samba - Dec 2002 - Has anybody got ACL to work w/ debian, winbindd in a w2k mixed domain?

Im seriously thinking about changing dist. due to acl won't work as they 
should with debian woody. Ppl also tell me this is because of some bug in 
debian. So, as the subject says, anybody got acl to work w/ debian 3, 
winbindd in a domain? If not, hello redhat..

Jacob

_________________________________________________________________
Protect your PC - get McAfee.com VirusScan Online 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

Hello,

I have for some time been using samba to mount one of
my NT directories to a Red Hat Linux box.  It's Red
Hat 7.2 running kernal 2.4.7-10.  I've recently
replaced my NT installation with Win2000 and now I'm
having some difficulties.  The command I've always
issued is:

mount -t smbfs -o username=jrizer/MyDomain
//MyMachine/projects /mnt/MyMachine

Now when I issue this command I get the following
error:

1729: tree connect failed: ERRDOS - Errnosuchshare
(You specified an invalid share name)

It seems that it can't locate the projects directory.

If instead I replace //MyMachine/projects with
//MyMachine/c$ and replace jrizer with Administrator
I'm able to mount my c drive but only
certain subdirectories are present in the mount.

For example 'ls -l /mnt/MyMachine' only displays
certain of the subdirectories which actually exist. 
The ones which are displayed all seem to be part of
the standard windows installation.  For example,
'Patches', 'Program Files', and 'RECYCLED' are all
present, but none of the directories I've created are.
 I can't seem to figure out what is the
differentiating factor so I can modify the 'projects'
directory accordingly. Does anyone know what my
problem might be or how I can solve it?  I've been
banging my head against this one for about a week now.
I apologize for being so long winded :)

-Jason


__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com

On Sun, 08 Dec 2002 23:06:45 +0000
"Jacob Malmberg" <thundercall1@hotmail.com> wrote:
> Ppl also tell me this is because of some bug in 
> debian. So, as the subject says, anybody got acl to work w/ debian 3, 
> winbindd in a domain?
I wrote down my process of getting XFS and Samba-with-ACL working with
Debian 3 here:  http://homex.subnet.at/~max/comp-12_xfs.php
Mind: I did not play 'round with winbindd.

So long,
Max

-- 
The first time any man's freedom is trodden on, we're all damaged.
                       <Cpt. Picard, "The Drumhead", StarTrek
TNG>

http://homex.subnet.at/~max/

----- Original Message -----
From: "Jacob Malmberg" <thundercall1@hotmail.com>
To: <samba@lists.samba.org>
Sent: Sunday, December 08, 2002 11:06 PM
Subject: [Samba] Has anybody got ACL to work w/ debian, winbindd in a w2k
mixed domain?

> Im seriously thinking about changing dist. due to acl won't work as
they
> should with debian woody. Ppl also tell me this is because of some bug in
> debian. So, as the subject says, anybody got acl to work w/ debian 3,
> winbindd in a domain? If not, hello redhat..
>
> Jacob
>

Nope been trying for quite a while, got winbindd to work fine on it's own
but no cigar with ACL's

Can't even get Debian to run SMP properly..

I have got the kernel running but it still only shows 1 CPU, redhat
installed SMP itself and it works..

Might have to give up on Woody :(

Shaolin

Neat. How did you do that, any how-to or something? Im really stuck with 
this problem. Those sid packages you are talking about, what are those and 
where do I find them. I hope you help me out on this one as Im really 
bugged.

regards,
Jacob





>From: "Anthony J. Breeds-Taurima" <tony@cantech.net.au>
>To: Jacob Malmberg <thundercall1@hotmail.com>
>CC: samba@lists.samba.org
>Subject: Re: [Samba] Has anybody got ACL to work w/ debian, winbindd in a 
>w2k mixed domain?
>Date: Mon, 9 Dec 2002 14:56:13 +0800 (WST)
>
>On Mon, 9 Dec 2002, Markus Amersdorfer wrote:
>
> > On Sun, 08 Dec 2002 23:06:45 +0000
> > "Jacob Malmberg" <thundercall1@hotmail.com> wrote:
> >
> > > Ppl also tell me this is because of some bug in
> > > debian. So, as the subject says, anybody got acl to work w/
debian 3,
> > > winbindd in a domain?
> >
> > I wrote down my process of getting XFS and Samba-with-ACL working with
> > Debian 3 here:  http://homex.subnet.at/~max/comp-12_xfs.php
> > Mind: I did not play 'round with winbindd.
>
>
>Sorry I missed the original post.
>
>Yes I have gotten samba 2.2.7 working with ACL's (ext3) and winbindd on
a
>woody box with <12 sid packaages.
>
>
>Yours Tony
>
>    Jan 22-25 2003           Linux.Conf.AU            http://linux.conf.au/
>		  The Australian Linux Technical Conference!

