[Samba] Password sync in 3.6.0 on OS X 10.7, Lion

[Martin Diers]

On 7/22/64 1:59 PM, Jeremy Allison wrote:
> On Fri, Aug 19, 2011 at 09:11:22AM -0500, Martin Diers wrote:
>> My company, which is a mac-heavy shop in the printing industry, needed
>> to migrate to a faster file server. As our directory trees are very
>> large, both Samba, and Netatalk were bogging down badly on our Linux
>> server (Samba, due to heavy CPU usage during directory listings - the
>> case-sensitive file system issue, and netatalk because the cnid db was
>> getting too big).
> Did you look into the Samba large directory HOWTO to fix this ?
>
> http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/largefile.html
>
Yes, I did. Forcing all filenames to upper or lower case was not an
option in my company. Our Prepress department immediately rejected this.
Otherwise I could have just moved all the Mac users over to SMB and
retired AFP.

Also, the bulk of our network is on Mac, so this was a huge boost in
performance to have native AFP. (Spotlight works over the network, for one).
>> smbd.log shows nothing at all.
>>
>> If the user's password is changed using the root account, no errors of
>> any kind are logged, and no smbpasswd sync takes place.
>>
>> I know that pam_smbpass works in FreeBSD, which also uses OpenPam, so I
>> doubt it is an OpenPam incompatibility. I'm just not sure where to look
>> next.
> Might be a modified version of OpenPam used by MacOSX - not sure.
>
> Can you look in the Darwin source code to see when PAM_AUTHINFO_UNAVAIL
> is returned ?
>
> Jeremy.
>
I guess that's my next step. Pulling down Darwin 11 OpenPam now. Not
sure I'm qualified to dig too deeply into this, but I'll give it a shot.

Martin