From owner-freebsd-questions@FreeBSD.ORG  Tue Apr 22 09:33:36 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 58421106564A
	for <freebsd-questions@freebsd.org>;
	Tue, 22 Apr 2008 09:33:36 +0000 (UTC)
	(envelope-from nejc@skoberne.net)
Received: from svarun.infrax.si (syssvarun.infrax.si [89.212.81.4])
	by mx1.freebsd.org (Postfix) with ESMTP id EDCC98FC16
	for <freebsd-questions@freebsd.org>;
	Tue, 22 Apr 2008 09:33:35 +0000 (UTC)
	(envelope-from nejc@skoberne.net)
Received: from localhost (sysSvarun.infrax.si [89.212.81.4])
	by svarun.infrax.si (Postfix) with ESMTP id 0AAE624AA3A;
	Tue, 22 Apr 2008 11:33:33 +0200 (CEST)
Received: from svarun.infrax.si ([89.212.81.4])
	by localhost (svarun.infrax.si [89.212.81.4]) (amavisd-maia, port 10024)
	with ESMTP id 07087-06; Tue, 22 Apr 2008 11:33:25 +0200 (CEST)
Received: from [192.168.15.2] (lk.84.20.249.154.dc.cable.static.lj-kabel.net
	[84.20.249.154])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	(Authenticated sender: nejko@infrax.si)
	by svarun.infrax.si (Postfix) with ESMTP id DDD5324A9F8;
	Tue, 22 Apr 2008 11:33:25 +0200 (CEST)
Message-ID: <480DB0E2.3070202@skoberne.net>
Date: Tue, 22 Apr 2008 11:33:22 +0200
From: =?ISO-8859-2?Q?Nejc_=A9koberne?= <nejc@skoberne.net>
User-Agent: Thunderbird 2.0.0.12 (Windows/20080213)
MIME-Version: 1.0
To: Johan Hendriks <Johan@double-l.nl>
References: <47F54BB3.1080801@skoberne.net> <48071F0E.2020002@skoberne.net>
	<57200BF94E69E54880C9BB1AF714BBCB5DDDB1@w2003s01.double-l.local>
In-Reply-To: <57200BF94E69E54880C9BB1AF714BBCB5DDDB1@w2003s01.double-l.local>
Content-Type: text/plain; charset=ISO-8859-2; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: Maia Mailguard
Cc: freebsd-questions@freebsd.org
Subject: Re: FreeBSD 7.0 jail and Samba 3
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Apr 2008 09:33:36 -0000

Hey Johan,

> I think you will need to remove 127.0.0.1
> Just use 192.168.1.2/24
> There is no 127.0.0.1 on a jailed system

I have done so - I still can't do "smbclient //machine" from another box to
the jailed Samba. If I put the Samba out of the jail (same version, same config)
it works as it should. I have this in my rc.conf:

jail_enable="YES"
jail_sysvipc_allow="YES"
jail_socket_unixiproute_only="NO"

#=---------------------------- Jails ---------------------------=#
jail_list="samba"
#=--------------------------------------------------------------=#
jail_samba_rootdir="/usr/jail/samba"
jail_samba_hostname="samba.domain.local"
jail_samba_ip="192.168.15.201"
jail_samba_interface="rl0"
jail_samba_devfs_enable="YES"
jail_samba_procfs_enable="YES"
jail_samba_devfs_ruleset="devfsrules_jail"
#=--------------------------------------------------------------=#

and this in my sysctl.conf:

security.jail.allow_raw_sockets=1
security.jail.sysvipc_allowed=1

Thanks,
Nejc