[Samba] Totally missing the mark here
Andrew Bartlett
abartlet at samba.org
Tue May 27 19:51:46 MDT 2014
On Tue, 2014-05-27 at 13:38 -0400, Steve Campbell wrote:
> On 5/27/2014 12:36 PM, Rowland Penny wrote:
> > On 27/05/14 17:24, Steve Campbell wrote:
> >>
> >> On 5/27/2014 11:54 AM, Rowland Penny wrote:
> >>> On 27/05/14 16:06, Steve Campbell wrote:
> >>>>
> >>>> On 5/27/2014 10:29 AM, Rowland Penny wrote:
> >>>>> On 27/05/14 15:04, Steve Campbell wrote:
> >>>>>> <snip>
> >>>>>>> You are starting to confuse me now ;-)
> >>>>>>> I thought that you were using the sernet packages, but from the
> >>>>>>> above command it would seem that you have compiled samba4 yourself.
> >>>>>> How would the sernet packages differ from the compiled version?
> >>>>>> Doesn't it give me mostly the same executables?
> >>>>>
> >>>>> Well yes, but they will be found in different places, take
> >>>>> samba-tool for instance, with sernet it will be in /usr/bin , but
> >>>>> if you compile samba4 yourself it will be found in
> >>>>> /usr/local/samba/bin
> >>>>>
> >>>>>>>
> >>>>>>> I personally always pass all the info at once i.e.
> >>>>>>> samba-tool domain provision --realm=example.com --domain=EXAMPLE
> >>>>>>> --adminpass=P4ssw0rd* --use-rfc2307 --server-role='dc'
> >>>>>>>
> >>>>>>> Your realm is usually the same as your DNS domain name and the
> >>>>>>> domain should be the first part of your realm but in UPPERCASE ;-)
> >>>>>>
> >>>>>> OK, I'm almost certain what I used for the interactive answers
> >>>>>> were not correct. How would I start over?
> >>>>>>
> >>>>> I would suggest that you first of all create a VM to practise in
> >>>>> (you can take snapshots of this) , then decide whether to go with
> >>>>> the sernet packages, use the backport packages (if using wheezy)
> >>>>> or compile samba yourself, once you make your decision, stick with
> >>>>> it.
> >>>>>
> >>>>>> Regardless of how bad the "Using Samba" book might be for a Samba
> >>>>>> 4 implementation, it does provide very good information about
> >>>>>> what Domains are and how they are viewed (at least for me, the
> >>>>>> Windows Domain idiot). I don't mean to argue.
> >>>>>>
> >>>>> The only problem with that argument (for want of a better word) is
> >>>>> that there are two types of domains, NT4 and AD, Samba4 can do
> >>>>> both, but you really should be aiming for an AD domain and there
> >>>>> is a lot of better info out there in the internet, than what you
> >>>>> will find in that book.
> >>>>>
> >>>>>> I feel sort of guilty for using the list as a learning tool.
> >>>>>> There just isn't much out there other places.
> >>>>>
> >>>>> Do not feel guilty, we ALL had to start somewhere and as far as I
> >>>>> am concerned we should help others as far as we can. As for
> >>>>> finding information on the internet, I suspect that you are not
> >>>>> using the right search terms, try using 'active directory' or 'AD'
> >>>>> instead of 'samba' or 'samba4'.
> >>>>>
> >>>>> Rowland
> >>>>>
> >>>>>>
> >>>>>>
> >>>>>>>
> >>>>>>> NOTE TO MARC:
> >>>>>>> This really should be in the wiki, not just telling people to do
> >>>>>>> it interactively, especially if you are not going to show the
> >>>>>>> questions that will be asked. Would you like me to re-write that
> >>>>>>> section and send it to you ?
> >>>>>>>
> >>>>>>>>
> >>>>>>>> I'm using the old version 3 book to make sure I understand the
> >>>>>>>> questions that "--interactive" asks, in particular, the ones
> >>>>>>>> about the domain.
