[Samba] Can't get 'root preexec' to run

[Ole Traupe]

Louis, thanks for the idea!

I can execute the script as root on linux (tested this), because I do 
folder (zfs data set) creation via remote ssh commands, so not in the 
domain context.

But the point is that the script won't even execute. Even on failure, 
there would be a log file created by my script which can't be found 
anywhere.

Ole


Am 20.10.2015 um 17:29 schrieb L.P.H. van Belle:
> Looks like my nfsv4 kerberos and root access problem.
>
> In that case, root didnt have a kerberos ticket, and was not allowed to access the needed folder. I think this is a bit the same.
>
> Creating the users and profiles shares from ADUC is working fine for me but
> not scripted from user root.
>
>
> Greetz,
>
> Louis
>
>
>> -----Oorspronkelijk bericht-----
>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ole Traupe
>> Verzonden: dinsdag 20 oktober 2015 16:50
>> Aan: samba at lists.samba.org
>> Onderwerp: Re: [Samba] Can't get 'root preexec' to run
>>
>>
>>
>> Am 20.10.2015 um 11:01 schrieb L.P.H. van Belle:
>>> You tried the pam module mkhomedir ?
>>>
>>> And have your tried :
>>> root preexec = "/usr/local/samba/scripts/createzfshome.sh %U"
>>> or
>>> root preexec = /usr/local/samba/scripts/createzfshome.sh "%U"
>> The latter, with and without quotes around the %U.
>>
>>> Is the homedir on a NFS mounted dir? Exports correctly set?
>> The base dir for the homes is a zfs data set shared via Samba 4 and
>> mounted as cifs to /home on the domain member server (CentOS 6.7). I
>> also tried the log-on on a Windows 7 client, so the user home was
>> addressed as \\server\homebase\userhome in the "Profile" tab of the user
>> properties in the MS ADUC console.
>>
>> As I initially wanted to create a (nested) zfs data set via a
>> "preexec"-invoked script, I haven't tried the mkhomedir pam module.
>>
>> The thing is, that my preexec parameter is not working at all, and that
>> primarily I want to find out, why that is - under what circumstances it
>> should work and what interferes with it.
>>
>> Plus: if I can't get it to work, I can't use nested data sets in a
>> proper manner, and thus will revert to simple subfolders of the home
>> base dir \\server\homebase (which Samba creates just fine).
>>
>> Anyways, thanks for you help, Louis!
>>
>>
>>
>>>
>>>
>>> Greetz,
>>>
>>> Louis
>>>
>>>
>>>> -----Oorspronkelijk bericht-----
>>>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ole Traupe
>>>> Verzonden: dinsdag 20 oktober 2015 10:36
>>>> Aan: samba at lists.samba.org
>>>> Onderwerp: Re: [Samba] Can't get 'root preexec' to run
>>>>
>>>> Meanwhile I managed to search the thread titles of the last 5 years
>>>> manually for "preexec". Is there a better solution for accessing the
>>>> archive of this list?
>>>> --
>>>>
>>>> Still I can't get the DC's [homes] section's 'preexec' command to run
>> on
>>>> user logon (on one of the domain member PCs). Selinux on the DC is off,
>>>> of course. I also tried the log-on on a Win7 domain member instead of
>>>> linux, but still no sign of the script running: my log file is not
>>>> created; zfs data sets neither. I made sure that the log file is
>> created
>>>> even if zfs data set creation fails to some reason.
>>>>
>>>> What might be interfering with this? I read the explanation of the
>>>> 'preexec' command in the manpages but there is no direct reference to
>>>> its use in the [homes] section.
>>>>
>>>> Even remote ideas would be most welcome!
>>>>
>>>> Ole
>>>>
>>>>
>>>> Am 15.10.2015 um 12:05 schrieb Ole Traupe:
>>>>> Hi,
>>>>>
>>>>> I am trying to automatically create nested zfs data sets as home
>>>>> directories. I have a script that works fine if I execute it manually
>>>>> as root (auth via public key). It also creates a short log file in the
>>>>> same dir.
>>>>>
>>>>> However, this section in my smb.conf (on the DC) doesn't seem to
>>>>> execute (no data set created, no log file) on user logon (on a member
>>>>> server):
>>>>>
>>>>> [homes]
>>>>>          comment = User Home Directories
>>>>>          browseable = no
>>>>>          writable = yes
>>>>>          root preexec = /usr/local/samba/scripts/createzfshome.sh %U
>>>>>
>>>>> What might be the reason? Is this conflicting with rfc2307 use?
>>>>>
>>>>> My DC's Samba version is 4.2.2 (on CentOS 6.7), my Samba member server
>>>>> (where the logon happens; either via ssh or with FreeNX terminal
>>>>> software) is Version 3.6.23.
>>>>>
>>>>> Is Samba 3 a problem here?
>>>>>
>>>>> Best,
>>>>> Ole
>>>>>
>>>>> --
>>>>>
>>>>> Dr. Ole Traupe
>>>>> Lab Manager
>>>>>
>>>>> Technische Universität Berlin
>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> To unsubscribe from this list go to the following URL and read the
>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>
>

-- 

Dr. Ole Traupe

Lab Manager

Technische Universität Berlin
Biopsychologie und Neuroergonomie
Institut für Psychologie und Arbeitswissenschaft

Biological Psychology and Neuroergonomics
Department of Psychology and Ergonomics

Postanschrift/Mail to:

TU Berlin
Sekr. MAR 3-2
Marchstr. 23
10587 Berlin
GERMANY

Zimmer/Office: MAR 3.052
Telefon/Phone: (+49) 030 314 22721
Fax: (+49) 030 314 25274

E-Mail: ole.traupe at tu-berlin.de
www.bpn.tu-berlin.de