Hello.

As per subject, I'm building a new box which must host a jail running a Samba AD, but I have trouble provisioning it.
Currently I'm trying samba44.

I read a lot of material and I think I understand the problem: it seems the "samba-tool provision" script is incompatible with NFSv4ACL used by ZFS. AFAICT this issue has been raised, the Samba team has acknowledged a patch should be made, but so far nothing happened.





So I'm looking into workarounds:

a) someone suggest installing samba43, provision, then upgrade to samba44. In fact this is some path I went through a couple of times in the past (on UFS, however). Alas samba43 is no longer there.



b) I think I might get around this by provisioning with the deprecated NTVFS, then switch to S3FS. Unfortunately samba44 does not build NTVFS anymore, unless the DEVELOPER option is used; but if the DEVELOPER option is used compilation (on Poudriere) fails with:
../source4/lib/socket/socket_ip.c:864:12: error: comparison of array 
'addr.__u6_addr.__u6_addr8' equal to a null pointer is always false 
[-Werror,-Wtautological-pointer-compare]
                if (addr.s6_addr == 0) {
                    ~~~~~^~~~~~~    ~
/usr/include/netinet6/in6.h:103:29: note: expanded from macro 's6_addr'
#define s6_addr   __u6_addr.__u6_addr8
                            ^
1 error generated.



c) I tried creating a ZVOL, formatting it with UFS, mounting it with ACLs inside the jail, but still provisioning says I have no ACL support.



d) I know samba46 is incompatible with jails (at least as AD DC), but didn't try samba45. AFAICT, however, nothing should have improved WRT to my problem.




So, after spending a couple of days on this and before spending another week trying every path, I tought I'd ask...

Should I temporarily revive samba43?
Can samba44 with NTVFS compilation error be fixed?
Should I try samba45 or is it just a waste of time?
Would creating a jail on another (UFS) box and then moving /var/db/samba4 and smb4.conf here work?

I'm open to any other suggestion as long as the objective (AD in a jail on ZFS) is met in the end.

 bye & Thanks
        av.
_______________________________________________
freebsd-net@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Reply via email to