samba - Jan 2011 - Trouble installing SWAT on a Samba 4 Alpha 13 buildonUbuntu Server

>
>
> But when I click apply, the jenfab\finance group dissappears from the 
> list and the changes never save.
What OS are you using? If Linux then make sure share file system is 
xattrs capable and enable it in /etc/fstab (I believe).  If not you 
can use:

posix:eadb = /usr/local/samba/private/eadb.tdb

in global. This does NOT scale well.
>
>
>
> I have tried giving 777 perms on the actual directory on my ubuntu box 
> to troubleshoot, but had same results.  I have also verified that ACL 
> package has been installed on my Ubuntu machine. What user:group do I 
> need to have the actual directory on the ubuntu machine set to?  Any 
> other things I should try?
>
>
> On Mon, Jan 24, 2011 at 11:02 AM, Taylor, Jonn 
> <jonnt at taylortelephone.com> wrote:
>>
>>
>> Go to advanced when changing ACL's.
>>
>> Jonn
>>
>>
>>
>> On 01/24/2011 09:48 AM, Lynn Dixon wrote:
>>> That was the first thing that I had tried.  I created       a share
>>> using smb.conf, then restarted samba.
>>> I can see the share, and navigate down into it from windows.  If I
>>>   create a folder and then rick click from a windows machine and do
>>>    security, I can add groups, but when I try to save, the changes
>>>   just disappear.
>>>
>>> What is the best way to manage ACL's on the share from a
windows
>>> machine?
>>>
>>> Sorry for all the questions, this is my first venture into a Samba
>>>   4 AD environment.  I have used Samba 2/3 i on a workgroup in the
>>>   past and used different security schemes.
>>>
>>>
>>> On Mon, Jan 24, 2011 at 10:37 AM, Taylor,         Jonn 
>>> <jonnt at taylortelephone.com> wrote:
>>>
>>>> This is all you need.
>>>>
>>>>  [test]
>>>>       path = /data/test
>>>>       read only = no
>>>>
>>>> Then use windows to set the acl's.
>>>>
>>>> Jonn
>>>>
>>>> http://wiki.samba.org/index.php/Samba4/HOWTO
>>>>
>>>>
>>>> On 01/24/2011 09:24 AM, Lynn Dixon wrote:
>>>> > Thanks. I tried both paramaters in my smb.conf but I
>>>> got errors when I tried
>>>> > both:
>>>>   >
>>>> > jenfab at dc:~$ sudo /etc/init.d/samba4 restart
>>>> >  * Stopping Samba 4 daemon samba
>>>> >                 [ OK ]
>>>> >  * Starting Samba 4 daemon
>>>> > samba
>>>> Unknown parameter
>>>> > encountered: "valid users"
>>>> > Ignoring unknown parameter "valid users"
>>>> >
>>>>                   [
>>>> > OK ]
>>>> > jenfab at dc:~$ sudo nano /etc/samba/smb.conf
>>>> > jenfab at dc:~$ sudo /etc/init.d/samba4 restart
>>>> >  * Stopping Samba 4 daemon samba
>>>>                   [
>>>> > OK ]
>>>> >  * Starting Samba 4 daemon
>>>> > samba
>>>> Unknown parameter
>>>> > encountered: "write list"
>>>> > Ignoring unknown parameter "write list"
>>>> > Unknown parameter encountered: "read list"
>>>> > Ignoring unknown parameter "read list"
>>>> >
>>>>                   [
>>>> > OK ]
>>>> >
>>>> >
>>>> > On Mon, Jan 24, 2011 at 9:52 AM, <tms3 at tms3.com>
>>>> wrote:
>>>> >
>>>> >>
>>>> >> I am not sure how to use Microsoft AD tools to        
create
>>>> shares and then set
>>>> >> those shares permissable to certain AD groups.        
For
>>>> example, I need to
>>>> >> create
>>>> >> a share called "Finance" and only the people
in
>>>> Finance can read/write to
>>>> >> it. I was hoping to use SWAT to help in creation      
and
>>>> management of those
>>>> >> shares.
>>>> >>
>>>> >> vi smb.conf (or your favorite text editor)
>>>> >>
>>>> >> add
>>>> >>
>>>> >> [finance]
>>>> >>
>>>> >> ...various parameter...
