RE: [Samba] Connection problems
All, Sorted, it was to do with the WINS / lmhosts entry. Sorry to have bothered you. Dave -Original Message- From: Shepherd, Dave Sent: 16 April 2002 10:40 To: SAMBA-L Subject: [Samba] Connection problems All, Please help. I am trying to enable a share from a server with an IP address of 172.2.xxx.xxx to a server with an IP address of 10.100.xxx.xxx. They are both on my WAN, and I have complete access to both, yet I get an error 53 when trying to browse the 172 machine from the 10 machine. I'm sure it's just one parameter change, I just can't find it. TIA Dave Shep -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] sharing printer without login?
This does what you want on my home network. Joel [global] security = SHARE guest account = ftp hosts allow = 192.168. 127.0.0.1 [AllFiles] comment = All Files path = / read only = no guest ok = Yes [test] comment = Filtered for Z53 path = /tmp read only = No create mask = 0700 guest ok = Yes printable = Yes printing = lprng print command = /usr/bin/lpr -Ptest %s; rm %s lpq command = /usr/bin/lpq -Ptest lprm command = /usr/bin/lprm -Ptest %j lppause command = /usr/sbin/lpc hold test %j lpresume command = /usr/sbin/lpc release test %j On Mon, Apr 15, 2002 at 04:26:30PM -0500, christopher j bottaro wrote: hello, i want to share a printer via samba to some win2k machines, but i don't want the win2k machines to have to login to some home dir. how do i accomplish this? also, i want to share some dir (i.e. /home/cjb/my_music) to the win2k machines with certain permissions, again without requiring the win2k machines to login. thanks for the help, christopher -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] DFS and MS explorer
Greetings ! We are currently testing samba together with DFS. All is working fine with one exception: From time to time (but too often) the user gets the message n:\bla\path\to\somewhere isn't available. The directory has been moved or deleted. when accessing a directory with the explorer. The message above is translated from german, therefore the original english message might look a little bit different. I know definitively that the above directory is still there: When clicking somewhere else and back into the corresponding directory explorer happily shows its content. OS: Linux with kernel 2.4.17, samba 2.2.3a Client: NT 4.0 SP6a and Win2K (with SP2, I think). Any hints ? Ciao Markus -- -- Senior Executive - Systemadministration Direct Phone: + 49 / 234 9787-57 Direct Fax: +49 / 234 9787-77 ZN Vision Technologies AG Universitaetsstrasse 160 44801 Bochum Germany http://www.zn-ag.com -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Beeweeb, Samba killer?
http://www.beeweeb.com Some of my folks here pressured me to try it out. So I did. Works pretty well but I know nothing about it other than it works for windows and mac clients and works across public networks like nothing if you open the needed ports. It's kinda bothersome. I don't know where this software came from or how it works. I've been using Samba for 7 years, and Netatalk for 5. I don't want to change, but this software offers some functionality that is user friendly and I'm afraid my users are going to start demanding it. Does anyone on the list know anything about this software? Thanks in advance. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Exchange Replacement (OT)
According to the news article it needs to run on Solaris 8 and have access to an Oracle 8i database server. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dirk Allaert Sent: Tuesday, April 16, 2002 01:05 To: Samba Subject: Re: [Samba] Exchange Replacement (OT) Maybe Sendmail Calendar Server is a worthy replacement, just read about it myself. We are using sendmail on our mail servers anyway, we might give it a try. http://serverwatch.internet.com/icom_cgi/print/print.cgi?url=http: //serverwatch.internet.com/news/2002_04_15_b.html -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Exchange Replacement (OT)
There is also Suse email server III http://www.suse.de/uk/products/suse_business/email_server/index.html Sue
Re: [Samba] Beeweeb, Samba killer?
I doubt it's going to kill samba - it's not free. On Tue, Apr 16, 2002 at 09:44:36AM -0400, [EMAIL PROTECTED] wrote: http://www.beeweeb.com Some of my folks here pressured me to try it out. So I did. Works pretty well but I know nothing about it other than it works for windows and mac clients and works across public networks like nothing if you open the needed ports. It's kinda bothersome. I don't know where this software came from or how it works. I've been using Samba for 7 years, and Netatalk for 5. I don't want to change, but this software offers some functionality that is user friendly and I'm afraid my users are going to start demanding it. Does anyone on the list know anything about this software? Thanks in advance. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Douglas G. Phillips ITS/User Services Eastern Illinois University -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] ARGH!!! Samba and Re-installing Windows 2000
-Original Message- From: James Kreuziger [mailto:[EMAIL PROTECTED]] Sent: Monday, April 15, 2002 7:46 PM To: [EMAIL PROTECTED] Subject: [Samba] ARGH!!! Samba and Re-installing Windows 2000 Ok, I'll try the questions again and hopefully get some help. Current setup: Samba 2.2.3a running on Solaris 8 set up as a PDC. Various systems running Windows 95/98/NT 4.0. TRYING to add new Windows 2000 machines. Problem is, when I add the new machines to the domain, the group DOMAIN\unix_group.2147483404 gets added to both the Administrators group and Users group. So domain users start with Administrator rights! If I remove the DOMAIN\unix_group.2147483404 group from the Administrators group, it mucks thinks up bad enough to require a reinstall of Win2k. I'd like to think that this is not a required feature of using Samba with Win2k. I would like to restrict users to the same rights as normal users, so I can lock down