|
10-07-2004, 22:56
| #1 (permalink) | ||
| Moderator  Join Date: Jul 2003 Location: Tragic Kingdom | samba issue
Am vreo 10 useri pe un Samba 3.0 pe Slackware 10. Am in smb.conf asa: [new.movies] comment = "Fresh Movies perhaps" path = /blalala/lalalala/new.movies public = no guest ok = no writable = no printable = no valid users = @smbusers writelist = ion gigikent britney ionica Smbusers este grupul userilor cu acces samba. Daca ionica face un folder in new.movies atunci devine automat owner si nimeni altcineva nu poate altera folderu ala. In afara de new.movies ala mai am un share cu EXACT acelasi conf si aceeasi useri si aceleasi drepturi in ext3. Daca gigikent face aici folder oricine il poate sterge. WHY THE FUUUUCK... accesele sunt identice ca dincoloooo... Pot pune o masca cumva sa fortez trecerea folderului respeciv in owningu userului care l-a facut? Si totusi ar trebui sa nu-l pot sterge... uite ce zice ls -l: drwxr-xr-x 2 gigikent smbusers So WTF? A inca ceva, vreau un logger care sa-mi faca audit pe fiecare user sa stiu ce s-a sters si ce s-a copiat cu data/ora/tot. Stie samba by default asa ceva?
__________________ It has been said that the contents of the rules sections of sendmail.cf most closely resemble the effect of line noise on a non-error-correcting modem. It has also been said that capturing such line noise into a text file has about as much chance of resulting in a working sendmail.cf as does any attempt to actually edit that file. Romania, the land of "sunt obisnuit cu 10-11MB si imi vine greu cu 5,7M" | ||
|
|
11-07-2004, 13:21
| #2 (permalink) | ||
| Banned  Join Date: Nov 2002 Location: ~/.. |
create mask (S) A synonym for this parameter is create mode . When a file is created, the necessary permissions are calculated according to the mapping from DOS modes to UNIX permissions, and the resulting UNIX mode is then bit-wise 'AND'ed with this parameter. This parameter may be thought of as a bit-wise MASK for the UNIX modes of a file. Any bit not set here will be removed from the modes set on a file when it is created. The default value of this parameter removes the 'group' and 'other' write and execute bits from the UNIX modes. Following this Samba will bit-wise 'OR' the UNIX mode created from this parameter with the value of the force create mode parameter which is set to 000 by default. This parameter does not affect directory modes. See the parameter directory mode for details. See also the force create mode parameter for forc- ing particular mode bits to be set on created files. See also the directory mode parameter for masking mode bits on created directories. See also the inherit permissions parameter. Note that this parameter does not apply to permis- sions set by Windows NT/2000 ACL editors. If the administrator wishes to enforce a mask on access control lists also, they need to set the security mask. Default: create mask = 0744 Example: create mask = 0775 sau mai bine : man smb.conf | ||
|
|
11-07-2004, 13:31
| #3 (permalink) | ||
| Paranoia is natural Join Date: Nov 2000 Location: Bucuresti |
iar pt logging ultimele samba vin cu un "audit" incorporat. Eu unu prefer sa pun recycle cu perioada de gratie de doua saptamani - la audit baga in loguri prea multe informatii. Cauta pe google dupa vfs audit.
__________________ Those people who think they know everything are a great annoyance to those of us who do. | ||
|
|
11-07-2004, 14:42
| #4 (permalink) | ||
| Moderator Join Date: Jul 2003 Location: Tragic Kingdom |
Dandu, am citit si eu alea, nu ma ajuta cu nimic. In teorie totul ar trebui sa se intample cum se intampla in [new.movies] da se pare ca nu e asa. O sa mai sap. AStateOfMind, mersi acu imi fac programare la google.
__________________ It has been said that the contents of the rules sections of sendmail.cf most closely resemble the effect of line noise on a non-error-correcting modem. It has also been said that capturing such line noise into a text file has about as much chance of resulting in a working sendmail.cf as does any attempt to actually edit that file. Romania, the land of "sunt obisnuit cu 10-11MB si imi vine greu cu 5,7M" | ||
|
|
11-07-2004, 20:49
| #5 (permalink) | ||
| Moderator Join Date: Jul 2003 Location: Tragic Kingdom |
Mda, audit-ul ala e un amalgam de belele: in smb.conf: vfs object = /usr/local/samba/lib/vfs/audit.so ce zice logu: smbd_vfs_init: vfs_init failed for audit L-am si recompilat cu suport de vfs (desi Samba 3.0 vine cu el by default).
__________________ It has been said that the contents of the rules sections of sendmail.cf most closely resemble the effect of line noise on a non-error-correcting modem. It has also been said that capturing such line noise into a text file has about as much chance of resulting in a working sendmail.cf as does any attempt to actually edit that file. Romania, the land of "sunt obisnuit cu 10-11MB si imi vine greu cu 5,7M" | ||
|
|
12-07-2004, 01:16
| #7 (permalink) | ||
| Moderator Join Date: Jul 2003 Location: Tragic Kingdom |
Ala e. Samba 3.0.4. L-am compilat de l-am zapacit. Nu vrea sa incarce modulul ala. O sa incerc pe o masina virtuala maine, o fi bushit Slack10-le asta pe care ma chinui eu.
