samba - Sep 1997 - DCE DFS Samba...

Is anyone out there using samba to access DCE DFS global filespace? It
compiled great (samba1.9.17/Solaris2.5.1/gcc2.6.3), but from a pc I don't
seem to have the proper credentials. Samba seems to authenticate me fine
(no login errors) and I can see the /.../cellname, but I can't see
anything in it. I believe I have some credentials (I think I'm getting the
principal credentials for the host?, since smbd is running as root?), or I
wouldn't have access to:

/.../cellname

but I do.

Any help out there?

---from my smb.conf---

[dce_root]
comment = DCE Filespace
path = /.../cellname.ford.com/fs
browseable = no
writeable = yes
guest ok = no

---clip---
                                [Darrin]

 "I have no special gift. I am only passionately curious."
				- A. Einstein

Darrin M. Gorski, Research Computer Systems Network Support
Scientific Research Laboratories, Ford Motor Company
Internet: dgorski@ford.com | Tel/Fax: +1 (313) 248-3753

Hi

I think that just starting the process as root is not enough. You have to start
a dce shell (dce_login or so) and start the smb process in this shell to have
the permissions within the kerberos of DCE.

Regards

Oliver

Sorry for the delay in responding.  I was away for a couple of weeks
and I have been slow in catching up with this list.  I use Samba to
provide access to both AFS and DCE/DFS.  If you are still having trouble,
I can try to help.  I'm running 1.9.16p11 through 1.9.17 on AIX 4.1.5.

The first thing to look for in the logs are the "DCE login succeeded for
principal ..." messages.  If you are not seeing these, or one of the
failure message, then it would seem that dfs_auth is not being called.
"dfs_auth" is the procedure in "password.c" which sets up
and validates a
DCE context.  I have patched the code to fix a bug or two and also to
allow authentication to different cells for different shares.  I keep
meaning to post the diffs but by the time I get around to getting them
ready, a new level of the code has been released.  (Note: This is _not_ a
complaint! ;)

Murray R. Barrett, IBM Toronto Lab, Development Distributed Services
Phone: (416) 448-6054  -  Tieline: 778-6054
Lotus Notes mail: Murray Barrett/Toronto/IBM@IBMCA
IBM internal: murrayb@ibmca  -  Internet: murrayb@ca.ibm.com





samba@samba.anu.edu.au on 09/10/97 04:08:58 PM
Please respond to dgorski@ford.com @ internet
To: samba@samba.anu.edu.au @ internet
cc:
Subject: DCE DFS Samba...



Is anyone out there using samba to access DCE DFS global filespace? It
compiled great (samba1.9.17/Solaris2.5.1/gcc2.6.3), but from a pc I don't
seem to have the proper credentials. Samba seems to authenticate me fine
(no login errors) and I can see the /.../cellname, but I can't see
anything in it. I believe I have some credentials (I think I'm getting the
principal credentials for the host?, since smbd is running as root?), or I
wouldn't have access to:

/.../cellname

but I do.

Any help out there?

---from my smb.conf---

[dce_root]
comment = DCE Filespace
path = /.../cellname.ford.com/fs
browseable = no
writeable = yes
guest ok = no

---clip---
                                [Darrin]

 "I have no special gift. I am only passionately curious."
    - A. Einstein

Darrin M. Gorski, Research Computer Systems Network Support
Scientific Research Laboratories, Ford Motor Company
Internet: dgorski@ford.com | Tel/Fax: +1 (313) 248-3753

Hmm, those are level 0 messages.  Are you sure that you set up the proper
directories and enabled DFS in the make file?

One fix was AIX specific.  The password can not be checked for on the
local machine as it only exists in the DCE registry, so this part of the
code was #ifdef'ed.  Another fix was to keep the call to
"sec_login_valid_and_cert_ident" from zeroing out "(char *)
password".
I'll just got the diffs applied to 17 a while ago.  I'll post them once
I
make sure they apply to 17p1 (just grabbed it today).  Would it be
appropriate to post them to this list or would the bugs list be better?

Murray R. Barrett, IBM Toronto Lab, Development Distributed Services
Phone: (416) 448-6054  -  Tieline: 778-6054
Lotus Notes mail: Murray Barrett/Toronto/IBM@IBMCA
IBM internal: murrayb@ibmca  -  Internet: murrayb@ca.ibm.com