>>>> >> valid users = @finance
>>>> >>
>>>> >> or
>>>> >>
>>>> >> write list = @finance
>>>> >> read list = @finance
>>>> >>
>>>> >>
>>>> >>
>>>> >> I have been using AD tools to manage the domain       
and
>>>> GPO's but I am not sure
>>>> >> how to use them to create shares.
>>>> >>
>>>> >> You can see swat for samba4 here: 
>>>> https://github.com/rvelhote/GSoC-SWAT
>>>> >>
>>>> >> On Mon, Jan 24, 2011 at 5:03 AM, Daniel M?ller
>>>> <mueller at tropenklinik.de
>>>> >>> wrote:
>>>> >> I thought swat is no longer working!!Just use
>>>> Microsoft ads tools and you
>>>> >> are up and running.
>>>> >>
>>>> >> -----------------------------------------------
>>>> >> EDV Daniel M?ller
>>>> >>
>>>> >> Leitung EDV
>>>> >> Tropenklinik Paul-Lechler-Krankenhaus
>>>> >> Paul-Lechler-Str. 24
>>>> >> 72076 T?bingen
>>>> >>
>>>> >> Tel.: 07071/206-463, Fax: 07071/206-499
>>>> >> eMail: mueller at tropenklinik.de
>>>> >> Internet: http://www.tropenklinik.de
>>>> >>
>>>> >> -----------------------------------------------
>>>> >>
>>>> >> -----Urspr?ngliche Nachricht-----
>>>> >> Von: samba-bounces at lists.samba.org 
>>>> [mailto:samba-bounces at lists.samba.org]
>>>> >> Im
>>>> >> Auftrag von Lynn Dixon
>>>> >> Gesendet: Sonntag, 23. Januar 2011 06:39
>>>> >> An: samba at lists.samba.org
>>>> >> Betreff: [Samba] Trouble installing SWAT on a         
Samba 4
>>>> Alpha 13 build on
>>>> >> Ubuntu Server
>>>> >>
>>>> >> Hello all,
>>>> >> I have setup a complete domain using Samba 4 on       
my
>>>> Ubuntu server 32 bit
>>>>  >> machine. I am using the Alpha 13 build (it was
>>>> actually in the Ubuntu
>>>> >> Repos). I am trying to setup swat to make it          
easier
>>>> to manage shares. I
>>>> >> have followed the instructions at 
>>>> https://github.com/rvelhote/GSoC-SWATbut
>>>> >> I am having a few problems.
>>>> >>
>>>> >> When I run ./run I get the following errors:
>>>> >> jenfab at dc:~/GSoC-SWAT$ sudo ./run
>>>> >> Starting subprocess with file monitor
>>>> >> Traceback (most recent call last):
>>>> >>    File "/usr/local/bin/paster", line 9, in 
<module>
>>>> >>      load_entry_point('PasteScript==1.7.3',
>>>> 'console_scripts', 'paster')()
>>>> >>    File               
>>>>
"/usr/lib/pymodules/python2.6/paste/script/command.py",
>>>> line 84, in
>>>> >> run
>>>> >>      invoke(command, command_name, options,           
args[1:])
>>>> >>    File               
>>>>
"/usr/lib/pymodules/python2.6/paste/script/command.py",
>>>> line 123,
>>>> >> in
>>>> >> invoke
>>>> >>      exit_code = runner.run(args)
>>>> >>    File               
>>>>
"/usr/lib/pymodules/python2.6/paste/script/command.py",
>>>> line 218,
>>>> >> in
>>>> >> run
>>>> >>      result = self.command()
>>>> >>    File               
>>>> "/usr/lib/pymodules/python2.6/paste/script/serve.py",
line
>>>>   276, in
>>>> >> command
>>>> >>      relative_to=base, global_conf=vars)
>>>> >>    File               
>>>> "/usr/lib/pymodules/python2.6/paste/script/serve.py",
line
>>>>   313, in
>>>> >> loadapp
>>>> >>      **kw)
>>>> >>    File               
>>>>
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py",
>>>> line 204,
>>>> >> in
>>>> >> loadapp
>>>> >>      return loadobj(APP, uri, name=name, **kw)
>>>> >>    File               
>>>>
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py",
>>>> line 224,
>>>> >> in
>>>> >> loadobj
>>>> >>      global_conf=global_conf)
>>>> >>    File               
>>>>
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py",
>>>> line 248,
>>>> >> in
>>>>  >> loadcontext
>>>> >>      global_conf=global_conf)
>>>> >>    File               
>>>>
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py",
>>>> line 278,
>>>> >> in
>>>> >> _loadconfig
