Adding local group -> Access denied

classic Classic list List threaded Threaded
8 messages Options
Reply | Threaded
Open this post in threaded view
|

Adding local group -> Access denied

Holger Wesser
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi there,

short question: I try to add a local group via the NT-Usermanager
("usrmgr.exe"), but everytime I get a "Access denied". Adding a global
group works. I'm logged on as "Administrator". I'm running Samba 3.0.14a
on Debian Sarge (testing) with the smbldap-tools (v0.8.8).

What could I have done wrong?

Thanks.
Holger
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCbRFEO0QDuZMdP0sRAp/XAJ4zzFzugxnbxqeyqW8Q0nQSwGZ56QCfQXDj
M/pZxu3jdtN646Fpn/0WHq4=
=wp6b
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
Reply | Threaded
Open this post in threaded view
|

differing freespace reports in windows and unix

David Brown-46
Hi List.

Apologies for follwing up on myself.  A bit of extra info.

Writing to the share via windows seems ok as long as the file size being written doesnt exceed the apparent available free space.  Writing successfully doesnt seem to affect the available free space on the windows side although it is correctly reported on the Solaris side.

Dave
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
Reply | Threaded
Open this post in threaded view
|

differing freespace reports in windows and unix

David Brown-46
In reply to this post by Holger Wesser
Hi List.

Environment :

SunOS jukebox2 5.8 Generic_108528-19 sun4u sparc SUNW,Sun-Blade-100

Samba 2.2.7

Windows NT, XP, 2000 clients.

This is the problem.  I am sharing 4 directories within a samba share. These are very large file structures, 3 Terabyte plus.  Typically they run between 3 and 9 gb of freespace any given point in time.

For some reason I can't fathom the freespace shown in the client side now bears no resemblance to the freespace on each of the directories.

It *appears* that the reported freespace matches that of the top level share.  I've appended the output from df -k for the relavent filesystems and the dir output from the windows side.  Does anyone have any idea why this might be happening?  AN I just being dense and missing something obvious?

Thanks,

Dave.

--------------------------------------------------------

#df -k

Filesystem            kbytes      used     avail   capacity  Mounted on
tiff_2               3751530314 3740151207 11379107   100%    /jukebox2/tiff2
tiff_3               3394414798 3387167802 7246996   100%    /jukebox2/tiff3
tiff_4               3031621105 3024681374 6939731   100%    /jukebox2/tiff4

F:\>dir
 Volume in drive F is jukebox2
 Volume Serial Number is AF0C-0EC4

 Directory of F:\

05/15/03  02:41p        <DIR>          .
04/25/05  12:46p        <DIR>          ..
05/15/03  12:48p        <DIR>          tiff1
01/12/05  08:38a        <DIR>          tiff2
01/12/05  08:38a        <DIR>          tiff3
01/12/05  08:38a        <DIR>          tiff4
               6 File(s)              0 bytes
                          1,051,721,728 bytes free

F:\>cd tiff2

F:\tiff2>dir
 Volume in drive F is jukebox2
 Volume Serial Number is AF0C-0EC4

 Directory of F:\tiff2

01/12/05  08:38a        <DIR>          .
05/15/03  02:41p        <DIR>          ..
12/01/04  08:10a        <DIR>          2004
12/01/03  08:51a        <DIR>          2003
04/01/05  03:40p        <DIR>          2005
               5 File(s)              0 bytes
                          1,051,721,728 bytes free

F:\>cd tiff3

F:\tiff3>dir
 Volume in drive F is jukebox2
 Volume Serial Number is AF0C-0EC4

 Directory of F:\tiff3

01/12/05  08:38a        <DIR>          .
05/15/03  02:41p        <DIR>          ..
10/20/03  05:01p        <DIR>          2003
12/01/04  08:10a        <DIR>          2004
04/01/05  03:40p        <DIR>          2005
               5 File(s)              0 bytes
                          1,051,721,728 bytes free

F:\tiff3>cd ..\tiff4

F:\tiff4>dir
 Volume in drive F is jukebox2
 Volume Serial Number is AF0C-0EC4

 Directory of F:\tiff4

01/12/05  08:38a        <DIR>          .
05/15/03  02:41p        <DIR>          ..
10/20/03  05:01p        <DIR>          2003
12/01/04  08:10a        <DIR>          2004
04/12/05  05:09p        <DIR>          2005
               5 File(s)              0 bytes
                          1,051,721,728 bytes free
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
Reply | Threaded
Open this post in threaded view
|

Re: Adding local group -> Access denied

Tony Earnshaw
In reply to this post by Holger Wesser
man, 25.04.2005 kl. 17.48 skrev Holger Wesser:

> short question: I try to add a local group via the NT-Usermanager
> ("usrmgr.exe"), but everytime I get a "Access denied". Adding a global
> group works. I'm logged on as "Administrator". I'm running Samba 3.0.14a
> on Debian Sarge (testing) with the smbldap-tools (v0.8.8).
>
> What could I have done wrong?

