wbinfo and nss addendum and a question to filepermissions

Thorsten Trautwein-Veit thorsten.trautwein-veit at schulergroup.com
Wed Nov 19 14:58:07 GMT 2008


Hi all,
1.)
setting
export WINBINDD_SOCKET_DIR=/usr/local/samba/var/run/winbindd
works in wbinfo to get users (wbinfo -u). Getting the group don't work (
wbinfo -g)

#0  winbindd_get_response (response=0xbfd1a67c) at nsswitch/wb_common.c:617
#1  0x08054f8f in winbindd_request_response (req_type=18,
request=0xbfd1b324, response=0xbfd1a67c) at nsswitch/wb_common.c:637
#2  0x08052de4 in print_domain_groups (domain=0x0) at nsswitch/wbinfo.c:954
#3  0x080539a0 in main (argc=2, argv=0xbfd1bfb4, envp=0xbfd1bfc0) at
nsswitch/wbinfo.c:1090
(tgdb) p response->result
$28 = WINBINDD_ERROR

(tgdb) c
Error looking up domain groups
Continuing.

If i do an ls -l on my nss system it shows :
root at pc303581 /srv/data/vers
 # ls -l
insgesamt 204
drwxr-xr-x  2 Administrator 3000001    36 2008-11-19 13:27 ace/
-rw-r--r--  1 Administrator 3000001     0 2008-11-18 15:39 ads_bin_clear.txt
-rw-r--r--  1 Administrator 3000001     0 2008-11-18 15:21 ads_bin.txt
-rw-r--r--  1 Administrator 3000001     9 2008-11-18 15:42 ads_unallowed.txt
-rw-r--r--  1 Administrator 3000001     0 2008-11-18 14:50
alternate_data_stream.txt
-rw-r--r--  1 Administrator 3000001 17336 2008-11-18 14:34 Angler-2.bmp
-rw-r--r--  1 Administrator 3000001 17336 2004-08-04 15:00 Angler.bmp
drwxr-xr-x  2 Administrator 3000001     6 2008-11-18 15:23 dir_ads/
-rw-r--r--  1 Administrator 3000001 21630 2007-08-23 11:03 filetype3.ico
-rw-r--r--  1 Administrator 3000001     0 2008-11-19 11:37
permissions-cut-out.txt
-r--rwxr--+ 1 Administrator 3000001     0 2008-11-19 15:34
permissions-setfacl.txt*
-rw-r--r--  1 Administrator 3000001  5120 2008-11-18 14:35 Thumbs.db
-rw-r--r--  1 Administrator 3000001     4 2008-11-18 14:33 vers.txt.txt

The gid is not resolved.

# ls -l /lib/libnss*
-rw-r--r-- 1 root root 26332 2008-06-08 11:48 /lib/libnss_compat-2.3.6.so
lrwxrwxrwx 1 root root    22 2008-11-11 09:28 /lib/libnss_compat.so.2 ->
libnss_compat-2.3.6.so
-rw-r--r-- 1 root root 17840 2008-06-08 11:48 /lib/libnss_dns-2.3.6.so
lrwxrwxrwx 1 root root    19 2008-11-11 09:28 /lib/libnss_dns.so.2 ->
libnss_dns-2.3.6.so
-rw-r--r-- 1 root root 34276 2008-06-08 11:48 /lib/libnss_files-2.3.6.so
lrwxrwxrwx 1 root root    21 2008-11-11 09:28 /lib/libnss_files.so.2 ->
libnss_files-2.3.6.so
-rw-r--r-- 1 root root 17856 2008-06-08 11:48 /lib/libnss_hesiod-2.3.6.so
lrwxrwxrwx 1 root root    22 2008-11-11 09:28 /lib/libnss_hesiod.so.2 ->
libnss_hesiod-2.3.6.so
-rw-r--r-- 1 root root 34320 2008-06-08 11:48 /lib/libnss_nis-2.3.6.so
-rw-r--r-- 1 root root 38340 2008-06-08 11:48 /lib/libnss_nisplus-2.3.6.so
lrwxrwxrwx 1 root root    23 2008-11-11 09:28 /lib/libnss_nisplus.so.2
-> libnss_nisplus-2.3.6.so
lrwxrwxrwx 1 root root    19 2008-11-11 09:28 /lib/libnss_nis.so.2 ->
libnss_nis-2.3.6.so
-rwxr-xr-x 1 root root 92616 2008-11-19 08:16 /lib/libnss_winbind.so*
lrwxrwxrwx 1 root root    17 2008-11-19 08:17 /lib/libnss_winbind.so.1
-> libnss_winbind.so*
lrwxrwxrwx 1 root root    17 2008-11-19 08:17 /lib/libnss_winbind.so.2
-> libnss_winbind.so*

root at pc303581 /srv/data/vers
 # cat /etc/nsswitch.conf
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.

passwd:         files winbind
group:          files winbind
shadow:         compat

hosts:          files dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis

Any ideas ? Should i recompile with --enable-nss-wrapper ?

2.)
Filepermissions work great as long as they are stored in the Attribute
"NTACL". Is it true that there is no mapping between file acl ( setfacl
) and samba ?

Cheers,
at all


-- 
Freundliche Grüße / Best regards

Thorsten Trautwein-Veit
Dipl.-Ing. (FH)

Schuler Cartec GmbH & Co. KG
EDV
Bahnhofstraße 41
73033 Göppingen

URL: http://www.schulergroup.com
E-Mail-Pflichtangaben (gemäß EHUG): http://pflichtangaben.schulergroup.com



More information about the samba-technical mailing list