> >>>>>>>>
> >>>>>>> Please take that copy of 'using Samba' and get rid of it ;-)
> >>>>>>> Just refer to the wiki and ask questions here.
> >>>>>>>
> >>>>>>>> I'm fairly certain that those domain questions might be the
> >>>>>>>> biggest part of the problem.
> >>>>>>>>
> >>>>>>>
> >>>>>>> Could be.
> >>>>>>>
> >>>>>> steve
> >>>>>
> >>>> So while we were talking, the Windows guy decided he wanted to try
> >>>> something different. He found some instructions using
> >>>> configure/make and was trying to do that. I stopped him before
> >>>> doing so.
> >>>>
> >>>> Upon trying to remove sernet and then update sernet, we discovered
> >>>> that some of the packages are being updated, and we couldn't do
> >>>> either remove or update the packages.
> >>>>
> >>>> So I removed the individual packages (as opposed to all the
> >>>> packages as a wildcard). We are now installing from the git
> >>>> directories. He's a little concerned because he's not a Linux guy
> >>>> and I'm only going to be around for a few months, and packages are
> >>>> just so easy for a new guy.
> >>>
> >>> You now seem to be trying to use the development files, these are
> >>> not forced to be stable, I would recommend that you use the latest
> >>> stable package (if you are going to compile it yourself) :
> >>> samba.org/samba/ftp/stable/samba-4.1.7.tar.gz
> >>>
> >>> Rowland
> >>>
> >>>>
> >>>> I'll inform you of our progress.
> >>>>
> >>>> I hadn't considered the AD-vs-NT4 domains. Glad you mentioned that.
> >>>> And thanks for the understanding and patience.
> >>>>
> >>>> steve
> >>>
> >> Rowland,
> >>
> >> Right again. He downloaded 4.2-pre
> >>
> >> We've wiped that and downloaded the file you suggested. I've unzipped
> >> and untarred that. There is a configure in the root folder
> >> (samba-4.1.7). The wiki indicates that there should be a samba-master
> >> folder (when using git). Can I assume that I should use the configure
> >> in that root folder?
> > Yes, it is just a case of:
> > ./configure
> > make
> > make install
> >
> > This supposes that you are running as root, otherwise the last command
> > will have to be run with sudo.
> > I take it that you have installed all the required packages to compile
> > Samba, if you are not sure, take a look here:
> > https://wiki.samba.org/index.php/Samba_4/OS_Requirements
> >
> > Install everything that you haven't got installed, then start the
> > compile, good luck ;-)
> >
> > Rowland
> I'm running as root. I have everything installed that is required.
>
> That 4.2 version would allow me to provision.
> The new 4.1.7 version fails on provision with the following:
>
> ldb: module schema_load initialization failed : No such object
> ldb: module rootdse initialization failed : No such object
> ldb: module samba_dsdb initialization failed : No such object
> ldb: Unable to load modules for /usr/local/samba/private/sam.ldb: (null)
> samdb_connect failed
> VFS connect failed!
> ERROR(<class 'samba.provision.ProvisioningError'>): Provision failed -
> ProvisioningError: Your filesystem or build does not support posix ACLs,
> which s3fs requires. Try the mounting the filesystem with the 'acl' option.
> File
> "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/domain.py",
> line 398, in run
> use_rfc2307=use_rfc2307, skip_sysvolacl=False)
> File
> "/usr/local/samba/lib64/python2.6/site-packages/samba/provision/__init__.py",
> line 2052, in provision
> raise ProvisioningError("Your filesystem or build does not support
> posix ACLs, which s3fs requires. Try the mounting the filesystem with
> the 'acl' option.")
Sorry about the useless error message. Please remove your private
directory and start again, the issue comes from re-running provision and
a bug we had in Samba. A fix for this will be in 4.2 (I don't recall if
I backported it).
Andrew Bartlett
--
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
More information about the samba
mailing list