[HPADM] CIFS/ACL question

From: Thilo Rees, Continum (thilo.rees@continum.net)
Date: Mon May 30 2005 - 05:34:29 EDT


Hi,

I am usinf CIFS 2.01.01 on HPUX11V2. CIFS is running in ADS
security-mode. Winbind is used to map the userers from the W2K3-Domain
(german) to an tdb-file. The user mapping works fine, but i have
probelms with the ACLS: setting the ACLS to a file or folder from
windows leads in "access denied". I'm the owner of the object and have
full access. The really crazy thing is, that it works sometimes, but
later the ACLs are gone (showing standard permissions) and I can't
modify them (Access denied). "getacls" form Unix side displays the
formerly configured ACLS ....
The logfile (loglevel=2) shows:

log.smbd:
open_sockets_smbd: accept: No buffer space available

<host>.log
[2005/05/30 11:22:29, 1] smbd/service.c:make_connection_snum(648)
  192.168.200.11 (192.168.200.11) connect to service tmp initially as
user FRHAWIN\Administrator (uid=10000, gid=10000) (pid 9429)
[2005/05/30 11:29:37, 1] smbd/service.c:close_cnum(835)
  192.168.200.11 (192.168.200.11) closed connection to service tmp
[2005/05/30 11:30:17, 2] smbd/server.c:main(893)
  Changed root to /
[2005/05/30 11:30:17, 2] smbd/sesssetup.c:setup_new_vc_session(608)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2005/05/30 11:30:19, 1] smbd/service.c:make_connection_snum(648)
  192.168.200.11 (192.168.200.11) connect to service tmp initially as
user FRHAWIN\Administrator (uid=10000, gid=10000) (pid 9553)
[2005/05/30 11:30:36, 2] smbd/posix_acls.c:set_canon_ace_list(2422)
  set_canon_ace_list: sys_acl_set_file type file failed for file
ACLStest (Invalid argument).

my smb.conf is simple:

[global]
        display charset = UTF-8
        workgroup = FRHAWIN
        realm = YYYYY.YYYYY.YYY
        netbios name = FSERV0
        server string = CIFS_HP_UX
        security = ADS
        password server = xxxx.xxxxx.xxxx.xxx
        log level = 2
        log file = /var/opt/samba/log.%m
        max log size = 1000
        host msdfs = Yes
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind use default domain = Yes

[tmp]
        comment = Temporary file space
        path = /tmp
        read only = No

Any suggestions?

Regards: Thilo

-- 
Thilo Rees
Continum AG, Technik
Wentzingerstr. 7a
D-79106 Freiburg i. Br.
http://www.continum.net
Tel.:  +49 761 479409-60
Fax.:  +49 761 479409-33
mail: thilo.rees@continum.net 
--
             ---> Please post QUESTIONS and SUMMARIES only!! <---
        To subscribe/unsubscribe to this list, contact majordomo@dutchworks.nl
       Name: hpux-admin@dutchworks.nl     Owner: owner-hpux-admin@dutchworks.nl
 
 Archives:  ftp.dutchworks.nl:/pub/digests/hpux-admin       (FTP, browse only)
            http://www.dutchworks.nl/htbin/hpsysadmin   (Web, browse & search)


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 11:02:48 EDT