samba - Sep 2018 - Upgrade 4.8 to 4.9 with Backend-Change to lmdb?

Hi Rowland,
>>> - Option 1: ( my personal choice, because this keeps thing in sight
>>> )
>>> - ( Domain Member settings and/or Stand-Alone installs )
>>> - Configure smb.conf  ( make sure you have configured the idmap
>>> settings. ) # - You must set a DOMAIN backend configuration, see
>>> below idmap config * : backend = tdb
>>>        idmap config * : range = 3000-7999
>>>
>>> - Domain Member only setting, choose one of these 2, read and
>>> choose. https://wiki.samba.org/index.php/Idmap_config_ad
>>> https://wiki.samba.org/index.php/Idmap_config_rid
>>
>> I have always been configuring a tdb backend for builtin users aside
>> from the rfc2307 or rid backend for domain users (like in [1]). In
>> which documentation is it missing this piece of information?
>
> I will turn that on its head ;-)
do as you please as long as it is constructive. :-)
> If you read 'man idmap_tdb', you will find this:
>
>  [global]
>  # "backend = tdb" is redundant here since it is the default
>  idmap config * : backend = tdb
>  idmap config * : range = 1000000-2000000
>
> Which means that you do not have to add the 'backend' line.
one more line for more clarity is not a hefty price to pay. One of the 
objective of a tutorial is to help the reader understand what he does!
>>
>> Cheers,
>>
>> Denis
>>
>> [1]
>>
https://dev.tranquil.it/wiki/SAMBA_-_Installation_d%27un_nouveau_serveur_de_fichiers_Samba4#Configuration_smb.conf
>
> Your wiki page needs updating, all supported Samba versions now use a
> slightly different 'ad' setup and I wish I knew who thought it was
good
> idea to recommend putting the '*' domain above the 'DOMAIN'
domain.
Well, sorry to disappoint you but that wiki configuration does work with 
current Samba version. And it does not matter to have the "catchall" 
idmap configuration above or under the domain idmap configuration.

Cheers,

Denis

PS : by the way I am wondering what fantastic job you have that allows 
you to spend so much time on the mailing list :-) ? I'm sure doing Samba 
mailing list posting all day long does not "put butter in the spinach"
(like we frogs say here) !
>
> Rowland
>
-- 
Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, bâtiment A
12 avenue Jules Verne
44230 Saint Sébastien sur Loire
tel : +33 (0) 2.40.97.57.55
http://www.tranquil.it

Samba install wiki for Frenchies : https://dev.tranquil.it
WAPT, software deployment made easy : https://wapt.fr

On Thu, 27 Sep 2018 10:12:56 +0200
Denis Cardon <dcardon at tranquil.it> wrote:
> Hi Rowland,
> 
> >>> - Option 1: ( my personal choice, because this keeps thing in
> >>> sight )
> >>> - ( Domain Member settings and/or Stand-Alone installs )
> >>> - Configure smb.conf  ( make sure you have configured the
idmap
> >>> settings. ) # - You must set a DOMAIN backend configuration,
see
> >>> below idmap config * : backend = tdb
> >>>        idmap config * : range = 3000-7999
> >>>
> >>> - Domain Member only setting, choose one of these 2, read and
> >>> choose. https://wiki.samba.org/index.php/Idmap_config_ad
> >>> https://wiki.samba.org/index.php/Idmap_config_rid
> >>
> >> I have always been configuring a tdb backend for builtin users
> >> aside from the rfc2307 or rid backend for domain users (like in
> >> [1]). In which documentation is it missing this piece of
> >> information?
> >
> > I will turn that on its head ;-)
> 
> do as you please as long as it is constructive. :-)
> 
> > If you read 'man idmap_tdb', you will find this:
> >
> >  [global]
> >  # "backend = tdb" is redundant here since it is the default
> >  idmap config * : backend = tdb
> >  idmap config * : range = 1000000-2000000
> >
> > Which means that you do not have to add the 'backend' line.
> 
> one more line for more clarity is not a hefty price to pay. One of
> the objective of a tutorial is to help the reader understand what he
> does!
Not saying you shouldn't add it and like you, I always add it if
required, but what I was trying to point out to Louis is, you don't
need to add it to a standalone server, it is already there, even if you
cannot see it ;-)

