OS X 10.6.2 + 11.2 SAMBA = DEATH

I am having just a bitch of a time getting my rebuilt
opensuse 11.2 server to work properly with my mac clients
via SAMBA. The real frustrating thing is that before the
rebuild SAMBA was working flawlessly. I even reverted back
to 11.1 and SAMBA is still broken, even when using the EXACT
SAME SAMBA CONFIG FILES. This could easily be an OS X
problem, but since it started after the rebuild I am first
focusing on SAMBA.

My biggest issue presently are permissions on my server when
a mac client writes files to the server. I was able to get
things KINDA working by forcing user, group, create mask and
directory mask. I can then copy files to the server but
deleting files takes several minutes (to delete 10 test
files). The odd thing was before this began I needed none
of this.

Does anyone have a GOOD SMB.CONF file that works well with
MAC clients they could share?

Thanks, Chris.

No problems here, although I have a Linux box authing vs WIn2k3/2k8 hybrid domain.

Could you post your smb.conf (-incriminating hentai shares and personal information)

Here is one I created on our SLES box for testing. It works
OK but deleting files from the MAC is VERY SLOW, to the
point that it is practically not doable.

This file fixes most of the permission issues via force
commands (see install share at bottom).

Chris

smb.conf is the main Samba configuration file. You find a

full commented

version at

/usr/share/doc/packages/samba/examples/smb.conf.SUSE if the

samba-doc package is installed.

Date: 2009-06-29

[global]
workgroup = XXXXXXX
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
map to guest = Bad User
logon path = \%L\profiles.msprofile
logon home = \%L%U.9xprofile
logon drive = P:
usershare allow guests = Yes
domain logons = No
domain master = No
password server = *
security = ADS
wins server = 10.1.1.21
wins support = No
netbios name = XXXXX31
passdb backend = smbpasswd
realm = XXXXXXX.AD
template homedir = /home/%D/%U
winbind refresh tickets = yes
unix extensions = No
[homes]
comment = Home Directories
valid users = %S, %D%w%S
browseable = No
read only = No
inherit acls = Yes
[profiles]
comment = Network Profiles Service
path = %H
read only = No
store dos attributes = Yes
create mask = 0600
directory mask = 0700
[users]
comment = All users
path = /home
read only = No
inherit acls = Yes
veto files = /aquota.user/groups/shares/
[groups]
comment = All groups
path = /home/groups
read only = No
inherit acls = Yes
[printers]
comment = All Printers
path = /var/tmp
printable = Yes
create mask = 0600
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = @ntadmin root
force group = ntadmin
create mask = 0664
directory mask = 0775

Share disabled by YaST

[netlogon]

[install]
comment = Installation Files
inherit acls = Yes
path = /mnt/storage/install/
read only = No
valid users = @gr_infosys
force group = gr_infosys
force create mode = 0775
force directory mode = 0775
dos filemode = Yes

>>> On 12/4/2009 at 8:36 AM, in message
<Chrysantine.42o9i1@no-mx.forums.opensuse.org>,
Chrysantine<Chrysantine@no-mx.forums.opensuse.org>
wrote:
> No problems here, although I have a Linux box authing vs
> WIn2k3/2k8hybrid domain.
>
> Could you post your smb.conf (-incriminating hentai
> shares and personalinformation)-- it’s all a game,
> avoiding failure, when true colors will bleed, all inthe
> name of misbehavior and the things we don’t need
> and more than ever, I hope to never fall, where enough
> is not the sameit was
before…----------------------------------------------------
--------------------Chrysantine’s Profile:
> http://forums.opensuse.org/member.php?userid=117View this

> thread:
> http://forums.opensuse.org/showthread.php?t=427813

On Fri December 4 2009 09:53 am, Chris wrote:

