samba - Feb 2017 - Samba 4.5.3 on HP UX IA64 : smbclient - tree connect failed: NT_STATUS_CONNECTION_DISCONNECTED

Hi  Rowland,

Thanks for your response . I will check on this.
Even i have tried with commenting xattr_tdb:file /var/opt/samba/locks/xattr.tdb
in smb.conf and am getting same issue .

To be more specific whether you're referring ACL as Windows ACL or POSIX
ACL or Extended ACL

In the below command "-U%" refers to nouser and no group ? .
smbclient -L localhost -U%

I am able to get expected output if i specify with User like below .
smbclient -L localhost -UAdministrator

Thanks and Regards,
Silambarasan M

On Thu, Feb 2, 2017 at 6:25 PM, Rowland Penny via samba <
samba at lists.samba.org> wrote:
> On Thu, 2 Feb 2017 17:54:35 +0530
> Silambarasan Madhappan <silambarasan19 at gmail.com> wrote:
>
> > Hi ,
> >
> > FQDN of the DC is Hostname.DomainName .
> >
> > In smb.conf:
> >
> > netbios name = <HostName>
> > realm = <DomainName>    eg: (ww.xx.yy.zz)
> > workgroup = ww
> >
> > In resolve.conf
> > domain <DomainName>
> > nameserver  <IP Address of the DC i.e host IP>
> >
>
> I think all your problems come from this:
>
> xattr_tdb:file = /var/opt/samba/locks/xattr.tdb
>
> You are using 's3fs' on a system that doesn't seem to
understand ACLs.
>
> Is there anyway you can get your IA64 machines to use ACLs ????
> Failing that, I do not think you are going to get a Samba AD DC to
> work on IA64.
>
> Rowland
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On Fri, 3 Feb 2017 10:17:14 +0530
Silambarasan Madhappan <silambarasan19 at gmail.com> wrote:
> Hi  Rowland,
> 
> Thanks for your response . I will check on this.
> Even i have tried with commenting xattr_tdb:file >
/var/opt/samba/locks/xattr.tdb in smb.conf and am getting same issue .
By doing that, you have nowhere to store ACLS.
> 
> To be more specific whether you're referring ACL as Windows ACL or
> POSIX ACL or Extended ACL
The way I look at it, you have Unix permissions (ugo) and everything
else. On Linux you would install the 'acl' package and would then be
able to use setfacl to set ACLs on a dir or file. It is these ACLs that
are being stored (or not) in 'xattr.tdb'. The line in your smb.conf
file was added by the provision because it couldn't find anywhere else
to store the ACLs. Unless your OS as a variant of the 'acl' package, I
cannot recommend using the OS for a Samba AD DC.
 
> 
> In the below command "-U%" refers to nouser and no group ? .
> smbclient -L localhost -U%
> 
> I am able to get expected output if i specify with User like below .
> smbclient -L localhost -UAdministrator
This is probably because 'Administrator' is mapped to 'root' on
a Samba
AD DC.

Rowland

Hi Rowland,

Thanks for your response.

In the below command , Could you please tell let us what is the
functionality of *"-U%" *,
since when i am using the below command only i am facing issue

smbclient -L localhost *-U% *


I have tested with other local users(created using pdbedit) as well and
getting expected result with below smb.conf

# Global parameters
[global]
        netbios name = <HostName>
        realm = <DomainName>
        workgroup = IN
        dns forwarder = 8.8.8.8
        server role = active directory domain controller
        idmap_ldb:use rfc2307 = yes
        xattr_tdb:file = /var/opt/samba/locks/xattr.tdb

[netlogon]
        path = /var/opt/samba/locks/sysvol/<DomainName>/scripts
        read only = No

[sysvol]
        path = /var/opt/samba/locks/sysvol
        read only = No




For eg : I have created the user "silam" using pdbedit

[/opt/samba/bin]# ./smbclient -L localhost -Usilam
Enter silam's password:
Domain=[IN] OS=[Windows 6.1] Server=[Samba 4.5.3-HPE CIFS SERVER 4.5.3.0]

        Sharename       Type      Comment
        ---------       ----      -------
        netlogon        Disk
        sysvol          Disk
        IPC$            IPC       IPC Service (Samba 4.5.3-HPE CIFS SERVER
4.5.3.0)
Domain=[IN] OS=[Windows 6.1] Server=[Samba 4.5.3-HPE CIFS SERVER 4.5.3.0]

        Server               Comment
        ---------            -------

        Workgroup            Master
        ---------            -------
[/opt/samba/bin]#

[/opt/samba/bin]# ./smbclient //localhost/netlogon -Usilam -c 'ls'
Enter silam's password:
Domain=[IN] OS=[Windows 6.1] Server=[Samba 4.5.3-HPE CIFS SERVER 4.5.3.0]
  .                                   D        0  Tue Jan 31 17:53:48 2017
  ..                                  D        0  Tue Jan 31 17:54:30 2017

                26836992 blocks of size 1024. 14803416 blocks available
[/opt/samba/bin]#

Thanks,
Silambarasan M

On Fri, Feb 3, 2017 at 1:47 PM, Rowland Penny via samba <
samba at lists.samba.org> wrote:
> On Fri, 3 Feb 2017 10:17:14 +0530
> Silambarasan Madhappan <silambarasan19 at gmail.com> wrote:
>
> > Hi  Rowland,
> >
> > Thanks for your response . I will check on this.
> > Even i have tried with commenting xattr_tdb:file > >
/var/opt/samba/locks/xattr.tdb in smb.conf and am getting same issue .
>
> By doing that, you have nowhere to store ACLS.
>
> >
> > To be more specific whether you're referring ACL as Windows ACL or
> > POSIX ACL or Extended ACL
>
> The way I look at it, you have Unix permissions (ugo) and everything
> else. On Linux you would install the 'acl' package and would then
be
> able to use setfacl to set ACLs on a dir or file. It is these ACLs that
> are being stored (or not) in 'xattr.tdb'. The line in your smb.conf
> file was added by the provision because it couldn't find anywhere else
> to store the ACLs. Unless your OS as a variant of the 'acl'
package, I
> cannot recommend using the OS for a Samba AD DC.
>
> >
> > In the below command "-U%" refers to nouser and no group ? .
> > smbclient -L localhost -U%
> >
> > I am able to get expected output if i specify with User like below .
> > smbclient -L localhost -UAdministrator
>
> This is probably because 'Administrator' is mapped to
'root' on a Samba
> AD DC.
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>