[Pkg-samba-maint] Bug#493752: Smb.conf

[James Zuelow]

No, I had another 170 odd panic action e-mail messages waiting for me
this morning.  I've rolled back to the original config.

Browsing the samba shares from Windows XP Pro worked with the old
config, and continued to work with the new config.  Looking in the
various log files I see that winbind is successfully authenticating
users and groups in the local domain.  ACLs work as expected.  Getent
passwd and getent group both work fine, wbinfo -u -g and -t work fine,
net ads testjoin is fine...  

If I can just ignore all of these e-mail messages, everything is
working!

I guess I just need to remove the panic action script from smb.conf...
:)

Our domain is a bit unusual in that we have two trusts that exist solely
for Outlook free/busy information.  So we do not have user accounts with
rights in the other domains, and vice versa.  (Yet another reason not to
use trusted domains -- no user accounts.)

Did something change between 3.0.30 and 3.2.0 with winbind, where this
type of limited trust is problematic for winbind?

Also, with the syntax changes for the whole idmap rid back end it looks
like we're leaving swat behind.  For example there doesn't seem to be a
way to enter the various idmap config entries.  But that's a different
issue and an upstream one anyway.


-----Original Message-----
From: Steve Langasek [mailto:vorlon at debian.org] 
Sent: Monday, August 04, 2008 10:07 PM
To: James Zuelow
Cc: 493752 at bugs.debian.org
Subject: Re: Bug#493752: Smb.conf

On Mon, Aug 04, 2008 at 09:34:33PM -0800, James Zuelow wrote:
> Default is 'allow trusted domains = Yes' so commenting out should be
equivalent.
> I've reverted back to using sequentially assigned UID/GID.

And does this appear to solve the segfault issue?

-- 
Steve Langasek                   Give me a lever long enough and a Free
OS
Debian Developer                   to set it on, and I can move the
world.
Ubuntu Developer
http://www.debian.org/
slangasek at ubuntu.com
vorlon at debian.org