[Pkg-samba-maint] Bug#385372: This

[Steve Langasek]

On Tue, Jul 24, 2007 at 04:22:04PM +0800, Joe C. K. Yau wrote:
> Based on what you have suggested, I have done two things:

>   (1) disabled winbindd
>   (2) updated my smb.conf  (see below)
>   (3) created a script for the connection logging I had before

> <=========================v=v=v= Config (v2) =v=v=v=========================>

>  1>>   [global]
>  2>>     workgroup = AlwaysBIG
>  3>>     encrypt passwords = false
>  4>>     root preexec =  /bin/bash /etc/samba/connection.sh CONNECT    %T %S %P %U %m
>  5>>     root postexec = /bin/bash /etc/samba/connection.sh DISCONNECT %T %S %P %U %m
>  6>> 
>  7>>   [homes]
>  8>>     comment = Home Directories
>  9>>     browseable = no
> 10>>     writable = yes
> 11>>     create mask = 0700
> 12>>     directory mask = 0700
> 13>>     valid users = %S

> <=========================^=^=^= Config (v2) =^=^=^=========================>

> As suggested, I disabled winbindd, and tried to include the "valid users" 
> option, but it still failed on me.  I couldn't connect to the server,
> and the symptom is similar to what I had before.

> I also updated my smb.conf, and revised the "root preexec" and "root
> postexec" options.  I also created a script for doing the logging, but,
> still, nothing gets logged.

> I really don't understand why.  I am puzzled.  Any help??

I've just added the following to my smb.conf as a test:

   root preexec = /etc/samba/connection.sh CONNECT %T %S %P %U %m

My (executable) /etc/samba/connection.sh is as follows:

    #!/bin/sh

    echo "$@" >> /var/log/samba-connect.log

After an 'smbclient -L localhost -N', I see the following in
/var/log/samba-connect.log:

    CONNECT 2007/07/24 02:31:28 IPC_ /tmp nobody borges
    CONNECT 2007/07/24 02:31:28 IPC_ /tmp nobody borges

This works whether or not I have 'encrypt passwords' or 'valid users' set;
though when 'encrypt passwords = false' is set, I do get a different set of
log messages:

    CONNECT 2007/07/24 02:32:15 IPC_ /tmp nobody 127.0.0.1
    CONNECT 2007/07/24 02:32:16 IPC_ /tmp nobody borges

The first of these messages shows up on a permission denied error.  Nothing
is logged in the case of a failed login.

With 'encrypt passwords = false' and 'valid users = %S', I am able to
connect to my home share using smbclient //localhost/vorlon.  I've tested
this with both the etch and sid versions of samba.

At this point, I'm inclined to assume that you have some other incorrect
configuration options enabled in your smb.conf, and that this is the source
of the problem you're having.  At least, there is no evidence of a bug here,
so I would recommend that you get in touch with the upstream support list
for further troubleshooting help.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
vorlon at debian.org                                   http://www.debian.org/