Koozali.org: home of the SME Server

Permissions, Security and Windows Software

Ed Form

Permissions, Security and Windows Software
« on: February 12, 2003, 01:52:16 AM »
I have one client using an SME server in anger [E-smith 4.1.2 actually] and today we cam across a weird problem. The client uses and application popular in the Financial Services industry called Synaptic Product Research. It's a highly customised MS-Access based program with a heavyweight licencing application which runs separately and hands out permission to run to workstations trying to open the software. We run teh licencing app on a little Windows machine that does nothing else but hand out licences. The data resides in a directory on a mapped ibay and the application itself runs locally on the workstations.

The data with which 'product researcch' is done is updated monthly from CD.

Until about 5 months ago all the workstations were Windows 98SEII and we never had a moments trouble with this app. The updates were completely transparent - you ran the update program from a little menu that auto-ran when you put the CD in a workstation and it correctly identified where to put the updated material by reading the registry of the workstation.

Once the server was updated you ran a 'client-update' fromt eh server directory on each workstation and that was it.

We then changed on of the workstations for a Windows 2000 Professional portable and found that we could not run the update procedure from it - It stopped and moaned about file access violations. But we just did the update from one of the remaining Win98 machines and didn't think any more about it.

8 weeks ago we updated the remainign workstations to Windows 2000 pro to get round persistent instability problems and now we cannot update the Synaptic software at all.

When we try to run it, it automatically gives us its configuration dialogue, and asks us to tell it where the databases are, even though the entries in the config tables are correct, and we can actually run the individual databases that make up the program's data store on any of the workstations by double clicking them in the mapped drive.

I've tried doing the updates as a normal user and they fail. When I do them as an administrator they apparently work, but the program still won't run and still comes up with the config dialogue with it's infuriatingly correct infiormation.

When I look at the databases on the server they have no Windows security permissions and using the administrator login to change this doesn't help. As soon as I do the update again the permissions dissappear.

The crazy thing is, I can plug in a Windows 98 workstation and everything works perfectly and I can update the program, but I still cannot run it on the Windows 2000 systems.

Does this sound like something others have seen?

Ed Form

Ray Mitchell

Re: Permissions, Security and Windows Software
« Reply #1 on: February 12, 2003, 03:35:57 AM »
Not too sure about this, but are your Win 2K PCs members of the domain, ie do they logon to the sme which is acting as primary domain controller.
It sounds like they cannot access each others file correctly.
It didn't matter with W95/98 as the security model was very weak, and each PC could see and access each other as long as they were on the same workgroup.

With Win2K?XP each PC needs to be a member of the domain in order to see and access each other (that is if you don't set up individual users on each and every workstation).

You might consider giving administrator priveleges to a user on a local W2k w/s and see if that helps.

I think that v4.1.2 needed some tweaks to allow W2K and XP PC's to connect properly to do with  Samba etc see the samba howto at myezserver.
I would suggest a server upgrade from 4.1.2 to at least 5.5 to give you a later samba version, better still use v5.6 which has opportunistic file locking enabled.

I'm not sure whether the server upgrade will resolve your problems though.

Good luck
Regards
Ray Mitchell

Ray Mitchell

Re: Permissions, Security and Windows Software
« Reply #2 on: February 12, 2003, 03:44:44 AM »
Ed
Just another thought.

Each user on W2K will have their own profile with separate registry entries.

Perhaps these are not "set" correctly for each W2K user, whereas on W85/98 the same settings applied for all logged on users (assuming you did not have profiles turned on).

Updates should be done when logged on to W2K as administrator or as a user with administrator priveleges.

Try doing instals and updates and running apps as administrator and see if it will work that way, then go from there.

Regards
Ray Mitchell

Bob Todd

Re: Permissions, Security and Windows Software
« Reply #3 on: February 12, 2003, 04:56:08 AM »
its probably a windows 2k registry issue - come across it several times before to do with user access permission to modify keys for particular pieces of software.

Its usually a case of using regedt32 to update the security permissions for the software under Local_Machine. Do a search on the web for more info - sounds more like that than a SME problem.

Ray Mitchell

Re: Permissions, Security and Windows Software
« Reply #4 on: February 12, 2003, 01:27:20 PM »
Ed
Actually the article I was referring to was at Dan Browns site

http://www.familybrown.org/howtos/samba-upgrade-howto-2.html

The Windows file-sharing services are provided by a piece of software called Samba.  The e-smith server and gateway version 4.1.2 ships with version 2.0.7 of Samba, which can function as a domain controller under Windows NT 4, but not under Windows 2000.  The solution is to upgrade Samba to the current version, which is 2.2.1a.

The above is different to the howto at myezserver
http://myezserver.com/downloads/mitel/howto/samba-howto.html

But all this is an aside to your actual problem.
Regards
Ray Mitchell

Andy Parkinson

Re: Permissions, Security and Windows Software
« Reply #5 on: February 13, 2003, 12:31:39 AM »
|It may be related to op lock problems with windows 2000 and XP. I ahve ahad a number of issues with this recently and it's usually soprted out by installing win 2k sp3 or disabling op locks on the server.

Ed Form

Re: Permissions, Security and Windows Software
« Reply #6 on: February 17, 2003, 01:58:17 AM »
Andy Parkinson wrote:
>
> |It may be related to op lock problems with windows 2000 and
> XP. I ahve ahad a number of issues with this recently and
> it's usually soprted out by installing win 2k sp3 or
> disabling op locks on the server.

Thanks for the info and to others who replied like Ray Mitchell. I've realised that the problems I reported are similar to an issue I have on my own test network wher I have never been able to log into Cypheus even though I've tried every which way for several months.

I hooked up a Win98 machine yesterday and got straight into Cypheus and then tried my wiife's portable, which runs Win2000 Pro and it logged into Cypheus also. The portable is updated to the very latest standard, my own workstation and those at the live site I mentioned are not.

Will update to Service Pack 3 etc and see what happens.

Ed Form