For ZFS, your individual action is Solaris. The Linux ZFS ports aren't fit for echt use yet, and lowest I heard, the FreeBSD ZFS left was nonexistent umpteen features.

0 members found this post helpful.

@brokenpromises Might want to keep your eye on this project: http://zfsguru.com/
Rapidly moving and they seem to take feature requests too.

1 members found this post helpful.

I'm sorry to dig up this really old thread, but after setting up this system I forgot about it for a few weeks. It's been really stable, possibly one of the most stable boxes on our network.

Unfortunately I now have a problem - no passwords work. I had my user account which I would use to login (I never got a chance to set up another user account), and if I needed to do root stuff I'd just sudo to root at which point I'd get asked for the root password.

Now no password works at all. What gives?! There is _NO_ way I forgot this password. I've tried my username + my password, then root and the root password on the console, and gotten nowhere - just get 'Login Incorrect'.

Also the console is flooded with messages stating

I'm sure it's not related, but I thought I'd put it up anyway.

What gives? I am 110% positive I didn't forget the password (yes, I've checked caps lock). I even went so far as to the password in the username field to ensure it wasn't a messed up keyboard layout causing the issue.

I'm starting to think my account has gotten locked out somehow... no idea how that would happen though.

HELP!

Greetingz!

A few basic questions first? Besides configuring ZFS+Samba....
a) Did you tweak anything in /etc? (like nsswitch.conf or /etc/default/login)
b) Have you run any type of Security/Lock-Down utility on the system?
c) Was the system patched?

Assuming you can login as root, and you're running Solaris 10, I would suggest a few things;
NOTE: If you're running OpenSolaris, I'm not sure any of this advice would be applicable.
0) Login as root.
1) Shutdown smbd smbd (temporarily).
2) Try to "su - username", what happens? Any errors on the console or in your /var/adm/messages?


If your User-Level Account has a problem.
1) Make sure your user-level account isn't locked-out with "passwd -s username" ("man passwd" for details)
2) Is /etc/passwd sane? ("man pwck" for details).
3) Is /etc/group sane?
4) Does your user-level account exist in /etc/shadow?

You missed the dilemma, the text clearly says no. Do you have any advice for root password recovery when the admin has physical access to the machine?

OS is Solaris Express 11. Had to go with 11 as 10 was throwing a major hissyfit about my hardware (SATA ports / ethernet not working, didn't want to deal with that).

Yes, as per my earlier post where I outlined what I did, I did the following:

^^^ did have to add this to the last line on /etc/passwd to get my 'anonymous file sharing' to work.

Any configuration changes made are outlined in this post - if it's not in there, I didn't do it, and all settings/files are 100% stock as they would be after installing Solaris 11.

At this stage I have no login into the box at all. I do have physical access to the box. I think I might just format the entire system rather than faff about with this password recovery BS, however I'm concerned it'll just happen again! There is absolutely NO way I 'forgot' this password. Impossible.

Ah, okay. Well that does happen.

By chance did you add a corresponding /etc/shadow line for that account?

Cool, just wanted to make sure I wasn't missing anything.

Well, as the saying goes "If I already have physical access to the server, the SysAdmin's already lost the fight".
This StackOverflow post should have everything you need to get into SingleUserMode on OpenSolaris. I don't have it installed anywhere at the moment, so I cannot confirm nor deny if this works (let me know if it does!)

I don't need/use AD, but I thought the entry "Access" => "Active Directory" in FreeNAS would offer this.

In the end I ended up completely dropping AD support altogether, and setting permissions for the share to be accessible by 'all'. Perhaps I can go with FreeNAS and see how that works out. Solaris has worked out very well but I'm kind of angry at it for locking out my account

I'm not on opensolaris though, I'm on Solaris Express 11 - do you think these instructions will still work? Thanks for all the help, I really appreciate the time you've put into this.

It's probably not Solaris' fault.

That's right, you did mention Solaris Express 11. I would imagine that the instructions would kinda sorta be the same, but give it a shot and let us know how it goes. I personally am very curious about how all of this will pan-out!

You're quite welcome.

Have you taken a look at: http://napp-it.org/index_en.html

This might fit all your needs?

I only suggest it because from your first post you had the following requirements/needs/would like to have:

1. ZFS (based on first installing Solaris Express 11, OpenIndiana, or Nexenta)
2. AD integration
3. GUI

I am about to install this on some hardware I have and thought I would share my research (and past experience) with you because you have some of the same functionality I am looking for. I have tried FreeNAS 8 RC2, but the Storage Wizard is still buggy and would not locate any volumes on my system even though I manually created a zpool and zfs filesystems. I did try NexentaStor.org, but it is limited to 18TB of data (open source should have NO limitations) plus it did not really like my hardware. My next step this weekend is installing Solaris Express 11 (I have had a lot of success in the past with Solaris 10 for x86) and then install napp-it on top of it as per their instructions.

Hope this information helps you.