Georg.Biberger at partner.bmw.de
2018-Jun-07 09:59 UTC
[Samba] Lots of failed message in smbd.log: NT_STATUS_OBJECT_NAME_NOT_FOUND
Attached smb.conf now inline:
[global]
security = ADS
workgroup = MUC
realm = europe.bmw.corp
netbios name = eda
netbios aliases = lpeda1 lpeda1.muc
log file = /lfs/EDA/DATA/SOFTWARE/samba/var/log/samba/%m.log
log level = 2
# Default ID mapping configuration for local BUILTIN accounts
# and groups on a domain member. The default (*) domain:
# - must not overlap with any domain ID mapping configuration!
# - must use a read-write-enabled back end, such as tdb.
# - Adding just this is not enough
# - You must set a DOMAIN backend configuration, see below
idmap config * : backend = tdb
idmap config * : range = 79846-500000000
template shell = /bin/bash
template homedir = /home/%U
winbind use default domain = true
winbind offline logon = false
winbind nss info = rfc2307
winbind enum users = no
winbind enum groups = no
server string = EDA_Archiv
username map=/lfs/EDA/DATA/SOFTWARE/samba/etc/usermap
follow symlinks = yes
wide links = yes
unix extensions = no
unix charset = UTF-8
kerberos method = secrets and keytab
#
[austausch]
comment = EDA Austausch
directory = /lfs/EDA/DATA/SHARES/austausch/%U
browseable = no
posix locking = no
writable = yes
directory mask = 0700
create mask = 0600
force user = qqeda11
force group = eda1
#
[tools]
comment = EDA Tools
directory = /lfs/EDA/DATA/SHARES/tools/%U
browseable = no
posix locking = no
writable = yes
directory mask = 0700
create mask = 0600
force user = qqeda11
force group = eda1
#
[temp]
comment = EDA Archive Temp
directory = /lfs/EDA/DATA/SHARES/temp/%U
browseable = no
writable = no
directory mask = 0700
create mask = 0600
force user = qqeda11
force group = eda1
veto files = /_meta_eda_.xml/_EDA_HIDDEN_/
#
[t]
comment = EDA Archive Temp
directory = /lfs/EDA/DATA/SHARES/temp/%U
browseable = no
writable = no
directory mask = 0700
create mask = 0600
force user = qqeda11
force group = eda1
veto files = /_meta_eda_.xml/_EDA_HIDDEN_/
#
[favoriten]
comment = EDA Archive Favoriten
directory = /lfs/EDA/DATA/SHARES/favorites/%U
browseable = no
writable = no
directory mask = 0700
create mask = 0600
force user = qqeda11
force group = eda1
veto files = /_meta_eda_.xml/_EDA_HIDDEN_/
#
[favorites]
comment = EDA Archive Favoriten
directory = /lfs/EDA/DATA/SHARES/favorites/%U
browseable = no
writable = no
directory mask = 0700
create mask = 0600
force user = qqeda11
force group = eda1
veto files = /_meta_eda_.xml/_EDA_HIDDEN_/
#
[public]
comment = EDA Archive Public
directory = /lfs/EDA/DATA/SHARES/public
read only = true
force user = qqeda11
force group = eda1
#
[hsm]
comment = EDA Archive IN HSM
directory = /lfs/EDA/DATA/SHARES/hsm/%U
browseable = no
posix locking = no
writable = yes
directory mask = 0700
create mask = 0600
force user = qqeda11
force group = eda1
#
[vdc]
comment = EDA Archive VDC
directory = /lfs/EDA/DATA/SHARES/vdc/%U
browseable = no
writable = no
directory mask = 0700
create mask = 0600
force user = qqeda11
force group = eda1
veto files = /_meta_eda_.xml/_EDA_HIDDEN_/
#
[vdce]
comment = EDA Archive VDC Export
directory = /lfs/EDA/DATA/SHARES/vdce/%U
browseable = no
writable = yes
directory mask = 0700
create mask = 0600
force user = qqeda11
force group = eda1
#
Georg
Rowland Penny
2018-Jun-07 10:17 UTC
[Samba] Lots of failed message in smbd.log: NT_STATUS_OBJECT_NAME_NOT_FOUND
On Thu, 7 Jun 2018 09:59:13 +0000 "Georg.Biberger--- via samba" <samba at lists.samba.org> wrote:> Attached smb.conf now inline: > [global] > security = ADS > workgroup = MUC > realm = europe.bmw.corp > netbios name = eda > netbios aliases = lpeda1 lpeda1.muc > log file = /lfs/EDA/DATA/SOFTWARE/samba/var/log/samba/%m.log > log level = 2 > > # Default ID mapping configuration for local BUILTIN accounts > # and groups on a domain member. The default (*) domain: > # - must not overlap with any domain ID mapping configuration! > # - must use a read-write-enabled back end, such as tdb. > # - Adding just this is not enough > # - You must set a DOMAIN backend configuration, see below > idmap config * : backend = tdb > idmap config * : range = 79846-500000000Did you read the commented (#) lines above ? If you did, did you understand the last one: 'You must set a DOMAIN backend configuration, see below' It looks like you want to use the winbind 'rid' backend, so I would expect lines similar to these: idmap config * : backend = tdb idmap config * : range = 3999-7999 idmap config MUC : backend = rid idmap config MUC : range = 79846-500000000 Rowland