest info. > Dec 14 09:34:01 srvcar005.carag.local systemd[1]: smbd.service: Main > process > exited, code=exited, status=255/EXCEPTION > Dec 14 09:34:01 srvcar005.carag.local systemd[1]: smbd.service: Failed > with > result 'exit-code'. > Dec 14 09:34:01 srvcar005.carag.local systemd[1]: Failed to start Samba > SMB > Daemon. > root at srvcar005:/home/caragadm# > > > > > Thanks for your help > Regards > Mauri > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba