[samba-jp:19124] Re: Samba で移動プロファイル読み込み時に Listen するポート番号について。

[吉原 隆夫]

OSSTech　小田切　様

お世話になります、吉原です。

下記ですが、tcpdumpで確認したところ、Sambaで通常通信に使用するポート以外にそれほど特異なポートは殆ど無く、わずかにtcpdump結果に記載のあったそれらしいポートを念の為開放してみましたが、症状に変化はありませんでした。

上記のことから、

> だとしたらsmb.confの設定が悪いのではないですか？
> ユーザホームの下に移動プロファイルがあるとか。
> smb.confを見せてください。

という点に鑑みて、小生の環境のsmb.confの内容を記載しますのでご確認下さい。

# Global parameters
[global]
        unix charset = UTF-8
        dos charset = CP932
        display charset = UTF-8
        workgroup = YOSHIHARAS
        netbios name = SERVER
        admin users = Administrator
        guest account = Guest
        security = USER
        enable privileges = yes
        interfaces = 127.0.0.1 eth0
        bind interfaces only = yes
        #username map = /etc/samba/smbusers
        server string = Samba Server %v
        #security = ads
        encrypt passwords = Yes
        #min passwd length = 3
        #pam password change = no
        #obey pam restrictions = No
        ldap passwd sync = Yes
        unix password sync = Yes
        passwd program = /usr/local/sbin/smbldap-passwd -u %u
        passwd chat = "Changing password for*\nNew password*" %n\n "*Retype 
new password*" %n\n"
        #passwd chat debug = Yes
        log level = 0
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 100000
        time server = Yes
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        mangling method = hash2

        logon script = %U.cmd
        logon drive = Z:
        logon home = //SERVER/%U/profiles
        logon path = //SERVER/profiles/%U

        domain logons = Yes
        domain master = Yes
        os level = 64
        preferred master = Yes
        wins support = yes
        template shell = /bin/false
        winbind use default domain = no
        passdb backend = ldapsam:ldap://localhost/
        ldap admin dn = cn=Manager,dc=takao,dc=dyndns,dc=org
        #ldap admin dn = cn=samba,ou=DSA,dc=idealx,dc=org
        ldap suffix = dc=takao,dc=dyndns,dc=org
        ldap group suffix = ou=Group
        ldap user suffix = ou=People
        ldap machine suffix = ou=Computers
        #ldap idmap suffix = ou=Idmap
        add user script = /usr/local/sbin/smbldap-useradd -m "%u"
        #ldap delete dn = Yes
        delete user script = /usr/local/sbin/smbldap-userdel -r "%u"
        add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
        add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
        #delete group script = /usr/local/sbin/smbldap-groupdel "%g"
        add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" 
"%g"
        delete user from group script = /usr/local/sbin/smbldap-groupmod -x 
"%u" "%g"
        set primary group script = /usr/local/sbin/smbldap-usermod -g '%g' 
'%u'

        # printers configuration
        #printer admin = @"Print Operators"
        #load printers = Yes
        #create mask = 0640
        #directory mask = 0750
        #force create mode = 0640
        #force directory mode = 0750
        #nt acl support = No
        #printing = cups
        #printcap name = cups
        #deadtime = 10
        #guest account = nobody
        #map to guest = Bad User
        #dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
        #show add printer wizard = yes
        ; to maintain capital letters in shortcuts in any of the profile 
folders:
        #preserve case = yes
        #short preserve case = yes
        #case sensitive = no

   idmap uid = 16777216-33554431
   idmap gid = 16777216-33554431

[homes]
        comment = Home Directories
        browseable = no
        writable = yes
        vfs objects = recycle
        recycle:repository = .recycle
        recycle:keeptree = no
        recycle:versions = yes
        recycle:touch = no
        recycle:maxsize = 0
        recycle:exclude = *.tmp ~$*

[netlogon]
        path = /home/netlogon/
        browseable = No
        read only = yes

[profiles]
        comment = User profiles directory
        path = /profiles
        read only = No
        create mask = 0600
        directory mask = 0700
        browseable = No
        profile acls = Yes

[printers]
        comment = Network Printers
        printer admin = @"Print Operators"
        guest ok = yes
        printable = yes
        path = /home/spool/
        browseable = No
        read only  = Yes
        printable = Yes
        print command = /usr/bin/lpr -P%p -r %s
        lpq command = /usr/bin/lpq -P%p
        lprm command = /usr/bin/lprm -P%p %j
        # print command = /usr/bin/lpr -U%U@%M -P%p -r %s
        # lpq command = /usr/bin/lpq -U%U@%M -P%p
        # lprm command = /usr/bin/lprm -U%U@%M -P%p %j
        # lppause command = /usr/sbin/lpc -U%U@%M hold %p %j
        # lpresume command = /usr/sbin/lpc -U%U@%M release %p %j
        # queuepause command = /usr/sbin/lpc -U%U@%M stop %p
        # queueresume command = /usr/sbin/lpc -U%U@%M start %p

[print$]
        path = /home/printers
        guest ok = No
        browseable = Yes
        read only = Yes
        valid users = @"Print Operators"
        write list = @"Print Operators"
        create mask = 0664
        directory mask = 0775

[public]
        comment = Public Stuff
        path = /home/samba
        writable = yes
        vfs objects = recycle
        recycle:repository = .recycle
        recycle:keeptree = no
        recycle:versions = yes
        recycle:touch = no
        recycle:maxsize = 0
        recycle:exclude = *.tmp ~$*

尚、

> そのメッセージングサービスではありません。
> コントロールパネルのサービスに現れる「Messenger」です。
> 通常は動作していないので、Sambaのログによく
> 送信エラーとしてでてくるやつです。
> これを起動させてみてはどうですか？

に関しては試してみましたが症状は変わりませんでした。また、smb.confの中に

interfaces = 127.0.0.1 eth0
bind interfaces only = yes

の記載がありますが、何故か小生の環境ではマルチホーム環境でも無いのにこの設定にしないとクライアントをドメインに参加させることが出来なかったので、この設定にしてあります。

以上、宜しくお願い致します。

吉原　隆夫
takao.yoshihara ＠ nifty.com