Re: [Samba] spoolss back connections to client

[Tom Vandepoel]

>>Better to just comment out the SPOOLSS_RFFPCN and SPOOLSS_RFNPCN
>>server functions.  However, certain changes will not be reflected on
>>the client such as josb listings, etc
>>
>>btwthis is MS's model.  You'll have the same problem with
>>a Win2k print server.  I do agree that it is a brain dead design...
>>
> 
> 
> Thought so; just wanted to make sure I didn't cripple something
> essential.
> I pretty much don't care about updating job listings, so I guess I will
> disable this in the source.
> I'll let you know how it reacts ;-)
> 
> Might be usefull to have an smb.conf option for this, if this proves
> stable ;-)

Ok, did this:

# diff srv_spoolss.c srv_spoolss.c.orig
1415,1416c1415,1416
< /* {"SPOOLSS_RFFPCNEX",  SPOOLSS_RFFPCNEX, 
   api_spoolss_rffpcnex  }, */
< /* {"SPOOLSS_RFNPCNEX",  SPOOLSS_RFNPCNEX, 
   api_spoolss_rfnpcnex  }, */
---
 >  {"SPOOLSS_RFFPCNEX",  SPOOLSS_RFFPCNEX, 
  api_spoolss_rffpcnex  },
 >  {"SPOOLSS_RFNPCNEX",  SPOOLSS_RFNPCNEX, 
  api_spoolss_rfnpcnex  },

Running this since yesterday now. All printing functionality that worked 
before still seems to work. Might even have speeded up connecting to 
printers; it seems to me anyway, but that might be purely psychological ;-)

Anyway, an smb.conf option for this would be nice. I guess a lot of 
people have been wondering how to disable this annoying behavior ;-)

Still, it must be frustrating to have implemented this, so samba mimicks 
  M$ behavior as much as possible and then people start asking to turn 
it off... I do appreciate the work, I just don't like the functionality. 
At least with Samba I have the choice to rip it out 

Thx,

Tom.


-- 
Tom Vandepoel Ubizen
Security ArchitectWe Secure e-Business
Phone   +32 16 28 70 00   http://www.ubizen.com
Fax +32 16 28 71 00


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Possible Samba Bug

[Jeremy Allison]

On Wed, Jun 12, 2002 at 04:27:33PM +1000, Kremlyn Vostok wrote:
> Hi everyone,
> 
> I believe I may have stumbled on a bug (or quirk), in relation to 
> accessing files (specifically, mp3's) on a share.  The issue is 
> outlined below:
> 
> - THE PROBLEM
> 
> I'm able to successfully map a network drive in 'My Computer' to the 
> share, logging in as mp3_owner (which is the owner of the shared 
> directory and all subdirectories and files, and is also a member of the 
> mp3 group).  I can play these mp3's accross the network, delete them, 
> move them around, copy other mp3's to those directories from another 
> machine.. but I cannot for the life of me *rename* them!  I've tried 
> all sorts of permission configurations, including using the *guest* 
> user (nobody), with no luck.  
> 
> Now, the REAL quirk here, is that the only files that exhibit this 
> behaviour is mp3's.  I can create .txt .doc files, and do all of the 
> above AND rename them.  However, I still cannot *rename* the mp3's.

Known bug with 2.2.3a I'm afraid. We fixed this with 2.2.4 and
above.

Hope this helps,

Jeremy.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Possible Samba Bug

[Kremlyn Vostok]

Hi everyone,

I believe I may have stumbled on a bug (or quirk), in relation to 
accessing files (specifically, mp3's) on a share.  The issue is 
outlined below:

- THE PROBLEM

I'm able to successfully map a network drive in 'My Computer' to the 
share, logging in as mp3_owner (which is the owner of the shared 
directory and all subdirectories and files, and is also a member of the 
mp3 group).  I can play these mp3's accross the network, delete them, 
move them around, copy other mp3's to those directories from another 
machine.. but I cannot for the life of me *rename* them!  I've tried 
all sorts of permission configurations, including using the *guest* 
user (nobody), with no luck.  

Now, the REAL quirk here, is that the only files that exhibit this 
behaviour is mp3's.  I can create .txt .doc files, and do all of the 
above AND rename them.  However, I still cannot *rename* the mp3's.

I've successfully set up samba before, and had it working without this 
little oddity.  This is driving me MAD.

Below, is information pertinent to this configuration and problem.

- Server Operating System:

[root@molotov -> (/)] : uname -a
OpenBSD molotov.kgb.cccp 3.1 GENERIC#59 i386

- Client Operating System:

Microsoft Windows 2000, Professional - Service Pack 2

- Samba Version:

2.2.3a (Installed via package, from ftp.openbsd.org)

- smb.conf

[global]
workgroup = SOYUZ
netbios name = MOLOTOV
server string = samba server (molotov)
security = SHARE
encrypt passwords = Yes
log file = /var/log/smbd.%m
max log size = 50
dns proxy = No
veto oplock files = /*.mp3/

[mp3]
comment = mp3 files
path = /share/mp3
valid users = @mp3
write list = mp3_owner
read only = No

- Directory permissions (as implemented on the UNIX server system)

[root@molotov -> (/share)] : ls -al
drwxrwxrwx  135 mp3_owner  mp33584 Jun 13 00:00 mp3

Note: These permissions are the same for all subdirectories and mp3 
files.

- 'smbstatus' output

Samba version 2.2.3a
Service  uid  gid  pid machine
--
mp3  mp3_owner mp3_owner 19851   balbir   (10.20.30.4)

No locked files

Any help would be TOTALLY appreciated.

//kremlyn

---
"Physics tells us that for every action, there must be an equal and 
opposite reaction. BSD people hate Linux people, and they hate us back. 
So, here we are, victims of mathematical science." - Kremlyn Vostok
---

-
NEW to mBox, receive faxes to any email address!
Find out more http://www.mbox.com.au/fax

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbpasswd

[Christian Barth]

Do not mix the smbpasswd file and the smbpasswd program. You have to 
run the the programm (/usr/local/samba/bin/smbpasswd) to change the 
file (/usr/local/samba/private/smbpasswd). You are trying to run the 
file.

Christian


> Whenever I try to run smbpasswd I get the following error:
> 
> root:0::XX
> XX:[U: command not found
> 
> I generated the file as per the instructions at 
> http://ca.samba.org/samba/docs/ENCRYPTION.html
> 
> I'm not sure what it is that is going wrong.
> 
> The first few lines of my smbpasswd file look like this...
> #
> # SMB password file.
> #
> root:0::XX
> XX:[U ]:LCT-:root
> daemon:1::
> :[U ]:LCT-:daemon
> 
> I'm using debian 3.0, with kernel 2.4.18 and samba 2.2.4
> 
> lorac
> 
> -
> "Violence is the last refuge of the incompetent." - Salvor Hardin
> 
> ICQ UIN 2123136 Get ICQ http://www.icq.com


   _(_)_  wWWWw   _
      (_)@(_)   vVVVv _   (___) _(_)_
  @@()@@ wWWWw  (_)\(___)   _(_)_  @@()@@   Y  (_)@(_)
     (___) `|/Y(_)@(_)     \|/   (_)\
/  Y   \|\|//(_)\|  |/  |
 \ | \ |/   | / \ | /  \|/   |/\|  \|/
jgs|//   \\|///  \\\|//\\\|/// \|///  \\\|//  \\|//  \\\|// 
^


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Strange problem with samba

[Christian Barth]

Have you checked about encrypted passwords?

Christian


> Hi,
> 
> I was using samba 2.0.7 veersion for a while without any problem. 
> This morning, suddenly, many windows (nt/98) cannot connect the samba
> server on our Linux (RedHat 6.2) server.  Then, I downloaded the
> version 2.2.4, extracted, configure it, make, make install according
> to the document. Then I test it by running
> 
> ./testparm
> 
> it lists all of shared folders.  Then, I run 
> 
> ./smbclient -L morpheus
> 
> where morpheus is my host, it asks the password. I enter it and it
> lists all shared folders.  Then, I run
> 
> ./smbclient //morpheus/common
> 
> where common is a public shared folder. Again, after entering the
> password, it is connected.  I got the smb prompt  smb: \>  If I type
> dir or ls, it lists all folders under /common.
> 
> However, if I go to any windows, I cannot connect to the samba server.
> If I go to the DOS prompt, and type 
> 
> net use x: \\morpheus\common
> 
> it asks me 
> 
> Type the password for \\morpheus\common
> 
> Then, it always says 
> 
> Login failed.  Unknown username or bad password.  
> 
> Could you give me some help?
> 
> Thanks a lot!
> 
> Hongwei Li
> 
> 
> 
> -
> This message sent using EMUmail -- http://www.emumail.com
> -
> 
> Jumping through hoops to get E-mail on the road? 
> You've got two choices: Join the circus, or use MollyMail.
> 
> Molly Mail -- http://www.mollymail.com
> 
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
> 


   _(_)_  wWWWw   _
      (_)@(_)   vVVVv _   (___) _(_)_
  @@()@@ wWWWw  (_)\(___)   _(_)_  @@()@@   Y  (_)@(_)
     (___) `|/Y(_)@(_)     \|/   (_)\
/  Y   \|\|//(_)\|  |/  |
 \ | \ |/   | / \ | /  \|/   |/\|  \|/
jgs|//   \\|///  \\\|//\\\|/// \|///  \\\|//  \\|//  \\\|// 
^


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Add Printer Driver Wizard - does it work in 2.2.5pre1?

[Chris Pascoe]

Hi,

I've just started toying with the idea of deploying a number of our printers
via samba.  I'm trying to get the current HP device drivers for a HP 4+
(from HP's site) to upload.  The workstations I am trying the upload from
are either running Win 2000 SP2 or Win XP Professional.

Using 2.2.5pre1, I can't convince a printer driver to upload using the Add
Printer Driver Wizard - I get a generic message saying that it couldn't
upload the driver, because "The operation was aborted.".

If I roll my samba version back to 2.2.4, it seems to work fine with the XP
supplied drivers, but I get a "Function address 0x77c43cba caused a
protection fault. (exception code 0xc005) Some or all property page(s)
may not be displayed." after uploading the driver.  If I upload the HP
driver (possibly this is a driver problem).

Am I just having particularly bad luck, or is all this still being sorted
out?

Thanks,
Chris


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] nt/2000 password has expired

[Ian Campbell]

Title: nt/2000 password has expired






Hi,


I have setup samba on redhat 7.3 and configured it as a windows 2000 Primary Domain Controller. Everything works fine, however, everytime that Windows NT or 2000 clients log onto the domain they get a message stating that their password has expired and asking them if they want to change it. It doesn't matter if you answer Yes and change it or answer No and just continue on, the message appears everytime. 

Has anyone seen this before? Can anyone offer any advice. 


thanks,


Ian

[Samba] SWAT on slackware 8

[John at Dyatron]

When I recompile and install samba
then try to run swat , i get to the user/ password screen , enter root and
password , and hey presto , it fails


if I edit /etc/shadow
root:$1$/mQTx/rj$bf8dpjI9bR.4ygERzsin61:11534:0:
and change the password to  DbIyeMzwAhup6
root:DbIyeMzwAhup6:11534:0:
suddenly SWAT it works

how do i get swat to recognise the password that passwd puts in /etc/shadow?

build options ( from slackware source ftp) are
./configure \
  --with-fhs \
  --prefix=/usr \
  --localstatedir=/var \
  --bindir=/usr/bin \
  --sbindir=/usr/sbin \
  --sysconfdir=/etc \
  --with-configdir=/etc/samba \
  --with-privatedir=/etc/samba/private \
  --with-codepagedir=/etc/codepages \
  --with-smbmount \
  --with-quotas \
  --with-syslog \
  --with-utmp \
  --with-netatalk \
  --with-sambabook=/usr/share/swat/using_samba \
  --with-ssl \
  --with-sslinc=/usr/include/openssl \
  --with-msdfs \
  --with-vfs \
  i386-slackware-linux


--
John Duthie <[EMAIL PROTECTED]>
Dyatron Systems
1 Rankin Ave   P.O. BOX 15001
New Lynn   New Lynn
Auckland.  Auckland.
Phone:  +64 9 8260030
Fax:+64 9 8260047




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] gnomba

[David M. Kaplan]

Hi,

I noticed that gnomba was not among your list of GUIs.  Is there a 
reason for this?  It looks as if this project hasnt advanced in a while, 
but it is at least as current as half the programs in the list.

Thanks,
David



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] smbpasswd

[Don Zajic]

Lorac, 
it appears that you are attempting to execute the smbpasswd (password) file, not 
the smbpasswd (script) located in /usr/bin.
 
type 
this:
 
/usr/bin/smbpasswd 
 
this 
should make a difference
 
Don

  -Original Message-From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]]On Behalf Of loracSent: 
  Tuesday, June 11, 2002 5:52 PMTo: 
  [EMAIL PROTECTED]Subject: [Samba] 
  smbpasswdWhenever I try to run smbpasswd I get the 
  following 
  error:root:0:::[U: 
  command not foundI generated the file as per the instructions at http://ca.samba.org/samba/docs/ENCRYPTION.htmlI'm not 
  sure what it is that is going wrong.The first few lines of my 
  smbpasswd file look like this...## SMB password 
  file.#root:0:::[U  
  ]:LCT-:rootdaemon:1:::[U  
  ]:LCT-:daemonI'm using debian 3.0, with kernel 2.4.18 and 
  samba 2.2.4lorac
  -"Violence is the last refuge of the incompetent." - Salvor 
  Hardin ICQ UIN 2123136 Get ICQ http://www.icq.com 

RE: [Samba] print job not deleting

[Van Sickler, Jim]

You're using LPRng...it's a "feature" that
appeared in 3.8.10/3.8.12.  Not fixed yet...

If you Cancel the Paused job, it goes away.
(The job has already been printed by the
time it's listed as Paused).

Patrick & the LPRng list are aware of it.

Jim

> -Original Message-
> From: Wise, Gene [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, June 11, 2002 3:53 PM
> To: '[EMAIL PROTECTED]'
> Subject: [Samba] print job not deleting
> 
> 
> Has anyone seen this?
>  When we print using Samba, the printjob stays in the 
> queue after prints
>  Also in the LPD.conf is set to :
>   save_when_done@
>   done_jobs=0
>   done_jobs_max_age=1
> We're using Redhat 7.3.
> Samba 2.2.4-1
>   Any help would great,
>   Gene Wise
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] "net" command with openldap 2.1.1?

[Andrew Bartlett]

Dave Snoopy wrote:
> 
> What version of OpenLDAP are you compiling/linking
> against?
> 

[abartlet@piglett abartlet]$ rpm -q openldap
openldap-2.0.23-4

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] print job not deleting

[Wise, Gene]

Has anyone seen this?
 When we print using Samba, the printjob stays in the queue after prints
 Also in the LPD.conf is set to :
save_when_done@
done_jobs=0
done_jobs_max_age=1
We're using Redhat 7.3.
Samba 2.2.4-1
  Any help would great,
  Gene Wise

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] "net" command with openldap 2.1.1?

[Dave Snoopy]

What version of OpenLDAP are you compiling/linking
against?

Thanks,
Dave

--- Andrew Bartlett <[EMAIL PROTECTED]> wrote:
> Dave Snoopy wrote:
> > 
> > The Samba net command (from the HEAD) sounds
> great,
> > but it doesn't seem to compile with OpenLDAP
> version
> > 2.1.1 Beta. When compiling, I get this error:
> > 
> > Compiling passdb/pdb_ldap.c
> > passdb/pdb_ldap.c: In function
> > `ldapsam_connect_system':
> > passdb/pdb_ldap.c:313: too few arguments to
> function
> > `ldap_set_rebind_proc'
> > *** Error code 1
> > 
> > It seems that the head of Samba doesn't use the
> latest
> > OpenLDAP API. Does the net command from the HEAD
> only
> > compile with a certain version of OpenLDAP? If so,
> > which?
> 
> Well, it works for me :-).  If OpenLDAP has changed
> its API then we need
> to cope with that.  Could you see if you can work
> out a patch for that?
> 
> Andrew Bartlett
> 
> -- 
> Andrew Bartlett
> [EMAIL PROTECTED]
> Manager, Authentication Subsystems, Samba Team 
> [EMAIL PROTECTED]
> Student Network Administrator, Hawker College  
> [EMAIL PROTECTED]
> http://samba.org http://build.samba.org
> http://hawkerc.net
> 
> -- 
> To unsubscribe from this list go to the following
> URL and read the
> instructions: 
http://lists.samba.org/mailman/listinfo/samba


__
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] "net" command with openldap 2.1.1?

[Andrew Bartlett]

Dave Snoopy wrote:
> 
> The Samba net command (from the HEAD) sounds great,
> but it doesn't seem to compile with OpenLDAP version
> 2.1.1 Beta. When compiling, I get this error:
> 
> Compiling passdb/pdb_ldap.c
> passdb/pdb_ldap.c: In function
> `ldapsam_connect_system':
> passdb/pdb_ldap.c:313: too few arguments to function
> `ldap_set_rebind_proc'
> *** Error code 1
> 
> It seems that the head of Samba doesn't use the latest
> OpenLDAP API. Does the net command from the HEAD only
> compile with a certain version of OpenLDAP? If so,
> which?

Well, it works for me :-).  If OpenLDAP has changed its API then we need
to cope with that.  Could you see if you can work out a patch for that?

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] problem copying ACLs with xcopy /o (2.2.5pre1)

[Jeremy Allison]

On Mon, Jun 10, 2002 at 11:53:11AM +0200, Guenther Deschner wrote:
> 
> i want to copy a folder (including ACLs) right off from my desktop 
> onto the samba-server. my smbd retrieves user/group info via winbindd.
> 
> the folder in question ("testfolder") is owned by administrator and 
> has ACLs for the domain-admins and everyone. inside this folder there is
> one file called "testtxt.txt" which is nonempty.
> 
> i map a samba-share to the letter t: and 
> "xcopy testfolder t:\testfolder /o".
> 
> now the funny thing: i get "access denied" after doing this but on the
> samba-share i do see the folder and the file (both with correct ACLs + my
> set of DACLs). big surprise: my file is empty now :(
> 
> log level 10 attached. 

It's the mapping to the owner that is failing. There is a compile
switch in Samba which causes smbd to force unknown owner and group
SIDs to the currently connected user and group.

I may make this a compile time switch to allow this problem to
be worked around until we can deal with "foreign" SIDs on a UNIX
filesystem.

Jeremy.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] 'net rpc trustdom establish' not yet working?

[Andrew Bartlett]

David Boynton wrote:
> 
> Hi all,
> 
> I've been messing this this for the last few hours trying to trust an NT
> domain.  I make it down to where it says "Success!" and the domain trust is
> added to the secrets.tdb file.  However, connecting with rpclient and doing
> 'enumtrust' gives back no results.  I also don't have the trusted domain
> available for login on my workstation.
> 
> Oh yeah, I'm using Redhat 7.3 with Samba 3.0 alpha 17.

We havn't put out an alpha in a while, but this should be working in
current HEAD CVS.