_________________________________________________________________
Add photos to your e-mail with MSN 8. Get 2 months FREE*. 
http://join.msn.com/?page=features/featuredemail

I dont get the #1-part. Can you please explain a little more in detail what 
you add to sources.list? Also, I dont have /etc/apt/preferences. Can I just 
make one with the contents of the one you pasted here?

And the #3:
I mount /dev/hda1 as /mnt/asd with this line:

mount -t ext2 -o acl -o user_xattr /dev/hda1 /mnt/asd/

setfacl works as a charm on /mnt/asd after that.
However, if I mount the partition with /home/ and /lib/ and all the other 
stuff with the line:
mount -t ext2 -o acl -o user_xattr /dev/hda2 /mnt/hdd/

Then setfacl returns this:
setfacl: directory/file: Operation not supported.
I set the acl by the command setfacl -m u:user:rwx /path. I used to run 
2.4.20 before you mailed me with the same result so I gave your solution a 
shot with the same result. What am I doing wrong? I have all the different 
packages installed...

regards,
Jacob




>From: "Anthony J. Breeds-Taurima" <tony@cantech.net.au>
>To: Jacob Malmberg <thundercall1@hotmail.com>
>CC: samba@lists.samba.org
>Subject: Re: [Samba] Has anybody got ACL to work w/ debian, winbindd in a 
>w2k mixed domain?
>Date: Tue, 10 Dec 2002 10:07:43 +0800 (WST)
>
>On Mon, 9 Dec 2002, Jacob Malmberg wrote:
>
> > Neat. How did you do that, any how-to or something? Im really stuck
with
> > this problem. Those sid packages you are talking about, what are those
>and
> > where do I find them. I hope you help me out on this one as Im really
> > bugged.
>
>I can tell you roughly what I did.  If you need clarification then don't
>hesitate to ask.
>
>0) Install woody to your satisfaction.
>
>1) Modified my /etc/apt/preferences file to:
>    ---
>    Package: *
>    Pin: release l=Debian-Security
>    Pin-Priority: 999
>
>    Package: *
>    Pin: release a=stable
>    Pin-Priority: 600
>
>    Package: *
>    Pin: release a=unstable
>    Pin-Priority: 500
>    ---
>    and add the appropriate unstable lines to /etc/apt/sources.list.
>    The only reason I need the unstable lines and the apt preferences is to 
>get
>    the current acl/attr libraries prepackaged.  I don't see that I need
to
>do
>    extra work (especially when a nice DD has done it for me).
>
>2) follow the instructions at: http://acl.bestbits.at/steps.html
>    for a new install.  I only varied it by using the prepackaged .debs
>    for acl/attr (including the -dev packages).
>
>3) After booting into the new kernel (in my case 2.4.19, As set there 
>aren't
>    any patches for 2.4.20) and mounting /home with the "acl"
option.
>    I testing {set,get}facl and all was good.
>
>4) I then build samba from source.   I was doing 2.2.6-pre1 but I've
since
>    upgraded to 2.2.7 with no issues.
>
>5) From there I followed the instructions in "man 8 winbindd" to
get the
>    winbind daemon working and join the domain.  I then tested ssh and
>    {set,get}facl with the DOMAIN_user accounts.  Once I had that working
>    (actually there was nothing to do it just worked)  I tried
>    setting/adding/removing ACLS from a win2k box.
>
>    So far the only problem I've come across is the 8 (of 2000 odd) 
>accounts
>    don't have a an rid to convert name->sid.  This would be more of
a
>problem
>    if the accounts weren't going to be deleted in about 3 days.
>
>I also have enabled quota support in the kernel and samba and that works
>great!
>
>Yours Tony
>
>    Jan 22-25 2003           Linux.Conf.AU            http://linux.conf.au/
>		  The Australian Linux Technical Conference!