__________________ It has been said that the contents of the rules sections of sendmail.cf most closely resemble the effect of line noise on a non-error-correcting modem. It has also been said that capturing such line noise into a text file has about as much chance of resulting in a working sendmail.cf as does any attempt to actually edit that file. Romania, the land of "sunt obisnuit cu 10-11MB si imi vine greu cu 5,7M" | ||
|
|
12-07-2004, 13:26
| #9 (permalink) | ||
| Moderator Join Date: Jul 2003 Location: Tragic Kingdom |
[2004/05/20 11:28:27, 0] smbd/vfs.c:smb_register_vfs(184) VFS module recycle already loaded! [2004/05/20 11:28:27, 2] lib/module.c:do_smb_load_module(63) Module '/usr/lib/samba/vfs/recycle.so' loaded [2004/05/20 11:28:27, 0] smbd/vfs.c:vfs_init_custom(256) Can't find a vfs module [/usr/lib/samba/vfs/recycle.so] [2004/05/20 11:28:27, 0] smbd/vfs.c:smbd_vfs_init(319) smbd_vfs_init: vfs_init_custom failed for /usr/lib/samba/vfs/recycle.so Cu orice .so face asa.
__________________ It has been said that the contents of the rules sections of sendmail.cf most closely resemble the effect of line noise on a non-error-correcting modem. It has also been said that capturing such line noise into a text file has about as much chance of resulting in a working sendmail.cf as does any attempt to actually edit that file. Romania, the land of "sunt obisnuit cu 10-11MB si imi vine greu cu 5,7M" | ||
|
|
13-07-2004, 03:01
| #10 (permalink) | ||
| Banned Join Date: Nov 2002 Location: ~/.. |
Can't find a vfs module [/usr/lib/samba/vfs/recycle.so] pare destul de relevant ... cum adica "cu orice .so face asa" tu sigur ai suport de vfs ? eu nu prea inteleg de ce ai atatea probleme ... uite pe un slack 10 default instalat am urmatoarele optiuni : vfs objects = audit recycle recycle:keeptree si imi merge fara nici o belea, fara module compilate de mine & stuff Last edited by dandu; 13-07-2004 at 03:57.. | ||
|
|
13-07-2004, 13:14
| #11 (permalink) | ||
| Moderator Join Date: Jul 2003 Location: Tragic Kingdom |
ei bine pe un slack10 default la mine face magaria aia. modulele exista si au permisiuni de citire. ceva e fucked up si nu inteleg ce.
__________________ It has been said that the contents of the rules sections of sendmail.cf most closely resemble the effect of line noise on a non-error-correcting modem. It has also been said that capturing such line noise into a text file has about as much chance of resulting in a working sendmail.cf as does any attempt to actually edit that file. Romania, the land of "sunt obisnuit cu 10-11MB si imi vine greu cu 5,7M" | ||
|
|
13-07-2004, 13:24
| #12 (permalink) | ||
| Paranoia is natural Join Date: Nov 2000 Location: Bucuresti |  Quote:
cam asta am eu in smb.conf vfs objects = extd_audit recycle recycle: repository = .recycle/%U recycle: keeptree = yes recycle: exclude = ?~$*,~$*,*.tmp,index*.pl,index*.htm*,*.temp recycle: touch = yes extd_audit: log level = 1 dupa cum vezi, dupa "vfs objects =" pui doar NUMELE obiectului folosit, NU fisierul  .
__________________ Those people who think they know everything are a great annoyance to those of us who do. | ||
|
|
13-07-2004, 15:12
| #13 (permalink) | ||
| Moderator Join Date: Jul 2003 Location: Tragic Kingdom | Quote:
edit: Bai da chiar nu vede nimeni ca sunt tampit? eu puneam vfs object = fara s la final... gizas. s-a rezolvat. 
__________________ It has been said that the contents of the rules sections of sendmail.cf most closely resemble the effect of line noise on a non-error-correcting modem. It has also been said that capturing such line noise into a text file has about as much chance of resulting in a working sendmail.cf as does any attempt to actually edit that file. Romania, the land of "sunt obisnuit cu 10-11MB si imi vine greu cu 5,7M" | ||
|
|
18-07-2004, 14:42
| #16 (permalink) | ||
| Paranoia is natural Join Date: Nov 2000 Location: Bucuresti |
te uiti in /usr/lib/samba/ daca ai un vfs, e ok. Daca ai compilat singur samba, atunci shtii unde sa te uiti si daca are vfs (presupun cel putin )Sau si mai simpul, bagi un vfs objects = audit in smb.conf si daca plange, inseamna ca nu are .
__________________ Those people who think they know everything are a great annoyance to those of us who do. | ||
|
|
18-07-2004, 14:55
| #17 (permalink) | ||
| Moderator Join Date: Jul 2003 Location: Tragic Kingdom |
Cred ca se referea la suportul din kernel.. Sau ala e altceva?
__________________ It has been said that the contents of the rules sections of sendmail.cf most closely resemble the effect of line noise on a non-error-correcting modem. It has also been said that capturing such line noise into a text file has about as much chance of resulting in a working sendmail.cf as does any attempt to actually edit that file. Romania, the land of "sunt obisnuit cu 10-11MB si imi vine greu cu 5,7M" | ||
|
|
18-07-2004, 16:47
| #18 (permalink) | ||
| Banned Join Date: Nov 2002 Location: ~/.. |
eu ma gandeam la ceva in genu : esti pus in fata unui sistem despre care nu stii nimic ... ai dreptul la o singura comanda (sau cateva) ... cum afili daca are samba suport de vfs sau nu .... ceva de genu asta ... inprimafaza m-am gandit la ceva de genu : strings `which smbd`|grep vfs dar am observat ca nu merge .... iar faza cu /usr/lib/smba/ nu merge pt ca poate ala le are instalate in alta parte .... | ||
|
| Advertisment | |
 Cumpără jocuri prin SMSRapid si sigur! | |
 |
|
| Thread Tools | |
| |
