samba - Dec 2020 - rights -- structures

On 14/12/2020 08:45, Maurizio Caloro wrote:
>> First, the workgroup cannot be the same as the realm and the realm must
be
> the dns domain name in uppercase. By default the workgroup name is the
> lefthand portion of the realm (in your case 'CARAG'), but it can be
anything
> and it >must not contain dots. If your TLD is '.local' then it
really
> shouldn't be and you will have to turn off Avahi
>> You also seem to not have any 'idmap config' lines, are you
using sssd or
> similar ?
>> Rowland
> Thanks for you quick Answer!
>
> Add this to smb.conf
>   [global]
>          realm = CARAG.LOCAL
>          workgroup = CARAG
>          netbios name = SRVCAR005
>          security = domain
Why have you jumped to 'domain' from 'ADS' ?

'domain' is used with an NT4-style domain and 'ADS' is used with
an 'AD'
domain, what do you have ?
>          vfs objects = acl_xattr
>
>          idmap config * : backend = tdb
>          idmap config * : range 10000-199999
Do you really need such a large range for the default domain, bearing in  
mind that it is mostly for the well known SIDS and there are less than  
two hundred of those.
>          idmap config DOMAIN : backend = autorid
Why 'autorid' ? do you have more than one domain ? and if you are using
autorid then you don't need the default ('*') domain lines, it
includes
them.

Are you starting winbind before smbd ?

Rowland

> Thanks for you quick Answer!
>
> Add this to smb.conf
>   [global]
>          realm = CARAG.LOCAL
>          workgroup = CARAG
>          netbios name = SRVCAR005
>          security = domain
Why have you jumped to 'domain' from 'ADS' ?

'domain' is used with an NT4-style domain and 'ADS' is used with
an 'AD'
domain, what do you have ?
>> I have as Domain Server 4.13.2, Windows 10 Clients
>          vfs objects = acl_xattr
>
>          idmap config * : backend = tdb
>          idmap config * : range 10000-199999
>Do you really need such a large range for the default domain, bearing in
mind that it is mostly for the well known SIDS and there are less than two
hundred of those.
>> how I can here minimize?, or also to delete if only one domain are
running?

>          idmap config DOMAIN : backend = autorid
Why 'autorid' ? do you have more than one domain ? and if you are using
autorid then you don't need the default ('*') domain lines, it
includes
them.
>> OK I have still delete this line, yes I have only one Domain Server
here
running.

Are you starting winbind before smbd ?
>>I have still the problem that smbd don?t start
>>root at srvcar005:/home/caragadm# systemctl status smbd
>>? smbd.service - Samba SMB Daemon
>>  Loaded: loaded (/lib/systemd/system/smbd.service; enabled; vendor
preset: enabled)
>>  Active: failed (Result: exit-code) since Mon 2020-12-14 10:05:21 CET;
37s ago
>>   Docs: man:smbd(8)
>>         man:samba(7)
>>        man:smb.conf(5)
>> Process: 657
ExecStartPre=/usr/share/samba/update-apparmor-samba-profile
(code=exited, status=0/SUCCESS)
>> Process: 661 ExecStart=/usr/sbin/smbd --foreground --no-process-group
$SMBDOPTIONS (code=exited, status=255/EXCEPTION)
>> Main PID: 661 (code=exited, status=255/EXCEPTION)
>>
>>Dec 14 10:05:20 srvcar005.carag.local systemd[1]: Starting Samba SMB
Daemon...
>>Dec 14 10:05:21 srvcar005.carag.local smbd[661]: [2020/12/14
10:05:21.261241,  0]
../source3/auth/auth_util.c:1382(make_new_session_info_guest)
>>Dec 14 10:05:21 srvcar005.carag.local smbd[661]:   create_local_token
failed: NT_STATUS_NO_MEMORY
>>Dec 14 10:05:21 srvcar005.carag.local smbd[661]: [2020/12/14
10:05:21.263609,  0] ../source3/smbd/server.c:2000(main)
>>Dec 14 10:05:21 srvcar005.carag.local smbd[661]:   ERROR: failed to
setup
guest info.
>>Dec 14 10:05:21 srvcar005.carag.local systemd[1]: smbd.service: Main
process exited, code=exited, status=255/EXCEPTION
>>Dec 14 10:05:21 srvcar005.carag.local systemd[1]: smbd.service: Failed
with result 'exit-code'.
>>Dec 14 10:05:21 srvcar005.carag.local systemd[1]: Failed to start Samba
SMB Daemon.
>>root at srvcar005:/home/caragadm# vi /etc/samba/smb.conf
>>Also cheching Winbind are telling me are joy Join?
root at srvcar005:/home/caragadm# systemctl status winbind
? winbind.service - Samba Winbind Daemon
   Loaded: loaded (/lib/systemd/system/winbind.service; disabled; vendor
preset: enabled)
   Active: failed (Result: exit-code) since Mon 2020-12-14 10:10:56 CET; 2s
ago
     Docs: man:winbindd(8)
           man:samba(7)
           man:smb.conf(5)
  Process: 728 ExecStart=/usr/sbin/winbindd --foreground --no-process-group
$WINBINDOPTIONS (code=exited, status=1/FAILURE)
 Main PID: 728 (code=exited, status=1/FAILURE)

Dec 14 10:10:56 srvcar005.carag.local systemd[1]: Starting Samba Winbind
Daemon...
Dec 14 10:10:56 srvcar005.carag.local winbindd[728]: [2020/12/14
10:10:56.590666,  0]
../source3/winbindd/winbindd_cache.c:3160(initialize_winbindd_cach
Dec 14 10:10:56 srvcar005.carag.local winbindd[728]:
initialize_winbindd_cache: clearing cache and re-creating with version
number 2
Dec 14 10:10:56 srvcar005.carag.local winbindd[728]: [2020/12/14
10:10:56.599231,  0]
../source3/winbindd/winbindd_util.c:1255(init_domain_list)
Dec 14 10:10:56 srvcar005.carag.local winbindd[728]:   Could not fetch our
SID - did we join?
Dec 14 10:10:56 srvcar005.carag.local winbindd[728]: [2020/12/14
10:10:56.600250,  0]
../source3/winbindd/winbindd.c:1454(winbindd_register_handlers)
Dec 14 10:10:56 srvcar005.carag.local winbindd[728]:   unable to initialize
domain list
Dec 14 10:10:56 srvcar005.carag.local systemd[1]: winbind.service: Main
process exited, code=exited, status=1/FAILURE
Dec 14 10:10:56 srvcar005.carag.local systemd[1]: winbind.service: Failed
with result 'exit-code'.
Dec 14 10:10:56 srvcar005.carag.local systemd[1]: Failed to start Samba
Winbind Daemon.
root at srvcar005:/home/caragadm#
>Rowland