similar to: Reload config with SIGHUP does not immediately revoke access to host removed from hosts allow

Your smb.conf is incorrect/incomplete. Info here on these 2 links. https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member https://wiki.samba.org/index.php/Idmap_config_rid Your smb.conf > >> [global] > >> max log size = 0 > >> realm = DOMAIN.COM > >> workgroup = DOMAIN > >> security = ADS > >> winbind enum users = yes >

Hello All I am seeing following error intermittently when I try to join the samba machine into AD controlled by windows machine. Failed to join domain: failed to lookup DC info for domain '3DFSTESTAD.COM' over rpc: The transport connection is now disconnected. If we repeat the same command with same configuration and credentials, it succeeds. Detailed logs at log level 5 are at end of

Hi Ralph Thanks a lot. With xattr_tdb I could at least list the files getting rid of access denied error. I still do not see the exactly mapped ACEs in the Security Descriptor of a file in Windows Explorer but I will debug that little further and then come back with questions. I see only 1 entry of Everyone on Windows client side if there are added ACEs using nfs4_setfacl. Let me know if that

Hello, I'm using Samba 3.4.2 with CTDB. If I remove a user from the valid users list with "net conf setparm Share 'valid users' ..." on the server, and I connect a new Windows client to the Samba server on Linux, I get a permission denied for that user, which is correct behavior. However, there is a problem for active connections. If I revoke access for a user with a live

Hello All I am trying to use nfs4acl_xattr plugin from samba source code. https://www.samba.org/samba/docs/current/man-html/vfs_nfs4acl_xattr.8.html I mounted NFSv4 mount point locally and exported it through samba with vfs objects set to nfs4acl_xattr. *[root at test3 ajain]# net conf showshare local[local] path = /home/ajain/mount comment = local share guest ok =

Hello Jeremy and Ralph Thanks for your suggestions. I compiled samba-4.8.0 and running it instead of samba-4.6.2. I saw the changes that you mentioned in the latest vfs_nfs4acl_xattr module. The operation not supported error is gone but it is now failing with access denied. Here is what I tried: *[root at test3 ajain]# net conf showshare local[local] path = /home/ajain/mount

Hi All I found there is one bug in the plugin. The name of the attribute for ACL as per strace output of nfs4_setfacl is *system.nfs4_acl.* The source code has defined it as #define NFS4ACL_XATTR_NAME ( "system.nfs4acl" ) Note there is missing underscore. After this, the EOPNOTSUPP error is not observed. Hope this helps Akash On Thu, Apr 5, 2018 at 11:43 PM, Jeremy Allison

On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > Hi All > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > per strace output of nfs4_setfacl is system.nfs4_acl. > > The source code has defined it as > > #define

On Fri, Apr 06, 2018 at 12:40:31PM -0700, Jeremy Allison wrote: > On Fri, Apr 06, 2018 at 09:22:17PM +0200, Ralph Böhme wrote: > > On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > > > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > > Hi All > > > > > > > > I found there is one bug in the plugin. The

On Tue, Apr 10, 2018 at 04:28:10PM +0530, Akash Jain wrote: > Can you please elaborate more on which extensions you referred to? > What all basic things do we need to do to use nfs4acl_xattr module with > native NFS4 export mounted locally and shared through samba to get/set NT > ACLs? I guess you have to patch the code, or find someone who does it for you. Iirc currently the module

Hi Is it possible to send SIGHUP to the parant process to let samba reread the smb.conf file, or is any way to let samba reread this file without restarting samba regards Alaa

Hey, I have a Windows Server 2016 as a DC and a Debian (Stretch) Server joined the domain. I only want to use this server as a fileserver, but domain-users cannot access the share. Here is what I did: smb.conf: https://paste.ubuntu.com/p/2fKDYFrZ6h/ nsswitch.conf: https://paste.ubuntu.com/p/qjKnKMtZ42/ mkdir /home/EXAMPLE/profile chmod 1770 /home/example/profile chgrp domänen-benutzer

Hello All Can someone please help me understand what could be the reason SPENGO fails with windows AD server? SPNEGO login failed: The transport connection is now disconnected. error_string : 'failed to lookup DC info for domain ' DOMAIN.COM <http://domain.com/>' over rpc: The transport connection is now disconnected.' Thanks in Advance Akash On Fri,

running 2.05a on red hat 6.1 I get a lot of these in my logs: smbd/process.c:timeout_processing(868) Reloading services after SIGHUP. Can anyone shed any light on this?

Hi Ralph I do not think using xattr_tdb is the right thing to do for my purpose. We do not wish to store/retrieve extended attributes to/from TDB file. *<Ralph>* *Iirc parsing NFSv4 ACLs would require extensions to the module to support the string identifiers and mapping to ids.* *</Ralph>* Can you please elaborate more on which extensions you referred to? What all basic things do

Hi all, I am trying to use LLVM's AliasAnalysis pass, but from a standalone tool that uses llvm libraries. The following is the code snippet I am currently using. PassBuilder PB; auto mod_manager = ModuleAnalysisManager { }; PB.registerModuleAnalyses(mod_manager); AAResults& AAR = mod_manager.getResult<AAManager>(*M); But the code fails at .getResult with the following error:

Hi, I would like to run the -O1 pass sequence followed by -reg2mem from an out of tree project which uses llvm. I am using the following code snippet to do so but in some cases, my method is also vectorising the code, which doesn't happen when running the same sequence(-S -O1 -reg2mem) through opt. Can someone please help me find what I am missing? Thanks, Akash. *

Please consider the following C code: * #define SZ 2048 int main(void) { int A[SZ]; int B[SZ]; int i, tmp; for (i = 0; i < SZ; i++) { tmp = A[i]; B[i] = tmp; } assert(A[SZ/2] == B[SZ/2]); }* On running -O1 followed by -reg2mem I get the following IR: *define dso_local i32 @main() local_unnamed_addr #0 {entry: %A = alloca [2048

Hello, When I try to revoke certificates from my puppet installation, I get the following error : /etc/puppet/ssl# puppetca --revoke all all notice: Revoked certificate with serial # Inventory of signed certificates err: Could not call revoke: Cannot convert into OpenSSL::BN And nothing gets deleted. I didn''t find any information about this error, and couldn''t correct it.

Greetings all, I have hit a kernel BUG in revoke.c in kernel 2.4.7-ac7 twice today while attempting to perform the same operation (patching stock 2.4.8 kernel src with "patch -p1 < patch-2.4.8-ac4"). Syslog entries follow. Please email me if you want/need my kernel config or any other information. Thanks, jtp