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] samba 2.0.7 invalid mid form server

[Fabian Eduardo Barco]

Hi,
I am doing backup winnt 4.0 ws machines with smbtar from linux redhat 6.1
with samba 2.0.7, I get the following error:
Invalid mid from server!

how do I solve it?

is there a patch for it?

I don't want neither update nor upgrade nor downgrade, because the system is
very linked with samba 2.0.7.

thank for any help

fabian.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Tuning SaMBa in HP/UX 10.20 (200 Users)...

[Eric Roseme]

What version of Samba are you running?

Eric Roseme

Info - Demerson wrote:
> 
> Hullo All,
> 
> I'm planning to build a SaMBa Server in HP/UX 10.20,
> just for sharing some
> stuff to at least 200 users.
> Well, I have SaMBa running in HP/UX machines and
> according to top, each
> SaMBa process (smbd) takes about 2,1Mb of total
> memory.
> I wonder if there's some clue to reduce the amount
> of memory per smbd...
> Anybody knows that?
> 
> Thanks in advance...
> 
> __
> Demerson Zounar
> Analista de Suporte
> [EMAIL PROTECTED]
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba as Win2K Native DC

[Jeremy Allison]

On Tue, Jun 11, 2002 at 04:40:18PM -0400, Michael Konopka wrote:
> I've been searching for an answer to the following question, but without 
> a firm answer.
> 
> Is Samba going to support the functionality of a native W2K DC in the 
> near future?  If so, is there a timeline for implementation?

A native W2K DC is a combination of Samba/OpenLDAP/bind/krb5 and
probably DHCP also, all tied together into an LDAP backend store.

All these separate projects need to get together to implement
such a thing. Plans are being made, but it will probably be next
year sometime.

Jeremy.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] smbpasswd

[lorac]

Whenever I try to run smbpasswd I get the following error:
root:0:::[U:
command not found
I generated the file as per the instructions at
http://ca.samba.org/samba/docs/ENCRYPTION.html
I'm not sure what it is that is going wrong.
The first few lines of my smbpasswd file look like this...
#
# SMB password file.
#
root:0:::[U 
]:LCT-:root
daemon:1:::[U 
]:LCT-:daemon
I'm using debian 3.0, with kernel 2.4.18 and samba 2.2.4
lorac

-
"Violence is the last refuge of the incompetent." - Salvor
Hardin 
ICQ UIN 2123136 Get ICQ
http://www.icq.com

RE: [Samba] Re: DNS Proxy - WINS problem - please help

[Terry Davis]

MY DNS servers are the same as my WINS servers.  For strange reasons, I
cannot configure my clients to use my dns servers, they must use WINS.

WINS will resolve hostnames like foobar, dns will also but the only time
they need to resolve FQDN's are for addresses out of my network, so I
want to have them use their ISP's DNS in case my DNS servers are not
available.  It also keeps traffic down.  Windows will not go to WINS to
resolve www.yahoo.com but directly to the configured DNS servers.  Or am
I completely boneheaded?

Thank you!


On Tue, 2002-06-11 at 16:34, Javid Abdul-AJAVID1 wrote:
> dont you think you should have ur dns servers in /etc/resolv.conf not wins
> servers or if you gave wrong ips to me, then you should change conf file to
> reflect that
> 
> -Original Message-
> From: Terry Davis [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, June 11, 2002 4:30 PM
> To: Javid Abdul-AJAVID1
> Cc: [EMAIL PROTECTED]
> Subject: RE: [Samba] Re: DNS Proxy - WINS problem - please help
> 
> 
> /etc/resolv.conf:
> domain domain.com
> nameserver 10.10.1.5
> nameserver 10.10.1.8
> search domain.com
> 
> samba-2.2.4
> 
> Redhat 7.2
> 
> The DNS servers are on the same subnet as the samba server.
> Thank you!
> 
> 
> On Tue, 2002-06-11 at 16:23, Javid Abdul-AJAVID1 wrote:
> > what are setting on samba servers as for as dns is concerned
> > like in /etc/resolv.conf
> > what version of samba
> > what unix version on samba
> > 
> > 
> > -Original Message-
> > From: Terry Davis [mailto:[EMAIL PROTECTED]]
> > Sent: Tuesday, June 11, 2002 4:11 PM
> > To: [EMAIL PROTECTED]
> > Subject: [Samba] Re: DNS Proxy - WINS problem - please help
> > 
> > 
> > Another note, DNS directly from the client to my dns servers works
> > fine.  Any help would be greatly appreciated.
> > 
> > On Tue, 2002-06-11 at 12:04, Terry Davis wrote:
> > > Here is my scenario when a client wants to resolve a name on my local
> > > network:
> > > 
> > > CLIENT --> VPN --> SAMBA --> DNS
> > > 
> > > The client is set up like so:
> > > DNS1 = ISP DNS1 (204.26.64.1)
> > > DNS2 = ISP DNS2 (204.26.80.3)
> > > WINS1 = my samba1 (10.10.1.5)
> > > WINS2 = my samba2 (10.10.1.8)
> > > 
> > > This all _seemed_ to have worked 3 days ago for roughly 6 months but
> > > stopped suddenly without me doing anything.
> > > 
> > > When the client requests a name on my local network like atlas
> > > (10.10.1.8), there is no resolution at all.
> > > 
> > > My first reaction was there was a firewall change or something, but that
> > > is not the case.
> > > 
> > > 
> > > 1) How can I see if requests are getting to the samba server for dns
> > > queries?
> > > 
> > > 2) Is my thinking correct about DNS proxy?
> > > 
> > > 
> > > Here is the relevant parts of my smb.conf:
> > > 
> > > wins support = yes
> > > wins proxy = no
> > > dns proxy = yes
> > > 
> > > Thank you for your help!
> > > 
> > > -- 
> > > Terry Davis
> > > http://approbation.org/
> > -- 
> > Terry Davis
> > http://approbation.org/
> > 
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> -- 
> Terry Davis
> http://approbation.org/
-- 
Terry Davis
http://approbation.org/


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Re: DNS Proxy - WINS problem - please help

[Javid Abdul-AJAVID1]

dont you think you should have ur dns servers in /etc/resolv.conf not wins
servers or if you gave wrong ips to me, then you should change conf file to
reflect that

-Original Message-
From: Terry Davis [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 11, 2002 4:30 PM
To: Javid Abdul-AJAVID1
Cc: [EMAIL PROTECTED]
Subject: RE: [Samba] Re: DNS Proxy - WINS problem - please help


/etc/resolv.conf:
domain domain.com
nameserver 10.10.1.5
nameserver 10.10.1.8
search domain.com

samba-2.2.4

Redhat 7.2

The DNS servers are on the same subnet as the samba server.
Thank you!


On Tue, 2002-06-11 at 16:23, Javid Abdul-AJAVID1 wrote:
> what are setting on samba servers as for as dns is concerned
> like in /etc/resolv.conf
> what version of samba
> what unix version on samba
> 
> 
> -Original Message-
> From: Terry Davis [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, June 11, 2002 4:11 PM
> To: [EMAIL PROTECTED]
> Subject: [Samba] Re: DNS Proxy - WINS problem - please help
> 
> 
> Another note, DNS directly from the client to my dns servers works
> fine.  Any help would be greatly appreciated.
> 
> On Tue, 2002-06-11 at 12:04, Terry Davis wrote:
> > Here is my scenario when a client wants to resolve a name on my local
> > network:
> > 
> > CLIENT --> VPN --> SAMBA --> DNS
> > 
> > The client is set up like so:
> > DNS1 = ISP DNS1 (204.26.64.1)
> > DNS2 = ISP DNS2 (204.26.80.3)
> > WINS1 = my samba1 (10.10.1.5)
> > WINS2 = my samba2 (10.10.1.8)
> > 
> > This all _seemed_ to have worked 3 days ago for roughly 6 months but
> > stopped suddenly without me doing anything.
> > 
> > When the client requests a name on my local network like atlas
> > (10.10.1.8), there is no resolution at all.
> > 
> > My first reaction was there was a firewall change or something, but that
> > is not the case.
> > 
> > 
> > 1) How can I see if requests are getting to the samba server for dns
> > queries?
> > 
> > 2) Is my thinking correct about DNS proxy?
> > 
> > 
> > Here is the relevant parts of my smb.conf:
> > 
> > wins support = yes
> > wins proxy = no
> > dns proxy = yes
> > 
> > Thank you for your help!
> > 
> > -- 
> > Terry Davis
> > http://approbation.org/
> -- 
> Terry Davis
> http://approbation.org/
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
Terry Davis
http://approbation.org/

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Re: DNS Proxy - WINS problem - please help

[Terry Davis]

/etc/resolv.conf:
domain domain.com
nameserver 10.10.1.5
nameserver 10.10.1.8
search domain.com

samba-2.2.4

Redhat 7.2

The DNS servers are on the same subnet as the samba server.
Thank you!