Basically using LDAP and the smbldap-tools (v0.8.8) knowing what they
do, how they do it or having read through *all* the official Samba
documentation and done everything in it. Had you done so (judging that
tens of thousands have got it to work before you) it would work for you.

That having been said (my bounden duty to the Samba team), I have always
contended and still contend that the idealx smbldap-tools (whichever
version whatever) are UTTERLY USELESS to an LDAP pro who already has an
LDAP DSA running with a completely different DIT to which the idealx and
Samba people might decree.

However, the good news is, that whichever sysadmin:

a: first understands  LDAP (at least several months experience for any
other use than Samba whatsoever)
b: second has had a concentrated look at Samba 3 utils and daemons;
c: third has a reasonable experience in awk, shell and sed scripting
(each of awk and sed one can teach oneself in a weekend, shell costs one
years, learn it first)

doesn't need  the idealx tools.

Not needing the idealx tools means that the sysadmin is free to choose
his own LDAP DIT as he/she has already implemented it (long before
having started with Samba 3). The Samba daemons and utils of all kinds
do not need the idealx tools, they work perfectly without them. They
(the Samba daemons and uitils) were implemented by prophets of the true
way. idealx has to drag itself, groaning, to the heights that these
magnificent tools reached some time ago.

The Samba people don't need teaching, the idealx people need training in
what LDAP is. They seem to be utterly ignorant, as to that extent.

No, John H. T. I have not contacted the idealx people. That would be
useless. There are several thousand others besides me who find idealx's
method perfect, then there's me that doesn't. The difference is, that I
already had my DIT (multiple user bases, multiple group bases and much
more. Samba isn't there for LDAP, LDAP is there for Samba) and had to
make it work with Samba, not the other way around. So I can't use the
"on the fly" Samba scripts, I have to do things by hand. No skin off my
nose.

--Tonni

--
Nothing sucksseeds like a pigeon without a beak ...

mail: [hidden email]
http://www.billy.demon.nl
 
They'll love us, won't they? They feed us, don't they? ...

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
Reply | Threaded
Open this post in threaded view
|

Re: Adding local group -> Access denied

Holger Wesser
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

???

What do you want from me? Do you want to teach me the principles of
admin's work? In this case, feel free to open a new thread!!!

Holger

Tony Earnshaw wrote:
| man, 25.04.2005 kl. 17.48 skrev Holger Wesser:
|
|
|>short question: I try to add a local group via the NT-Usermanager
|>("usrmgr.exe"), but everytime I get a "Access denied". Adding a global
|>group works. I'm logged on as "Administrator". I'm running Samba 3.0.14a
|>on Debian Sarge (testing) with the smbldap-tools (v0.8.8).
|>
|>What could I have done wrong?
|
|
| Basically using LDAP and the smbldap-tools (v0.8.8) knowing what they
| do, how they do it or having read through *all* the official Samba
| documentation and done everything in it. Had you done so (judging that
| tens of thousands have got it to work before you) it would work for you.
|
| That having been said (my bounden duty to the Samba team), I have always
| contended and still contend that the idealx smbldap-tools (whichever
| version whatever) are UTTERLY USELESS to an LDAP pro who already has an
| LDAP DSA running with a completely different DIT to which the idealx and
| Samba people might decree.
|
| However, the good news is, that whichever sysadmin:
|
| a: first understands  LDAP (at least several months experience for any
| other use than Samba whatsoever)
| b: second has had a concentrated look at Samba 3 utils and daemons;
| c: third has a reasonable experience in awk, shell and sed scripting
| (each of awk and sed one can teach oneself in a weekend, shell costs one
| years, learn it first)
|
| doesn't need  the idealx tools.
|
| Not needing the idealx tools means that the sysadmin is free to choose
| his own LDAP DIT as he/she has already implemented it (long before
| having started with Samba 3). The Samba daemons and utils of all kinds
| do not need the idealx tools, they work perfectly without them. They
| (the Samba daemons and uitils) were implemented by prophets of the true
| way. idealx has to drag itself, groaning, to the heights that these
| magnificent tools reached some time ago.
|
| The Samba people don't need teaching, the idealx people need training in
| what LDAP is. They seem to be utterly ignorant, as to that extent.
|
| No, John H. T. I have not contacted the idealx people. That would be
| useless. There are several thousand others besides me who find idealx's
| method perfect, then there's me that doesn't. The difference is, that I
| already had my DIT (multiple user bases, multiple group bases and much
| more. Samba isn't there for LDAP, LDAP is there for Samba) and had to
| make it work with Samba, not the other way around. So I can't use the
| "on the fly" Samba scripts, I have to do things by hand. No skin off my
| nose.
|
| --Tonni
|

