[Samba] Re: Re: samba 3.0 vfs module problem

Rainer Link link at foo.fh-furtwangen.de
Tue Apr 13 18:43:46 GMT 2004

Hallo at WERKZEUGPROFI.de wrote:
> [2003/12/12 06:38:00, 3] smbd/vfs.c:vfs_init_custom(227)
>    Initialising custom vfs hooks from [vscan-mksd.so]
> [2003/12/12 06:38:00, 5] lib/module.c:smb_probe_module(102)
>    Probing module 'vscan-mksd.so'
> [2003/12/12 06:38:00, 5] lib/module.c:smb_probe_module(113)
> *******************************************************
>    Probing module 'vscan-mksd.so': Trying to load from 
> /usr/local/samba/lib/vfs/vscan-mksd.so.so
> *******************************************************

> [2003/12/12 07:41:34, 2] lib/module.c:do_smb_load_module(64)
>    Module '/usr/local/samba/lib/vfs/vscan-mksd.so.so' loaded

> Could you solve this problem meanwhile?
> I'm fighting with same problem.

For Samba 3.x the correct setting is simply
	vfs objects = vscan-mksd

No ".so" extension, no path at all. See man 5 smb.conf for details.

> With the help of your thread, i'm able to load the vscan-clamav module, but it seems to me, that the scanner doesn't work. If i copy the EICAR test to the share, there is no warning or anything else.

samba-vscan logs everything via syslog, so check /var/log/messages. 
Moreover, please read through the INSTALL file of samba-vscan, here's a 
quote of the upcoming 0.3.5 release (support of libclamav is not
available in earlier releases, so please just skip it):

- Clam AntiVirus
   samba-vscan (clamav module) can be configured to use for the
   Clam AntiVirus daemon (clamd) or the ClamAV library (libclamav).
   Usage of clamd is default.

   You need Clam AntiVirus Daemon from http://www.clamav.net/. As socket 
   /var/run/clamd is assumed. You can modify this via CLAMD_SOCKET_NAME
   in vscan-clamav.h or via clamd socket name = <string> in the run-time
   configuration file.
   The socket must have read/write permissions for everyone (i.e.
   chmod a+rw /var/run/clamd), as smbd runs under various user IDs (i.e.
   "nobody" or as the user "xyz", when user "xyz" is connected to his home
   directory). This could be a security risk, as now an attacker could pass
   arbitrary commands to Clam AntiVirus Daemon, so we need a better
   solution here ...

   To use the ClamAV library instead, use the --with-clamav-lib switch for
   ./configure. Keep in mind, if vscan-clamav is build and linked for
   libclamav, you must rebuild the module if you decide to use clamd


best regards,
Rainer Link

More information about the samba mailing list