[Samba] SMB share and .mdb files?
Hannes Gnad
With samba 3.0.25b as part of Mac OS X 10.5.4 Server, I'm encountering
issues with .mdb files: Some Windows apps use client software on local
machines and one Microsoft Access database on the SMB share. Everything
works fine, as long as there's only one client using the .mdb file. As
soon as a second client tries to access (and write!) to the .mdb file,
the clients on the Windows machines report broken network connections
and crash.
In Server-Admin/File-Sharing, the shares are open for SMB only, oplock
and strict locking both off. No ACL, Posix permission admin r/w, group
r/w, other r.
(Mac-specific: Could Spotlight do harm to this? It could be disabled
for this share...)
smb.conf (/etc)
[global]
debug pid = yes
log level = 1
server string = Mac OS X
printcap name = cups
printing = cups
encrypt passwords = yes
use spnego = yes
passdb backend = odsam
idmap domains = default
idmap config default: default = yes
idmap config default: backend = odsam
idmap alloc backend = odsam
idmap negative cache time = 5
map to guest = Bad User
guest account = nobody
unix charset = UTF-8-MAC
display charset = UTF-8-MAC
dos charset = 437
vfs objects = darwinacl,darwin_streams
; Don't become a master browser unless absolutely necessary.
os level = 2
domain master = no
; For performance reasons, set the transmit buffer size
; to the maximum and enable sendfile support.
max xmit = 131072
use sendfile = yes
; The darwin_streams module gives us named streams support.
stream support = yes
ea support = yes
; Enable locking coherency with AFP.
darwin_streams:brlm = yes
; Core files are invariably disabled system-wide, but attempting to
; dump core will trigger a crash report, so we still want to try.
enable core files = yes
; Configure usershares for use by the synchronize-shares tool.
usershare max shares = 1000
usershare path = /var/samba/shares
usershare owner only = no
usershare allow guests = yes
usershare allow full config = yes
; Filter inaccessible shares from the browse list.
com.apple:filter shares by access = yes
; Check in with PAM to enforce SACL access policy.
obey pam restrictions = yes
; Don't be trying to enforce ACLs in userspace.
acl check permissions = no
; Make sure that we resolve unqualified names as NetBIOS before
DNS.
name resolve order = lmhosts wins bcast host
; Pull in system-wide preference settings. These are managed by
; synchronize-preferences tool.
include = /var/db/smb.conf
[printers]
comment = All Printers
path = /tmp
printable = yes
guest ok = no
create mode = 0700
writeable = no
browseable = no
smb.conf (/var/db)
[global]
security = USER
auth methods = odsam
netbios name = serverg4
workgroup = ARBEITSGRUPPE
realm = SERVERG4.xxxxxxxxx.INTERN
dos charset = CP437
server string = serverg4
ntlm auth = yes
lanman auth = yes
max smbd processes = 100
log level = 1
use kerberos keytab = yes
realm = SERVERG4.xxxxxxxxx.INTERN
map to guest = Never
domain master = no
preferred master = no
enable disk services = yes
enable print services = yes
wins support = no
[homes]
comment = User Home Directories
browseable = no
read only = no
create mode = 0750
guest ok = no
com.apple: show admin all volumes = no
Any ideas? Thanks in advance!
Best,
Beste Gruesse, Hannes Gnad h.g...@apfelwerk.de
Apple Distinguished Professional http://www.apfelwerk.de/
* Mac OS X 10.5 Leopard - seit 26. Oktober 2007 - http://www.apple.de/ *
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
David Ferreira
Some apps locks only parts of the files, blocking access to all users if
you haven't activated oportunistic lockings (allow locking only part of
a file, not the whole file) You can find more info about it in
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/locking.html#id2609918
I hope it works for you
Greets,
David
--
David Ferreira
Dpto. de sistemas
-------------------------------------------------------------------------------------------------
I Z A N E T - GLOBAL SERVICES S.L.
web: _http://www.izanet.com_ <3D%22http://www.izanet.com/%22>
Direcciónes: Argualas nº 3 (Planta calle) - 50.012 Zaragoza
Teléfono: 902 999 065 y 976 306 752 - Fax 976 306 753
--------------------------------------------------------------------------------------------------
*DISCLAIMER:
*Este mensaje se dirige exclusivamente a su destinatario y puede
contener informacion privilegiada o confidencial. Si no es vd. el
destinatario indicado, queda notificado de que la utilizacion,
divulgacion y/o copia sin autorizacion esta prohibida en virtud de la
legislacion vigente. Si ha recibido este mensaje por error, le rogamos
que nos lo comunique inmediatamente por esta misma via y proceda a su
destruccion.
This message is intended exclusively for its addressee and may contain
information that is CONFIDENTIAL and protected by professional
privilege. If you are not the intended recipient you are hereby notified
that any dissemination, copy or disclosure of this communication is
strictly prohibited by law. If this message has been received in error,
please immediately notify us via e-mail and delete it.
Jeremy Allison
> Hi.
>
> With samba 3.0.25b as part of Mac OS X 10.5.4 Server, I'm encountering
> issues with .mdb files: Some Windows apps use client software on local
> machines and one Microsoft Access database on the SMB share. Everything
> works fine, as long as there's only one client using the .mdb file. As
> soon as a second client tries to access (and write!) to the .mdb file,
> the clients on the Windows machines report broken network connections
> and crash.
>
> In Server-Admin/File-Sharing, the shares are open for SMB only, oplock
> and strict locking both off. No ACL, Posix permission admin r/w, group
> r/w, other r.
Turn strict locking back on, or at least to Auto.
Jeremy.
Dale Schroeder
All the Access databases we have are set to "compact on close". I've
noticed that since I moved the databases to a Samba server from a w2k
server, I get db1.mdb, db2.mdb, etc. every day instead of only
occasionally. mdb's are set in "veto oplock files". Permissions are
2770 for administrator/Domain Admins, and acl's are used to r/w to these
files. Inherit owner, permissions, and acls are all set to Yes. strict
locking is the default auto.
As someone earlier suggested, I tried "force security mode" as the fix
for MS Office files. It didn't seem to have an effect on the mdb
problem, and it stripped the acl's from excel spreadsheets. It seemed
to override the inherit "acls parameter".
Is the mdb problem something I'll have to live with, or can it be remedied?
Dale