On Tue, 2002-06-11 at 16:23, Javid Abdul-AJAVID1 wrote:
> what are setting on samba servers as for as dns is concerned
> like in /etc/resolv.conf
> what version of samba
> what unix version on samba
> 
> 
> -Original Message-
> From: Terry Davis [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, June 11, 2002 4:11 PM
> To: [EMAIL PROTECTED]
> Subject: [Samba] Re: DNS Proxy - WINS problem - please help
> 
> 
> Another note, DNS directly from the client to my dns servers works
> fine.  Any help would be greatly appreciated.
> 
> On Tue, 2002-06-11 at 12:04, Terry Davis wrote:
> > Here is my scenario when a client wants to resolve a name on my local
> > network:
> > 
> > CLIENT --> VPN --> SAMBA --> DNS
> > 
> > The client is set up like so:
> > DNS1 = ISP DNS1 (204.26.64.1)
> > DNS2 = ISP DNS2 (204.26.80.3)
> > WINS1 = my samba1 (10.10.1.5)
> > WINS2 = my samba2 (10.10.1.8)
> > 
> > This all _seemed_ to have worked 3 days ago for roughly 6 months but
> > stopped suddenly without me doing anything.
> > 
> > When the client requests a name on my local network like atlas
> > (10.10.1.8), there is no resolution at all.
> > 
> > My first reaction was there was a firewall change or something, but that
> > is not the case.
> > 
> > 
> > 1) How can I see if requests are getting to the samba server for dns
> > queries?
> > 
> > 2) Is my thinking correct about DNS proxy?
> > 
> > 
> > Here is the relevant parts of my smb.conf:
> > 
> > wins support = yes
> > wins proxy = no
> > dns proxy = yes
> > 
> > Thank you for your help!
> > 
> > -- 
> > Terry Davis
> > http://approbation.org/
> -- 
> Terry Davis
> http://approbation.org/
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
Terry Davis
http://approbation.org/


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Re: DNS Proxy - WINS problem - please help

[Javid Abdul-AJAVID1]

what are setting on samba servers as for as dns is concerned
like in /etc/resolv.conf
what version of samba
what unix version on samba


-Original Message-
From: Terry Davis [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 11, 2002 4:11 PM
To: [EMAIL PROTECTED]
Subject: [Samba] Re: DNS Proxy - WINS problem - please help


Another note, DNS directly from the client to my dns servers works
fine.  Any help would be greatly appreciated.

On Tue, 2002-06-11 at 12:04, Terry Davis wrote:
> Here is my scenario when a client wants to resolve a name on my local
> network:
> 
> CLIENT --> VPN --> SAMBA --> DNS
> 
> The client is set up like so:
> DNS1 = ISP DNS1 (204.26.64.1)
> DNS2 = ISP DNS2 (204.26.80.3)
> WINS1 = my samba1 (10.10.1.5)
> WINS2 = my samba2 (10.10.1.8)
> 
> This all _seemed_ to have worked 3 days ago for roughly 6 months but
> stopped suddenly without me doing anything.
> 
> When the client requests a name on my local network like atlas
> (10.10.1.8), there is no resolution at all.
> 
> My first reaction was there was a firewall change or something, but that
> is not the case.
> 
> 
> 1) How can I see if requests are getting to the samba server for dns
> queries?
> 
> 2) Is my thinking correct about DNS proxy?
> 
> 
> Here is the relevant parts of my smb.conf:
> 
> wins support = yes
> wins proxy = no
> dns proxy = yes
> 
> Thank you for your help!
> 
> -- 
> Terry Davis
> http://approbation.org/
-- 
Terry Davis
http://approbation.org/


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] performance problem ???

[vincent blondel]

Hi,
 
I got a similar problem with my test 
configuration. 
 
I am using share drives from my AMD Athlon XP 1600+ 
/ 512 DDR RAM running with NT4 workstation and my linux server is 
a Slackware 8.0 with kernel 2.4.18 and Samba 2.2.4 running on a 
Pentium 166 MMX / 128 RAM / U160 40Gb SCSI disk.
 
My problem is a bit different. I get well a lot of 
performance but my connections often break. So I can well listen to music 
( mp3 files on a share drive ) and at the same time loading big 
*.PDF files ( 15 Mb ) but it doesn't work for a long time. After a few minutes, 
connection breaks and all my file windows applications are not responding any 
more. So I have to wait a few minutes before I can restore my share 
connections.
 
I found on Internet the following ways to optimize 
samba and/or linux
 
linux
  echo "80 500 64 64  15  6000 6000 
1884 2" > /proc/sys/vm/bdflush 
  echo "60 10 60" > 
/proc/sys/vm/buffermem ( doesn't work because I don't have this 
file in my /proc filesystem ??? )
 
samba
  write cache size = 262144  read 
size = 65536
  socket options = TCP_NODELAY SO_RCVBUF=8192 
SO_SNDBUF=8192 IPTOS_THROUGHPUT   wide links = yes
 
I use all these options but my problem is and stay 
until now. This option "IPTOS_THROUGHPUT" improved a lot my performance 
connections, so I can do a lot at the same time with my share 
drives.
 
If you have an idea 
for my problem, help would be appreciated ...
Thanks
Vincent
 

# This is the main Samba configuration file. You 
should read the# smb.conf(5) manual page in order to understand the options 
listed# here. Samba has a huge number of configurable options (perhaps 
too# many!) most of which are not shown in this example## Any line 
which starts with a ; (semi-colon) or a # (hash) # is a comment and is 
ignored. In this example we will use a ## for commentry and a ; for parts of 
the config file that you# may wish to enable## NOTE: Whenever you 
modify this file you should run the command "testparm"# to check that you 
have not many any basic syntactic errors. ##=== 
Global Settings =[global]
 
# workgroup = NT-Domain-Name or Workgroup-Name, eg: 
LINUX2   workgroup = WORKGROUP
 
# server string is the equivalent of the NT 
Description field   server string = Samba Server
 
# This option is important for security. It allows 
you to restrict# connections to machines which are on your local network. 
The# following example restricts access to two C class networks and# the 
"loopback" interface. For more examples of the syntax see# the smb.conf man 
page   hosts allow = 192.168.123.1 192.168.123.2 
192.168.123.3
 
# If you want to automatically load your printer 
list rather# than setting them up individually then you'll need 
this   load printers = yes
 
# you may wish to override the location of the 
printcap file;   printcap name = /etc/printcap
 
# on SystemV system setting printcap name to lpstat 
should allow# you to automatically obtain a printer list from the SystemV 
spool# system;   printcap name = lpstat
 
# It should not be necessary to specify the print 
system type unless# it is non-standard. Currently supported print systems 
include:# bsd, sysv, plp, lprng, aix, hpux, qnx;   printing = 
bsd
 
# Uncomment this if you want a guest account, you 
must add this to /etc/passwd# otherwise the user "nobody" is used;  
guest account = pcguest
 
# this tells Samba to use a separate log file for 
each machine# that connects   log file = 
/var/log/samba.%m
 
# Put a capping on the size of the log files (in 
Kb).   max log size = 50
 
# Security mode. Most people will want user level 
security. See# security_level.txt for details.  NOTE:  To get the 
behaviour of# Samba-1.9.18, you'll need to use "security = 
share".   security = user
 
# Use password server option only with security = 
server# The argument list may include:#   password server = 
My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]# or to auto-locate the domain 
controller/s#   password server = *;   password 
server = 
 
# Note: Do NOT use the now deprecated option of 
"domain controller"# This option is no longer implemented.
 
# You may wish to use password encryption. Please 
read# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba 
documentation.# Do not enable this option unless you have read those 
documents  encrypt passwords = yes
 
# Where to find the SSL 
certificates:;   ssl CA certDir = /etc/ssl/certs
 
# Using the following line enables you to customise 
your configuration# on a per machine basis. The %m gets replaced with the 
netbios name# of the machine that is connecting;   include = 
/usr/local/samba/lib/smb.conf.%m
 
# This option allows Samba to improve 
performance on systems where the disk# subsystem is a bottleneck. The value 
of this option is specified in bytes, and a # size of 262,144 represent a 
256k cache size per 

[Samba] Re: DNS Proxy - WINS problem - please help

[Terry Davis]

Another note, DNS directly from the client to my dns servers works
fine.  Any help would be greatly appreciated.

On Tue, 2002-06-11 at 12:04, Terry Davis wrote:
> Here is my scenario when a client wants to resolve a name on my local
> network:
> 
> CLIENT --> VPN --> SAMBA --> DNS
> 
> The client is set up like so:
> DNS1 = ISP DNS1 (204.26.64.1)
> DNS2 = ISP DNS2 (204.26.80.3)
> WINS1 = my samba1 (10.10.1.5)
> WINS2 = my samba2 (10.10.1.8)
> 
> This all _seemed_ to have worked 3 days ago for roughly 6 months but
> stopped suddenly without me doing anything.
> 
> When the client requests a name on my local network like atlas
> (10.10.1.8), there is no resolution at all.
> 
> My first reaction was there was a firewall change or something, but that
> is not the case.
> 
> 
> 1) How can I see if requests are getting to the samba server for dns
> queries?
> 
> 2) Is my thinking correct about DNS proxy?
> 
> 
> Here is the relevant parts of my smb.conf:
> 
> wins support = yes
> wins proxy = no
> dns proxy = yes
> 
> Thank you for your help!
> 
> -- 
> Terry Davis
> http://approbation.org/
-- 
Terry Davis
http://approbation.org/


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] User Authenication

[Javid Abdul-AJAVID1]

yes it is required for write access
if you want just read access , you could add guest account option in conf
file.

other than that you need to have valid unix account to access the unix
share.

Others: Correct me if am wrong here :--)

ABdul Javid

-Original Message-
From: Geyer, Thomas L. [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 11, 2002 3:44 PM
To: [EMAIL PROTECTED]
Subject: [Samba] User Authenication


I have Samba running on a couple of IBM RS/6000 servers running AIX 4.3.3. I
have Samba configured to do user authenication to the primary domain
controller. The only way that users are able to map to the share is if they
have a userid  on the unix server. I thought that as long as a user is
authenicated at the PDC an account on the unix server would not be
necessary. Is an account on the unix server a requirement of Samba and I
just missed it in the documentation? If this is not a requirement what
options do I need to set? 

Any help would be appreciated. Thanks.

