[Samba] preexec and msdfs proxy

[Greg Enlow]

ok ok ...
Names have been changed to protect the inoccent.

This installation is being used to mitigate a server migration by providing read-only access to the new shares under the old server name.  We have duplicated all the current shares on the new server (NETAPP) as {share name}_ro and created equivalent shares on the SAMBA installation as DFS proxies that point the client to that read-only share.  As a neat bell & whistle we had hoped to be able to let the user know that they were using an obsolete URL (server name) by sending them a message/mail/whack on the head.  At the moment neither the "root preexec" or the plain "preexec" are doing anything, much to our chagrin. 


[global]
log level = 3

netbios name = COOLIO
workgroup = DE
security = ADS
realm = DE.COOLPLACE.COM
dedicated keytab file = /etc/krb5.keytab
kerberos method = secrets and keytab
encrypt passwords = yes
allow trusted domains = yes
local master = no
domain master = no
server services = +smb -s3fs
dcerpc endpoint servers = +winreg +srvsvc

idmap config *:backend    = tdb
idmap config *:range      = 1100-999999

idmap config DE:backend   = rid
idmap config DE:range     = 1000000 -19999999

idmap config APAC:backend = rid
idmap config APAC:range   = 20000000-29999999

idmap config EMEA:backend = rid
idmap config EMEA:range   = 30000000-39999999


winbind use default domain = yes
winbind enum users = no
winbind enum groups = no
winbind nested groups = yes
winbind expand groups = 5
winbind refresh tickets = yes
winbind max domain connections = 10

create krb5 conf = no

template shell = /bin/bash
template homedir = /home/%D/%U

client NTLMv2 auth = yes

printcap name = /dev/null
disable spoolss = yes
show add printer wizard = no
load printers = no

host msdfs = yes

[Drachenboot$]
root preexec = /etc/samba/preexec_root.sh //REALBIGFS/Drachenboot$ %H/Drachenboot %D %U Drachenboot
preexec = echo \"%u connected to %S from %m (%I)\" >> /tmp/users.txt
msdfs root = yes
msdfs proxy = \REALBIGFS\Drachenboot_ro$
read only = yes
browseable = no
follow symlinks = no
hide unreadable = yes

--

Greg Enlow
grenlow at hk.mailbox.de



On 12 May 2015, at 23:02, Rowland Penny wrote:

On 12/05/15 20:27, Greg Enlow wrote:
> To the powers the might be,
> 
> it seems that the "(root) preexec" function does not work when used with "msdfs proxy".  Is that just "my" problem, an error or by design?
> If it is by design, I would be curious to know why.
> If it is an error, can it be addressed fairly quickly?
> If it is none of the above, then what information will be needed to help diagnose "my" issue?
> 
> I don't have the line I use with me for the preexec, but I did attempt the example in he samba man pages
> i.e.:
> (root) preexec = echo "hello world!" >> /tmp/mycutelog.txt
> no worky worky.
> 
> Thanks in advance!
>    
> --
> 
> Greg Enlow
> grenlow at hk.mailbox.de
> 
> 
> ______________________________________________________________________
> This email has been scanned by the Symantec Email Security.cloud service.
> Zu buchen bei Hegel & Koch - http://www.hk-online.de
> ______________________________________________________________________

More info, more info

Post your smb.conf

Rowland

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
Zu buchen bei Hegel & Koch - http://www.hk-online.de
______________________________________________________________________


______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
Zu buchen bei Hegel & Koch - http://www.hk-online.de
______________________________________________________________________