search for: xattr_tdb

...: https://lists.samba.org/archive/samba/2019-December/227626.html there's no way to run samba AD DC on a unprivileged LXC container, because samba need the XATTR SYSTEM namespace that is reserved on container. Could be doable 'offloading' all XATTR from filesystem with a module like xattr_tdb? https://wiki.samba.org/index.php/Using_the_xattr_tdb_VFS_Module how much is 'inefficient' for an AD DC? There's some way, eventually, to ''backup'' XATTR and restore it to migrate from filesystem to xattr_tdb? Thanks. -- dott. Marco Gaiarin GNUPG Key I...

...t; > > > there's no way to run samba AD DC on a unprivileged LXC container, > > because samba need the XATTR SYSTEM namespace that is reserved on > > container. > > > > Could be doable 'offloading' all XATTR from filesystem with a module > > like xattr_tdb? > > https://wiki.samba.org/index.php/Using_the_xattr_tdb_VFS_Module > > how much is 'inefficient' for an AD DC? > > > > There's some way, eventually, to ''backup'' XATTR and restore it to > > migrate from filesystem to xattr_tdb? > &g...

Hi Rowland, Thanks for your response . I will check on this. Even i have tried with commenting xattr_tdb:file = /var/opt/samba/locks/xattr.tdb in smb.conf and am getting same issue . To be more specific whether you're referring ACL as Windows ACL or POSIX ACL or Extended ACL In the below command "-U%" refers to nouser and no group ? . smbclient -L localhost -U% I am able to get expect...

...th = logon drive = H: logon script =%G/logon.bat # [netlogon] path = "/home/samba/netlogon" browsable = no writable = no guest ok = yes # [homes] directory mask = 0700 create mask = 0700 browsable = no writable = yes valid users = %S # [Diligencias] vfs objects = zfsacl,xattr_tdb,full_audit xattr_tdb:file = /var/db/samba4/private/shares_xattrs/diligencias.tdb full_audit:prefix = "%I|%u|%P" full_audit:success = rmdir rename unlink full_audit:failure = rmdir rename unlink full_audit:facility = LOCAL0 full_audit:priority = NOTICE path = "/samba/salamone/...

...d one I had to add the extra DNS records as per: https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record Now, I think it's worked OK. However I see there are two lines in smb.conf on the first server which aren't in the second server: idmap_ldb:use rfc2307 = yes xattr_tdb:file = /usr/local/samba/var/locks/xattr.tdb Should I add these to the second machine? As I understand it, DCs should be identical peers (except for the FSMO roles), which is why I'm suspicious of the differences, or if it means I've made a mistake configuring the replica. FYI, the comm...

.../index.php/Verifying_and_Creating_a_DC_DNS_Re > > cord > > > > Now, I think it's worked OK. However I see there are two lines in  > > smb.conf on the first server which aren't in the second server: > > > >      idmap_ldb:use rfc2307 = yes > >      xattr_tdb:file = /usr/local/samba/var/locks/xattr.tdb > > > > Should I add these to the second machine?  > > In theory yes, but the presence of the second line shows you are not > using the system ACLs, you are using a tdb file. You may have to run > the provision again ;-) There i...

Hi Ralph Thanks a lot. With xattr_tdb I could at least list the files getting rid of access denied error. I still do not see the exactly mapped ACEs in the Security Descriptor of a file in Windows Explorer but I will debug that little further and then come back with questions. I see only 1 entry of Everyone on Windows client side if t...

...2010 shadow_copy.so -rwxr-xr-x 1 root root 13844 Mar 31 2010 smb_traffic_analyzer.so -rwxr-xr-x 1 root root 13796 Mar 31 2010 streams_depot.so -rwxr-xr-x 1 root root 17984 Mar 31 2010 streams_xattr.so -rwxr-xr-x 1 root root 5560 Mar 31 2010 syncops.so -rwxr-xr-x 1 root root 17744 Mar 31 2010 xattr_tdb.so -rwxr-xr-x 1 root root 22052 Mar 31 2010 /usr/lib/samba/vfs/acl_tdb.so -rwxr-xr-x 1 root root 17920 Mar 31 2010 /usr/lib/samba/vfs/acl_xattr.so -rwxr-xr-x 1 root root 9668 Mar 31 2010 /usr/lib/samba/vfs/audit.so -rwxr-xr-x 1 root root 14060 Mar 31 2010 /usr/lib/samba/vfs/cap.so -rwxr-xr-x 1...

...mbnull > > as well] > > > > #server signing = Auto [Tried with adding enabling server > > signing as well] > > > > server role = active directory domain controller > > > > idmap_ldb:use rfc2307 = yes > > > > xattr_tdb:file = /var/opt/samba/locks/xattr.tdb > > > > > > > > [netlogon] > > > > path = /var/opt/samba/locks/sysvol/<MachineName>/scripts > > > > read only = No > > > > > > > > [sysvol] > > > >...

Hi Ralph I do not think using xattr_tdb is the right thing to do for my purpose. We do not wish to store/retrieve extended attributes to/from TDB file. *<Ralph>* *Iirc parsing NFSv4 ACLs would require extensions to the module to support the string identifiers and mapping to ids.* *</Ralph>* Can you please elaborate more on...