> Here is one I created on our SLES box for testing. It works
> OK but deleting files from the MAC is VERY SLOW, to the
> point that it is practically not doable.
>
> This file fixes most of the permission issues via force
> commands (see install share at bottom).
>
> Chris
>
> # smb.conf is the main Samba configuration file. You find a
> full commented
> # version at
> /usr/share/doc/packages/samba/examples/smb.conf.SUSE if the
> # samba-doc package is installed.
> # Date: 2009-06-29
> [global]
> workgroup = XXXXXXX
> printing = cups
> printcap name = cups
> printcap cache time = 750
> cups options = raw
> map to guest = Bad User
> logon path = \%L\profiles.msprofile
> logon home = \%L%U.9xprofile
> logon drive = P:
> usershare allow guests = Yes
> domain logons = No
> domain master = No
> password server = *
> security = ADS
> wins server = 10.1.1.21
> wins support = No
> netbios name = XXXXX31
> passdb backend = smbpasswd
> realm = XXXXXXX.AD
> template homedir = /home/%D/%U
> winbind refresh tickets = yes
> unix extensions = No
> [homes]
> comment = Home Directories
> valid users = %S, %D%w%S
> browseable = No
> read only = No
> inherit acls = Yes
> [profiles]
> comment = Network Profiles Service
> path = %H
> read only = No
> store dos attributes = Yes
> create mask = 0600
> directory mask = 0700
> [users]
> comment = All users
> path = /home
> read only = No
> inherit acls = Yes
> veto files = /aquota.user/groups/shares/
> [groups]
> comment = All groups
> path = /home/groups
> read only = No
> inherit acls = Yes
> [printers]
> comment = All Printers
> path = /var/tmp
> printable = Yes
> create mask = 0600
> browseable = No
> [print$]
> comment = Printer Drivers
> path = /var/lib/samba/drivers
> write list = @ntadmin root
> force group = ntadmin
> create mask = 0664
> directory mask = 0775
>
> ## Share disabled by YaST
> # [netlogon]
>
> [install]
> comment = Installation Files
> inherit acls = Yes
> path = /mnt/storage/install/
> read only = No
> valid users = @gr_infosys
> force group = gr_infosys
> force create mode = 0775
> force directory mode = 0775
> dos filemode = Yes
>
<snip>
Chris;
Is this a member server on an AD domain? Is it joined to the domain?

P. V.
“We’re all in this together, I’m pulling for you.” Red Green

No, it is just my home server. It is a member of a
workgroup, but nothing else.

I truly think OS X 10.6.2 is broken with respect to SAMBA.

>>> On 12/5/2009 at 12:54 AM, in message
<QAmSm.491$Yk5.227@kozak.provo.novell.com>,
PV<venzkep@no-mx.forums.opensuse.org> wrote:
> On Fri December 4 2009 09:53 am, Chris wrote:
>
>> Here is one I created on our SLES box for testing. It
> works
>> OK but deleting files from the MAC is VERY SLOW, to the
>> point that it is practically not doable.
>>
>> This file fixes most of the permission issues via force
>> commands (see install share at bottom).
>>
>> Chris
>>
>> # smb.conf is the main Samba configuration file. You
> find a
>> full commented
>> # version at
>> /usr/share/doc/packages/samba/examples/smb.conf.SUSE if
> the
>> # samba-doc package is installed.
>> # Date: 2009-06-29
>> [global]
>> workgroup = XXXXXXX
>> printing = cups
>> printcap name = cups
>> printcap cache time = 750
>> cups options = raw
>> map to guest = Bad User
>> logon path = \%L\profiles.msprofile
>> logon home = \%L%U.9xprofile
>> logon drive = P:
>> usershare allow guests = Yes
>> domain logons = No
>> domain master = No
>> password server = *
>> security = ADS
>> wins server = 10.1.1.21
>> wins support = No
>> netbios name = XXXXX31
>> passdb backend = smbpasswd
>> realm = XXXXXXX.AD
>> template homedir = /home/%D/%U
>> winbind refresh tickets = yes
>> unix extensions = No
>> [homes]
>> comment = Home Directories
>> valid users = %S, %D%w%S
>> browseable = No
>> read only = No
>> inherit acls = Yes
>> [profiles]
>> comment = Network Profiles Service
>> path = %H
>> read only = No
>> store dos attributes = Yes
>> create mask = 0600
>> directory mask = 0700
>> [users]
>> comment = All users
>> path = /home
>> read only = No
>> inherit acls = Yes
>> veto files = /aquota.user/groups/shares/
>> [groups]
>> comment = All groups
>> path = /home/groups
>> read only = No
>> inherit acls = Yes
>> [printers]
>> comment = All Printers
>> path = /var/tmp
>> printable = Yes
>> create mask = 0600
>> browseable = No
>> [print$]
>> comment = Printer Drivers
>> path = /var/lib/samba/drivers
>> write list = @ntadmin root
>> force group = ntadmin
>> create mask = 0664
>> directory mask = 0775
>>
>> ## Share disabled by YaST
>> # [netlogon]
>>
>> [install]
>> comment = Installation Files
>> inherit acls = Yes
>> path = /mnt/storage/install/
>> read only = No
>> valid users = @gr_infosys
>> force group = gr_infosys
>> force create mode = 0775
>> force directory mode = 0775
>> dos filemode = Yes
>>
> <snip>
> Chris;
> Is this a member server on an AD domain? Is it joined
> to the domain?

I still can’t replicate your issue - I have no problems with 10.6.2 workstations or laptops in our Samba/AD forest. We’re getting the expected speeds and no login/issues.