Ken | 1 Jun 2006 01:16

Re: NT_STATUS_ACCESS_DENIED

We got that message where I worked at.   We had to go to the domain 
controller and use the Server Manager to delete our entry and then we 
used our Samba server to rejoin the domain.   Seemed to work then.

Dan.Mitton <at> ymp.gov wrote:
> When I run:
>
> /usr/local/samba>bin/smbclient -U user%pass -L //myhost -N
>
> I get:
>
> Domain=[MYDOMAIN] OS=[Unix] Server=[Samba 3.0.22]
> tree connect failed: NT_STATUS_ACCESS_DENIED
>
> Is there someplace this error message is explained??
>
> My smb.conf file is:
>
> [global]
>    security = server
>    encrypt passwords = yes
>    password server = nt4dc1, nt4dc2
>    username map = /usr/local/samba/lib/users.map
>    workgroup = YMINTWEB
>    remote announce = 192.12.95.255 204.140.39.255
>    wins server = 204.140.39.6
>    browseable = yes
>    public = yes
>    print command = lpr -r -P%p %s
>    lpq command = lpq -P%p
(Continue reading)

Gary Dale | 1 Jun 2006 01:20

Re: Second SAMBA Server different NETBIOS alias and shares for ClearCase

Hoferer, Patrick K. wrote:

>I have a SAMBA Server utilizing an LDAP backend for user authentication
>and it works great unless I use ClearCase. When ClearCase is used the
>compilation time for our code is slowed down to a crawl and the
>ClearCase application is rendered nearly useless. As a test fix my boss
>wants me to create a second SAMBA server to be used for only the
>ClearCase server. 
>
>I don't know if this will work, but I may be able to accomplish my task
>if I set the "os level" lower than my primary SAMBA server set the SID
>to the same as my existing server. I then change the "netbios alias" to
>"clearcase". I'll then add my views and vobs through either NFS or SANS
>client to the ClearCase SAMBA server. This way if a workstation using
>ClearCase needs  to use the \\clearcase\views share it will utilize the
>ClearCase SAMBA server not the primary server. All authentication should
>remain through my LDAP server since I did not change the SIDs for my
>server or user accounts.
>
>If this plan sound feasible please let me know. If it sounds like I may
>break my existing architecture let me know. If you have better
>suggestions I am looking for any help. 
>
>Thank you for your time,
>Patrick Hoferer
>  
>
I don't think you're being very clear. In Windows terms, you log into a 
domain, not a server. It sounds like you want to maintain the same 
authentication but split an application off onto a different server to 
(Continue reading)

Hoferer, Patrick K. | 1 Jun 2006 01:29
Picon
Favicon

RE: Second SAMBA Server different NETBIOS alias and shares for ClearCase

You're totally right about my poor terminology. I need to do is join the
CC SAMBA server to the Primary SAMBA Server's authentication. I have the
HowTo Guide and it has a step by step on joining as a Domain Member
Server. I'll test it out.

...RTM...Pat.....

Thank you for your help. :)

-----Original Message-----
From: Gary Dale [mailto:garydale <at> torfree.net] 
Sent: Wednesday, May 31, 2006 4:20 PM
To: Hoferer, Patrick K.
Cc: samba <at> lists.samba.org; Bailey, Alonza; Kdeiss, Raymond E.
Subject: Re: [Samba] Second SAMBA Server different NETBIOS alias and
shares for ClearCase

Hoferer, Patrick K. wrote:

>I have a SAMBA Server utilizing an LDAP backend for user authentication

>and it works great unless I use ClearCase. When ClearCase is used the 
>compilation time for our code is slowed down to a crawl and the 
>ClearCase application is rendered nearly useless. As a test fix my boss

>wants me to create a second SAMBA server to be used for only the 
>ClearCase server.
>
>I don't know if this will work, but I may be able to accomplish my task

(Continue reading)

Gary Dale | 1 Jun 2006 01:39

Re: Second SAMBA Server different NETBIOS alias and shares for ClearCase

You can also try SWAT. It has a wizard for this purpose.

Hoferer, Patrick K. wrote:

>You're totally right about my poor terminology. I need to do is join the
>CC SAMBA server to the Primary SAMBA Server's authentication. I have the
>HowTo Guide and it has a step by step on joining as a Domain Member
>Server. I'll test it out.
>
>...RTM...Pat.....
>
>Thank you for your help. :)
>
>-----Original Message-----
>From: Gary Dale [mailto:garydale <at> torfree.net] 
>Sent: Wednesday, May 31, 2006 4:20 PM
>To: Hoferer, Patrick K.
>Cc: samba <at> lists.samba.org; Bailey, Alonza; Kdeiss, Raymond E.
>Subject: Re: [Samba] Second SAMBA Server different NETBIOS alias and
>shares for ClearCase
>
>Hoferer, Patrick K. wrote:
>
>  
>
>>I have a SAMBA Server utilizing an LDAP backend for user authentication
>>    
>>
>
>  
(Continue reading)

Adam Nielsen | 1 Jun 2006 01:43
Picon
Picon
Favicon

Re: Cannot delete files from samba share

Hi Neil,

> Following an upgrade from samba 2.2.8a to 3.0.22 we have been unable
> to delete files on a samba share using an XP client.  We were
> previously able to delete these files when using 2.2.8a. 