Thomas L. Geyer
Email:[EMAIL PROTECTED]
Phone:(330) 471-2073
Fax:(330) 471-4034 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Problem, Samba as PDC

[Carlos Álvarez]

Hi,
 
I'm new in Samba and want change a Windows PDC with 
Samba. (Is this possible?).
 
I'm testing and I can connect from the Windows 
workstation to the Samba Server. But when i want to login from the Windows 
Server with an samba account windows says 'Can't start session because machine 
account doesn't exists in the PDC or password is invalid'.
 
I don´t understand because the machine account 
exists in samba and I can set rigths on the Windows Server to users in 
Samba.
 
Sorry my bad english.Please, I need 
help
 
-Windows System Event LogID: 
3210NETLOGONErr. authenticating with \\CLP-REDHAT, a NT PDC or W2K for COOPESALUD.COM 
domain.
 
-log.clp-w2k[dd/mm/ hh:ss,0] 
smb/service.c/make_connection(248)clp-w2k (172.16.0.3) couldn't find service 
::{2227a280-3aea-1069-a2de-08002b30309d}
 
-log.nmbd[dd/mm/ hh:ss,0] 
nmbd/nmbd_response_record.c:find_response_record(236)response packet id 
28056 received with no matching record
 
log.clp-redhat[dd/mm/ hh:ss,0] 
couldn't find service netlogon
 
log.smbd[dd/mm/ hh:ss,0] 
smbd/server.c:sig_hup(387)Got SIGHUP
 

 
Schema==
 
Linux Server
-
RedHat 7.3 - Host: CLP-REDHAT
LTSP - Linux Terminal Services
DNS / DHCP / SAMBA - PDC
 
Windows Stand Alone Server
---
Windows 2000 - Host: CLP-W2K
Windows Terminal ServicesSQL 2000 
Server
 
Linux WorkStation

--
Etherboot - Thin ClientLinux RH7.3Samba 
clientRdesktop
 

Windows WorkStation


Windows 98SE
Terminal Services 
Client
 

[Samba] User Authenication

[Geyer, Thomas L.]

I have Samba running on a couple of IBM RS/6000 servers running AIX 4.3.3. I
have Samba configured to do user authenication to the primary domain
controller. The only way that users are able to map to the share is if they
have a userid  on the unix server. I thought that as long as a user is
authenicated at the PDC an account on the unix server would not be
necessary. Is an account on the unix server a requirement of Samba and I
just missed it in the documentation? If this is not a requirement what
options do I need to set? 

Any help would be appreciated. Thanks.

Thomas L. Geyer
Email:[EMAIL PROTECTED]
Phone:(330) 471-2073
Fax:(330) 471-4034 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Asking for Password

[Foster, Marcus]

Ok I think I found my problem.  In the global of smb.conf I had wins
support:no but when I change it and restart samba I get this message "Access
control violation : /etc/rc.d/init.d/smb start failed"  and nmbd won't start
either.  What am I doing wrong??  

-Original Message-
From: Mark Brosius [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 11, 2002 8:13 AM
To: Foster, Marcus
Cc: '[EMAIL PROTECTED]'
Subject: Re: [Samba] Asking for Password


Marcus,
I think you need to have the line:
encrypt passwords = Yes
in the global section of smb.conf.

Mark

On Mon, 10 Jun 2002, Foster, Marcus wrote:

> Please forgive me but I am pretty new to Linux.   I have Samba set up on a
> Server and when I go to access it from a windows workstation one, a box
pops
> up with the resourse as \\servername\IPC$ 
asking
> for a password. I have the right domain and my username is the same as my
> windows password?
> Why would I be getting these messages?What am I doing wrong?
>
> Marcus Foster
> IT Manager/Midwest Region
> 48 W. Seegers Rd
> Arlington Heights, Il  60005
> Ph: 847-472-6551
> Fax: 561-619-2487
>
>
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba as Win2K Native DC

[Michael Konopka]

I've been searching for an answer to the following question, but without 
a firm answer.

Is Samba going to support the functionality of a native W2K DC in the 
near future?  If so, is there a timeline for implementation?

Thanks!


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Strange problem with samba

[hongwei]

Hi,

I was using samba 2.0.7 veersion for a while without any problem.  This
morning, suddenly, many windows (nt/98) cannot connect the samba server
on our Linux (RedHat 6.2) server.  Then, I downloaded the version 2.2.4,
extracted, configure it, make, make install according to the document.
Then I test it by running

./testparm

it lists all of shared folders.  Then, I run 

./smbclient -L morpheus

where morpheus is my host, it asks the password. I enter it and it lists
all shared folders.  Then, I run

./smbclient //morpheus/common

where common is a public shared folder. Again, after entering the
password, it is connected.  I got the smb prompt  smb: \>  If I type dir
or ls, it lists all folders under /common.

However, if I go to any windows, I cannot connect to the samba server.
If I go to the DOS prompt, and type 

net use x: \\morpheus\common

it asks me 

Type the password for \\morpheus\common

Then, it always says 

Login failed.  Unknown username or bad password.  

Could you give me some help?

Thanks a lot!

Hongwei Li



-
This message sent using EMUmail -- http://www.emumail.com
-

Jumping through hoops to get E-mail on the road? 
You've got two choices: Join the circus, or use MollyMail.

Molly Mail -- http://www.mollymail.com



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Compiling 2.2.4 on HPUX10.20

[Vince Goodnoe]

Hello all,
Well this is not starting out good.  I got an syntax error on line 664 in the Makefile.
: $(WINBIND_NSS_PICOBJS)
It looks like it needs something to me...anyone help??

Vince Goodnoe
[EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Sol 2.8-Samba 2.2.4-Sun WS 6 C Compiler-Compiler Warning Messages

[Dennis]

I'm receiving compiler warning messages using Solaris 2.8, Sun Workshop 
6 C compiler and Samba 2.2.4.
Can the warning be safely ingnored?

Dennis

36 % make
Using FLAGS =  -O -I./popt -Iinclude -I./include -I./ubiqx 
-I./smbwrapper -I/usr/openwin/share/include/X11/extensions 
-I/usr/openwin/include= -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 
-DLOGFILEBASE="/usr/local/samba.22/var" 
-DCONFIGFILE="/usr/local/samba.22/lib/smb.conf" 
-DLMHOSTSFILE="/usr/local/samba.22/lib/lmhosts" 
-DSWATDIR="/usr/local/samba.22/swat" 
-DSBINDIR="/usr/local/samba.22/sbin" 
-DLOCKDIR="/usr/local/samba.22/var/locks" 
-DCODEPAGEDIR="/usr/local/samba.22/lib/codepages" 
-DDRIVERFILE="/usr/local/samba.22/lib/printers.def" 
-DBINDIR="/usr/local/samba.22/bin" 
-DPIDDIR="/usr/local/samba.22/var/locks" 
-DLIBDIR="/usr/local/samba.22/lib" -DHAVE_INCLUDES_H 
-DPASSWD_PROGRAM="/bin/passwd" 
-DSMB_PASSWD_FILE="/usr/local/samba.22/private/smbpasswd" 
-DTDB_PASSWD_FILE="/usr/local/samba.22/private/smbpasswd.tdb"
Using FLAGS32 =  -O -I./popt -Iinclude -I./include -I./ubiqx 
-I./smbwrapper -I/usr/openwin/share/include/X11/extensions 
-I/usr/openwin/include= -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 
-DLOGFILEBASE="/usr/local/samba.22/var" 
-DCONFIGFILE="/usr/local/samba.22/lib/smb.conf" 
-DLMHOSTSFILE="/usr/local/samba.22/lib/lmhosts" 
-DSWATDIR="/usr/local/samba.22/swat" 
-DSBINDIR="/usr/local/samba.22/sbin" 
-DLOCKDIR="/usr/local/samba.22/var/locks" 
-DCODEPAGEDIR="/usr/local/samba.22/lib/codepages" 
-DDRIVERFILE="/usr/local/samba.22/lib/printers.def" 
-DBINDIR="/usr/local/samba.22/bin" 
-DPIDDIR="/usr/local/samba.22/var/locks" 
-DLIBDIR="/usr/local/samba.22/lib" -DHAVE_INCLUDES_H 
-DPASSWD_PROGRAM="/bin/passwd" 
-DSMB_PASSWD_FILE="/usr/local/samba.22/private/smbpasswd" 
-DTDB_PASSWD_FILE="/usr/local/samba.22/private/smbpasswd.tdb"
Using LIBS = -lsec -lgen -lsocket -lnsl  -ldl
Compiling smbd/server.c
Compiling smbd/files.c
Compiling smbd/chgpasswd.c
Compiling smbd/connection.c
Compiling smbd/utmp.c
Compiling smbd/session.c
Compiling smbd/dfree.c
Compiling smbd/dir.c
Compiling smbd/password.c
"smbd/password.c", line 1198: warning: argument #1 is incompatible with 
prototype:
prototype: pointer to char : "include/proto.h", line 142
argument : pointer to const char
Compiling smbd/conn.c
Compiling smbd/fileio.c
Compiling smbd/ipc.c
Compiling smbd/lanman.c
Compiling smbd/mangle.c
Compiling smbd/negprot.c
Compiling smbd/message.c
Compiling smbd/nttrans.c
Compiling smbd/pipes.c
Compiling smbd/reply.c
Compiling smbd/trans2.c
Compiling smbd/uid.c
Compiling smbd/dosmode.c
Compiling smbd/filename.c
Compiling smbd/open.c
Compiling smbd/close.c
Compiling smbd/blocking.c
Compiling smbd/sec_ctx.c
Compiling smbd/vfs.c
Compiling smbd/vfs-wrap.c
Compiling smbd/statcache.c
Compiling smbd/posix_acls.c
Compiling lib/sysacls.c
Compiling smbd/process.c
Compiling smbd/service.c
Compiling smbd/error.c
Compiling printing/printfsp.c
Compiling lib/util_seaccess.c
Compiling libsmb/cli_pipe_util.c
Compiling msdfs/msdfs.c
Compiling param/loadparm.c
Compiling param/params.c
Compiling libsmb/clientgen.c
Compiling libsmb/cliconnect.c
Compiling libsmb/clifile.c
Compiling libsmb/clirap.c
Compiling libsmb/clierror.c
Compiling libsmb/climessage.c
Compiling libsmb/clireadwrite.c
Compiling libsmb/clilist.c
Compiling libsmb/cliprint.c
Compiling libsmb/clitrans.c
Compiling libsmb/clisecdesc.c
Compiling libsmb/clidgram.c
Compiling libsmb/namequery.c
Compiling libsmb/nmblib.c
Compiling libsmb/clistr.c
Compiling libsmb/nterr.c
Compiling libsmb/smbdes.c
Compiling libsmb/smbencrypt.c
"libsmb/smbencrypt.c", line 62: warning: argument #1 is incompatible 
with prototype:
prototype: pointer to const char : 
"/usr/include/iso/string_iso.h", line 70
argument : pointer to const unsigned char
Compiling libsmb/smberr.c
Compiling libsmb/credentials.c
Compiling libsmb/pwd_cache.c
Compiling libsmb/clioplock.c
Compiling libsmb/errormap.c
Compiling libsmb/doserr.c
Compiling libsmb/passchange.c
Compiling libsmb/unexpected.c
Compiling rpc_parse/parse_prs.c
Compiling rpc_parse/parse_sec.c
Compiling rpc_parse/parse_misc.c
Compiling ubiqx/ubi_BinTree.c
Compiling ubiqx/ubi_Cache.c
Compiling ubiqx/ubi_SplayTree.c
Compiling ubiqx/ubi_dLinkList.c
Compiling ubiqx/ubi_sLinkList.c
Compiling ubiqx/debugparse.c
Compiling rpc_server/srv_lsa.c
Compiling rpc_server/srv_lsa_nt.c
Compiling rpc_server/srv_lsa_hnd.c
Compiling rpc_server/srv_netlog.c
Compiling rpc_server/srv_netlog_nt.c
"rpc_server/srv_netlog_nt.c", line 226: warning: argument #3 is 
incompatible with prototype:
prototype: pointer to const unsigned char : "include/proto.h", 
line 666
argument : pointer to char
Compiling rpc_server/srv_pipe_hnd.c
Compiling rpc_server/srv_reg.c
Compiling rpc_server/srv_reg_nt.c
Compiling rpc_server/srv_samr.c
Compiling rpc_server/srv_samr_nt.c
Compiling rpc_server/srv_srvsvc.c
Compiling rpc_server/srv_srvsvc_nt.c
Compiling rpc_server/srv_util.c
Compiling rpc_server/srv_wkssv

