search for: nrao

Hello, Really stumped on this issue. I have samba 4.4.7 running on a new server. Users cannot write to files to which they have write permissions via group. Example: Here's the local filesystem on the samba server. I'm logged in as jmalone : jmalone at canis; cd /home/www.nrao.edu/content/logs/ : jmalone at canis; ls -l total 4 -rw-rw-r-- 1 jmalone nraoweb 0 Nov 10 10:02 baz -rw-rw-r-- 1 pmurphy cvweb 0 Nov 10 11:09 foobar : jmalone at canis; touch foobar No problems. Now, let me mount that on my Mac: : jmalone at agrajag; cd /Volumes/www.nrao.edu...

> From my understanding you seem to have Mac and Windows clients and are > using the Samba machine as a fileserver. If the windows machines are > joined to a domain, then you will probably be better off joining the > Samba machine to the domain, this way you will not need the user map. > > It might help if you could explain your setup, if it is different > from the above and

...n, this way you will not need the user map. >> >> It might help if you could explain your setup, if it is different >> from the above and a copy of your smb.conf would help as well. >> >> Rowland Sorry - I should have posted this from the beginning. http://www.cv.nrao.edu/~jmalone/smb.conf The samba server is joined to our AD domain. testjoin reports that the join is okay and authentication is working properly. The samba server is *also* joined to our NIS domain from which it gets the unix users. Usernames match between unix and AD. All accounts have uidNumb...

...gt; >> > >> It might help if you could explain your setup, if it is different > >> from the above and a copy of your smb.conf would help as well. > >> > >> Rowland > > Sorry - I should have posted this from the beginning. > > http://www.cv.nrao.edu/~jmalone/smb.conf > > The samba server is joined to our AD domain. testjoin reports that > the join is okay and authentication is working properly. The samba > server is *also* joined to our NIS domain from which it gets the unix > users. > > Usernames match between unix...

...gt;log say around this message ? > >>> > >> > >>Nothing that I can see. > > > >That is not a helpful response to a request for debug info. > > > >Just sayin' :-) :-). > > > > No, it's not. Apologies. > > http://www.cv.nrao.edu/~jmalone/sambalog.txt Looking at that log I see: posix_get_nt_acl: called for file . canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) SMB_ACL_GROUP_OBJ ace_flags = 0x0 pe...

...his issue. I have samba 4.4.7 running on a new > server. Users cannot write to files to which they have write permissions > via group. > > Example: > > Here's the local filesystem on the samba server. I'm logged in as jmalone > > > : jmalone at canis; cd /home/www.nrao.edu/content/logs/ > : jmalone at canis; ls -l > total 4 > -rw-rw-r-- 1 jmalone nraoweb 0 Nov 10 10:02 baz > -rw-rw-r-- 1 pmurphy cvweb 0 Nov 10 11:09 foobar > : jmalone at canis; touch foobar > > > No problems. Now, let me mount that on my Mac: > >...

On Wed, Nov 16, 2016 at 03:12:06PM -0500, Josh Malone via samba wrote: > On 11/16/16 2:32 PM, Jeremy Allison via samba wrote: > >> > >>But the file is not root:root - it's owned by uid 12477 and group > >>9006. Why is Samba getting the wrong owner/group for this file? > > > >That is the core of your problem. What does the full debug level 10 >

...a new > >server. Users cannot write to files to which they have write permissions > >via group. > > > >Example: > > > >Here's the local filesystem on the samba server. I'm logged in as jmalone > > > > > >: jmalone at canis; cd /home/www.nrao.edu/content/logs/ > >: jmalone at canis; ls -l > >total 4 > >-rw-rw-r-- 1 jmalone nraoweb 0 Nov 10 10:02 baz > >-rw-rw-r-- 1 pmurphy cvweb 0 Nov 10 11:09 foobar > >: jmalone at canis; touch foobar > > > > > >No problems. Now, let m...

...his issue. I have samba 4.4.7 running on a new > server. Users cannot write to files to which they have write permissions > via group. > > Example: > > Here's the local filesystem on the samba server. I'm logged in as jmalone > > > : jmalone at canis; cd /home/www.nrao.edu/content/logs/ > : jmalone at canis; ls -l > total 4 > -rw-rw-r-- 1 jmalone nraoweb 0 Nov 10 10:02 baz > -rw-rw-r-- 1 pmurphy cvweb 0 Nov 10 11:09 foobar > : jmalone at canis; touch foobar > > > No problems. Now, let me mount that on my Mac: > >...

