[Samba] rights -- structures

[Maurizio Caloro]

> Thanks for you quick Answer!
>
> Add this to smb.conf
>   [global]
>          realm = CARAG.LOCAL
>          workgroup = CARAG
>          netbios name = SRVCAR005
>          security = domain

Why have you jumped to 'domain' from 'ADS' ?

'domain' is used with an NT4-style domain and 'ADS' is used with an 'AD'  
domain, what do you have ?
>> I have as Domain Server 4.13.2, Windows 10 Clients


>          vfs objects = acl_xattr
>
>          idmap config * : backend = tdb
>          idmap config * : range 10000-199999
>Do you really need such a large range for the default domain, bearing in
mind that it is mostly for the well known SIDS and there are less than two
hundred of those.
>> how I can here minimize?, or also to delete if only one domain are
running?


>          idmap config DOMAIN : backend = autorid
Why 'autorid' ? do you have more than one domain ? and if you are using
autorid then you don't need the default ('*') domain lines, it includes
them.

>> OK I have still delete this line, yes I have only one Domain Server here
running.

Are you starting winbind before smbd ?

>>I have still the problem that smbd don’t start
>>root at srvcar005:/home/caragadm# systemctl status smbd
>>● smbd.service - Samba SMB Daemon
>>  Loaded: loaded (/lib/systemd/system/smbd.service; enabled; vendor
preset: enabled)
>>  Active: failed (Result: exit-code) since Mon 2020-12-14 10:05:21 CET;
37s ago
>>   Docs: man:smbd(8)
>>         man:samba(7)
>>        man:smb.conf(5)
>> Process: 657 ExecStartPre=/usr/share/samba/update-apparmor-samba-profile
(code=exited, status=0/SUCCESS)
>> Process: 661 ExecStart=/usr/sbin/smbd --foreground --no-process-group
$SMBDOPTIONS (code=exited, status=255/EXCEPTION)
>> Main PID: 661 (code=exited, status=255/EXCEPTION)
>>
>>Dec 14 10:05:20 srvcar005.carag.local systemd[1]: Starting Samba SMB
Daemon...
>>Dec 14 10:05:21 srvcar005.carag.local smbd[661]: [2020/12/14
10:05:21.261241,  0]
../source3/auth/auth_util.c:1382(make_new_session_info_guest)
>>Dec 14 10:05:21 srvcar005.carag.local smbd[661]:   create_local_token
failed: NT_STATUS_NO_MEMORY
>>Dec 14 10:05:21 srvcar005.carag.local smbd[661]: [2020/12/14
10:05:21.263609,  0] ../source3/smbd/server.c:2000(main)
>>Dec 14 10:05:21 srvcar005.carag.local smbd[661]:   ERROR: failed to setup
guest info.
>>Dec 14 10:05:21 srvcar005.carag.local systemd[1]: smbd.service: Main
process exited, code=exited, status=255/EXCEPTION
>>Dec 14 10:05:21 srvcar005.carag.local systemd[1]: smbd.service: Failed
with result 'exit-code'.
>>Dec 14 10:05:21 srvcar005.carag.local systemd[1]: Failed to start Samba
SMB Daemon.
>>root at srvcar005:/home/caragadm# vi /etc/samba/smb.conf

>>Also cheching Winbind are telling me are joy Join?
root at srvcar005:/home/caragadm# systemctl status winbind
● winbind.service - Samba Winbind Daemon
   Loaded: loaded (/lib/systemd/system/winbind.service; disabled; vendor
preset: enabled)
   Active: failed (Result: exit-code) since Mon 2020-12-14 10:10:56 CET; 2s
ago
     Docs: man:winbindd(8)
           man:samba(7)
           man:smb.conf(5)
  Process: 728 ExecStart=/usr/sbin/winbindd --foreground --no-process-group
$WINBINDOPTIONS (code=exited, status=1/FAILURE)
 Main PID: 728 (code=exited, status=1/FAILURE)

Dec 14 10:10:56 srvcar005.carag.local systemd[1]: Starting Samba Winbind
Daemon...
Dec 14 10:10:56 srvcar005.carag.local winbindd[728]: [2020/12/14
10:10:56.590666,  0]
../source3/winbindd/winbindd_cache.c:3160(initialize_winbindd_cach
Dec 14 10:10:56 srvcar005.carag.local winbindd[728]:
initialize_winbindd_cache: clearing cache and re-creating with version
number 2
Dec 14 10:10:56 srvcar005.carag.local winbindd[728]: [2020/12/14
10:10:56.599231,  0]
../source3/winbindd/winbindd_util.c:1255(init_domain_list)
Dec 14 10:10:56 srvcar005.carag.local winbindd[728]:   Could not fetch our
SID - did we join?
Dec 14 10:10:56 srvcar005.carag.local winbindd[728]: [2020/12/14
10:10:56.600250,  0]
../source3/winbindd/winbindd.c:1454(winbindd_register_handlers)
Dec 14 10:10:56 srvcar005.carag.local winbindd[728]:   unable to initialize
domain list
Dec 14 10:10:56 srvcar005.carag.local systemd[1]: winbind.service: Main
process exited, code=exited, status=1/FAILURE
Dec 14 10:10:56 srvcar005.carag.local systemd[1]: winbind.service: Failed
with result 'exit-code'.
Dec 14 10:10:56 srvcar005.carag.local systemd[1]: Failed to start Samba
Winbind Daemon.
root at srvcar005:/home/caragadm#

>Rowland