Good morning Stefan,
Hmm, yes, i notice some things also with the debian 9.8 upgrade, that killed my
kopano server.
Was a long night yesterday. :-( but fixed.
Ive done all my servers here and no samba problems.
I do know of more problems with docker.
There is a small difference, i dont know exact were, but i detected that on the
kopano forum.
Kopano builds it packages within docker, the resulting packages did not work
correctly without docker.
This is a systemd setting thats different.
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> Stefan G. Weichinger via samba
> Verzonden: vrijdag 22 februari 2019 9:12
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Debian 9.8 and vanbelle-repos
>
> Am 21.02.19 um 19:19 schrieb Stefan G. Weichinger via samba:
> > Am 21.02.19 um 16:51 schrieb Stefan G. Weichinger via samba:
> >> Am 21.02.19 um 15:49 schrieb L.P.H. van Belle via samba:
> >>> Or...
> >>>
> >>> Set the creator group option.
> >>>
> >>> [Daten]
> >>> comment = Daten
> >>> create mask = 3660
> >>> directory mask = 3770
> >>
> >> did so, they test now. thanks
> >
> > username and groupname aren't "mapped" into stuff like
ls ,
> smbstatus etc
> >
> > nsswitch.conf?
Most probely yes.
>
> and ....
>
> somehow something is wrong here and I can't spot it so far
>
> this morning they couldn't reach samba, after a restart of samba it
> worked again
>
> The only changes this week were:
>
> * upgrade to debian 9.8
> * installation of docker daemon on that server
>
> We faced a problem with backup (Amanda ...) as well, so I disabled
> docker yesterday evening and flushed the iptables. So docker wasn't up
> this morning.
>
> I know of the option to forbid docker to mess with the iptables ... in
> general we ran without any rules on that machine. Will test that.
>
> But why a failure without rules?
I dont know docker so can really tell.
>
> and why that username issue mentioned above?
Thats a good one.
Check, nsswitch.conf idmap.conf resolv.conf again.
First thing i would try.
/etc/idmapd.conf
Set these to settings.
Domain = interal.dnsdomain.tld
Local-Realms = YOURREALM
Reboot
Ive few servers left to update, i'll do that now and report back.
>
> Could debian 9.8 have broken something by changing a library or so?
Not that i know but the fix list was pretty big compaired to previous ones.
But why are you having problems and im not, ill go through some servers here,
see if i can find something.
Greetz,
Louis