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCbeJiO0QDuZMdP0sRApoeAJ4qMdNNK0GJU0W1p6e0yNSfQDQBkwCfadeJ
GkuOQM+f8IJFAd5THHTqPKw=
=ZlhY
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
Reply | Threaded
Open this post in threaded view
|

Re: Adding local group -> Access denied

Paul Gienger
In reply to this post by Holger Wesser

> short question: I try to add a local group via the NT-Usermanager
> ("usrmgr.exe"), but everytime I get a "Access denied". Adding a global
> group works. I'm logged on as "Administrator". I'm running Samba 3.0.14a
> on Debian Sarge (testing) with the smbldap-tools (v0.8.8).
>
> What could I have done wrong?

Well, what have you tried to debug this?

What is the output from running the add group script from the command
line?  Do you have other groupmaps working just fine?

--
Paul Gienger                    Office: 701-281-1884
Applied Engineering Inc.
Systems Architect               Fax:    701-281-1322
URL: www.ae-solutions.com       mailto: [hidden email]



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
Reply | Threaded
Open this post in threaded view
|

Re: Adding local group -> Access denied

Holger Wesser
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Paul,

I tried it on the console and got a:

"/usr/sbin/smbldap-groupadd: unknown group type 4"

Well, I searched through the perl scripts, but sorry- as a
non-programmer I cannot find anything.

I set the log level to "3", but the outputs in the logfile seems to me okay.

Maybe I made errors when using the smbldap-groupadd command:

'smbldap-groupadd -a -g 1038 -t 2 abakus'

Unfortunately, I couldn't find an example how to use the command exactly.

Greetings,
Holger


Paul Gienger wrote:
|
|> short question: I try to add a local group via the NT-Usermanager
|> ("usrmgr.exe"), but everytime I get a "Access denied". Adding a global
|> group works. I'm logged on as "Administrator". I'm running Samba 3.0.14a
|> on Debian Sarge (testing) with the smbldap-tools (v0.8.8).
|>
|> What could I have done wrong?
|
|
| Well, what have you tried to debug this?
| What is the output from running the add group script from the command
| line?  Do you have other groupmaps working just fine?
|

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCbkBJO0QDuZMdP0sRAoJAAJ9wfVAdN48yZ7DmQgEqF2+6TvF/SQCeK428
cnRuJLiWGdUbCtouLPgiKWg=
=bR4J
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
Reply | Threaded
Open this post in threaded view
|

Re: Adding local group -> Access denied

Holger Wesser
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi folks,

I think, there's something wrong with documentation of the
smbldap-scripts. In the doc is said:

"-t group type:set the NT Group type for the new group. Available values
are 2 (domain group), 4 (local group) and 5 (builtin group). The default
group type is 2."

That's wrong. The parameters are "-t domain", "-t local" or "-t
builtin". There is a mapping function in smbldap_tools.pm at line 903:

"
sub group_type_by_name {
~  my $type_name = shift;
~  my %groupmap = (
                                  'domain' => 2,
                                  'local' => 4,
                                  'builtin' => 5
                                 );
~  return $groupmap{$type_name};
}
"

Okay, that doesn't solve my origin problem, because I still can't create
local groups with the NT-Usermanager.

Greetings,
Holger

Holger Wesser wrote:
| Hi Paul,
|
| I tried it on the console and got a:
|
| "/usr/sbin/smbldap-groupadd: unknown group type 4"
|
| Well, I searched through the perl scripts, but sorry- as a
| non-programmer I cannot find anything.
|
| I set the log level to "3", but the outputs in the logfile seems to me
| okay.
|
| Maybe I made errors when using the smbldap-groupadd command:
|
| 'smbldap-groupadd -a -g 1038 -t 2 abakus'
|
| Unfortunately, I couldn't find an example how to use the command exactly.
|
| Greetings,
| Holger
|
|
| Paul Gienger wrote:
| |
| |> short question: I try to add a local group via the NT-Usermanager
| |> ("usrmgr.exe"), but everytime I get a "Access denied". Adding a global
| |> group works. I'm logged on as "Administrator". I'm running Samba
3.0.14a
| |> on Debian Sarge (testing) with the smbldap-tools (v0.8.8).
| |>
| |> What could I have done wrong?
| |
| |
| | Well, what have you tried to debug this?
| | What is the output from running the add group script from the command
| | line?  Do you have other groupmaps working just fine?
| |
|
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCb4zMO0QDuZMdP0sRAhCmAJ4iWfH5J/f/Gt6PmOpWCDEs+CiM2wCgqpv6
2sXWTOd7jJ+RHE5Snx/lfeQ=
=Pi6A
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba