samba - Aug 2006 - FW: HELP -- Problem with access list on samba 3.0.23b but not on 3.0.20c PDC

-----Original Message-----
From: M. D. Parker [mailto:mike.parker@ga.com]
Sent: Thursday, August 10, 2006 9:02 AM
To: 'samba@lists.samba.org'
Subject: HELP -- Problem with access list on samba 3.0.23b but not on
3.0.20c PDC

I am using samba with NO windbind and a configuration file that has worked
for years stopped working at 3.0.23b.  The affect was that my [netlogon]
area was not being executed.  I do have an access list for this share, but
any share containing the syntax was failing.  The specific line:

valid users = @users, hplab, hpmtr, hpytr

But I did notice that write/admin user lines were treated similarly.

I have a local group called users, and so the manual page states that @users
calls in the UNIX users.  This syntax seems not to do the right thing in
3.0.23b.  Other shares using @<unix-groupname> fail as well.

Since this is a PRODUCTION PDC, this prevents me from upgrading to 3.0.23b.
HELP!

I have a limited level 10 dump and will send the configuration file over if
requested.

=========================================
M. D. Parker
Systems Administrator
General Atomics / Electromagnetic Systems
+1 858 455 2877
mike.parker@ga.com

did you try putting the domain component in front of groups/users?
if you comment out "valid users" it works, right?

micha


M. D. Parker wrote:
>  -----Original Message-----
> From: M. D. Parker [mailto:mike.parker@ga.com]
> Sent: Thursday, August 10, 2006 9:02 AM
> To: 'samba@lists.samba.org'
> Subject: HELP -- Problem with access list on samba 3.0.23b but not on
> 3.0.20c PDC
> 
> I am using samba with NO windbind and a configuration file that has worked
> for years stopped working at 3.0.23b.  The affect was that my [netlogon]
> area was not being executed.  I do have an access list for this share, but
> any share containing the syntax was failing.  The specific line:
> 
> valid users = @users, hplab, hpmtr, hpytr
> 
> But I did notice that write/admin user lines were treated similarly.
> 
> I have a local group called users, and so the manual page states that
@users
> calls in the UNIX users.  This syntax seems not to do the right thing in
> 3.0.23b.  Other shares using @<unix-groupname> fail as well.
> 
> Since this is a PRODUCTION PDC, this prevents me from upgrading to 3.0.23b.
> HELP!
> 
> I have a limited level 10 dump and will send the configuration file over if
> requested.
> 
> =========================================> 
> M. D. Parker
> Systems Administrator
> General Atomics / Electromagnetic Systems
> +1 858 455 2877
> mike.parker@ga.com
> 
>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

M. D. Parker wrote:
> I am using samba with NO windbind and a configuration file 
> that has worked for years stopped working at 3.0.23b.
> The affect was that my [netlogon] area was not being
> executed.  I do have an access list for this share, but
> any share containing the syntax was failing.  The 
> specific line:
> 
> valid users = @users, hplab, hpmtr, hpytr
> 
> But I did notice that write/admin user lines were 
> treated similarly.
> 
> I have a local group called users, and so the manual 
> page states that @users calls in the UNIX users.  This
> syntax seems not to do the right thing in 3.0.23b.
> Other shares using @<unix-groupname> fail as well.
Please send me a level 10 debug log from smbd of the
access failure.  Thanks.




cheers, jerry
====================================================================Samba       
------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE254RIR7qMdg1EfYRAhsBAKCts0tomDhdgSX9eBnwRUcm+cw9hACbBNkq
CgGdf620xWlB1ZCS+zrJrRo=KpKA
-----END PGP SIGNATURE-----

-----Original Message-----
From: M. D. Parker [mailto:mike.parker@ga.com] 
Sent: Thursday, August 10, 2006 9:02 AM
To: 'samba@lists.samba.org'
Subject: HELP -- Problem with access list on samba 3.0.23b but not on
3.0.20c PDC

I am using samba with NO windbind and a configuration file that has worked
for years stopped working at 3.0.23b.  The affect was that my [netlogon]
area was not being executed.  I do have an access list for this share, but
any share containing the syntax was failing.  The specific line:

valid users = @users, hplab, hpmtr, hpytr

But I did notice that write/admin user lines were treated similarly.

I have a local group called users, and so the manual page states that @users
calls in the UNIX users.  This syntax seems not to do the right thing in
3.0.23b.  Other shares using @<unix-groupname> fail as well.

Since this is a PRODUCTION PDC, this prevents me from upgrading to 3.0.23b.
HELP!

I have a limited level 10 dump and will send the configuration file over if
requested.

=========================================
M. D. Parker
Systems Administrator
General Atomics / Electromagnetic Systems
+1 858 455 2877
mike.parker@ga.com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

M. D. Parker wrote:
>  -----Original Message-----
> From: M. D. Parker [mailto:mike.parker@ga.com]
> Sent: Thursday, August 10, 2006 9:02 AM
> To: 'samba@lists.samba.org'
> Subject: HELP -- Problem with access list on samba 3.0.23b but not on
> 3.0.20c PDC
> 
> I am using samba with NO windbind and a configuration file that has worked
> for years stopped working at 3.0.23b.  The affect was that my [netlogon]
> area was not being executed.  I do have an access list for this share, but
> any share containing the syntax was failing.  The specific line:
> 
> valid users = @users, hplab, hpmtr, hpytr
Mike,

I think we have all the issues resolved now.  Could you test
the preliminary 3.0.23c patch at :
http://samba.org/~jerry/patches/patch-3.0.23b-3.0.23c-gwc-1.diffs.gz

And let me know if we still have problems.





cheers, jerry
====================================================================Samba       
------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE7IhUIR7qMdg1EfYRAtLXAKC/F2BdPnmOLd49J/Sox/kB/40XLgCeKtK/
wHTJn+FrU3Aqr+UuOP//cak=WALx
-----END PGP SIGNATURE-----