[Samba] Debian 9.8 and vanbelle-repos

[L.P.H. van Belle]

Good morning Stefan,  

Hmm, yes, i notice some things also with the debian 9.8 upgrade, that killed my kopano server. 
Was a long night yesterday.  :-( but fixed. 

Ive done all my servers here and no samba problems. 
I do know of more problems with docker. 
There is a small difference, i dont know exact were, but i detected that on the kopano forum.
Kopano builds it packages within docker, the resulting packages did not work correctly without docker. 
This is a systemd setting thats different. 



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Stefan G. Weichinger via samba
> Verzonden: vrijdag 22 februari 2019 9:12
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Debian 9.8 and vanbelle-repos
> 
> Am 21.02.19 um 19:19 schrieb Stefan G. Weichinger via samba:
> > Am 21.02.19 um 16:51 schrieb Stefan G. Weichinger via samba:
> >> Am 21.02.19 um 15:49 schrieb L.P.H. van Belle via samba:
> >>> Or... 
> >>>
> >>> Set the creator group option. 
> >>>
> >>> [Daten]
> >>> 	comment = Daten
> >>> 	create mask = 3660
> >>> 	directory mask = 3770
> >>
> >> did so, they test now. thanks
> > 
> > username and groupname aren't "mapped" into stuff like ls , 
> smbstatus etc
> > 
> > nsswitch.conf?
Most probely yes. 


> 
> and ....
> 
> somehow something is wrong here and I can't spot it so far
> 
> this morning they couldn't reach samba, after a restart of samba it
> worked again
> 
> The only changes this week were:
> 
> * upgrade to debian 9.8
> * installation of docker daemon on that server
> 
> We faced a problem with backup (Amanda ...) as well, so I disabled
> docker yesterday evening and flushed the iptables. So docker wasn't up
> this morning.
> 
> I know of the option to forbid docker to mess with the iptables ... in
> general we ran without any rules on that machine. Will test that.
> 
> But why a failure without rules?
I dont know docker so can really tell. 

> 
> and why that username issue mentioned above?
Thats a good one. 

Check, nsswitch.conf idmap.conf resolv.conf again. 
First thing i would try.

/etc/idmapd.conf
Set these to settings.

Domain = interal.dnsdomain.tld
Local-Realms = YOURREALM

Reboot 

Ive few servers left to update, i'll do that now and report back. 
> 
> Could debian 9.8 have broken something by changing a library or so?

Not that i know but the fix list was pretty big compaired to previous ones. 
But why are you having problems and im not, ill go through some servers here, see if i can find something. 

Greetz, 

Louis