who can install software on each individual machine. As it stands now, I can't do that. Now for the new part. I've managed to get Win2k re-installed, and I'm still having problems. When I try to join the domain is when I have problems. I'm successful in joing the domain, but after reboot is when weird things happen. The DOMAIN\unix_group.2147483404 is back in the Administrators group. Whoever logs into the domain through THIS SPECIFIC MACHINE gets logged on, and all of the mapped shares show up with the red x through them. This indicates that the shares are not logged into. However, the shares can be accessed. If I set log level = 3 (or greater) it shows a number of the following: [2002/04/15 19:21:53, 4] smbd/password.c:password_ok(602) Null passwords not allowed. Followed by: [2002/04/15 19:21:53, 2] smbd/service.c:make_connection(328) Invalid username/password for share_name [samba] These messages occur for each share I have, with the samba user being my guest user. Funny thing, the samba (guest) user can log in and the same messages appear. If I bump up the log level high enough, I start getting the following: [2002/04/12 17:07:40, 2] smbd/service.c:make_connection(328) Invalid username/password for share_name [samba] [2002/04/12 17:07:40, 3] smbd/error.c:error_packet(103) error packet at smbd/reply.c(167) cmd=117 (SMBtconX) NT_STATUS_WRONG_PASSWORD I have my logs set up by machine (log file = /samba/current/var/log.smbd.%m) and I don't see this in any other log file. I've tried a number of things, including dropping out of the domain and re-joining, and this still occurs ONLY ON THIS ONE MACHINE! I'm really pulling my hair out, because nothing seems to work right. I might add that this is the only problem that I have had with samba that I haven't been able to get solved by reading the newsgroup or emailing someone. So far, I've had nothing but good luck using samba. I'm including the global section of my smb.conf, if it helps. Thanks, Jim, Did you run the Microsoft Personal Security Advisor (MPSA) on this machine? I seem to remember having problems with shares after setting RestrictAnonymous=2. Setting it to 1 fixed the issues. RestrictAnonymous Values and their basic effect: 0 None. Rely on default permissions 1 Do not allow enumeration of SAM accounts and names 2 No access without explicit anonymous permissions The red X's are okay, I think; Win2k restores mapped drive links, but doesn't connect to them until you explicitly do so. This saves a lot of bandwidth by not handhaking idle mappings, and speeds up shutdown and sleeping by not having to handshake disconnections. It's actually a good thing, I think. Remember Win9x's hang on shutdown? That was due to mapped drive issues. HTH Jim -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Path too deep
dear sir, I have samba 2.2.3arunning on RedHat linux 7.2 with kernel 2.4.7-10 all other computers on the network are windows XP machines. I doNOT have any problems when reading with windows XP from any share in the linux server, however when i try to copy a file to the share, my windowsXP explorer stops responding for about 30 secs and then givesthe error-message 'could not copy file: path is too deep'. after re-installing and reviewing samba for about ten times and experimenting with many different configurations i give up. are there any known causes and or solutionsfor this problem. please help, best regards, Jan van den Berg System info: RedHat 7.2 kernel 2.4.7-10 samba 2.2.3a mainboard: ASUS TUV4X rev 1003 NIC: 3COM905C-TX-M PCI smb.conf: [global]workgroup = LAMPSUPnetbios name = filesrvsecurity = SHAREencrypt passwords = Yesnull passwords = Yeslog file = /usr/local/samba/log.%mcomment = Samba serverguest account = ftp [backup]path = /home/c/backupread only = Noguest ok = Yes [c]path = /home/cread only = Noguest ok = Yes
Re: [Samba] Beeweeb, Samba killer?
By free, folks should bear in mind that it is not free in both the free beer sense as well as the free speech sense, i.e. it costs money to buy it and it is both closed source (as far as I can tell from the web site, anyway) and restrictively licensed (compared to the GPL or BSD licenses). Bill Knox Senior Operating Systems Programmer/Analyst The MITRE Corporation On Tue, 16 Apr 2002, Douglas G. Phillips wrote: Date: Tue, 16 Apr 2002 10:03:34 -0500 From: Douglas G. Phillips [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: [Samba] Beeweeb, Samba killer? I doubt it's going to kill samba - it's not free. On Tue, Apr 16, 2002 at 09:44:36AM -0400, [EMAIL PROTECTED] wrote: http://www.beeweeb.com Some of my folks here pressured me to try it out. So I did. Works pretty well but I know nothing about it other than it works for windows and mac clients and works across public networks like nothing if you open the needed ports. It's kinda bothersome. I don't know where this software came from or how it works. I've been using Samba for 7 years, and Netatalk for 5. I don't want to change, but this software offers some functionality that is user friendly and I'm afraid my users are going to start demanding it. Does anyone on the list know anything about this software? Thanks in advance. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- Douglas G. Phillips ITS/User Services Eastern Illinois University -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba to NFS gateway; incorrect mounted space shown on clients
