i am not, but i like to hear itmotionblurrr wrote:I have two questions for you as you seem to be the resident expert!
.Code: Select all
# /usr/local/samba/bin/net groupmap list
Backup Operators (S-1-5-21-780744606-1995231755-3153718939-551) -> ntbackup
Power Users (S-1-5-21-780744606-1995231755-3153718939-547) -> ntpowerusers
Domain Users (S-1-5-21-780744606-1995231755-3153718939-513) -> ntdomusers
Backup Operators (S-1-5-32-551) -> BUILTIN\backup operators
Power Users (S-1-5-32-547) -> BUILTIN\power users
Administrators (S-1-5-21-780744606-1995231755-3153718939-544) -> ntadmins
Replicators (S-1-5-21-780744606-1995231755-3153718939-552) -> ntreplicator
Account Operators (S-1-5-21-780744606-1995231755-3153718939-548) -> ntaccount
Administrators (S-1-5-32-544) -> BUILTIN\administrators
Domain Guests (S-1-5-21-780744606-1995231755-3153718939-514) -> ntdomguests
Domain Computers (S-1-5-21-780744606-1995231755-3153718939-553) -> ntdomcomputer
Account Operators (S-1-5-32-548) -> BUILTIN\account operators
Users (S-1-5-21-780744606-1995231755-3153718939-545) -> ntusers
Print Operators (S-1-5-21-780744606-1995231755-3153718939-550) -> ntprint
Guests (S-1-5-21-780744606-1995231755-3153718939-546) -> ntguests
System Operators (S-1-5-21-780744606-1995231755-3153718939-549) -> ntsystem
Domain Admins (S-1-5-21-780744606-1995231755-3153718939-512) -> ntdomadmins
Users (S-1-5-32-545) -> BUILTIN\users
Print Operators (S-1-5-32-550) -> BUILTIN\print operators
Guests (S-1-5-32-546) -> BUILTIN\guests
Code: Select all
# /etc/init.d/smb.sh restart
Restarting SMB services:
Shutting down SMB services: smbd nmbd.
Shutting down Winbind services: done.
Starting SMB services: smbd nmbdStarting Winbind services: done.
.
done.
# /usr/local/samba/bin/net groupmap list
#
Code: Select all
[global]
workgroup = MYSAMBAPDC
security = USER
server string = SAMBA NAS
encrypt passwords = Yes
username level = 0
map to guest = Bad User
null passwords = yes
max log size = 1000
socket options = TCP_NODELAY SO_KEEPALIVE SO_SNDBUF=32768 SO_RCVBUF=32768
os level = 32
preferred master = yes
dns proxy = No
config file = /etc/config/smb.conf
smb passwd file=/etc/config/smbpasswd
username map = /etc/config/smbusers
guest account = guest
directory mask = 0777
create mask = 0777
oplocks = yes
locking = yes
disable spoolss = yes
dos charset = ISO8859-1
force directory security mode = 0000
veto files = /.AppleDB/.AppleDouble/.AppleDesktop/:2eDS_Store/Network Trash Folder/Temporary Items/TheVolumeSettingsFolder/.@__thumb/.@__desc/
delete veto files = yes
hide dot files = yes
map archive = no
map system = no
map hidden = no
map read only = yes
time server = yes
use sendfile = yes
wins support = yes
local master = yes
dos filetimes = yes
logon path = ""
logon drive = H:
logon home = \\%N\%U
logon script = login.cmd
log file = /var/log/samba/log.%m
idmap gid = 10000-20000
idmap uid = 10000-20000
case sensitive = auto
deadtime = 10
display charset = UTF8
[homes]
path = /share/HDA_DATA/User/%u
comment = Home Directories
valid users = %u
read only = no
browseable = no
[Netlogon]
path = /share/HDA_DATA/Netlogon
comment = Network Logon Service
guest ok = Yes
browsable = no
read only = yes
write list = admin
[Profiles]
path = /share/HDA_DATA/User/%u
comment = User Profiles
read only = no
create mask = 0600
directory mask = 0700
browsable = no
inherit owner = yes
profile acls = yes
Code: Select all
#!/bin/sh
CONFIG=/etc/config/smb.conf
SMBD_LOCKS="/usr/local/samba/var/locks"