This sounds remarkably similar to the problem I was having, where I
could create files, modify them, but not delete them:

http://lists.samba.org/archive/samba/2006-May/120521.html

If you work out a way to fix this, do let me know!

Cheers,
Adam.
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Jeremy Allison | 1 Jun 2006 01:47
Picon
Favicon

Re: Cannot delete files from samba share

On Wed, May 31, 2006 at 02:06:53PM +0100, Neil.Macoustra <at> MandG.co.uk wrote:
> 
> Following an upgrade from samba 2.2.8a to 3.0.22 we have been unable to 
> delete files on a samba share using an XP client.  We were previously able 
> to delete these files when using 2.2.8a. 
> 
> The problem occurs when we have a particular sub-set of permissions. 
> Directory permissions on UNIX are set to 775 and ownerhips to usera : 
> group1.  This should mean that either usera  or anyone who belongs to 
> group1 should  be able to delete any file within the directory 
> irrespective of what the file permissions and ownerships are.  From UNIX 
> this is the case.  Using an XP client on samba 2.2.8a this is the case. On 
> samba 3.0.22 this is not the case. 
> 
>  We have an application which writes files into the top level directory of 
> the samba directory with permissions 544.The ownerships of the file are 
> userb (i.e. different from the directory owner). group1 (i.e. the same as 
> the directory).  If a third user, userc  who is a member of group1 (there 
> is a force group directive on the share as well) comes along and attempts 
> to delete the file through the samba share, the delete fails. 
> Experimentation has shown the delete works if the file is writable by the 
> user (e.g 744 cf  544) or the file is owned by the user trying to delete 
> it.
> 
>  We have upgraded only a few of our servers to 3.0.22 and we have been 
> able to reproduce the problem.    I have attached a script which run as 
> root on UNIX  sets up a test share and appropriated file/dir permissions. 
> Other details about are installation are given below
> 
> UNIX OS: Solaris 8, Solaris 9
(Continue reading)

Adam Nielsen | 1 Jun 2006 01:49
Picon
Picon
Favicon

Re: Unable to use 'valid users' from Active Directory

> I am able to return users and groups using wbinfo -g and -u. Samaba
> will even allow users to connect that are in our domain. The problem
> exist while trying to narrow down permissions to a share.
> 
> [public]
>    comment = Public Stuff
>    path = /home/
>    public = yes
>    read only = no
>    valid users =  <at> "UFAD\_IFAS-FRE-USERS_autoGS"

Is this a group?  Have you tried with a specific user?  Did you try
removing the quotes?  This works for me:

  valid users =  <at> DOMAIN\user

But I haven't tried it with an AD group.  If you can't get it to work
with an individual user then it's probably a problem with your
configuration.

Cheers,
Adam.
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Adam Nielsen | 1 Jun 2006 01:57
Picon
Picon
Favicon

Re: Cannot delete a file, but I can create and edit it !!

> In Samba, I can create a file in his directory (which tells me the
> acl's are working) and I can edit it and save it as well.
> However, I cannot rename it or delete it. And, he can
> only read the file. He cannot edit, rename it or
> delete it either. I am the owner of the file, I should
> be able to delete it, right?
> 
> BTW, I am able to create and delete directories just
> fine!!

This sounds like the exact same problem I'm having - I just tried it
and I can indeed delete the directories I create, but not the files.

This is sounding more and more like a bug - you'll probably want to
follow the thread above called "Cannot delete files from samba share"
as I suspect it's the same problem.

Cheers,
Adam.
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Adam Nielsen | 1 Jun 2006 02:01
Picon
Picon
Favicon

Re: Cannot delete files from samba share

> Can you send me a debug level 10 log from the smbd when you attempt to
> delete the file along with the name of the file you're trying to
> delete.

Hi Jeremy,

Have you had a chance to check the debug level 10 log I sent you when I
was having this problem?  This seems like exactly the same issue, and
there's now a third person having this problem (see the message from
"s b" a couple of threads after this one.)

It's looking more and more like it could be a bug in Samba...especially
as it allows you to delete directories and not files, even though they
have the same permissions!

Cheers,
Adam.
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Jeremy Allison | 1 Jun 2006 02:02
Picon
Favicon

Re: Cannot delete files from samba share

On Thu, Jun 01, 2006 at 10:01:07AM +1000, Adam Nielsen wrote:
> > Can you send me a debug level 10 log from the smbd when you attempt to
> > delete the file along with the name of the file you're trying to
> > delete.
> 
> Hi Jeremy,
> 
> Have you had a chance to check the debug level 10 log I sent you when I
> was having this problem?  This seems like exactly the same issue, and
> there's now a third person having this problem (see the message from
> "s b" a couple of threads after this one.)
> 
> It's looking more and more like it could be a bug in Samba...especially
> as it allows you to delete directories and not files, even though they
> have the same permissions!

Nope - I forgot about the debug level 10 log :-(. In my defense,
things get busy around here. Now I've (obviously :-) got more time
can you resend with the version of Samba you reproduced it on and
the name of the file you're trying to delete. Let's start this from
scratch again ! (sorry :-).

Jeremy.
--

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Gmane