similar to: acls unable to map SID solaris w2k

We have what may be a very, very bad situation here and I'm hoping someone may be able to point out either where I'm misinterpreting this or where I missed the memo. We're testing 3.0.23d so we can upgrade from 3.0.14a. Our servers are all currently Solaris 9, and we build samba from source with MIT krb5 and openldap libraries. We have used security = ads since 3.0 after having

I'm testing SAMBA 3.0.2 on a Solaris 9 box with a UFS file system. The ACLs appear to be working well with the security tab, etc. However, once a permission setting has been made from a security tab on a directory, the mask and default mask parameters no longer appear in a getfacl. In addition, the #effective permission is incorrect. Has anyone seen this? I searched the archives and I

I've compiled samba-3.0.25rc3, using Sun Studio11, and linking in openldap-2.3.21 and krb5-1.4.3 client libraries. The same problem that I've reported since 3.0.23d still exists. If anyone has a suggestion, or if I missed something in release notes or anything, please let me know. Fundamentally, the SAMBA server is not honouring the UNIX file system permissions. My groups listing in

Hello samba-insiders, we have a WinNT 4.0 SP5 PDC and our samba 2.2.3a is member of the domain. The roaming profiles of our clients stored on the samba 2.2.3a server. All seams to be perfect but only clients with W2K SP2 cannot use there roaming profiles. ---> "Access Denyed" is the W2K errro message. But if the same user loggs on on a client machine with W2K SP1 all things are ok.

Hello samba-insiders, we have a WinNT 4.0 SP5 PDC and our samba 2.2.3a is member of the domain. The roaming profiles of our clients stored on the samba 2.2.3a server. All seams to be perfect but clients with W2K SP2 cannot use there roaming profiles. ---> "Access Denyed" is the W2K error message. But if the same user loggs on on a client machine with W2K SP1 all things are ok. In

Hi Rene, I have found this in the "whats new" for Samba 2.2.3 Added/changed parameters. ------------------------- ... nt acl support This parameter has been changed to a per-share option, and is very useful in enabling Windows 2000 SP2 to load/save profiles from a Samba share. ... Maybe it helps! Regards, Thomas Bitte antworten an <rene.lenga@atacama.de> Gesendet von:

Hi, I've got those crash entries in my logs and there is multiple smbd process eating a lot of cpu/mem. I'm using samba 3.0.4, rpmsource from samba.org rebuilt with posix acls support. Samba is linked with an openldap-2.0.27. All of this on redhat ES 3 :/ Any hint to fix this problem? [2004/06/17 17:57:39, 0] smbd/posix_acls.c:create_canon_ace_lists(1482) create_canon_ace_lists:

Hello, I looked at my log file this morning and I see a lot of stuff about ACLs that I don't understand and this notice: INTERNAL ERROR: Signal 11 in pid 23985 (3.0.9-1.3E.3) I suspect that it was caused when a user tried to change permissions on the contents of a directory or delete it (I'm trying to find that out now). The directory seemingly no longer exists, so the user may have

Trying to add users using security tab i WinXP doesn't work for us, no users are added. Existing ACLs are possible to change and delete. This behavior has been identified with both Solaris 2.6, Linux 2.4.9-31 with XFS, Samba 2.2.5 and 2.2.8. I'm attaching global part of out smb.conf and a snippet from the log. Our users are in an NT domain and in NIS. Regards, Johannes smb.conf:

Hello, we're running 2.2.1a on a production server. Lately, it's been giving us troubles. Monday mordning, this moring, and 2 times more during today, samba stopped responding to all requests from Windows (2000) clients. This has happened once before a week ago, and once several weeks ago. Today it seems to be getting much worse. If left un-attended the system will eventually run out of

Hi List, I have some severe problem with Samba 3 with ldapsam backend on debian stable. The problem is that I can not change the rights of a file or directory on the server from Windows. I get this in smb.log: ---cut--- [2004/03/14 21:59:09, 0] smbd/posix_acls.c:create_canon_ace_lists(1380) create_canon_ace_lists: unable to map SID S-1-5-21-2443489570-4015384086-1858331161-3009 to uid or gid.

Hi Ian, Thanks for the fast answer. How can I find out whether this is the NT domains SID? The interesting is that i can see all files/Dirs without problems in the Filebrowser of Arcserve. Thx Stefan -----Urspr?ngliche Nachricht----- Von: Ian Clancy [mailto:clancyian@cel.ie] Gesendet: Freitag, 6. Mai 2005 16:41 An: Stefan Sabolowitsch; samba@lists.samba.org Betreff: Re: [Samba]

Hi, I have this problem with samba (2.2.6-pre2 and 2.2.7). When I start the samba machine it runs just ok, but after some hours or a couple of days it makes a error's as follows in log files. And samba stops sharing. When I look whats running I see samba there but it doesn't work. I have security = domain set up log.w2k (PDC) [2003/02/18 23:02:41, 0] lib/util_sock.c:read_data(436)

Dear all, I am having a hard time to figure out a suitable test for the match between two nominal classifications of the same set of data. I have used hierarchical clustering with multiple methods (ward, k-means,...) to classify my dat into a set number of classesa, and I would like to compare the resulting automated classification with the actual - objective benchmark one. So in principle I

hello, using SuSE 7.3 with all Patches and SAMBA 2.2.7a-SuSE after a couple of days too many files are opend (bejond 16000) and samba hast to be totally stopped and restartet. the log tells us the following: [2003/03/13 09:21:44, 0] smbd/posix_acls.c:create_canon_ace_lists(919) create_canon_ace_lists: unable to map SID S-1-5-21-823518204-1202660629-842925246-2721 to uid or gid. [2003/03/13

Hello again, I am using samba 3.5.6. I have another though maybe this problem occurs due to my OpenLDAP service? My /etc/openldap/slapd.conf is using: [...] access to dn.base="" by * read access to dn.base="cn=Subschema" by * read access to attrs=userPassword,userPKCS12 by self write by * auth access to attrs=shadowLastChange by self

At the suggestion of Stas, I'm starting a new thread on this one. This pretty much covers where I'm at right now: Doug, thanks, here's a complete listing of the config file, and some logging, hopefully this will be illuminating to somebody. > Neither of these lines set the log level. Yes, I've been setting it in the init script. When I do ps -ef | grep smbd, I see that

Hi all, I'm trying to get a Samba server (which is a member of a Samba controlled domain) to store WinXP Pro user's profiles. The XP user is authenticating against a 2003 Active Directory server, which then tells it to store it's profile on my Samba server. The 'profiles' share exists and is writeable and under some circumstances we can get profiles to be stored there,

I'm running Samba 2.2.4 using security = DOMAIN and username map. I was able to join the Samba server to the NT domain. I can also access the Samba share from my W2K machine. I log on to my W2K machine using my domain account. I'm having problem adding permission (grant access to another user) to the file and folder I created. I get the following error: create_canon_ace_lists:

I have a samba server on linux with a LDAP DC, On a client server, I was do net join -S DOMSERV -Uadmin%PASSWORD and that's work The server member of DOMSERV have a share XFS filesystem. When I set manualy the acl (setfacl -m g:group:rwx the_file) It's ok, the other domain member see the ACL But when I set the acl with a Windows Workstation, that's don't work