[UFO Chicago] SMBFS Question

[Jesse Becker]

--- "Neil R. Ormos" <ormos at ripco.com> wrote:

> Brian Sobolak wrote:
> > Neil R. Ormos wrote:
> 
> > > Anyone know smbfs?  I'm having a problem allowing
> > > users other than root read/write access to an
> > > smbfs share.  I think I've carefully read the
> > > docs, but there must be some small thing I've
> > > overlooked.

One thing to note:  Samba will always defer to the Unix
permissions when granting access.  There is an inherent
munging/mapping of samba "accounts" (e.g. windows) to Unix
UIDs.  In the case of conflict, the Unix permissions win.

If you haven't already, check to make sure that this
mapping makes sense.  Also have a look at the 'valid
users', 'force user', etc statements for samba.conf.

> Thanks for the suggestion.  I did examine the logs.
> 
> The only thing I found was several instances of this:
> 
>   [2006/04/12 13:04:49, 0] tdb/tdbutil.c:tdb_log(725)
>     tdb(/var/run/samba/gencache.tdb): tdb_lock failed on
> list 13 ltype=1 (Bad file descriptor)
> 
> I'm not sure that has anything to do with smbfs.
> I thought (and maybe I'm wrong) that the xxx.tdb
> files were only used by the Samba server--i.e.,
> when exporting something from the local machine,
> as opposed to importing from a remote host.  I
> looked around, and the only complaints I found
> mentioning that specific error message seemed to
> be on another topic.

TDB files are "Trivial DataBase," and are how Samba tracks
everything for which it has to keep state.  If you ever run
a Samba server in a "production" setup, your TDB files are
very important (make sure they get backed up).

You are correct in that the are used by the server, but
remember that a smbfs mount still requires server action
and UID mapping, and that has to be stored.

Check the permissions on the TDB files.  You might also
want to check to make sure that file is good.  Run an fsck
on that partition.  A "bad filehandle" error is a bit
strange.  You might also want to check the version as
well--the most recent release is 3.0.22 (or so).  I'm
running it on a major production server at work, and have
no problems (and it's doing a fairly complicated mapping
against an AD server, with a measure of LDAP thrown in for
good measure.

> Maybe it would be fixed by upgrading to
> Etch/testing.  I just can't help thinking that
> it's a cockpit error on my part.

Upgrade first.  Check operator error second. :-)



Jesse Becker
GPG-fingerprint:  BD00 7AA4 4483 AFCC 82D0  2720 0083 0931 9A2B 06A2

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com