[Samba] Re: tree connect failed: NT_STATUS_WRONG_PASSWORD - fixed

[Margaret Doll]

Thank you.   Thank you, Michael.

I saved smb.con, smbpasswd, and smbusers.
I stopped smb.
I deleted the three samba packages from the system.
I  re-installed the three samba packages (2nd cd of the set)
I moved my configuration files back in /etc/samba
I started smb  and everything works.

>On 2002-06-11, Margaret Doll wrote:
>
>MD> > Do you have a file unexpected.tdb in /var/cache/samba?
>MD>
>MD> Yes, in both systems owned by root, -rw-r--r-- protected.  I remembering
>MD> that I had to create this directory to get smb started on the system that
>MD> is not working completely.
>
>Something is wrong there. /var/cache/samba is owned by the samba
>package and should have been there initially.
>
>MD> Is this about a fresh install of Valhalla or an upgrade?
>MD>
>MD> The system that is working is an upgrade. The system that is not working
>MD> completely is a fresh install.
>
>This was my assumption based on what I've been told earlier. Upgraded
>system works fine, installation from scratch causes problems.
>
>I haven't had the chance to look at such a problem myself. One fix
>(from an impatient user's perspective) was to re-install 7.3 from
>scratch, which is something I would not recommend.
>
>Have you tried erasing all samba packages and installing them from
>scratch and copying your smb.conf? I would try that.
>
>MD> > What is logged in /var/log/samba?
>MD>
>MD> log.nmbis not present on the server that is not completely working.
>
>And as you've mentioned, "nmblookup -B $BROADCAST_ADDR server" does
>not work. Same symptoms other users have had, too.
>
>
>
>___
>Valhalla-list mailing list
>[EMAIL PROTECTED]
>https://listman.redhat.com/mailman/listinfo/valhalla-list


-- 



Margaret Doll  (401-863-1982)
[EMAIL PROTECTED]
(401) 745-7306 (beeper)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba-2.2.5pre1 - all binaries require libldap with --with-ldapsam

[Buchan Milne]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Gerald Carter wrote:
| On Mon, 10 Jun 2002, Buchan Milne wrote:
|
|
|>While preparing packaging of te upcoming samba-2.2.5, we are looking at
|>having samba packages with and without ldap enabled, however, we would
|>like to try and minimize the duplication. But, it seems that most (all?)
|>binaries resulting from a --with-ldapsam build en up linking to libldap.
|>
|>Are there really good reasons for nmblookup, smbcacls, smbclient,
|>smbmount, smbprint, smbspool, smbtar, smbumount to need to link against
|>libldap (we have these in a samba-client sub-package, I don't see a need
|>for a samba-client-ldap package), or should I be compiling them
|>differently?
|
|
| smbpasswd & smbd will need the ldap libraries in this case (pdbedit as
| well if you package that).  Our makefile is kind of a mess when it comes
| to this kind of thing.
|

Unfortunately we use a tool to automatically grab dependencies from the
binaries, which normally works ok. From the output below, it seems that
the majority (except tdbackup I think) link to libldap, so unless I
disable dependency checks (not a good idea, and not really acceptable
...), any packages I make while compiling --with-ldapsam containing any
of the binaries below will require ldap libs (=bloat).

How do I fix the makefile?

[bgmilne@bgmilne bin]$ for i in *;do if [ `ldd $i |grep libldap |wc -l`
== 1 ];then echo $i;fi;done
debug2html
make_printerdef
make_smbcodepage
make_unicodemap
nmbd
nmblookup
pam_smbpass.so
pdbedit
rpcclient
smbcacls
smbclient
smbcontrol
smbd
smbfilter
smbmnt
smbmount
smbpasswd
smbsh
smbspool
smbstatus
smbumount
smbwrapper.so
swat
testparm
testprns
wbinfo
winbindd



Buchan

- --
|Registered Linux User #182071-|
Buchan MilneMechanical Engineer, Network Manager
Cellphone * Work+27 82 472 2231 * +27 21 8828820x202
Stellenbosch Automotive Engineering http://www.cae.co.za
GPG Key   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE9BhL2rJK6UGDSBKcRAoJPAJsEBpwCePavV9GGH+3KXMdOxnJvnwCffNSb
QjFZiagYjdrLTDcxC/PDlzY=
=qKwt
-END PGP SIGNATURE-


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbmount and win2k permissions

[Urban Widmark]

On Tue, 11 Jun 2002, LAUTIER Sabrina wrote:

> I can then see that toto owns all files and directories
> (fmask=664,dmask=775):  does this mean that he can do what he wants ?
> As if the SMB share was a regular linux fs ?
> Isn't there permissions checking from the win2k server ?
> Are the windows ACLs still valid ?

Yes, they are. smbfs simply doesn't know about them or have any way of
showing them.

/Urban


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Loosing Samba Shares Across Segments

[Kimsey-Hickman, Brian]

Found the solution.  I restarted the nmbd process and the share appeared
across all segments.  I did reboot the server several times but this did not
work.  I am not sure why the process restart worked whereas the reboot did
not but it did.

Just FYI incase anyone else comes across this problem

Thanks,

Brian

-Original Message-
From: Kimsey-Hickman, Brian [mailto:[EMAIL PROTECTED]]
Sent: Thursday, June 06, 2002 8:42 AM
To: '[EMAIL PROTECTED]'
Subject: [Samba] Loosing Samba Shares Across Segments


I have two Samba servers configure similarly.  One shares fine across our
entire network and the other only works within its own segment.  I have
poured over the smb.conf files and cannot see what it preventing the one
from crossing segments.  These both are Debian 2.2 boxes and I am just
modifying the default smb.conf files.  I am hoping a fresh pair of eyes will
help.  Any help would be greatly appreciated.

Thanks,

Brian



Good Server with shares that cross the segment:

;
; /etc/smb.conf
;
; Sample configuration file for the Samba suite for Debian GNU/Linux
;
; Please see the manual page for smb.conf for detailed description of
;   every parameter.
;

[global]
   printing = bsd
   printcap name = /etc/printcap
   load printers = yes
   guest account = nobody
   invalid users = root

; "security = user" is always a good idea. This will require a Unix account
;   in this server for every user accessing the server.
;  security = user
   security = domain

   password server = compt-401p

; Change this for the workgroup your Samba server will part of
   workgroup = COMPTROLLER

server string = Debian GNU/Linux
;   server string = %h server (Samba %v)

; If you want Samba to log though syslog only then set the following
;   parameter to 'yes'. Please note that logging through syslog in
;   Samba is still experimental.
   syslog only = no

; We want Samba to log a minimum amount of information to syslog. Everything
;   should go to /var/log/{smb,nmb} instead. If you want to log through
;   syslog you should set the following parameter to something higher.
   syslog = 0;

; This socket options really speed up Samba under Linux, according to my
;   own tests.
   socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 SO_RCVBUF=4096

; Passwords are encrypted by default. This way the latest Windows 95 and NT
;   clients can connect to the Samba server with no problems.
   encrypt passwords = yes

; It's always a good idea to use a WINS server. If you want this server
;   to be the WINS server for your network change the following
parameter
;   to "yes". Otherwise leave it as "no" and specify your WINS server
;   below (note: only one Samba server can be the WINS server).
;   Read BROWSING.txt for more details.
   wins support = no

; If this server is not the WINS server then specify who is it and uncomment
;   next line.
   wins server = 172.30.4.8

; Please read BROWSING.txt and set the next four parameters according
;   to your network setup. There is no valid default so they are
commented
;   out.
;   os level = 0
;   domain master = no
;   local master = no
;   preferred master = no

; What naming service and in what order should we use to resolve host names
;   to IP addresses
   name resolve order = lmhosts host wins bcast

; This will prevent nmbd to search for NetBIOS names through DNS.
   dns proxy = no

; Name mangling options

   preserve case = yes
   short preserve case = yes

; This boolean parameter controlls whether Samba attempts to sync. the Unix
;   password with the SMB password when the encrypted SMB password in
the
;   /etc/samba/smbpasswd file is changed.
   unix password sync = false

; For Unix password sync. to work on a Debian GNU/Linux system, the
following
;   parameters must be set (thanks to Augustin Luton
;   <[EMAIL PROTECTED]> for sending the correct chat script for
;   the passwd program in Debian Potato).
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .

; The following parameter is useful only if you have the linpopup package
;   installed. The samba maintainer and the linpopup maintainer are
;   working to ease installation and configuration of linpopup and
samba.
;   message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' &

; The default maximum log file size is 5 MBytes. That's too big so this
;   next parameter sets it to 1 MByte. Currently, Samba rotates log
;   files (/var/log/{smb,nmb} in Debian) when these files reach 1000
KBytes.
;   A better solution would be to have Samba rotate the log file upon
;   reception of a signal, but for now on, we have to live with this.
   max log size = 1000


[homes]
   comment = Home Directories
   browseable = no

; By default, the home directories are exported read only. Change next
;   parameter to "no" if you wan

[Samba] Files won't close - Help

[Jesse London]

Hello All...
I am not subscribed to the list.. please reply to me 
directly.

Two different applications; MS Access and Quickbooks 
are either not closing their own files properly or 
are trying to close their files but it isn't 
happening in Samba.  The effect is that even after a 
client closes the application the file still looks 
open and so no one else can access the file.

Is this a known type of issue?  Is there a way, 
scripts or anything, to clean up files that are left 
open?  I've tried everything I know.

Thanks in advance,
Jesse London
-- 
Jesse London
ConsulTrain, LLC
http://www.consultnc.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] "net" command with openldap 2.1.1?

[Dave Snoopy]

The Samba net command (from the HEAD) sounds great,
but it doesn't seem to compile with OpenLDAP version
2.1.1 Beta. When compiling, I get this error:

Compiling passdb/pdb_ldap.c
passdb/pdb_ldap.c: In function
`ldapsam_connect_system':
passdb/pdb_ldap.c:313: too few arguments to function
`ldap_set_rebind_proc'
*** Error code 1

It seems that the head of Samba doesn't use the latest
OpenLDAP API. Does the net command from the HEAD only
compile with a certain version of OpenLDAP? If so,
which? 

Thanks,
Dave

__
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] 2nd edition of Using Samba

[Jay Ts]

> 
> > (The first edition of Using Samba is _slightly_ out of date. ;-)
> Is the 2nd edition of Using Samba already out ? If yes where to find
> it ?

I'm still working on it.  I hope you can wait a few more months.

Jay Ts
[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: RE: [Samba] printer drivers

[Van Sickler, Jim]

> -Original Message-
> From: Mark Brosius [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, June 11, 2002 9:13 AM
> To: Van Sickler, Jim
> Cc: [EMAIL PROTECTED]
> Subject: RE: RE: [Samba] printer drivers
> 
> 
> Thanks for responding.
> On Tue, 11 Jun 2002, Van Sickler, Jim wrote:
> 
> > I think I've lost the big picture...time to
> > step back and look at what you're trying
> > (and unable) to do.
> >
> > 1.  Is \\server\Printer being added to
> > the clients as a Network or Local Printer?
> 
>   Network
> 
Okay

> > 2.  If Network, are you trying to install
> > the printer drivers from the server
> 
>   I am installing the drivers from the client
> 
If disable spoolss=yes, or pre-2.2.1a(I think)
this is your only choice.  I found it works
best...for my setup, at least.  Others may
feel free to offer different advice.  No
two setups are the same.

> > 3.  Are you a member of the Linux admins
> > group?
> 
>   Good question.  I don't think so.
If you're not sure, you probably aren't.
This is an issue with spoolss support enabled.
> 
> > 4.  Did you delete the default printer
> > apps on the Linux box, and create symlinks
> > to the cups equivalents? (e.g. lpr, lprm, lpd, lpq)
> > (This has bitten me on OpenBSD upgrades;  the
> > upgrade overwrites the symlinks with executables,
> > and I have to go back and redo the LPRng symlinks)
> 
>   I did not delete the printer apps on the Linux box

Enabling cups in smb.conf has no effect if cups isn't
installed on the server.  You may want to return to the
default settings for printing, and see if that changes
anything.  Remarking out the printer entries (with #
at the start of the line) will allow
the defaults to be used.

> 
> > 5.  Re-read the doc's and HOW-TOs for printing
> > setup-a lot has changed in 2.2.x...maybe something
> > will pop up that you missed.
> 
>   Okay. Dumb question, where are they.  I can't seem to find them.
>
If you've got SWAT running, you can get to some of the 
documentation through the home page;  more doc's are
available through the samba.org documentation link - e.g.
http://us4.samba.org/samba/docs/

> > 6.  If you're not interested in the spoolss support,
> > or it gives you more pain than pleasure (my case!!!)
> > use "disable spoolss=yes" and "use printer driver=no"
> > in smb.conf's [Global], remove all connections to
> > \\server\Printer in your workstations' Printers and
> > the Registry.  Then re-install \\server\Printer as
> > a Network Printer, and the Port it attaches to should
> > show up listed in the Properties as a LAN Manager
> > Printer Port.  This is the pre-spoolss type of printer
> > connection, and I think the easier to set up/manage.
> 
>   I haven't even considered spoolss.

If you installed 2.2.3a, I think it was enabled by default.
I'm not sure about 2.2.1a, but I'd put
disable spoolss=yes just in case.
If testparm complains about an invalid entry, delete it.

> 
> > 7.  Linux prints via cups, and you can see the share-
> > you're almost there...
> 
>   To be honest, I'm not sure how I am printing from linux.  
> Maybe it is cups...maybe not.  Sorry.  I am able to see
> the share from the windows client though.

A visible share is just that, unfortunately.  If the
printing subsystem is defective, it won't change
anything.  But you already knew that  ;-)

> 
> > Good luck!
> 
>   Thanks, I think I need it.  I appreciate your help!
> 
You're welcome-I've gotten a lot of help from
the list in the past. Eventually you'll
get the answers you need, either from the list
or your own efforts.  

Jim


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] 'net rpc trustdom establish' not yet working?

[David Boynton]

Hi all,

I've been messing this this for the last few hours trying to trust an NT
domain.  I make it down to where it says "Success!" and the domain trust is
added to the secrets.tdb file.  However, connecting with rpclient and doing
'enumtrust' gives back no results.  I also don't have the trusted domain
available for login on my workstation.

Oh yeah, I'm using Redhat 7.3 with Samba 3.0 alpha 17.


Thanks in advance!
Dave

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] tree connect failed: NT_STATUS_WRONG_PASSWORD

[Margaret Doll]

Title: tree connect failed: 
NT_STATUS_WRONG_PASSWORD


I am still struggling to get one of my samba servers to work with
the new security on RH 7.3.  Any help is appreciated.

The "not fully working computer" serves as a print
server for the Window computers.  You can log into it, but you
cannot see it from the Network Neighborhood.  On some versions of
Windows you cannot find it through the "Find Computers"
programs.

The system with a clean install from RH cds is having network
problems; the system which I upgraded from RH cds is fine.  Both
have been upgraded to kernel-2.4.18-4.  I have stopped the
ipchains services on the cleanly installed computer.  The samba
configuration file and passwd were restored from backups onto the new
system. 

/sbin/ipchains-save on the upgraded computer says

   
"'/proc/net/ip_fwchains' does not exist.
    (Does
this kernel support IP firewall Chains?"

The cleanly installed computer has three empty files in /proc/net
which are missing in the updated version; namely, ip_fwnames,
ip_fwchains, ip_masquerade.

