Исходное сообщение
"Нет доступа к public и home шарам. Samba+LDAP+BSD" Отправлено goshanecr, 17-Июн-07 22:49
Добрый всем день! Поднял у себя Samba 3.0.25 + OpenLDAP + FreeBSD. DHCP и BIND интегрированы с LDAP также. Все работает хорошо, но вот проблема: почему то пользователям нет доступа к их домашним папкам и к общей папке на самбе. Причем скрипт из netlogon нормально запускается. Пользователя добавляю так: /usr/local/sbin/smbldap-useradd -a -P -d /home/samba/home/user -m "user" -c "Test User" -N "User" -S "Test" Вот smb.conf ======================================================== [global] workgroup = MYDOMAIN server string = FreeBSD Samba Server netbios name = BSD-SERV enable privileges = yes interfaces = 192.168.0.1/24 security = user encrypt passwords = yes obey pam restrictions = no ldap passwd sync = yes log level = 0 syslog = 0 log file = /var/log/samba/log.%m max log size = 1000000 time server = yes socket options = TCP_NODELAY mangling method = hash2 display charset = koi8-r unix charset = koi8-r dos charset = cp866 logon script logon.cmd logon drive = X: logon path = domain logons = yes preferred master = yes domain master = yes local master = yes wins support = yes wins proxy = yes dns proxy = no name resolve order = lmhosts wins dns host bcast passdb backend = ldapsam:ldap://127.0.0.1/ ldap admin dn= cn=Manager,dc=mydomain,dc=local ldap suffix= dc=mydomain,dc=local ldap user suffix= ou=Users ldap group suffix= ou=Groups ldap machine suffix= ou=Computers ldap idmap suffix= ou=Users ldap ssl=off add user script = /usr/local/sbin/smbldap-useradd -m "%u" ldap delete dn = yes delete user script = /usr/local/sbin/smbldap-userdel "%u" add machine script = /usr/local/sbin/smbldap-useradd -w "%u" add group script = /usr/local/sbin/smbldap-groupadd -p "%g" delete group script = /usr/local/sbin/smbldap-groupdel "%g" add  user  to  group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g" delete  user  from  group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g" set  primary  group  script  = /usr/local/sbin/smbldap-usermod -g "%g" "%u" load printers = no [homes] comment = Home directories path=/home/samba/home/%U browseable = No writable = yes public = no valid users =%U,@"Domain admins" force user = %U create mask = 0660 directory mask 0770 vfs object = recycle recycle:repository = .лПТЪЙОБ recycle:keeptree = Yes recycle:touch = Yes recycle:version = Yes recycle:maxsize = 0 recycle:exclude = *.tmp|*.tbi|*.temp|~$*|*.~?? [netlogon] comment = Network Logon Service path = /home/samba/netlogon/ browseable = no read only = yes [Profiles] path = /home/samba/profiles/%U read only = no create mask = 0600 directory mask = 0700 browseable = No guest ok = yes profile acls = yes csc policy = disable force user = %U valid users = %U @"Domain Admins" [public] comment = пВЭЙК ТЕУХТУ path = /home/samba/public valid users = @"Domain Admins", @"Domain Users" browseable = yes guest ok = yes read only = no directory mask = 0777 create mask = 0666 force user = %U

Ваше сообщение
Имя*:
EMail:	Для отправки новых сообщений в текущей нити на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email). Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.
Заголовок*:
Сообщение*:	> Добрый всем день! > Поднял у себя Samba 3.0.25 + OpenLDAP + FreeBSD. DHCP и BIND > интегрированы с LDAP также. Все работает хорошо, но вот проблема: почему > то пользователям нет доступа к их домашним папкам и к общей > папке на самбе. Причем скрипт из netlogon нормально запускается. > Пользователя добавляю так: > /usr/local/sbin/smbldap-useradd -a -P -d /home/samba/home/user -m "user" -c "Test User" > -N "User" -S "Test" > Вот smb.conf > ======================================================== > [global] > workgroup = MYDOMAIN > server string = FreeBSD Samba Server > netbios name = BSD-SERV > enable privileges = yes > interfaces = 192.168.0.1/24 > security = user > encrypt passwords = yes > obey pam restrictions = no > ldap passwd sync = yes > log level = 0 > syslog = 0 > log file = /var/log/samba/log.%m > max log size = 1000000 > time server = yes > socket options = TCP_NODELAY > mangling method = hash2 > display charset = koi8-r > unix charset = koi8-r > dos charset = cp866 > logon script logon.cmd > logon drive = X: > logon path = > domain logons = yes > preferred master = yes > domain master = yes > local master = yes > wins support = yes > wins proxy = yes > dns proxy = no > name resolve order = lmhosts wins dns host bcast > passdb backend = ldapsam:ldap://127.0.0.1/ > ldap admin dn= cn=Manager,dc=mydomain,dc=local > ldap suffix= dc=mydomain,dc=local > ldap user suffix= ou=Users > ldap group suffix= ou=Groups > ldap machine suffix= ou=Computers > ldap idmap suffix= ou=Users > ldap ssl=off > add user script = /usr/local/sbin/smbldap-useradd -m "%u" > ldap delete dn = yes > delete user script = /usr/local/sbin/smbldap-userdel "%u" > add machine script = /usr/local/sbin/smbldap-useradd -w "%u" > add group script = /usr/local/sbin/smbldap-groupadd -p "%g" > delete group script = /usr/local/sbin/smbldap-groupdel "%g" > add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" > "%g" > delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" > "%g" > set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" > "%u" > load printers = no > [homes] > comment = Home directories > path=/home/samba/home/%U > browseable = No > writable = yes > public = no > valid users =%U,@"Domain admins" > force user = %U > create mask = 0660 > directory mask 0770 > vfs object = recycle > recycle:repository = .лПТЪЙОБ > recycle:keeptree = Yes > recycle:touch = Yes > recycle:version = Yes > recycle:maxsize = 0 > recycle:exclude = *.tmp|*.tbi|*.temp|~$*|*.~?? > [netlogon] > comment = Network Logon Service > path = /home/samba/netlogon/ > browseable = no > read only = yes > [Profiles] > path = /home/samba/profiles/%U > read only = no > create mask = 0600 > directory mask = 0700 > browseable = No > guest ok = yes > profile acls = yes > csc policy = disable > force user = %U > valid users = %U @"Domain Admins" > [public] > comment = пВЭЙК ТЕУХТУ > path = /home/samba/public > valid users = @"Domain Admins", @"Domain Users" > browseable = yes > guest ok = yes > read only = no > directory mask = 0777 > create mask = 0666 > force user = %U
	Введите код, изображенный на картинке: