[Samba] smbuser functionality broken?
Kristof Bruyninckx
kristof.bruyninckx at thales-is.com
Tue Aug 30 10:00:31 GMT 2005
Hello,
I recently installed RHEL 4 on 2 systems with the default samba
packages :
samba-common-3.0.10-1.4E
samba-swat-3.0.10-1.4E
samba-3.0.10-1.4E
samba-client-3.0.10-1.4E
Now I have successfully linked this server to our Windows domain. This
means that all the windows IDs are known.
Now we have our systems setup so that the windows accounts are linked to
existing Linux accounts with the smbusers file.
In effect the windows user become there linux counterpart user when
accessing his/her home from windows( e.g explorer ). This means all
files created in windows in there homes, have the linux user permissions
and ownership.
This setup is configured and working on several other server RHEL3 and
HP-UX11.11 servers.
But on the RHEL4 the link to the existing Unix account seems to be
broken?
The users are known, "# id Windows.Account ", will show me there
account. But when they connect with windows( e.g explorer ) they remain
in there windows account and this shouldn't happen. Because of the
smbuser file they should be linked to there existing Linux account, and
all the files they create should contain there linux account permissions
and ownership. But this is not happening! They remain in there windows
account, and files generated are with this accounts ownership and
permissions.
Also the GNU&Linux accounts have been setup by a NIS, in case this would
be important.
contents of the smb.conf, basic setup actually :
[global]
workgroup = <Removed>
realm = <Removed>
server string = Samba server
security = DOMAIN
auth methods = winbind
obey pam restrictions = Yes
password server = <Removed>
username map = /etc/opt/samba/smbusers
log level = 3
log file = /var/log/samba/smbd.log
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = No
ldap ssl = no
idmap uid = 10000-20000
idmap gid = 10000-20000
template shell = /bin/bash
winbind separator = /
winbind cache time = 10
winbind use default domain = Yes
hosts allow = 192.168.1.
[homes]
comment = Home Directories
path = %H
read only = No
[sharing]
comment = File sharing area
path = /home/sharing
read only = No
guest ok = Yes
and the layout of the smbusers file is:
LinuxAccount = DOMAIN\Windows.Account
etc...
also tried layout like this
LinuxAccount = Windows.Account
etc..
but no effect.
Does anybody have any more ideas of what could be wrong?
--
Kristof.Bruyninckx
We are Microsoft. What you are experiencing is not a problem; it is an
undocumented feature.
More information about the samba
mailing list