>>>> >>      return loader.get_context(object_type, name,
>>>> global_conf)
>>>> >>    File               
>>>>
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py",
>>>> line 409,
>>>> >> in
>>>> >> get_context
>>>> >>      section)
>>>> >>    File               
>>>>
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py",
>>>> line 431,
>>>> >> in
>>>> >> _context_from_use
>>>> >>      object_type, name=use,              
global_conf=global_conf)
>>>> >>    File               
>>>>
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py",
>>>> line 361,
>>>> >> in
>>>> >> get_context
>>>> >>      global_conf=global_conf)
>>>> >>    File               
>>>>
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py",
>>>> line 248,
>>>> >> in
>>>> >> loadcontext
>>>> >>      global_conf=global_conf)
>>>> >>    File               
>>>>
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py",
>>>> line 285,
>>>> >> in
>>>> >> _loadegg
>>>> >>      return loader.get_context(object_type, name,
>>>> global_conf)
>>>> >>    File               
>>>>
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py",
>>>> line 561,
>>>> >> in
>>>> >> get_context
>>>> >>      object_type, name=name)
>>>> >>    File               
>>>>
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py",
>>>> line 587,
>>>> >> in
>>>> >> find_egg_entry_point
>>>> >>      possible.append((entry.load(), protocol,
entry.name))
>>>> >>    File               
>>>> "/usr/lib/python2.6/dist-packages/pkg_resources.py",
line
>>>>  1954, in
>>>> >> load
>>>> >>      entry = __import__(self.module_name,
>>>> globals(),globals(),
>>>> >> ['__name__'])
>>>> >> ImportError: No module named              
swat.config.middleware
>>>> >>
>>>> >>
>>>>  >> Any suggestions as to where to go from here?
>>>> >> --
>>>> >> To unsubscribe from this list go to the following     
URL
>>>> and read the
>>>> >> instructions:
https://lists.samba.org/mailman/options/samba
>>>> >>
>>>> >>
>>>> >> --
>>>> >>
>>>> >> To unsubscribe from this list go to the following     
URL
>>>> and read the
>>>> >> instructions:
https://lists.samba.org/mailman/options/samba
>>>> >>
>>>> >>
>>>> >>
>>>>
>>>

With the help of John, and tms3, I was able to resolve the problem!

Once I corrected my fstab for /share with acl and user_xattr options, and
remounted the filesystem, that worked perfectly.  Mind you I did have to
delete the old /share/finance folder since it was created without the new
attributes. Its working perfectly now. I am able to use the built-in windows
file ACL tools to configure perms.

BTW, Ubuntu 10.10 uses ext4 by default, but I still had to install attr and
acl packages from the repos as they were not included in the default
install.  once I mounted the filesystem with users_xattr,acl  in fstab, it
worked perfectly.

Thank you for the fast responses and all the help!

On Mon, Jan 24, 2011 at 1:18 PM, <tms3 at tms3.com> wrote:
>
>
>
>
> But when I click apply, the jenfab\finance group dissappears from the list
> and the changes never save.
>
> What OS are you using? If Linux then make sure share file system is xattrs
> capable and enable it in /etc/fstab (I believe).  If not you can use:
>
> posix:eadb = /usr/local/samba/private/eadb.tdb
>
> in global. This does NOT scale well.
>
>
>
> I have tried giving 777 perms on the actual directory on my ubuntu box to
> troubleshoot, but had same results.  I have also verified that ACL package
> has been installed on my Ubuntu machine. What user:group do I need to have
> the actual directory on the ubuntu machine set to?  Any other things I
> should try?
>
> On Mon, Jan 24, 2011 at 11:02 AM, Taylor, Jonn <jonnt at
taylortelephone.com>wrote:
>
>>  Go to advanced when changing ACL's.
