Код: Выделить всё
vfs objects = vscan-clamav
vscan-clamav:config-file = /etc/samba/vscan-clamav.confПосле рестарта smb не могу зайти на эту шару, пишет что нет доступа, как только комментирую эти строчки все возвращается на круги своя.
Система CentOS 5.2
вот мои конфиги
uname -a
Linux baseserver.dt.po 2.6.18-92.el5 #1 SMP Tue Jun 10 18:49:47 EDT 2008 i686 i686 i386 GNU/Linux
smbd --version
Version 3.0.28-1.el5_2.1
но компилил исходниками samba-3.0.25b.tar.gz т.к. версии выше выдавали ошибки при make clamav
vim /etc/samba/smb.conf
Код: Выделить всё
[global]
workgroup = DT
netbios name = BASESERVER
server string = VM01 Samba Server
security = ads
encrypt passwords = yes
realm = DT.PO
password server = main.dt.po
winbind enum users = yes
winbind enum groups = yes
winbind cache time = 1800
winbind use default domain = yes
winbind refresh tickets = yes
idmap uid = 10000-20000
idmap gid = 10000-20000
template shell = /bin/bash
template homedir = /home/%U
printing = cups
load printers = yes
dos charset = 866
interfaces = 192.168.0.45
auth methods = winbind
syslog = 0
log level = 0 vfs:1
log file = /var/log/samba/samba.log
max log size = 0
socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192
show add printer wizard = No
os level = 8
hosts allow = 192.168.0., 127.0.0.1
case sensitive = No
hide unreadable = Yes
preferred master = no
local master = no
domain master = no
client use spnego = yes
client signing = yes
dns proxy = no
name resolve order = hosts wins bcast lmhosts
guest ok = no
guest account = nobody
printcap name = cups
wins support = yes
hide unreadable = Yes
case sensitive = No
[printers]
comment = All printers
path = /var/spool/samba
public = yes
printable = yes
guest ok = yes
[Общие папки]
path = /var/local/share
admin users = "@DT\администраторы домена"
valid users = "@DT\пользователи домена"
writeable = yes
browseable = yes
guest ok = yes
inherit acls = Yes
inherit owner = Yes
map acl inherit = yes
vfs objects = recycle, vscan-clamav
vscan-clamav:config-file = /etc/samba/vscan-clamav.conf
recycle:repository = .recycle
recycle:keeptree = yes
recycle:versions = yes
recycle:exclude = *.tmp | *.TMP | ~$* | ~WRL*
recycle:maxsize = 104805760
veto files = /.*/
[личная папка %U]
admin users = "@DT\администраторы домена"
path = /var/local/private/%U
valid users = "@DT\пользователи домена"
writeable = yes
browseable = yes
guest ok = yes
inherit acls = Yes
inherit owner = Yes
map acl inherit = yes
vfs objects = recycle, vscan-clamav
vscan-clamav: config-file = /etc/samba/vscan-clamav.conf
# full_audit:prefix = %u|%I
# full_audit:failure = none
# full_audit:success = connect disconnect opendir mkdir rmdir closedir open close read pread write pwrite sendfile rename unlink chmod fchmod chown fchown chdir ftruncate lock symlink readlink link mknod realpath
# full_audit:facility = local5
# full_audit:priority = notice
recycle:repository = .recycle
recycle:keeptree = yes
recycle:versions = yes
recycle:exclude = *.tmp | *.TMP | ~$* | ~WRL*
recycle:maxsize = 104805760
[wine_c]
path = /
valid users = "@DT\администраторы домена"
writeable = yes
browseable = yes
guest ok = yes
veto files = /*.avi/*.mp*/*.jpg/*.bmp/*.gif/*.wav/
browseable = novi /etc/clamd.conf
Код: Выделить всё
LogFile /var/log/clamav/clamd.log
LogFileMaxSize 0
LogTime yes
LogSyslog yes
PidFile /var/run/clamav/clamd.pid
TemporaryDirectory /var/tmp
DatabaseDirectory /var/clamav
LocalSocket /tmp/clamd.socket
FixStaleSocket yes
TCPSocket 3310
TCPAddr 127.0.0.1
MaxConnectionQueueLength 30vim /etc/sam va/vscan-clamav.conf
Код: Выделить всё
[samba-vscan]
max file size = 0
verbose file logging = no
scan on open = yes
scan on close = yes
deny access on error = yes
deny access on minor error = yes
send warning message = yes
infected file action = delete
quarantine directory = /tmp
quarantine prefix = vir-
max lru files entries = 100
lru file entry lifetime = 5
exclude file types =
clamd socket name = /tmp/clamd.socket
libclamav max files in archive = 1000
libclamav max archived file size = 10485760
libclamav max recursion level = 5Незнаю важно это или нет но авторизация в системе происходит через winbind