# Check that smb.conf exists.
[ -f $CONFIG ] || exit 0
/sbin/setcfg global "null passwords" yes -f ${CONFIG}
/sbin/setcfg global "use sendfile" yes -f ${CONFIG}
/sbin/setcfg global "case sensitive" auto -f ${CONFIG}
/sbin/setcfg global "deadtime" 10 -f ${CONFIG}
/sbin/setcfg global "username level" 0 -f ${CONFIG}
if [ `/sbin/getcfg System "Internal Model" -u -d TS-109` = TS-409 ]; then
/sbin/setcfg global "oplocks" no -f ${CONFIG}
else
/sbin/setcfg global "oplocks" yes -f ${CONFIG}
fi
mode=`/sbin/getcfg global "force directory security mode" -f ${CONFIG}`
if [ "x${mode}" = "x0777" ]
then
/sbin/setcfg global "force directory security mode" 0000 -f ${CONFIG}
fi
/sbin/setcfg global "display charset" "UTF8" -f ${CONFIG}
# for Mac OS 10.5 smb catnot upload the file to the empty share
/sbin/setcfg global "veto files" "/.AppleDB/.AppleDouble/.AppleDesktop/:2eDS_Store/Network Trash Folder/Temporary Items/TheVolumeSettingsFolder/.@__thumb/.@__desc/" -f ${CONFIG}
# move samba locks directory to data partition /share/XXX_DATA/.locks
_locks()
{
if [ -d /mnt/HDA_ROOT/.locks ]; then
/bin/rm -rf /mnt/HDA_ROOT/.locks
/bin/rm $SMBD_LOCKS
fi
volume_test=`/sbin/getcfg Qmultimedia path -f /etc/smb.conf | cut -d '/' -f 3`
[ "x${volume_test}" = "x" ] || volume=${volume_test}
if [ ! -d /share/${volume}/.locks ]; then
echo "samba locks directory is not exist, create it"
/bin/mkdir /share/${volume}/.locks
/bin/rm -rf $SMBD_LOCKS
/bin/ln -sf /share/${volume}/.locks $SMBD_LOCKS
else
/usr/bin/readlink $SMBD_LOCKS 2>/dev/null 1>/dev/null
if [ $? != 0 ]; then
# not symbolic link
/bin/rm -rf $SMBD_LOCKS
/bin/ln -sf /share/${volume}/.locks $SMBD_LOCKS
else
# symbolic link
ret=`/usr/bin/readlink $SMBD_LOCKS`
if [ "${ret}" != "/share/${volume}/.locks" ]; then
/bin/rm -f $SMBD_LOCKS
/bin/ln -sf /share/${volume}/.locks $SMBD_LOCKS
fi
fi
fi
}
# See how we were called.
case "$1" in
start)
test -f /usr/local/samba/sbin/smbd || exit 0
if [ `/sbin/getcfg Samba Enable -u -d TRUE` = FALSE ]
then
echo "Starting SMB Services: disabled."
exit 0
fi
_locks
if [ -f $SMBD_LOCKS/smbd.pid ]; then
/bin/echo "$SMBD_LOCKS/smbd.pid found."
/bin/pidof smbd 1>>/dev/null 2>>/dev/null
[ $? = 0 ] || /bin/rm -f $SMBD_LOCKS/smbd.pid
fi
echo -n "Starting SMB services:"
/sbin/daemon_mgr smbd start "/usr/local/samba/sbin/smbd -l /var/log -D -s $CONFIG"
if [ "$?" = "0" ]; then echo -n " smbd"; fi
/sbin/daemon_mgr nmbd start "/usr/local/samba/sbin/nmbd -l /var/log -D -s $CONFIG"
if [ "$?" = "0" ]; then echo -n " nmbd"; fi
/etc/init.d/winbind start
echo "."
touch /var/lock/subsys/smb
;;
stop)
echo -n "Shutting down SMB services:"
## we have to get all the smbd process here instead of just the
## main parent (i.e. killproc) because it can take a long time
## for an individual process to process a TERM signal
/sbin/daemon_mgr smbd stop /usr/local/samba/sbin/smbd
/bin/sleep 1
/bin/pidof smbd 1>>/dev/null 2>>/dev/null
[ $? = 0 ] && /bin/sleep 5
smbdpids=`/bin/pidof smbd`
for pid in $smbdpids; do
kill -TERM $pid
done
/bin/rm -f $SMBD_LOCKS/smbd.pid
echo -n " smbd"
/sbin/daemon_mgr nmbd stop /usr/local/samba/sbin/nmbd
/bin/sleep 1
nmbdpids=`/bin/pidof nmbd`
for pid in $nmbdpids; do
kill -TERM $pid
done
echo " nmbd."
rm -f /var/lock/subsys/smb
/bin/rm -f $SMBD_LOCKS/smbd.pid $SMBD_LOCKS/nmbd.pid
/etc/init.d/winbind stop
/bin/pidof smbd 1>>/dev/null 2>>/dev/null
[ $? = 0 ] && /bin/sleep 5
/bin/pidof smbd 1>>/dev/null 2>>/dev/null
[ $? = 0 ] || /bin/rm -rf $SMBD_LOCKS/*
/bin/sync
;;
restart)
echo "Restarting SMB services:"
$0 stop
$0 start
echo "done."
;;
*)
echo "Usage: smb {start|stop|restart}"
exit 1
esac
Code: Select all
[ $? = 0 ] || /bin/rm -rf $SMBD_LOCKS/*
and I'd like to make a guide to setting up a QNAP NAS as a PDC, but my experience was not straightforward at all, so it's hard to say exactly what I had to do. I did a lot of things that I know were necessary and a lot of things that may or may not have been necessary. I probably spent a good 20 hours over the last week researching, tweaking, pulling my hair out, etc.. I almost want to back the data up off of my NAS and reset it to the factory defaults and try again, this time doing it right from A to Z so that I could make a proper guide. Not only for the good people on this forum, but for myself in case I blow up the NAS some day and have to rebuild it. 
I am hesitating to do that because it could mean another 5-10 hours of work. 
Code: Select all
/usr/local/samba/bin/smbpasswd admin