The problem that Louis has with installing samba, doesn't have anything
to do with those lines. It is that smbd will not run on a standalone
server if winbind is already running, stop winbind, make no changes
(i.e. don't add the lines Louis suggest) and smbd will start without
error.
> 
> >>
> >> Cheers,
> >>
> >> Denis
> >>
> >> [1]
> >>
https://dev.tranquil.it/wiki/SAMBA_-_Installation_d%27un_nouveau_serveur_de_fichiers_Samba4#Configuration_smb.conf
> >
> > Your wiki page needs updating, all supported Samba versions now use
> > a slightly different 'ad' setup and I wish I knew who thought
it
> > was good idea to recommend putting the '*' domain above the
> > 'DOMAIN' domain.
> 
> Well, sorry to disappoint you but that wiki configuration does work
> with current Samba version. And it does not matter to have the
> "catchall" idmap configuration above or under the domain idmap
> configuration.
I was referring to the 'ad' lines and I refer you to my earlier
response to one of Louis's posts, in my opinion, it is a bad idea to
put the '*' domain above the 'DOMAIN' domain. However, it is
your wiki
and you can do as you like.
> 
> Cheers,
> 
> Denis
> 
> PS : by the way I am wondering what fantastic job you have that
> allows you to spend so much time on the mailing list :-) ? I'm sure
> doing Samba mailing list posting all day long does not "put butter in
> the spinach" (like we frogs say here) !
Try being classified as disabled due to two damaged vertebrae and not
being able to move around a lot.

Rowland

Hai,  
Small comment here.. 
> Not saying you shouldn't add it and like you, I always add it if
> required, but what I was trying to point out to Louis is, you don't
> need to add it to a standalone server, it is already there, 
> even if you cannot see it ;-)
In Debian i noticed the start up orders wanting to start winbind before smbd and
which we can change to avoid this.
Im now testing a bit to these orders as other temp workaround.
But without risking a not starting smbd if winbind is running. 
Im testing with. 

[Unit]
PartOfBindsTo
[Service]
Restart=on-failure
RestartSec=30s
> 
> The problem that Louis has with installing samba, doesn't have anything
> to do with those lines. It is that smbd will not run on a standalone
> server if winbind is already running, stop winbind, make no changes
> (i.e. don't add the lines Louis suggest) and smbd will start without
> error.
If you dont install winbind .. 

Greetz, 

Louis

On Thu, 27 Sep 2018 12:04:04 +0200
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:
> Hai,  
> Small comment here.. 
> 
> > Not saying you shouldn't add it and like you, I always add it if
> > required, but what I was trying to point out to Louis is, you
don't
> > need to add it to a standalone server, it is already there, 
> > even if you cannot see it ;-)
> 
> In Debian i noticed the start up orders wanting to start winbind
> before smbd and which we can change to avoid this. Im now testing a
> bit to these orders as other temp workaround. But without risking a
> not starting smbd if winbind is running. Im testing with. 
> 
> [Unit]
> PartOf> BindsTo> 
> [Service]
> Restart=on-failure
> RestartSec=30s
> 
> > 
> > The problem that Louis has with installing samba, doesn't have
> > anything to do with those lines. It is that smbd will not run on a
> > standalone server if winbind is already running, stop winbind, make
> > no changes (i.e. don't add the lines Louis suggest) and smbd will
> > start without error.
> 
> If you dont install winbind .. 
Well, yes, but if you are not going to set up a standalone server, you
need winbind. I suppose it is more of an annoyance than a problem, you
would probably stop smbd, nmbd and winbind before going any further.
However, you should be able to run winbind on a standalone server, just
having winbind running shouldn't stop smbd starting.

Rowland

Hi Louis,

you could use the systemd "requires=" directive to enforce, that
samba/smbd is running before winbind.

Hth

Oliver


On 27.09.2018 12:04, L.P.H. van Belle via samba wrote:
> Hai,  
> Small comment here.. 
>
>> Not saying you shouldn't add it and like you, I always add it if
>> required, but what I was trying to point out to Louis is, you don't
>> need to add it to a standalone server, it is already there, 
>> even if you cannot see it ;-)
> In Debian i noticed the start up orders wanting to start winbind before
smbd and which we can change to avoid this.
> Im now testing a bit to these orders as other temp workaround.
> But without risking a not starting smbd if winbind is running. 
> Im testing with. 
>
> [Unit]
> PartOf> BindsTo>
> [Service]
> Restart=on-failure
> RestartSec=30s
>
>> The problem that Louis has with installing samba, doesn't have
anything
>> to do with those lines. It is that smbd will not run on a standalone
>> server if winbind is already running, stop winbind, make no changes
>> (i.e. don't add the lines Louis suggest) and smbd will start
without
>> error.
> If you dont install winbind .. 
>
> Greetz, 
>
> Louis
>
>