FreeBSD 7.0 jail and Samba 3

Nejc Škoberne nejc at skoberne.net
Tue Apr 22 09:33:36 UTC 2008


Hey Johan,

> I think you will need to remove 127.0.0.1
> Just use 192.168.1.2/24
> There is no 127.0.0.1 on a jailed system

I have done so - I still can't do "smbclient //machine" from another box to
the jailed Samba. If I put the Samba out of the jail (same version, same config)
it works as it should. I have this in my rc.conf:

jail_enable="YES"
jail_sysvipc_allow="YES"
jail_socket_unixiproute_only="NO"

#=---------------------------- Jails ---------------------------=#
jail_list="samba"
#=--------------------------------------------------------------=#
jail_samba_rootdir="/usr/jail/samba"
jail_samba_hostname="samba.domain.local"
jail_samba_ip="192.168.15.201"
jail_samba_interface="rl0"
jail_samba_devfs_enable="YES"
jail_samba_procfs_enable="YES"
jail_samba_devfs_ruleset="devfsrules_jail"
#=--------------------------------------------------------------=#

and this in my sysctl.conf:

security.jail.allow_raw_sockets=1
security.jail.sysvipc_allowed=1

Thanks,
Nejc


More information about the freebsd-questions mailing list