samba - Nov 2016 - Clients can't write to group-writable files - plea for help

On 11/17/16 2:06 PM, Alex Crow via samba wrote:
>
>>> My AD account objects all have uidNumber and gidNumber set (we use
>>> that for the Mac systems bound to AD). And the AD usernames match
the
>>> NIS usernames. (the uid/gids match too).
>> This is probably why it works on Ubuntu, but not on Centos, sssd is
>> probably running on the Centos machine, but isn't setup correctly.
>>
>
> sssd I don't think runs by default on Centos 6 or 7 (in my case it
doesn't).
No - sssd is not on in my system.
>
> OP: have you tried using winbind in nsswitch.conf on the member servers
> with rfc2307 enabled in the smb.conf?
>
> It works for us in both Centos 6 and 7, no issues with UID/GID mapping.
No, I haven't. I'll have to try that. As I stated earlier, I resolved 
the issue my implementing a trivial username map script (return $1) but 
have never understood why I had the problem in the first place or how 
this fixes it.

I'll give winbind a bit more of a look.
>
> Cheers
>
> Alex

-- 
--------------------------------------------------------
        Joshua Malone       Systems Administrator
      (jmalone at nrao.edu)    NRAO Charlottesville
         434-296-0263           www.nrao.edu
	434-249-5699 (mobile)
--------------------------------------------------------

On Thu, 17 Nov 2016 14:12:51 -0500
Josh Malone via samba <samba at lists.samba.org> wrote:
> On 11/17/16 2:06 PM, Alex Crow via samba wrote:
> >
> >>> My AD account objects all have uidNumber and gidNumber set (we
use
> >>> that for the Mac systems bound to AD). And the AD usernames
match
> >>> the NIS usernames. (the uid/gids match too).
> >> This is probably why it works on Ubuntu, but not on Centos, sssd
is
> >> probably running on the Centos machine, but isn't setup
correctly.
> >>
> >
> > sssd I don't think runs by default on Centos 6 or 7 (in my case it
> > doesn't).
> 
> No - sssd is not on in my system.
> 
> >
> > OP: have you tried using winbind in nsswitch.conf on the member
> > servers with rfc2307 enabled in the smb.conf?
> >
> > It works for us in both Centos 6 and 7, no issues with UID/GID
> > mapping.
> 
> No, I haven't. I'll have to try that. As I stated earlier, I
resolved
> the issue my implementing a trivial username map script (return $1)
> but have never understood why I had the problem in the first place or
> how this fixes it.
> 
> I'll give winbind a bit more of a look.
> 
From my understanding you seem to have Mac and Windows clients and are
using the Samba machine as a fileserver. If the windows machines are
joined to a domain, then you will probably be better off joining the
Samba machine to the domain, this way you will not need the user map. 

It might help if you could explain your setup, if it is different
from the above and a copy of your smb.conf would help as well.

Rowland

> From my understanding you seem to have Mac and Windows clients and are
> using the Samba machine as a fileserver. If the windows machines are
> joined to a domain, then you will probably be better off joining the
> Samba machine to the domain, this way you will not need the user map. 
>
> It might help if you could explain your setup, if it is different
> from the above and a copy of your smb.conf would help as well.
>
> Rowland
>   
>
>
Didn't even consider that as a possibility (I saw the words "member
server" that implied to be that the server was already joined. TBH I now
have no idea what the OP's setup is...

Alex
--
This message is intended only for the addressee and may contain
confidential information. Unless you are that person, you may not
disclose its contents or use it in any way and are requested to delete
the message along with any attachments and notify us immediately.
This email is not intended to, nor should it be taken to, constitute advice.
The information provided is correct to our knowledge & belief and must not
be used as a substitute for obtaining tax, regulatory, investment, legal or
any other appropriate advice.

"Transact" is operated by Integrated Financial Arrangements Ltd.
29 Clement's Lane, London EC4N 7AE. Tel: (020) 7608 4900 Fax: (020) 7608
5300.
(Registered office: as above; Registered in England and Wales under
number: 3727592). Authorised and regulated by the Financial Conduct
Authority (entered on the Financial Services Register; no. 190856).