Re: Ceph + SAMBA (vfs_ceph)

Salsa <salsa@xxxxxxxxxxxxxx> · Wed, 28 Aug 2019 18:31:26 +0000

This is the result:

# testparm -s
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[homes]"
Processing section "[cephfs]"
Processing section "[printers]"
Processing section "[print$]"
Loaded services file OK.
Server role: ROLE_STANDALONE

# Global parameters
[global]
load printers = No
netbios name = SAMBA-CEPH
printcap name = cups
security = USER
workgroup = CEPH
smbd: backgroundqueue = no
idmap config * : backend = tdb
cups options = raw
valid users = samba
...
[cephfs]
create mask = 0777
directory mask = 0777
guest ok = Yes
guest _only_ = Yes
kernel share modes = No
path = /
read _only_ = No
vfs objects = ceph
ceph: user_id = samba
ceph:config_file = /etc/ceph/ceph.conf

I cut off some parts I thought were not relevant.

--
Salsa

Sent with ProtonMail Secure Email.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
 On Wednesday, August 28, 2019 5:44 AM, Maged Mokhtar <mmokhtar@xxxxxxxxxxx> wrote:

On 27/08/2019 21:39, Salsa wrote:
I'm running a ceph installation on a lab to evaluate for
        production and I have a cluster running, but I need to mount on
        different windows servers and desktops. I created an NFS share
        and was able to mount it on my Linux desktop, but not a Win 10
        desktop. Since it seems that Windows server 2016 is required to
        mount the NFS share I quit that route and decided to try samba.

I compiled a version of Samba that has this vfs_ceph
          module, but I can't set it up correctly. It seems I'm missing
          some user configuration as I've hit this error:

"
~$ smbclient -U samba.gw //10.17.6.68/cephfs_a
WARNING: The "syslog" option is deprecated
Enter WORKGROUP\samba.gw's password:
session setup failed: NT_STATUS_LOGON_FAILURE
"
Does anyone know of any good setup tutorial to follow?

This is my smb config so far:

# Global parameters
[global]
load printers = No
netbios name = SAMBA-CEPH
printcap name = cups
security = USER
workgroup = CEPH
smbd: backgroundqueue = no
idmap config * : backend = tdb
cups options = raw
valid users = samba

[cephfs]
create mask = 0777
directory mask = 0777
guest ok = Yes
guest _only_ = Yes
kernel share modes = No
path = /
read _only_ = No
vfs objects = ceph
ceph: user_id = samba
ceph:config_file = /etc/ceph/ceph.conf

Thanks

--
Salsa

Sent with ProtonMail Secure Email.

_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com

The error seems to be a samba security issue. below is a conf
      file we use, it uses kernel client rather than vfs, but may help
      with permission:

[global]
 workgroup = WORKGROUP
 server string = Samba Server %v
 security = user
 map to guest = bad user

 # clustering
 netbios name= PETASAN
 clustering=yes
 passdb backend = tdbsam
 idmap config * : backend = tdb2
 idmap config * : range = 1000000-1999999
 private dir = /mnt/cephfs/lock

 [Public]
    path = /mnt/cephfs/share/public
    browseable = yes
    writable = yes
    guest ok = yes
    guest _only_ = yes
    read _only_ = no
    create mode = 0777
    directory mode = 0777
    force user = nobody

 [Protected]
   path = /mnt/cephfs/share/protected
   valid users = @smbgroup
   guest ok = no
   writable = yes
   browsable = yes

Maged

_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com