On 11/17/16 2:17 PM, Jeremy Allison wrote: > On Wed, Nov 16, 2016 at 03:25:24PM -0500, Josh Malone wrote: >> >> http://www.cv.nrao.edu/~jmalone/sambalog.txt > > Looking at that log I see: > > posix_get_nt_acl: called for file . > > canon_ace index 0. Type = allow SID = S-1-22-1-0 uid 0 (root) SMB_ACL_USER_OBJ ace_flags = 0x0 perms rwx > canon_ace index 1. Type = allow SID = S-1-22-2-0 gid 0 (root) SMB_...

On Tue, Nov 15, 2016 at 11:42:45AM -0500, Josh Malone via samba wrote: > On 11/14/16 6:32 PM, Jeremy Allison via samba wrote: > >On Mon, Nov 14, 2016 at 11:38:52AM -0500, Josh Malone via samba wrote: > >>All, > >> > >>Apologies for basically bumping my own thread, but I'm absolutely at > >>my wits' end trying to figure out this access problem.

...2049), real(2310, 0)] ../libcli/smb/smb2_signing.c:92(smb2_signing_sign_pdu) How is the real different from the effective on a simple unix file? Thanks again, -Josh -- -------------------------------------------------------- Joshua Malone Systems Administrator (jmalone at nrao.edu) NRAO Charlottesville 434-296-0263 www.nrao.edu 434-249-5699 (mobile) --------------------------------------------------------

...NFS environment. I've found another RHEL6 server here that's not showing the problem, so I'm going to try to diff the 2 boxes and see what's up. -Josh -- -------------------------------------------------------- Joshua Malone Systems Administrator (jmalone at nrao.edu) NRAO Charlottesville 434-296-0263 www.nrao.edu 434-249-5699 (mobile) --------------------------------------------------------

...ipt, no file ) things fail as before. What does a normal "everything matches on windows and unix" username map file need to look like? Thanks again, -Josh -- -------------------------------------------------------- Joshua Malone Systems Administrator (jmalone at nrao.edu) NRAO Charlottesville 434-296-0263 www.nrao.edu 434-249-5699 (mobile) --------------------------------------------------------

...u're using Samba as a DC or something more magical than a simple file server. In any case, thanks to all who chimed in on my problem. Very much appreciated. -Josh -- -------------------------------------------------------- Joshua Malone Systems Administrator (jmalone at nrao.edu) NRAO Charlottesville 434-296-0263 www.nrao.edu 434-249-5699 (mobile) --------------------------------------------------------

...s for Windows and Unix. They both contain the same users and have the same uid/gid numbers, but there are two directories. > > Rowland > Thanks again, -Josh -- -------------------------------------------------------- Joshua Malone Systems Administrator (jmalone at nrao.edu) NRAO Charlottesville 434-296-0263 www.nrao.edu 434-249-5699 (mobile) --------------------------------------------------------

...ssages as subscribers to linux-alert, only with an additional time lag of up to a week--pretty silly considering that linux-alert information can often be rather time critical! We had considered consolidating these lists on several occasions in the past. The recent move of the security lists from NRAO to Red Hat seemed like an opportune time to do this and so we finally went ahead and did it. Basically, what we (Marc Ewing, actually) have done is removed the linux-alert-digest list and merged its subscriber list with linux-alert''s. Nobody should have "lost" his or her subscr...

amd from the amd-920824upl102-6.i386.rpm file distributed with RedHat Linux 4.1 does not honor the nodev option for NFS filesystems and probably other mount types, allowing any user access to the device files in /dev on a system, provided that they have root access to another linux box on the network. In addition, the default amd.conf from RH 4.1 maps /net/* to NFS mounting, which makes the bug in

...but have never understood why I had the problem in the first place or how this fixes it. I'll give winbind a bit more of a look. > > Cheers > > Alex -- -------------------------------------------------------- Joshua Malone Systems Administrator (jmalone at nrao.edu) NRAO Charlottesville 434-296-0263 www.nrao.edu 434-249-5699 (mobile) --------------------------------------------------------

On Wed, 16 Nov 2016 15:12:06 -0500 Josh Malone via samba <samba at lists.samba.org> wrote: > On 11/16/16 2:32 PM, Jeremy Allison via samba wrote: > >> > >> But the file is not root:root - it's owned by uid 12477 and group > >> 9006. Why is Samba getting the wrong owner/group for this file? > > > > That is the core of your problem. What does the