Hi all! Anyone know how to tell samba4 to use "--use-xattrs=yes" after domain provision, i have a lot of users so i cannot recreate the domain from scratch ;( Any ide? Thanks!

...ng expected result with below smb.conf # Global parameters [global] netbios name = <HostName> realm = <DomainName> workgroup = IN dns forwarder = 8.8.8.8 server role = active directory domain controller idmap_ldb:use rfc2307 = yes xattr_tdb:file = /var/opt/samba/locks/xattr.tdb [netlogon] path = /var/opt/samba/locks/sysvol/<DomainName>/scripts read only = No [sysvol] path = /var/opt/samba/locks/sysvol read only = No For eg : I have created the user "silam" using pdbedit [/opt/samb...

...dns forwarder = 8.8.8.8 #guest account = smbnull [Tried with adding enabling smbnull as well] #server signing = Auto [Tried with adding enabling server signing as well] server role = active directory domain controller idmap_ldb:use rfc2307 = yes xattr_tdb:file = /var/opt/samba/locks/xattr.tdb [netlogon] path = /var/opt/samba/locks/sysvol/<MachineName>/scripts read only = No [sysvol] path = /var/opt/samba/locks/sysvol read only = No # #/opt/samba/bin/samba -D # ps -ef | grep -i -e samba -i -e smbd -i...

...sr/lib/vfs/scannedonly.so 30676 usr/lib/vfs/shadow_copy2.so 10004 usr/lib/vfs/shadow_copy.so 22460 usr/lib/vfs/smb_traffic_analyzer.so 18296 usr/lib/vfs/streams_depot.so 22424 usr/lib/vfs/streams_xattr.so 10032 usr/lib/vfs/syncops.so 43188 usr/lib/vfs/time_audit.so 22388 usr/lib/vfs/xattr_tdb.so 7288 usr/sbin/genl-ctrl-list 10668 usr/sbin/nl-class-add 9428 usr/sbin/nl-class-delete 7376 usr/sbin/nl-classid-lookup 8824 usr/sbin/nl-class-list 10596 usr/sbin/nl-cls-add 9920 usr/sbin/nl-cls-delete 9516 usr/sbin/nl-cls-list 8760 usr/sbin/nl-link-list 8628 usr/sbin/...

Hi Team, I have build samba 4.5.0.on hpux. On running make quick test fails as it is not able to recognize vlp value for printing. Extract from log:- doing parameter strict sync = yes doing parameter vfs objects = acl_xattr fake_acls xattr_tdb streams_depot doing parameter printing = vlp WARNING: Ignoring invalid value 'vlp' for parameter 'printing' pm_process() returned No lp_servicenumber: couldn't find homes Can't load /home/arjit/samba-4.5.0/st/nt4_dc/lib/server.conf - run testparm to debug it Unable to set pa...

On Fri, 3 Feb 2017 10:17:14 +0530 Silambarasan Madhappan <silambarasan19 at gmail.com> wrote: > Hi Rowland, > > Thanks for your response . I will check on this. > Even i have tried with commenting xattr_tdb:file = > /var/opt/samba/locks/xattr.tdb in smb.conf and am getting same issue . By doing that, you have nowhere to store ACLS. > > To be more specific whether you're referring ACL as Windows ACL or > POSIX ACL or Extended ACL The way I look at it, you have Unix permissions (ugo)...

...t; Date: Thu Nov 2 12:17:48 2017 +0100 librpc/idl: rename NFS4 ACL xattr name The "system" xattr namespace is reserved for the kernel. Any attempt to use xattrs in that namesspace will fail with EOPNOTSUPP, regardless of priveleges. In autobuild we're using the xattr_tdb VFS module, so it works there. Using the "security" namespace instead makes this module generally usable with Linux filesystem xattrs as storage backend. Additionally prefix the xattr name with "_ndr". This is in preperation of later commits that ad...

Hi, I'm running Samba as a glorified NAS at the moment - to begin with, I have an ext3 storage partition, /storage. In this is a directory, /storage/Personal, which has its own Samba share (also Personal). At this point, dos attributes using filesystem xattrs work beautifully. The problem comes when I start to fiddle further... I have a Novell NetWare filesystem (ncpmount) mounted at

Hi, My Samba 3.6.6 file server isn't setting the security.NTACL extended attribute. It can set the user.DOSATTRIB without any issue. This appears to be an LXC container issue, as outside the container I can set this using the setfattr command without issue, whereas I can't do this inside. Despite this not being a Samba issue, I was wondering whether anybody has any encountered

Hi All I found there is one bug in the plugin. The name of the attribute for ACL as per strace output of nfs4_setfacl is *system.nfs4_acl.* The source code has defined it as #define NFS4ACL_XATTR_NAME ( "system.nfs4acl" ) Note there is missing underscore. After this, the EOPNOTSUPP error is not observed. Hope this helps Akash On Thu, Apr 5, 2018 at 11:43 PM, Jeremy Allison