Greetings - and hats off to the Samba coders. ;-) You guys are awesome. Likewise I would like to thank the entire open source community for your hard work, generosity, and for their tolerance. :-/ For those in a rush to want to know what the interesting problem is, skip down to the heading The Problem: at the end of the e-mail. Then come back and read the rest if you're interested. (Yes, I know I'm verbose - as the saying goes, if I had time I'd write a shorter letter.) What we're doing: We've got a machine running Samba 2.2.3a which is acting both as a PDC for XP machines _as well as_ acting as an SMB -- NFS gateway. (I.E. Windows file sharing of nfs automounted directories). Yes, we've gotten that all working. No, it wasn't easy. It's a RedHat 7.2 machine running a stock kernel, but has been updated with Samba 2.2.3a. In brief, the network diagram looks something like this: (Note: this diagram was made in a console text editor) UNIX NFS machines Samba machine Windows clients nfs1 ---\ /- client1 \/ nfs2 -\ /--- client2 \ Samba ---/ nfs_automounter -/ eth0 eth1\ client3 / \ nfs3 /\-- client4 / \ nfs4 --/\ client5 . . . . . . Why we did this: 1. We were dumb and started using Windows XP for clients, not realizing that the nfs client programs that we bought did not support Windows XP. Upon further investigation, none of the nfs clients support automounting, which sucks. 2. We're cheap. We run a tight budget, and we just don't have the funds available to buy nfs clients at $120 a pop for all the machines. 3. Integration considerations. We wanted a single way to deal with all the Windows clients regardless of OS type. Right now we've got many different nfs clients being used (Solstice, WRQ, and Hummingbird) and none of them do everything on all versions of Windows. 4. Ease of install. With this Samba solution, there is no need to install any software on each client to get access to file shares. 5. Peace of mind. It's free software, there are no licenses to have to worry about. 6. Support. Yes I said support. Of the commercial vendors we deal with, we have many that won't bother to return a phone call until a week or so later. By then we've either worked it out for ourselves or we got somebody we knew to do help. The open source community has more often than not been our solution for supporting our problems _anyway_. ;-) What's working: - The user's home directories are mounted through nfs automount, and that seems to work (for the most part), even though the actual location of the nfs share may be on one of 5 machines, yet it appears that all users are under /home. - The Samba machine is able to be a Primary Domain Controller, even for XP machines. Unfortunately we're probably not going to use this capacity due to the requirement for automatic failover to a BDC. In addition, we're not really using the PDC for authentication purposes anyway, so it might not matter in our case. The main thing we're getting out of the PDC is the ability to run a script upon login to track installed software on PC's. - We've set up two interfaces on the Samba machine with a firewall to try to separate smb requests from nfs requests, which seems to be working satisfactorily. - The box has got software root raid with the ability to boot up on both drives. Installing grub on both drives to allow for bootup on both drives was a bit tricky. - We set up a cool text dashboard which uses splitvt to split the terminal window up _three_ ways (ran splitvt, in the upper window ran splitvt again.) The bottom window runs top, the uppermost window runs sar to show network bandwidth information, the middle window shows raid status. We used the 'open' command to run the script in an unused tty at boot time without a login. The problem: - The Samba machine seems to report the incorrect amount of free space to Windows clients on some NFS shares, but reports correctly on others. I.E. Windows clients mount drives using the net use command, and when the free space is checked, some of the mounts show 20 MB of
[Samba] users.map break ability for win users to use samba shares?
Hello: Please excuse for long explanation: I have Sun 2.6 with Samba 2.2.2 to share directories on Solaris box for Windows users. They are authorized by NT domain. For Win users to access to shared Unix shared directories I set up (through SWAM): Security Option - DOMAIN, valid users - @group1 @group2 @group3, without users.map I created locked Unix users with names equivalent their names on NT domain. Windows users could access their Samba shares no problems. But one Win User has its username longer than 8 characters (verylonguser) which is not accepted by Solaris. So, I created equivalent of this user on Unix with 8 letters username (longuser), added to [global] entry users map users.map and created users.map file with entry longuser = verylonguser. When I commit the change, this user could use its share on Samba, but all other users on Network could not. And what is worse, when I took the users.map out of smb.conf and commit once more the users still cannot connect (they are asked for password, which is denied. Pleaseeese, advice. Note: Is winbind needed? I could not find service winbind anywhere? Joseph Joseph Abramson, TAC worldwide Companies [EMAIL PROTECTED] Thank you very much. JA
Re: [Samba] CIFS SMB Microsoft licenses
So, you mean that if you read, you are dead It sounds interesting. I have to read more carefully the licenses. Regards, Davide Jeremy Allison wrote: On Tue, Apr 16, 2002 at 04:49:29PM +0200, Davide Dozza wrote: Hello guys, does anyone knows the implications that the CIFS and SMB Microsoft licenses may have on samba development ? http://news.com.com/2010-1075-882846.html We're consulting the legal staff at the FSF for a definitive answer on this. More when we have a US legal opinion. In the meantime, don't panic. We don't think we infringe their patent claims (but this is why we're getting a legal opinion - to make sure this is the case) and the license is for CIFS *documentation*, not any code at present. The opinion of someone who has seen this documentation (not me) is that there is nothing in it that Samba doesn't already implement. In fact it is a significant subset of the SNIA CIFS documentation which the Samba Team has helped prepare. This license seems to have been created (IMHO) to create fear uncertainty and doubt amongst Samba users and vendors using Samba - such as the comments that have been appearing on this list :-). It's a classic marketing tactic I believe. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] why do i have so much trouble accessing an nt box?
I have, on my desk, a FreeBSD-4.5 box and a NT4 box, connected to a kvm switch, and ethernet. I have samba installed and working correctly, and using XFSamba I can see the shares on the NT box. No matter how I set the permissions on the NT box shared folders, I get access denied when trying to access those shares from the FreeBSD box. I also have a printer connected to the FreeBSD box, works great. I can see the printer in the NT Network Neighborhood, but cannot get anything to print to it from NT, I get access denied on the NT box. On the NT box in network neighborhood I can see and access files on the FreeBSD box without any problems. I have had no problems with any of this stuff when using FreeBSD and win95 or win98, only with NT. I do have encrypt passwords = yes set in smb.conf. I am using Samba-2.2.2_3. Any ideas why accessing NT is such a pain in the a..? Regards, -- Chip Wiegand Computer Services Simrad, Inc www.simrad.com [EMAIL PROTECTED] There is no reason anyone would want a computer in their home. --Ken Olson, president, chairman and founder of Digital Equipment Corporation, 1977 (They why do I have 7? Somebody help me!) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] installation question
Title: installation question Hello, I am new to linux and samba. I am interested in installing Samba-2.2.3a on our new file server for a more stable server and to save costs on Microsoft products. I have redhat 7.2 installed but havent been able to get Samba installed. I havent even been able to get past the first step (./configure) I put the samba directory underneath root and then cd source, from here I put in ./configure or just configure and it comes back stating that the file doesnt exist. Well when I do a ls or dir I can clearly see that it does. Im not sure where to go from here. Please point out the obvious, Im sure its something simple I just dont get. Im using KDE gui. I appreciate the help! Thanks, Scott Dunn USTC IS Dept. (530)899-4363 [EMAIL PROTECTED] Failure is all right if it doesn't go to the heart. Success is all right if it doesn't go to the head.
RE: [Samba] CIFS SMB Microsoft licenses
This is the most ludicrous thing I have ever heard. How on earth are they going to prove that someone ever read something that was publicly available. Especially when SMB is such a widely understood protocol. I don't think this is targeted towards samba per se, as much as microsofts huge customers that bring them their bread and lard. Hey corporate CIO, don't you dare or else Monopolies always attempt to maintain their monopolies. These guys are no different than standard oil and ma bell. If anything they are much worse, in that after losing 4 times, they still keep doing the same thing. The only way to fight this is to deprive them of their client plaform. So, support the following projects Lindows www.lindows.com WineHQ www.winhq.org Star Office www.staroffice.org and quit using Microsoft junk on your desktops. And start pushing alternatives to your clients and organizations. Sanjiv -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Davide Dozza Sent: Tuesday, April 16, 2002 12:10 PM To: Jeremy Allison Cc: samba Subject: Re: [Samba] CIFS SMB Microsoft licenses So, you mean that if you read, you are dead It sounds interesting. I have to read more carefully the licenses. Regards, Davide Jeremy Allison wrote: On Tue, Apr 16, 2002 at 04:49:29PM +0200, Davide Dozza wrote: Hello guys, does anyone knows the implications that the CIFS and SMB Microsoft licenses may have on samba development ? http://news.com.com/2010-1075-882846.html We're consulting the legal staff at the FSF for a definitive answer on this. More when we have a US legal opinion. In the meantime, don't panic. We don't think we infringe their patent claims (but this is why we're getting a legal opinion - to make sure this is the case) and the license is for CIFS *documentation*, not any code at present. The opinion of someone who has seen this documentation (not me) is that there is nothing in it that Samba doesn't already implement. In fact it is a significant subset of the SNIA CIFS documentation which the Samba Team has helped prepare. This license seems to have been created (IMHO) to create fear uncertainty and doubt amongst Samba users and vendors using Samba - such as the comments that have been appearing on this list :-). It's a classic marketing tactic I believe. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] (no subject)
On step #3 of the Diagnosis.txt (/samba/docs), when I issue 'smbclient -L testsrv', it prompts me for a password. I just have to hit ENTER and it displays all the shares like it should...but this step mentions nothing about being prompted for a password. Why would I be getting the password prompt? Thank you. Darin DeCounter Atex Assistant System Administrator Las Vegas Review-Journal 702-387-5230 [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Non-windows Users?
Matthew Walker wrote: My Samba is currently set up to use our Win2K PDC as a password server, but I have a couple users who aren?t on the domain who want access to Samba. Is there a way to let them log in without authenticating against the password server? Just create an smbpasswd file with the passwords for the unix users you want. If authentication to the server fails it will try the ones in smbpasswd. -- == Herb Lewis Silicon Graphics Networking Engineer 1600 Amphitheatre Pkwy MS-510 Strategic Software Organization Mountain View, CA 94043-1351 [EMAIL PROTECTED] Tel: 650-933-2177 http://www.sgi.com Fax: 650-932-2177 == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] installation question
Title: Message If you're new to linux, I suggest you download the rpm from www.samba.org. A redhat install typically expects samba in places where just running "./configure" without options will not place the files. This isn't really the fault of samba or redhat, it's just "different". If you use the redhat rpm, it will put everything where redhat likes it to go, even putting in the smb /etc/init.d/smb file in for you. So I would delete your samba stuff and just get the rpm unless you HAVE to have something that's not compiled into the rpm, which is unlikely unless you're running LDAP or something, which would be amazing since you say you're new to linux. :) So to wrap it up, RPM = good for beginners, .TAR.GZ= good if you're masochistic or need something not compiled in by default. -Original Message-From: Scott Dunn [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 16, 2002 12:58 PMTo: [EMAIL PROTECTED]Subject: [Samba] installation question Hello, I am new to linux and samba. I am interested in installing Samba-2.2.3a on our new file server for a more stable server and to save costs on Microsoft products. I have redhat 7.2 installed but havent been able to get Samba installed. I havent even been able to get past the first step (./configure) I put the samba directory underneath root and then cd source, from here I put in ./configure or just configure and it comes back stating that the file doesnt exist. Well when I do a ls or dir I can clearly see that it does. Im not sure where to go from here. Please point out the obvious, Im sure its something simple I just dont get. Im using KDE gui. I appreciate the help! Thanks, Scott DunnUSTCIS Dept.(530)899-4363[EMAIL PROTECTED] "Failure is all right if it doesn't go to the heart. Success is all right if it doesn't go to the head."
[Samba] pam_smbpasswd+ldap versus smbd+ldap problem
Hi, I downloaded a few minutes ago the latest 2.2.4-pre from the CVS. Note that I haven't tried any previous version with the current setup. Here's what I am doing. I compiled 2.2.4-pre with : ./configure --without-winbind --with-acl-support --with-utmp --with-syslog --with-pam --with-automount --with-pam_smbpass --with-ldapsam After installing the PAM module under Solaris 8, I am able to use the migrate option for the module as well as authentication using the ntPassword attribute from the LDAP server. So far so good! Now the problem... With Samba, it doesn't work at all. It keeps on saying : NT MD4 password check failed for no reason!!! I know the password in the LDAP is good. Here's the log, I removed the lmPassword and ntPassword. [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:ldap_open_connection(143) ldap_open_connection: connection opened [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:ldap_connect_system(177) ldap_connect_system: succesful connection to the LDAP server [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:ldap_search_one_user(189) ldap_search_one_user: searching for:[((uid=pbelang1)(objectclass=sambaaccount))] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(287) get_single_attribute: [uid] = [pbelang1] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:init_sam_from_ldap(422) Entry found for user: pbelang1 [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(287) get_single_attribute: [pwdLastSet] = [1018977257] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(287) get_single_attribute: [logonTime] = [0] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(287) get_single_attribute: [logoffTime] = [2147483647] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(287) get_single_attribute: [kickoffTime] = [2147483647] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(287) get_single_attribute: [pwdCanChange] = [0] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(287) get_single_attribute: [pwdMustChange] = [2147483647] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(287) get_single_attribute: [cn] = [pbelang1] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(280) get_single_attribute: [homeDrive] = [does not exist] [2002/04/16 14:56:30, 5] passdb/pdb_ldap.c:init_sam_from_ldap(464) homeDrive fell back to H: [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(280) get_single_attribute: [smbHome] = [does not exist] [2002/04/16 14:56:30, 4] lib/substitute.c:automount_server(160) Home server: alkonost [2002/04/16 14:56:30, 5] passdb/pdb_ldap.c:init_sam_from_ldap(473) smbHome fell back to \\alkonost\pbelang1 [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(280) get_single_attribute: [scriptPath] = [does not exist] [2002/04/16 14:56:30, 5] passdb/pdb_ldap.c:init_sam_from_ldap(482) scriptPath fell back to logon.cmd [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(280) get_single_attribute: [profilePath] = [does not exist] [2002/04/16 14:56:30, 4] lib/substitute.c:automount_server(160) Home server: alkonost [2002/04/16 14:56:30, 5] passdb/pdb_ldap.c:init_sam_from_ldap(491) profilePath fell back to \\alkonost\pbelang1\profile [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(280) get_single_attribute: [description] = [does not exist] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(280) get_single_attribute: [userWorkstations] = [does not exist] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(287) get_single_attribute: [rid] = [61228] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(287) get_single_attribute: [primaryGroupID] = [1201] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(287) get_single_attribute: [lmPassword] = [REMOVEDREMOVEDREMOVEDREMOVED] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(287) get_single_attribute: [ntPassword] = [REMOVEDREMOVEDREMOVEDREMOVED] [2002/04/16 14:56:30, 2] passdb/pdb_ldap.c:get_single_attribute(287) get_single_attribute: [acctFlags] = [[UX ]] [2002/04/16 14:56:30, 4] smbd/password.c:smb_password_ok(475) smb_password_ok: Checking SMB password for user pbelang1 [2002/04/16 14:56:30, 5] smbd/password.c:smb_password_ok(489) smb_password_ok: challenge received [2002/04/16 14:56:30, 4] smbd/password.c:smb_password_ok(499) smb_password_ok: Checking NT MD4 password [2002/04/16 14:56:30, 4] smbd/password.c:smb_password_ok(504) smb_password_ok: NT MD4 password check failed [2002/04/16 14:56:30, 4] smbd/password.c:smb_password_ok(518) smb_password_ok: Checking LM password [2002/04/16 14:56:30, 4] smbd/password.c:smb_password_ok(523) smb_password_ok: LM password check failed [2002/04/16 14:56:30, 2] smbd/password.c:pass_check_smb(575) pass_check_smb failed - invalid password for user [pbelang1] [2002/04/16 14:56:30, 1]
[Samba] Authentication Problem
Ok, sorry folks, but here I am again: I installed samba2.2.3a on a suse 7.3 and everything (well, I tried an 'everybody' share and it's ok) works fine until it comes to winbind et al. The very first thing that's supposed to be tested is the wbinfo -g or -u. It tells me 'Error looking up domain users'. The winbindd logfile states '002c status: NT_STATUS_ACCESS_DENIED'. The server I want to authenticate against is w2k server sp2. The security log on the w2k server shows anonymous_authentication failed 'MAX_REACHED' (I translated this, in german it's 'MAX_ERLAUBT'. The effect is that I don't get a list of users in the domain and I cannot authenticate. The join process seems to have worked, a MACHINE.SID and secrets.tdb have been created. - | Peter Koch Schlund Partner AG | | mailto:[EMAIL PROTECTED]Erbprinzenstr. 4-12 | | T. 0721-91374-687 D-76133 Karlsruhe | | F. 0721-91374-20 | - -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] diagnosis test #3 smbclient -L BIGSERVER
On step #3 of the Diagnosis.txt (/samba/docs), when I issue 'smbclient -L testsrv', it prompts me for a password. I just have to hit ENTER and it displays all the shares like it should...but this step mentions nothing about being prompted for a password. Why would I be getting the password prompt? Thank you. Darin DeCounter Atex Assistant System Administrator Las Vegas Review-Journal 702-387-5230 [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] password server not connected ??
Hi I have set up a Windows 2000 Server in a small department and intermitently I have problems mounting samba shares. From the dos prompt when I do a net view \\server, it gives me access denied?? the log.smb has the following lines of errors: [2002/04/16 14:15:42, 1] smbd/password.c:server_validate(1117) password server is not connected [2002/04/16 14:15:42, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1367) unable to open passdb database. [2002/04/16 14:15:42, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'kenp' in passdb. [2002/04/16 14:15:42, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1367) unable to open passdb database. [2002/04/16 14:15:42, 1] smbd/password.c:pass_check_smb(555) Couldn't find user 'kenp' in passdb. [2002/04/16 14:15:42, 1] smbd/reply.c:reply_sesssetup_and_X(988) Rejecting user 'kenp': authentication failed [2002/04/16 14:15:44, 0] lib/debug.c:reopen_logs(340) Unable to open new log file /samba/var/ttapserver/log.bigblue: No such file or directory [2002/04/16 14:15:44, 1] smbd/password.c:server_validate(1117) password server is not connected [2002/04/16 14:15:44, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1367) unable to open passdb database. It's like it samba quites talking to the windows 2000 server, during this time shares off the same server mount just fine, it's only the samba shares that are not mounting. I'm running a Windows 2000 Server with SP2 as my authentication server and samba 2.2.3a, below is a some lines from my smb.conf file: [global] security = server password server = win2000server workgroup = domain debug level = 1 guest account = ntguest dead time = 10 getwd cache = yes invalid users = root bin sys news lock directory = /samba/locks map archive = no passwd program = /usr/bin/yppasswd status = yes null passwords = no socket options = TCP_NODELAY local master = no domain master = no preferred master = no os level = 0 password level = 3 log file = /samba/var/%L/log.%m oplocks = true Any help would be appreciated. thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbmount to host over internet?
On Tue, 16 Apr 2002, Rafael wrote: I have tried to mount a share from a windowsclient of my brother over the internet and dont know if it is possible or not i tried this: smbmount //222.132.33/hol /kol ^^ Try using the whole IP number ... (all 4 octets). If the other side is a win9x then you need to use the name of the machine to connect. This is why the 'ip' option exists. So instead of: mount -t smbfs -o ip=222.132.33 //222.132.33/hol /kol It might work with: mount -t smbfs -o ip=1.2.3.4 //netbiosname/hol /kol Where netbiosname is the name the other machine thinks it has. It doesn't matter that your machine doesn't know what netbiosname resolves to. Firewalls and such may still prevent you from connecting, but it is otherwise possible to do. /Urban -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Making Samba a member of NT security domain fails - why?
I am following 2.5.2 in the Samba-howto-collection in an attempt to make my Samba server part of my NT security domain. I have Samba 2.2.3 on Slack 8.0 (2.2.19). The smb.conf is as follows: # Samba config file created using SWAT # from localhost (127.0.0.1) # Date: 2002/04/16 14:20:05 # Global parameters [global] workgroup = LFRG-TLH netbios name = HUMPHRY server string = Samba 2.2.3 security = DOMAIN encrypt passwords = Yes min passwd length = 0 null passwords = Yes password server = * [print$] path = /usr/local/samba/printers guest ok = Yes printable = Yes print command = /usr/bin/lpr -r %s printer name = lp [test] comment = For testing only please path = /export/samba/test [homes] read only = No I've added a machine account for humphry. I've executed: smbpasswd -r tlh-file-print -j lfrg-tlh (the pdc and domain names) but get the following error: cli_net_auth2: Error NT_STATUS_NO_TRUST_SAM_ACCOUNT cli_nt_setup_creds: auth2 challenge failed modify_trust_password: unable to setup the PDC credentials to machine TLH-FILE-PRINT. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT. 2002/04/16 14:28:44 : change_trust_account_password: Failed to change password for domain LFRG-TLH. I've added an NT user account root and password ensemble that is the same as on the Linux box. I've put a couple of disk directory shares on the Linux box and those have been available to their users (same user names and passwords as the accounts on the NT domain) Can anyone tell me what I'm missing? Thanks in advance John M. Clay Senior Engineer LFR Levine Fricke tel: (850) 422-2555 e-mail: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: trust relationship
Ariel Mella wrote: how is the state of trust relationship between samba domain and NT 4 domains? in what versions samba2.2x or samba3.x? thanks Developemnt currently underway in HEAD. This won't appear in 2.2. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net
trusted domains enumeration v3
Here it comes. This version doesn't introduce renaming of the status code.
Looks better ? :)
cheers,
++
|Rafal 'Mimir' Szczesniak [EMAIL PROTECTED] |
|*BSD, GNU/Linux and Samba /
|__/
? intl/update-po
Index: Makefile.in
===
RCS file: /cvsroot/samba/source/Makefile.in,v
retrieving revision 1.470
diff -u -r1.470 Makefile.in
--- Makefile.in 13 Apr 2002 11:45:33 - 1.470
+++ Makefile.in 16 Apr 2002 13:05:48 -
@@ -210,7 +210,8 @@
AUTH_OBJ = auth/auth.o auth/auth_sam.o auth/auth_server.o auth/auth_domain.o \
auth/auth_rhosts.o auth/auth_unix.o auth/auth_util.o auth/auth_winbind.o \
- auth/auth_builtin.o auth/auth_compat.o $(PLAINTEXT_AUTH_OBJ) $(UNIGRP_OBJ)
+ auth/auth_builtin.o auth/auth_compat.o \
+ $(PLAINTEXT_AUTH_OBJ) $(UNIGRP_OBJ)
MANGLE_OBJ = smbd/mangle.o smbd/mangle_hash.o smbd/mangle_map.o smbd/mangle_hash2.o
Index: include/nterr.h
===
RCS file: /cvsroot/samba/source/include/nterr.h,v
retrieving revision 1.22
diff -u -r1.22 nterr.h
--- include/nterr.h 14 Apr 2002 10:50:32 - 1.22
+++ include/nterr.h 16 Apr 2002 13:05:48 -
@@ -29,7 +29,7 @@
#define STATUS_BUFFER_OVERFLOWNT_STATUS(0x8005)
#define NT_STATUS_NO_MORE_ENTRIES NT_STATUS(0x801a)
-#define STATUS_MORE_ENTRIES NT_STATUS(0x0105)
+#define STATUS_MORE_ENTRIESNT_STATUS(0x0105)
#define STATUS_SOME_UNMAPPED NT_STATUS(0x0107)
#define ERROR_INVALID_PARAMETER NT_STATUS(0x0057)
#define ERROR_INSUFFICIENT_BUFFERNT_STATUS(0x007a)
Index: libsmb/cli_lsarpc.c
===
RCS file: /cvsroot/samba/source/libsmb/cli_lsarpc.c,v
retrieving revision 1.43
diff -u -r1.43 cli_lsarpc.c
--- libsmb/cli_lsarpc.c 14 Apr 2002 11:21:25 - 1.43
+++ libsmb/cli_lsarpc.c 16 Apr 2002 13:05:49 -
@@ -5,7 +5,8 @@
Copyright (C) Andrew Tridgell 1992-1997,2000,
Copyright (C) Luke Kenneth Casson Leighton 1996-1997,2000,
Copyright (C) Paul Ashton 1997,2000,
- Copyright (C) Elrond 2000.
+ Copyright (C) Elrond 2000,
+ Copyright (C) Rafal Szczesniak 2002
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
@@ -537,12 +538,25 @@
return result;
}
-/** Enumerate list of trusted domains */
+/**
+ * Enumerate list of trusted domains
+ *
+ * @param cli client state (cli_state) structure of the connection
+ * @param mem_ctx memory context
+ * @param pol opened lsa policy handle
+ * @param enum_ctx enumeration context ie. index of first returned domain entry
+ * @param pref_num_domains preferred max number of entries returned in one response
+ * @param num_domains total number of trusted domains returned by response
+ * @param domain_names returned trusted domain names
+ * @param domain_sids returned trusted domain sids
+ *
+ * @return nt status code of response
+ **/
NTSTATUS cli_lsa_enum_trust_dom(struct cli_state *cli, TALLOC_CTX *mem_ctx,
POLICY_HND *pol, uint32 *enum_ctx,
-uint32 *num_domains, char ***domain_names,
-DOM_SID **domain_sids)
+uint32 *pref_num_domains, uint32 *num_domains,
+ char ***domain_names, DOM_SID **domain_sids)
{
prs_struct qbuf, rbuf;
LSA_Q_ENUM_TRUST_DOM q;
@@ -560,7 +574,7 @@
/* Marshall data and send request */
-init_q_enum_trust_dom(q, pol, *enum_ctx, 0x);
+init_q_enum_trust_dom(q, pol, *enum_ctx, *pref_num_domains);
if (!lsa_io_q_enum_trust_dom(, q, qbuf, 0) ||
!rpc_api_pipe_req(cli, LSA_ENUMTRUSTDOM, qbuf, rbuf)) {
@@ -577,15 +591,14 @@
result = r.status;
- if (!NT_STATUS_IS_OK(result)
- NT_STATUS_V(result) != NT_STATUS_V(NT_STATUS_NO_MORE_ENTRIES)) {
+ if (!NT_STATUS_IS_OK(result)
+ !NT_STATUS_EQUAL(result, NT_STATUS_NO_MORE_ENTRIES)
+ !NT_STATUS_EQUAL(result, STATUS_MORE_ENTRIES)) {
/* An actual error ocured */
goto done;
}
-
- result = NT_STATUS_OK;
/* Return output parameters */
Index: libsmb/nterr.c
===
RCS file: /cvsroot/samba/source/libsmb/nterr.c,v
retrieving revision 1.24
RE: compile samba 2.2 and 3.0 on HP/UX 10.20
Hi Thomas, go to smbd/vfs.c and change the call to dlerror() to sys_dlerror(), that will get you past your compile problem on 2.2. Haven't looked any further at this yet; let me know if you run into other issues on 10.20 Don -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 16, 2002 4:42 AM To: DOELKER,RAINER (HP-Germany,ex2) Cc: [EMAIL PROTECTED] Subject: RE: compile samba 2.2 and 3.0 on HP/UX 10.20 Hello Rainer, thank you for your answer! The binaries on samba.org are very old ... newer are on the HP/UX Porting Centre (2.2.3a) http://hpux.connect.org.uk/ ... but this ist not that what I need! My last compile for Samba 2.2.4pre from 21 Feb was OK! The compile from yesterday (after the nss.h cleanup) give my for the Samba 2.2 branch: Compiling