Solaris Samba with Local Users

Most users would now be using Solaris 11 with the CIFS integrated modules and manage SMB sharing from ZFS directly. So this post is not applicable to the “right” way of doing things. I recently had to support a Solaris 11 Express server running samba and using local users. So I made a few useful notes here.

Server specifics:

1
SunOS server1 5.11 snv_151a i86pc i386 i86pc Solaris
2

3
# prtdiag
4
System Configuration: Sun Microsystems Sun Fire X2200 M2 with Quad Core Processor
5
BIOS Configuration: Sun Microsystems S39_3D12 10/06/2008
6
BMC Configuration: IPMI 1.5 (KCS: Keyboard Controller Style)
7
...
8

9
# smbd -V
10
Version 3.5.5
11

12
# svcs | grep samba
13
online         2011     svc:/network/samba:default
14

15
# ps -ef | grep mbd
16
root  1621     1   0   Nov 20 ?          64:55 /usr/sbin/nmbd -D
17
root  3421  1617   0   Dec 10 ?           0:07 /usr/sbin/smbd -D
18

19
...

Add user:

1
# useradd rrosso
2

3
# mkdir /server1/home/rrosso
4

5
# chown rrosso /server1/home/rrosso
6

7
# grep rrosso /etc/passwd
8
rrosso:x:151:10:Riaan Rossouw:/server1/home/rrosso:/bin/ksh
9

10
# pwconv
11

12
# smbpasswd -a rrosso
13
New SMB password:
14
Retype new SMB password:
15
Added user rrosso.
16

17
# pdbedit -L -v rrosso
18
Unix username:        rrosso
19
NT username:
20
Account Flags:        [U          ]
21
User SID:             S-1-5-21-1747637251-3107012253-2823653391-1004
22
Primary Group SID:    S-1-5-21-1747637251-3107012253-2823653391-513
23
Full Name:            Riaan Rossouw
24
Home Directory:       \\server1\rrosso
25
HomeDir Drive:
26
Logon Script:
27
Profile Path:         \\server1\rrosso\profile
28
Domain:               SERVER1
29
Account desc:
30
Workstations:
31
Munged dial:
32
Logon time:           0
33
Logoff time:          never
34
Kickoff time:         never
35
Password last set:    Tue, 11 Dec 2012 14:00:22 EST
36
Password can change:  Tue, 11 Dec 2012 14:00:22 EST
37
Password must change: never
38
Last bad password   : 0
39
Bad password count  : 0
40
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Share specifics:

1
# testparm
2
Load smb config files from /etc/samba/smb.conf
3
rlimit_max: rlimit_max (256) below minimum Windows limit (16384)
4
Processing section "[homes]"
5
Processing section "[Backups]"
6
...
7
[Backups]
8
comment = IT Backups Folder
9
path = /server1/backup
10
valid users = rrosso
11
read only = No
12
create mask = 0777
13
force create mode = 0777
14
force directory mode = 0777
15
force directory security mode = 0777
16
volume = FileServer
17
follow symlinks = No
18
...