Hi, I am trying to get some integration tests running in CI with a software uses samba4 AD for authentication. So basically I would like spin up a build and provision a samba4 AD with some test users and groups non-interactively and test commits and pull requests against the AD. On 11/14/19 8:16 AM, Andrew Bartlett wrote:> On Thu, 2019-11-14 at 06:19 +0000, Ghassan Elrayah via samba wrote: >> Hi, >> >> I am trying to create a build on CircleCi with smaba4 AD. It seems >> the filesytem doesn't support ACL's, which s3fs requires. I get the >> folowing error: > Can you explain a bit more about what you are doing with CircleCI? > > This will help me understand how best to advise you. > >> ERROR(<class 'samba.provision.ProvisioningError'>): Provision >> failed - ProvisioningError: Your filesystem or build does not support >> posix ACLs, which s3fs requires. Try the mounting the filesystem >> with the 'acl' option. >> File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", >> line 538, in run >> backend_store=backend_store) >> File "/usr/lib/python2.7/dist- >> packages/samba/provision/__init__.py", line 2316, in provision >> backend_store=backend_store) >> File "/usr/lib/python2.7/dist- >> packages/samba/provision/__init__.py", line 1921, in provision_fill >> names.domaindn, lp, use_ntvfs) >> File "/usr/lib/python2.7/dist- >> packages/samba/provision/__init__.py", line 1649, in setsysvolacl >> raise ProvisioningError("Your filesystem or build does not >> support posix ACLs, which s3fs requires. " >> Exited with code 255 >> >> I tried to provision the doamin with the options --use-ntvfs and -- >> with-ntvfs-fileserver, but the options seems to be removed, and I get >> the error: >> >> samba-tool domain provision: error: no such option > It can be compiled in, but I need to understand your use case first to > best advise you. > > To give you some hope: if, for example, you setting up Samba to support > testing the LDAP backed of another service then sysvol ACLs are > entirely unimportant and you can either use the NTVFS file server or > fake the ACLs in smbd. > > Thanks, > > Andrew Bartlett >-- Beste Gr??e Ghassan Elrayah Mail: ghassan.elrayah at live.de
On Thu, 2019-11-14 at 07:30 +0000, Ghassan Elrayah wrote:> Hi, > > I am trying to get some integration tests running in CI with a > software uses samba4 AD for authentication. So basically I would like > spin up a build and provision a samba4 AD with some test users and > groups non-interactively and test commits and pull requests against > the AD.Then --use-ntvfs and compile with --with-ntvfs-fileserver is the easy option. That will go away some day, then you can follow the examples from our how we set up our selftest stuff. run 'make testenv' and look in st/ad_dc/lib/server.conf. You may need --enable-developer for this to work. Thanks for using Samba and all the best! Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Thanks a lot for the reference how to make the regtest. One last question please, if understand this correctly, the --use-ntvfs isnot available by default when installing the Debian package, so I need to compile samba with --with-ntvfs-fileserver to make the option available? On 11/14/19 8:52 AM, Andrew Bartlett wrote:> On Thu, 2019-11-14 at 07:30 +0000, Ghassan Elrayah wrote: >> Hi, >> >> I am trying to get some integration tests running in CI with a >> software uses samba4 AD for authentication. So basically I would like >> spin up a build and provision a samba4 AD with some test users and >> groups non-interactively and test commits and pull requests against >> the AD. > Then --use-ntvfs and compile with --with-ntvfs-fileserver is the easy > option. > > That will go away some day, then you can follow the examples from our > how we set up our selftest stuff. run 'make testenv' and look in > st/ad_dc/lib/server.conf. > > You may need --enable-developer for this to work. > > Thanks for using Samba and all the best! > > Andrew Bartlett >-- Beste Gr??e Ghassan Elrayah Mail: ghassan.elrayah at live.de
Hi again, it seems that the configure option (--with-ntvfs-fileserer, --enable-developer) are not available on samba-4.11.2. I get the following error: + --enable-developer --with-ntvfs-fileserver --sysconfdir=/etc/samba/ --mandir=/usr/share/man/ --sbindir=/usr/sbin/ --bindir=/usr/bin/ --without-systemd --with-statedir=/var/lib/samba --with-cachedir=/var/cache/samba --with-privatedir=/var/lib/samba/private tests/samba.sh: line 107: --enable-developer: command not found Which version does support these options? On 11/14/19 8:52 AM, Andrew Bartlett wrote:> On Thu, 2019-11-14 at 07:30 +0000, Ghassan Elrayah wrote: >> Hi, >> >> I am trying to get some integration tests running in CI with a >> software uses samba4 AD for authentication. So basically I would like >> spin up a build and provision a samba4 AD with some test users and >> groups non-interactively and test commits and pull requests against >> the AD. > Then --use-ntvfs and compile with --with-ntvfs-fileserver is the easy > option. > > That will go away some day, then you can follow the examples from our > how we set up our selftest stuff. run 'make testenv' and look in > st/ad_dc/lib/server.conf. > > You may need --enable-developer for this to work. > > Thanks for using Samba and all the best! > > Andrew Bartlett >-- Beste Gr??e Ghassan Elrayah Mail: ghassan.elrayah at live.de