_________________________________________________________________
MSN 8 with e-mail virus protection service: 2 months FREE* 
http://join.msn.com/?page=features/virus

Hi again,
Can u give me the exact names of the packages you apt-getted? I need those 
because winbindd is acting strange and I need to find out what the problem 
is.

regads,
Jacob





>From: "Anthony J. Breeds-Taurima" <tony@cantech.net.au>
>To: Jacob Malmberg <thundercall1@hotmail.com>
>CC: samba@lists.samba.org
>Subject: Re: [Samba] Has anybody got ACL to work w/ debian, winbindd in a 
>w2k mixed domain?
>Date: Tue, 10 Dec 2002 10:07:43 +0800 (WST)
>
>On Mon, 9 Dec 2002, Jacob Malmberg wrote:
>
> > Neat. How did you do that, any how-to or something? Im really stuck
with
> > this problem. Those sid packages you are talking about, what are those
>and
> > where do I find them. I hope you help me out on this one as Im really
> > bugged.
>
>I can tell you roughly what I did.  If you need clarification then don't
>hesitate to ask.
>
>0) Install woody to your satisfaction.
>
>1) Modified my /etc/apt/preferences file to:
>    ---
>    Package: *
>    Pin: release l=Debian-Security
>    Pin-Priority: 999
>
>    Package: *
>    Pin: release a=stable
>    Pin-Priority: 600
>
>    Package: *
>    Pin: release a=unstable
>    Pin-Priority: 500
>    ---
>    and add the appropriate unstable lines to /etc/apt/sources.list.
>    The only reason I need the unstable lines and the apt preferences is to 
>get
>    the current acl/attr libraries prepackaged.  I don't see that I need
to
>do
>    extra work (especially when a nice DD has done it for me).
>
>2) follow the instructions at: http://acl.bestbits.at/steps.html
>    for a new install.  I only varied it by using the prepackaged .debs
>    for acl/attr (including the -dev packages).
>
>3) After booting into the new kernel (in my case 2.4.19, As set there 
>aren't
>    any patches for 2.4.20) and mounting /home with the "acl"
option.
>    I testing {set,get}facl and all was good.
>
>4) I then build samba from source.   I was doing 2.2.6-pre1 but I've
since
>    upgraded to 2.2.7 with no issues.
>
>5) From there I followed the instructions in "man 8 winbindd" to
get the
>    winbind daemon working and join the domain.  I then tested ssh and
>    {set,get}facl with the DOMAIN_user accounts.  Once I had that working
>    (actually there was nothing to do it just worked)  I tried
>    setting/adding/removing ACLS from a win2k box.
>
>    So far the only problem I've come across is the 8 (of 2000 odd) 
>accounts
>    don't have a an rid to convert name->sid.  This would be more of
a
>problem
>    if the accounts weren't going to be deleted in about 3 days.
>
>I also have enabled quota support in the kernel and samba and that works
>great!
>
>Yours Tony
>
>    Jan 22-25 2003           Linux.Conf.AU            http://linux.conf.au/
>		  The Australian Linux Technical Conference!

_________________________________________________________________
STOP MORE SPAM with the new MSN 8 and get 3 months FREE*. 
http://join.msn.com/?page=features/junkmail&xAPID=42&PS=47575&PI=7324&DI=7474&SU=
http://www.hotmail.msn.com/cgi-bin/getmsg&HL=1216hotmailtaglines_stopmorespam_3mf

On Fri, 20 Dec 2002, Jacob Malmberg wrote:
> Hi again,
> Can u give me the exact names of the packages you apt-getted? I need those 
> because winbindd is acting strange and I need to find out what the problem 
> is.
  acl attr fileutils libacl1 libattr1


Althought none of them will affect windbinndds behaviour.


Yours Tony

   Jan 22-25 2003           Linux.Conf.AU            http://linux.conf.au/
		  The Australian Linux Technical Conference!