Сконфигурировал все без лишних излишеств...
То есть по статьям на OpenNet указал ---- домен, адрес домена, безопасность domain ( ну чтобы юзера заходили через контроллер домена на 2003 серваке, юзера для подключения к домену...
[2009/03/25 09:33:02, 0] nmbd/nmbd_incomingdgrams.c:process_master_browser_announce(382)
process_master_browser_announce: Not configured as domain master - ignoring master announce.
[2009/03/25 09:33:33, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(395)
*****
Samba name server LOCALHOST is now a local master browser for workgroup NTDOMAIN on subnet 192.168.4.15
*****
[2009/03/25 09:34:58, 0] nmbd/nmbd_incomingdgrams.c:process_master_browser_announce(382)
process_master_browser_announce: Not configured as domain master - ignoring master announce.
[2009/03/25 09:39:15, 0] nmbd/nmbd_incomingdgrams.c:process_master_browser_announce(382)
process_master_browser_announce: Not configured as domain master - ignoring master announce.
[2009/03/25 09:42:19, 0] nmbd/nmbd.c:terminate(68)
Got SIGTERM: going down...
[2009/03/25 09:42:19, 0] nmbd/nmbd.c:main(849)
nmbd version 3.2.0pre3-9.fc9 started.
Copyright Andrew Tridgell and the Samba Team 1992-2008
[2009/03/25 09:42:35, 0] nmbd/nmbd_incomingdgrams.c:process_master_browser_announce(382)
process_master_browser_announce: Not configured as domain master - ignoring master announce.
[2009/03/25 09:42:16, 1] winbindd/idmap_tdb.c:idmap_tdb_alloc_init(371)
idmap uid range missing or invalid
idmap will be unable to map foreign SIDs
[2009/03/25 09:42:16, 0] winbindd/idmap.c:idmap_alloc_init(831)
ERROR: Initialization failed for alloc backend, deferred!
[2009/03/25 09:42:16, 1] winbindd/idmap_tdb.c:idmap_tdb_alloc_init(371)
idmap uid range missing or invalid
idmap will be unable to map foreign SIDs
[2009/03/25 09:42:16, 0] winbindd/idmap.c:idmap_alloc_init(831)
ERROR: Initialization failed for alloc backend, deferred!
[2009/03/25 09:42:16, 1] winbindd/idmap_tdb.c:idmap_tdb_alloc_init(371)
idmap uid range missing or invalid
idmap will be unable to map foreign SIDs
[2009/03/25 09:42:16, 0] winbindd/idmap.c:idmap_alloc_init(831)
ERROR: Initialization failed for alloc backend, deferred!
[2009/03/25 09:42:16, 1] winbindd/idmap_tdb.c:idmap_tdb_alloc_init(371)
idmap uid range missing or invalid
idmap will be unable to map foreign SIDs
[2009/03/25 09:42:16, 0] winbindd/idmap.c:idmap_alloc_init(831)
ERROR: Initialization failed for alloc backend, deferred!
А в var/log/samba по мимо log.smb log.nmb, нет ли файлов логов с именем компьютера или пользователя с которого конектишся к самбе? Что то типа urist-03..log
папки для шар вообще созданы? и какие права на них стоят.
Если всё нормально, то попробуйте на каждую шару поставить что то вроде:
read list = "@DOMEN\Пользователи домена"
write list = "@DOMEN\Пользователи домена"
admin users = "@DOMEN\Администраторы домена"
read only = No
#
# /etc/nsswitch.conf
#
# An example Name Service Switch config file. This file should be
# sorted with the most-used services at the beginning.
#
# The entry '[NOTFOUND=return]' means that the search for an
# entry should stop if the search in the previous entry turned
# up nothing. Note that if the search failed due to some other reason
# (like no NIS server responding) then the search continues with the
# next entry.
#
# Legal entries are:
#
# nisplus or nis+ Use NIS+ (NIS version 3)
# nis or yp Use NIS (NIS version 2), also called YP
# dns Use DNS (Domain Name Service)
# files Use the local files
# db Use the local database (.db) files
# compat Use NIS on compat mode
# hesiod Use Hesiod for user lookups
# [NOTFOUND=return] Stop searching if not found so far
#
# To use db, put the "db" in front of "files" for entries you want to be
# looked up first in the databases
#
# Example:
#passwd: db files nisplus nis
#shadow: db files nisplus nis
#group: db files nisplus nis
passwd: files winbind
shadow: files winbind
group: files winbind
#hosts: db files nisplus nis dns
hosts: files dns
# Example - obey only what nisplus tells us...
#services: nisplus [NOTFOUND=return] files
#networks: nisplus [NOTFOUND=return] files
#protocols: nisplus [NOTFOUND=return] files
#rpc: nisplus [NOTFOUND=return] files
#ethers: nisplus [NOTFOUND=return] files
#netmasks: nisplus [NOTFOUND=return] files
bootparams: nisplus [NOTFOUND=return] files
ethers: files
netmasks: files
networks: files
protocols: files
rpc: files
services: files
netgroup: nisplus
publickey: nisplus
automount: files nisplus
aliases: files nisplus
Осталось вот что ---
Как сделать чтобы назначенный в smb.conf админ самбы мог, залогинившись на шару в венде править права доступа на папки в шаре для разных юзеров..
Ну как буд-то это вендовые папки???
Попробовал ACL не помогло... Вообще права не меняются.
Делал это по http://mar1ner.livejournal.com/315703.html
-----------
А так получется права менять только влальцу для своей папки....
То есть обычный юзер запретил достп на чтение, а админ самбы не может сменить права...
что означет ужас...