>>
>> Jonn
>>
>>
>> On 01/24/2011 09:48 AM, Lynn Dixon wrote:
>>
>> That was the first thing that I had tried.  I created a share using
>> smb.conf, then restarted samba.
>> I can see the share, and navigate down into it from windows.  If I
create
>> a folder and then rick click from a windows machine and do security, I
can
>> add groups, but when I try to save, the changes just disappear.
>>
>> What is the best way to manage ACL's on the share from a windows
machine?
>>
>> Sorry for all the questions, this is my first venture into a Samba 4 AD
>> environment.  I have used Samba 2/3 i on a workgroup in the past and
used
>> different security schemes.
>>
>> On Mon, Jan 24, 2011 at 10:37 AM, Taylor, Jonn <jonnt at
taylortelephone.com
>> > wrote:
>>
>>> This is all you need.
>>>
>>>  [test]
>>>       path = /data/test
>>>       read only = no
>>>
>>> Then use windows to set the acl's.
>>>
>>> Jonn
>>>
>>> http://wiki.samba.org/index.php/Samba4/HOWTO
>>>
>>> On 01/24/2011 09:24 AM, Lynn Dixon wrote:
>>> > Thanks. I tried both paramaters in my smb.conf but I got
errors when I
>>> tried
>>> > both:
>>> >
>>> > jenfab at dc:~$ sudo /etc/init.d/samba4 restart
>>> >  * Stopping Samba 4 daemon samba
>>> >                 [ OK ]
>>> >  * Starting Samba 4 daemon
>>> > samba                                                Unknown
parameter
>>> > encountered: "valid users"
>>> > Ignoring unknown parameter "valid users"
>>> >
>>>  [
>>> > OK ]
>>> > jenfab at dc:~$ sudo nano /etc/samba/smb.conf
>>> > jenfab at dc:~$ sudo /etc/init.d/samba4 restart
>>> >  * Stopping Samba 4 daemon samba
>>>   [
>>> > OK ]
>>> >  * Starting Samba 4 daemon
>>> > samba                                                Unknown
parameter
>>> > encountered: "write list"
>>> > Ignoring unknown parameter "write list"
>>> > Unknown parameter encountered: "read list"
>>> > Ignoring unknown parameter "read list"
>>> >
>>>  [
>>> > OK ]
>>> >
>>> >
>>> > On Mon, Jan 24, 2011 at 9:52 AM, <tms3 at tms3.com>
wrote:
>>> >
>>> >>
>>> >> I am not sure how to use Microsoft AD tools to create
shares and then
>>> set
>>> >> those shares permissable to certain AD groups. For
example, I need to
>>> >> create
>>> >> a share called "Finance" and only the people in
Finance can read/write
>>> to
>>> >> it. I was hoping to use SWAT to help in creation and
management of
>>> those
>>> >> shares.
>>> >>
>>> >> vi smb.conf (or your favorite text editor)
>>> >>
>>> >> add
>>> >>
>>> >> [finance]
>>> >>
>>> >> ...various parameter...
>>> >> valid users = @finance
>>> >>
>>> >> or
>>> >>
>>> >> write list = @finance
>>> >> read list = @finance
>>> >>
>>> >>
>>> >>
>>> >> I have been using AD tools to manage the domain and
GPO's but I am not
>>> sure
>>> >> how to use them to create shares.
>>> >>
>>> >> You can see swat for samba4 here:
>>> https://github.com/rvelhote/GSoC-SWAT
>>> >>
>>> >> On Mon, Jan 24, 2011 at 5:03 AM, Daniel M?ller <
>>> mueller at tropenklinik.de
>>> >>> wrote:
>>> >> I thought swat is no longer working!!Just use Microsoft
ads tools and
>>> you
>>> >> are up and running.
