[Samba] Samba-3.0.23 problem

Michael St. Laurent mikes at hartwellcorp.com
Sun Feb 4 20:51:16 GMT 2007


We had to power down all servers today for electrical maintenance in the
building and for some reason I began having access problems related to
the valid users lists when power was restored.
 
The dialog from the 'Samba-3.0.23 broke my network' thread seemed as if
it might be related even though I had not performed any software upgrade
so I tried adding the group mappings as discussed in that thread.  It
didn't seem to help.  If I remove the valid users parameter it works
fine.
 
The below logfile snippet shows that it's having a problem with the
group membership aspect of the valid users list.  Please note that user
'mikes' is most definitely a member of the unix group 'mis':
 
  looking for user mikes of domain (ANY) in netgroup mis
[2007/02/04 12:43:17, 10] passdb/lookup_sid.c:lookup_name(64)
  lookup_name: HCNAS\mis => HCNAS (domain), mis (name)
[2007/02/04 12:43:17, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2007/02/04 12:43:17, 3] smbd/uid.c:push_conn_ctx(345)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2007/02/04 12:43:17, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2007/02/04 12:43:17, 5] auth/auth_util.c:debug_nt_user_token(448)
  NT user token: (NULL)
[2007/02/04 12:43:17, 5] auth/auth_util.c:debug_unix_user_token(474)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2007/02/04 12:43:17, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/02/04 12:43:17, 10] smbd/share_access.c:user_ok_token(208)
  User mikes not in 'valid users'
[2007/02/04 12:43:17, 2] smbd/service.c:make_connection_snum(580)
  user 'mikes' (from session setup) not permitted to access this share
(exec_share)
[2007/02/04 12:43:17, 3] smbd/error.c:error_packet(146)
  error packet at smbd/reply.c(676) cmd=117 (SMBtconX)
NT_STATUS_ACCESS_DENIED
 
[root at hcnas samba]# groups mikes
mikes : avante mis
[root at hcnas samba]#
 
[exec_share]
        comment = Exec Share
        path = /usr/netshare/exec_share
        writeable = Yes
        valid users = @exec, @exasst, @mis
        admin users = @mis
        force group = exec
        force create mode = 0666
        force directory mode = 0777
 
Please help!



More information about the samba mailing list