[Samba] strange access violation in netlogon "network not found" (incl. workaround/solution and question)

Kurt Weiss info at kwnet.at
Sun Dec 29 09:09:00 GMT 2002


i'm using samba since a view years as PDC, so i found this (problem?) 
real late (seems to exist longer):

configuration:
**************
im using samba 2.2.4 and following configuration:

##################################################################
##################################################################
[global]

...
    guest account = nobody
    keep alive = 30
    os level = 65
    security = users
    encrypt passwords = yes

    socket options = TCP_NODELAY SO_SNDBUF=16348 SO_RCVBUF=16348
    map to guest = Bad User
    local master = yes
    wins support = no

    logon script =%G.bat

    domain logons = yes
    domain master = yes
    logon path = \\%N\profiles\%u
    logon drive = i:
    logon home = \\%N\ich
    domain admin group = @***********************

    #using because of problems with visual c++:
    dos filetime resolution = yes
    dos filetimes = yes
...

[netlogon]
    comment = skripts fuer login
    browsable = yes
    path = /netzwerk/netlogon
    writable = yes
    create mask = 0744
    directory mask = 2744

[profiles]
    browsable = no
    nt acl support = no
    path = /netzwerk/profiles
    writable = yes
    create mask = 0600
    directory mask = 0700

...and so on
##################################################################
##################################################################

/netzwerk has the rights 0711
/netzwerk/netlogon HAD the rights 2740 and the owner kurt.win

problem:
********
at time of creation of this network, all was runnig well:
user "kurt" had the right to manipulate the login scripts, and all other 
windows users (group win) where able to run the scripts.

now (i think since update to 2.2.4) i discovered, that i had NO ACCESS 
TO THE NETLOGON SHARE. following failure appeared when i tried to access 
the share: "network not found"

all other shares where running well.

solution / workaround????
*************************
i discovered, that the /netzwerk/netlogon directory NEEDS THE EXECUTION FLAG
(0750 instead of 0740 or 0640)
INSIDE this share all rights are allowed (incl. 0640 a.s.o.)
so i changed the mode of /netzwerk/netlogon to 0741. the scripts (batch) 
have all 0640 as before...
now all is running well again...

question:
*********
why samba needs the execution flag for the directory the share points on?
in versions before 2.2.4 (i've constructed the PDC / w2k on 2.2.2) there 
was no x-flag nessecary to access the share...


-- 
mit freundlichen grüssen
==================================================
www.kwnet.at, one step behind future...

Ing. Kurt Weiß
Softwareentwicklung,  EDV Beratung und - Betreuung
A-6425 Haiming, Gartenweg 3
Tel.: +43 699 1 272 9926 / Fax: +43 699 4 272 9926
E-Mail: info at kwnet.at
Web:
http://www.kwnet.at     http://www.oberlandinfo.at
===================================================
Die Krise ist ein produktiver Zustand.
Man muss ihr nur den Beigeschmack
der Katastrophe nehmen.

Max Frisch,
Schweizer Dramatiker (1911-1991)
==================================================




More information about the samba mailing list