>>> >>
>>> >> -----------------------------------------------
>>> >> EDV Daniel M?ller
>>> >>
>>> >> Leitung EDV
>>> >> Tropenklinik Paul-Lechler-Krankenhaus
>>> >> Paul-Lechler-Str. 24
>>> >> 72076 T?bingen
>>> >>
>>> >> Tel.: 07071/206-463, Fax: 07071/206-499
>>> >> eMail: mueller at tropenklinik.de
>>> >> Internet: http://www.tropenklinik.de
>>> >>
>>> >> -----------------------------------------------
>>> >>
>>> >> -----Urspr?ngliche Nachricht-----
>>> >> Von: samba-bounces at lists.samba.org [mailto:
>>> samba-bounces at lists.samba.org]
>>> >> Im
>>> >> Auftrag von Lynn Dixon
>>> >> Gesendet: Sonntag, 23. Januar 2011 06:39
>>> >> An: samba at lists.samba.org
>>> >> Betreff: [Samba] Trouble installing SWAT on a Samba 4
Alpha 13 build
>>> on
>>> >> Ubuntu Server
>>> >>
>>> >> Hello all,
>>> >> I have setup a complete domain using Samba 4 on my Ubuntu
server 32
>>> bit
>>> >> machine. I am using the Alpha 13 build (it was actually in
the Ubuntu
>>> >> Repos). I am trying to setup swat to make it easier to
manage shares.
>>> I
>>> >> have followed the instructions at
>>> https://github.com/rvelhote/GSoC-SWATbut
>>> >> I am having a few problems.
>>> >>
>>> >> When I run ./run I get the following errors:
>>> >> jenfab at dc:~/GSoC-SWAT$ sudo ./run
>>> >> Starting subprocess with file monitor
>>> >> Traceback (most recent call last):
>>> >>    File "/usr/local/bin/paster", line 9, in
<module>
>>> >>      load_entry_point('PasteScript==1.7.3',
'console_scripts',
>>> 'paster')()
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/script/command.py", line
>>> 84, in
>>> >> run
>>> >>      invoke(command, command_name, options, args[1:])
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/script/command.py", line
>>> 123,
>>> >> in
>>> >> invoke
>>> >>      exit_code = runner.run(args)
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/script/command.py", line
>>> 218,
>>> >> in
>>> >> run
>>> >>      result = self.command()
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/script/serve.py", line
>>> 276, in
>>> >> command
>>> >>      relative_to=base, global_conf=vars)
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/script/serve.py", line
>>> 313, in
>>> >> loadapp
>>> >>      **kw)
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py", line
>>> 204,
>>> >> in
>>> >> loadapp
>>> >>      return loadobj(APP, uri, name=name, **kw)
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py", line
>>> 224,
>>> >> in
>>> >> loadobj
>>> >>      global_conf=global_conf)
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py", line
>>> 248,
>>> >> in
>>> >> loadcontext
>>> >>      global_conf=global_conf)
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py", line
>>> 278,
>>> >> in
>>> >> _loadconfig
>>> >>      return loader.get_context(object_type, name,
global_conf)
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py", line
>>> 409,
>>> >> in
>>> >> get_context
>>> >>      section)
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py", line
>>> 431,
>>> >> in
>>> >> _context_from_use
>>> >>      object_type, name=use, global_conf=global_conf)
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py", line
>>> 361,
>>> >> in
>>> >> get_context
>>> >>      global_conf=global_conf)
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py", line
>>> 248,
>>> >> in
>>> >> loadcontext
>>> >>      global_conf=global_conf)
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py", line
>>> 285,
>>> >> in
>>> >> _loadegg
>>> >>      return loader.get_context(object_type, name,
global_conf)
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py", line
>>> 561,
>>> >> in
>>> >> get_context
>>> >>      object_type, name=name)
>>> >>    File
"/usr/lib/pymodules/python2.6/paste/deploy/loadwsgi.py", line
>>> 587,
>>> >> in
>>> >> find_egg_entry_point
>>> >>      possible.append((entry.load(), protocol, entry.name))
>>> >>    File
"/usr/lib/python2.6/dist-packages/pkg_resources.py", line
>>> 1954, in
>>> >> load
>>> >>      entry = __import__(self.module_name,
globals(),globals(),
>>> >> ['__name__'])
>>> >> ImportError: No module named swat.config.middleware
>>> >>
>>> >>
>>> >> Any suggestions as to where to go from here?
>>> >> --
>>> >> To unsubscribe from this list go to the following URL and
read the
>>> >> instructions:
https://lists.samba.org/mailman/options/samba
>>> >>
>>> >>
>>> >> --
>>> >>
>>> >> To unsubscribe from this list go to the following URL and
read the
>>> >> instructions:
https://lists.samba.org/mailman/options/samba
>>> >>
>>> >>
>>> >>
>>>
>>
>>
>
>