[Samba] Samba 4 DC and member server, rfc3207, winbind, printing, asynchronous I/O - Problems and Fixes

Tue Nov 19 02:39:44 MST 2013

On 19/11/13 08:48, L.P.H. van Belle wrote:
> Try using the sernet samba packages.
> im using debian and ubuntu and im using this version.
>
> smbd -V   :  Version 4.1.1-SerNet-Ubuntu-7.precise
>
> these do contain the aio
> /usr/lib/x86_64-linux-gnu/samba/vfs/aio_fork.so
> /usr/lib/x86_64-linux-gnu/samba/vfs/aio_posix.so
> /usr/lib/x86_64-linux-gnu/samba/vfs/aio_pthread.so
>
>
> Louis
>
>
>
>> -----Oorspronkelijk bericht-----
>> Van: busywater at gmail.com
>> [mailto:samba-bounces at lists.samba.org] Namens Kinglok, Fong
>> Verzonden: dinsdag 19 november 2013 7:53
>> Aan: samba at lists.samba.org
>> Onderwerp: [Samba] Samba 4 DC and member server, rfc3207,
>> winbind, printing, asynchronous I/O - Problems and Fixes
>>
>> Dear all,
>>
>> After 4 days of sleepless nights, I have manged to rebuild the
>> samba farm.  I believe the following discovery might interest
>> our samba community.
>>
>> ------------------------------------------------
>> System setting:
>> I have deployed samba 4.1.0 system for my working
>> organisation.  It comprised of 2 DCs and 1 member server.
>> 2 DCs maintains AD for login and the member server host files
>> for user access.
>>
>> The installation of DCs and member server follows the samba
>> corresponding official how-tos.  For flawless file access, the
>> domain provision was done with RFC2307 in DCs.
>> ------------------------------------------------
>> Note:
>> 1.  Effective GID of AD users:  It is a must that all users
>> are added through ADUC in way that Unix attributes like UID
>> and GID are added also.  I have to repeat that the effective
>> GID of the user follow the user’s primary *AD* group.  Merely
>> changing group setting in the tab Unix Attributes will not
>> work!  (This should be added to the member server how-to!).
>>
>> 2.  GID range suggestion:  The default group of AD user is
>> Domain User whose GID should be setup through ADUC.  I
>> recommend the GID should be more than 1000 in order not to
>> clash with the system group in unix side.
>>
>> 3.  Printing bug report:  In order to access files in the
>> member server, it is a must for me to assign UID to
>> administrator and its group Domain Admin with another GID.
>> However, I discover, when adding print driver following the
>> Samba 4 Printing how-to, there is always an error of
>> 0x0000001f error.  After digging in the log level 10, the
>> print driver upload involves access to a LDB file situated in
>> /usr/local/samba/private/sam.ldb.d.  The user should be
>> Administrator (as I login as administration in windows
>> client).  Through mapping uid and gid through rfc2307, the
>> effective uid is 6000 and its gid is 3085.  This in turn
>> create problem in access the directory and cannot edit the LDB
>> file.  This cause failure in adding print driver.  Is it a bug?
>>
>> In fact, there is a bug report about it:
>> https://bugzilla.samba.org/show_bug.cgi?id=10089
>>
>> Now, there is no other bug but do a dirty fix:
>> chmod 755 /usr/local/samba/private/sam.ldb.d
>>
>> The relevant log:
>> [2013/11/19 12:00:05.530215,  2, pid=13968, effective(6000,
>> 3085), real(6000, 0), class=ldb]
>> ../lib/ldb-samba/ldb_wrap.c:71(ldb_wrap_debug)
>>   ldb: ltdb:
>> tdb(/usr/local/samba/private/sam.ldb.d/CN=SCHEMA,CN=CONFIGURATI
>> ON,DC=SAMBA,DC=FOO,DC=EDU,DC=HK.ldb): tdb_open_ex: could not
>> open file
>> /usr/local/samba/private/sam.ldb.d/CN=SCHEMA,CN=CONFIGURATION,D
>> C=SAMBA,DC=FOO,DC=EDU,DC=HK.ldb: Permission denied
>> [2013/11/19 12:00:05.530236, 10, pid=13968, effective(6000,
>> 3085), real(6000, 0), class=ldb]
>> ../lib/ldb-samba/ldb_wrap.c:71(ldb_wrap_debug)
>>   ldb: ldb_asprintf/set_errstring: Unable to open tdb
>> '/usr/local/samba/private/sam.ldb.d/CN=SCHEMA,CN=CONFIGURATION,
>> DC=SAMBA,DC=FOO,DC=EDU,DC=HK.ldb'
>> [2013/11/19 12:00:05.530248,  1, pid=13968, effective(6000,
>> 3085), real(6000, 0), class=ldb]
>> ../lib/ldb-samba/ldb_wrap.c:71(ldb_wrap_debug)
>>   ldb: Unable to open tdb
>> '/usr/local/samba/private/sam.ldb.d/CN=SCHEMA,CN=CONFIGURATION,
>> DC=SAMBA,DC=FOO,DC=EDU,DC=HK.ldb'
>> [2013/11/19 12:00:05.530260,  1, pid=13968, effective(6000,
>> 3085), real(6000, 0), class=ldb]
>> ../lib/ldb-samba/ldb_wrap.c:71(ldb_wrap_debug)
>>   ldb: Failed to connect to
>> '/usr/local/samba/private/sam.ldb.d/CN=SCHEMA,CN=CONFIGURATION,
>> DC=SAMBA,DC=FOO,DC=EDU,DC=HK.ldb' with backend 'tdb': Unable
>> to open tdb
>> '/usr/local/samba/private/sam.ldb.d/CN=SCHEMA,CN=CONFIGURATION,
>> DC=SAMBA,DC=FOO,DC=EDU,DC=HK.ldb'
>> [2013/11/19 12:00:05.530281,  0, pid=13968, effective(6000,
>> 3085), real(6000, 0), class=ldb]
>> ../lib/ldb-samba/ldb_wrap.c:71(ldb_wrap_debug)
>>   ldb: module partition initialization failed : Operations error
>>
>>
>> 4.  Asynchronous I/O - should update how-to:
>> Reading “The Evolution of I/O in samba” by Mr. Jeremy Allison
>> has been enjoyable.  As an system administrator, I am tempted
>> to enable aio in my samba system.  When trying to do this, I
>> found out less information can be found how to enable aio in
>> samba 4.  Initially, I would love to enable vfs_aio_linux.
>> However, I cannot turn on the module and found out that the
>> relevant .so is not built even I have tried "apt-get install
>> libaio-dev" in my debian box.  I have no way but turn to
>> enable vfs_aio_pthread instead by the following smb.conf in
>> the member server:
>>
>> [global]
>>    vfs objects = acl_xattr, aio_pthread
>>    aio read size = 1024
>>    aio write size = 1024
>>
>> The reading performance increases 30% in my test.  I think it
>> is worthwhile to amend it to the official how-to!  And please
>> tell how to build vfs_aio_linux in samba 4 in debian.
>>
>> Hope it helps.
>>
>> Kinglok, Fong
>>
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
Looks like the debian package is still broken, if you compile 4.1.1 
yourself, the aio files are here:
/usr/local/samba/lib/vfs/aio_fork.so
/usr/local/samba/lib/vfs/aio_pthread.so
/usr/local/samba/lib/vfs/aio_posix.so

Rowland