smbd/notify_hash.c Compiling smbd/notify_kernel.c Linking bin/smbd /usr/ccs/bin/ld: Unsatisfied symbols: dlerror (code) collect2: ld returned 1 exit status gmake: *** [bin/smbd] Error 1 and for the Samba 3 branch: Compiling lib/xfile.c Compiling lib/wins_srv.c Compiling lib/util_str.c lib/util_str.c: In function `all_string_sub_w': lib/util_str.c:765: warning: initialization discards qualifiers from pointer target type Compiling lib/util_sid.c Compiling lib/util_unistr.c Compiling lib/util_file.c lib/util_file.c: In function `map_file': lib/util_file.c:443: `MAP_FAILED' undeclared (first use in this function) lib/util_file.c:443: (Each undeclared identifier is reported only once lib/util_file.c:443: for each function it appears in.) gmake: *** [lib/util_file.o] Error 1 ... maybe it is something broken! I will make a new cvs sync today! Regards, Thomas An: '[EMAIL PROTECTED]' [EMAIL PROTECTED] Kopie: [EMAIL PROTECTED] Thema: compile samba 2.2 and 3.0 on HP/UX 10.20 Hello Thomas, the current cvs tree for the samba 2.2 and 3 branch dont compile on HP/UX10.20. The new samba-versions were not jet avail as binaries for 10.20 -- and may result in compiling problems -- as (AFAIK) the threaded functions (syscalls) which are used by samba are not available for 10.20. So I do not know if you'll ever make it run. (I have to admit I've not compiled one for a long time). There are ready packages, which might be of help ? ftp://ftp.samba.org/pub/samba/Binary_Packages/hp/ samba-2.2.2-hppa1.1-hp-hpux10.20.tar or samba-2.0.7-hppa1.1-hp-hpux10.20.tar Hope that helps. Regs, Rainer
Re: SMB Packet header
Paul Vanlint wrote: This is what the RFC says: Sorry to be pedantic but it is not an RFC, just an expired Internet-Draft. I think it is important to highlight that. It says that this is an expired ietf draft, so perhaps there is a newer one, but this should give you a start. Yep. The newer document (which is released as a Technical Reference, not a Protocol Specification) is at: http://www.snia.org/English/Work_Groups/NAS/CIFS/WG_CIFS_Docs.html This is an effort of the Storage Network Industry Association (SNIA). The current release is version 0.9. Version 1.0 should be out by month end. There are other references listed at: http://www.ubiqx.org/cifs/References.html ...and information on the NBT (NetBIOS over TCP/IP) layer can be found at: http://www.ubiqx.org/cifs/NetBIOS.html Chris -)- -- Christopher R. Hertel -)- University of Minnesota [EMAIL PROTECTED] Networking and Telecommunications Services
recycle bin mpeg still panic action
Hello all just a quick note to inform you that after getting 2.2.4pre from CVS (15/04/2002)I still recieve a internal error message when using the recycle bin VFS and the MPEG file in the same dir. Also I am getting the same error message thet Daniel Beschorner reported about fstat on a bog standard ext3 filesystem (not ntfs). HTH David Mulcahy
samba file consistency
Hello everybody, I am experiencing problems with my samba 2.2 , We are working with an application called tasktimer which places some kind of native database on a sama share and accesses it with something like an ODBC driver. After a short period of time, the database can not be accessed any more. When you reindex the database you can keep on going, but thats not a real solution. Can anyone help me out. What do I have to change from the defaults (oplocks..) to make the windows clients (about 20) and the samba server work correctly? The database is accessed frequently. Thank you, alex h.
Re: lsa_enum_trust_dom functionality
On Tue, Apr 16, 2002 at 02:52:01PM +0200, Rafal Szczesniak wrote: proper args to continue or finish the enumeration. It may be annoying to write such code in each place we use client side of enumeration, so I propose to write a higher level function which could take care of doing it properly so that we don't have to worry about details of this process. Such function could be cli_lsa_enum_trust_domain or cli_enum_trust_dom_2 or whatever. Doesn't really matter. What do you think ? All the rpc client routines send the request and receive the reply, returning any useful data to the caller. If any subsequent calls are required it's up to the caller to do this. For example the spoolss commands require a buffer size for the return data. The routines in cmd_spoolss.c re-call the cli_spoolss_* routines as needed to complete the call. Tim.