    In the
following lists, I am just enumerating the differences in the
output.

    not
fully working computer 
   
fully working computer

nmap    53 domain (this is a
nameserver)   

    80
httpd    (this
is a web server)
   
   
   
   
    616
unknown
   
   
   
   
    617
unknown
   
   
   
   
    845
unknown
    865
unknown
   
   
   
   
    901
samba-swat
   
   
   
   
    1025
listen


lsmod  
binfmt_misc
   
   
sg
   
ipchains   
   
   
   
loop
   
cs4243 
   
   
   
vfat
   
ad1848 
   
   
   
nls_iso8859-1
   
uart401
   
   
   
nls_cp437
   
sound  
   
   
   
msdos
   
   
   
   
   
fat
   
   
   
   
   
sr_mod
   
   
   
   
   
i810_audio
   
   
   
   
   
ac97_codec
   
   
   
   
   
nfs
   
   
   
   
   
ide_scsi

smbclient -L server  (with return when requested for passwd
- running as root - root does
    not
have smbpassword

   
Anonymous login successful 
   
Anonymous login successful
    Domain
[Chemistry] OS=[Unix] .. Domain [Geology]
OS=[Unix]..
    tree
connect failed:   
   
   

      
NT_STATUS_WRONG_PASSWORD list
of all the shares, servers, and work
   
   
   
   
   
   
groups


smbclient -L server -U user1%passwd 
for the "not fully working computer" gives the list of
shares, servers, and work groups.

    Thank
you.

Re: [Samba] WinXP Client fails to logon to domain

[Alex Meaden]

Also I get this error when trying to open \\malex (the new WinXP machine)
from another PC:

\\malex is not accessible.
The trust relationship between this workstation and the primary domain
failed.

TIA,
Alex.


- Original Message -
From: "Alex Meaden" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, June 11, 2002 6:18 PM
Subject: [Samba] WinXP Client fails to logon to domain


> I have a Samba server version 2.2.1a running as PDC. Win2k clients are
able
> to logon to the domain, but the WinXP Pro client I just installed cannot -
> when attempting to logon it says:
>
> "Windows cannot connect to the domain, either because the domain
controller
> is down or otherwise unavailable, or because your computer account was not
> found. Please try again later. If this message continues to appear,
contact
> your system administrator for assistance."
>
> I have created a machine account for the PC. Are then any issues with
2.2.1a
> and WinXP? This is the first XP client on the network. The client can
> connect to the PDC for file sharing etc.
>
> TIA,
> Alex.
>
>
> Mr Alex Meaden
> Computer Science Undergraduate
> University of Kent at Canterbury
> [EMAIL PROTECTED]
> http://meaden.dyndns.org
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] WinXP Client fails to logon to domain

[Alex Meaden]

I have a Samba server version 2.2.1a running as PDC. Win2k clients are able
to logon to the domain, but the WinXP Pro client I just installed cannot -
when attempting to logon it says:

"Windows cannot connect to the domain, either because the domain controller
is down or otherwise unavailable, or because your computer account was not
found. Please try again later. If this message continues to appear, contact
your system administrator for assistance."

I have created a machine account for the PC. Are then any issues with 2.2.1a
and WinXP? This is the first XP client on the network. The client can
connect to the PDC for file sharing etc.

TIA,
Alex.


Mr Alex Meaden
Computer Science Undergraduate
University of Kent at Canterbury
[EMAIL PROTECTED]
http://meaden.dyndns.org


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Wbinfo -u

[Juer Lee]

Hello guys,

Recently, I am expericing some problems  with getting user list from
Domain Controller.
My server is using samba 2.2.4 under Linux, and the security mode is
'Domain', what I got on the server are:

bash-2.05# wbinfo -t
Secret is good
bash-2.05# wbinfo -u
Error looking up domain users

So I set the debug level to 5, and I found there are some lines like:

[2002/06/12 01:10:00, 5] rpc_parse/parse_prs.c:prs_uint8s(645)
  0024 data5: 00 00 00 00 00 00 00 00
[2002/06/12 01:10:00, 5] rpc_parse/parse_prs.c:prs_ntstatus(587)
  002c status: NT_STATUS_ACCESS_DENIED
[2002/06/12 01:10:00, 5] nsswitch/winbindd.c:client_read(405)
  read failed on sock 13, pid 9264: EOF

Are there anything wrong with setting the Domain Controller? Because I
did the same test whith joining in another Domain Controller before, it
works fine.

Any response are appreciated.
Juer

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Access denied errors: FIXED!

[Mike Barsalou]

I was able to fix the access denied errors on my Samba 2.2.3a installation
recently.  I am not exactly sure which piece fixed it but here is what I
did:

In the global section I put:

use client driver = yes
printer admin = @users (this is the group of all the users)

in the printers section I put:

guest ok = yes



An interesting thing happened though...If I added disable spoolss = yes to
the global section, I would get access denied messages.  Anyone care to
explain that?

Mike

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] DNS Proxy - WINS problem - please help

[Terry Davis]

Here is my scenario when a client wants to resolve a name on my local
network:

CLIENT --> VPN --> SAMBA --> DNS

The client is set up like so:
DNS1 = ISP DNS1 (204.26.64.1)
DNS2 = ISP DNS2 (204.26.80.3)
WINS1 = my samba1 (10.10.1.5)
WINS2 = my samba2 (10.10.1.8)

This all _seemed_ to have worked 3 days ago for roughly 6 months but
stopped suddenly without me doing anything.

When the client requests a name on my local network like atlas
(10.10.1.8), there is no resolution at all.

My first reaction was there was a firewall change or something, but that
is not the case.


1) How can I see if requests are getting to the samba server for dns
queries?

2) Is my thinking correct about DNS proxy?


Here is the relevant parts of my smb.conf:

wins support = yes
wins proxy = no
dns proxy = yes

Thank you for your help!

-- 
Terry Davis
http://approbation.org/


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Samba as BDC in windows domain?

[Steve Langasek]

On Tue, Jun 11, 2002 at 05:05:35PM +0100, David Lee wrote:
> On Tue, 11 Jun 2002, Paul Reilly wrote:

> > I've been reading about setting up Samba as a PDC with LDAP storage.
> > However if I am to do this it needs to co-exist with the exisitng windows
> > NT domain using windows NT PDC's. Everything I've read so far says you
> > can't have a Samba BDC unless it's in a Samba PDC controlled domain. Is this
> > correct? Is there *any_possible_way* of having a Samba BDC get SAM updates
> > from a windows NT PDC ?

> > If not, is there any other way to sync an OpenLDAP server against a NT PDC ?

> Might be possible, but first the disclaimer...

> Disclaimer:  I have absolutely zero knowledge of PDC/BDC/NT internals.
> Zero, zilch, rein, nothing, nil, nowt, ...

> At our site, we have just started dabbling with a thing called "Microsoft
> Services for UNIX" (hereinafter called "SFU") that our PC folk obtained.

> Until now, our service has been basically UNIX.  Although most of the
> user-visible front-end (i.e. desktop machines) is a variant of W2K, the
> "real work" has hitherto been UNIX: the identifier and password the user
> gives is actually a UNIX pair, used to authenticate their Samba drive from
> UNIX.  (Behind the scenes on W2K, there was simply a blanket guest-type
> login just before this.)

> Now...  we are contemplating a migration to Active Directory ("AD") of
> these accounts: some 20,000 or them.  (Gives me, as a UNIX person, the
> shudders, but that's another story...!)  One reason is so that the id/pw
> pair can be a real Windows authentication, so they can do real Windozy
> things.  We are very keen to preserve the "single authentication" model.

> Our plan is to set up accounts for all users in AD.  We would then use
> UNIX password-aging mechanisms to "persuade" all users to change their
> password "at leisure, in their own time".  But behind the scenes we would
> be using the UNIX PAM module from Microsoft's SFU to copy (synchronise)
> these password changes out from UNIX into AD.  (We'll also be using SFU's
> corresponding "ssod" daemon for a small number of real-AD folk who might
> want to maintain synchronisation from AD towards UNIX.)

FWIW, what I'm hearing from the Kerberos world is that it's possible to
store all of your actual accounts in a traditional Unix KDC, creating a
trust relationship with your AD server, and still get most of the
"Windozy" things out of the mix.  There's also a PAM module called
pam_krb5_migrate that can help with this as well, though I've never
tested it in a Solaris environment.  It does at least require an
MIT-like KDC (Solaris probably qualifies) with matching client libraries
(kadm5clnt).

Synchronizing passwords via PAM has always been hairy.  Migrating to a
single unified backend such as Kerberos and using that for /all/
systems, Windows and Unix, is a much more promising long-term solution.

Steve Langasek
postmodern programmer



msg03982/pgp0.pgp
Description: PGP signature

[Samba] subscription

[Capriotti]

I cannot subscribe to the list for some reason.

Have already tried a couple of times following the instruction step by step.

I guess I need help now.

Thank you.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] subscription

[Capriotti]

I cannot subscribe to the list for some reason.

Have already tried a couple of times following the instruction step by step.

I guess I need help now.

Thank you.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: RE: [Samba] printer drivers

[Mark Brosius]

Thanks for responding.
On Tue, 11 Jun 2002, Van Sickler, Jim wrote:

> I think I've lost the big picture...time to
> step back and look at what you're trying
> (and unable) to do.
>
> 1.  Is \\server\Printer being added to
> the clients as a Network or Local Printer?

  Network

> 2.  If Network, are you trying to install
> the printer drivers from the server

  I am installing the drivers from the client

> 3.  Are you a member of the Linux admins
> group?

  Good question.  I don't think so.

> 4.  Did you delete the default printer
> apps on the Linux box, and create symlinks
> to the cups equivalents? (e.g. lpr, lprm, lpd, lpq)
> (This has bitten me on OpenBSD upgrades;  the
> upgrade overwrites the symlinks with executables,
> and I have to go back and redo the LPRng symlinks)

  I did not delete the printer apps on the Linux box

> 5.  Re-read the doc's and HOW-TOs for printing
> setup-a lot has changed in 2.2.x...maybe something
> will pop up that you missed.

  Okay. Dumb question, where are they.  I can't seem to find them.

> 6.  If you're not interested in the spoolss support,
> or it gives you more pain than pleasure (my case!!!)
> use "disable spoolss=yes" and "use printer driver=no"
> in smb.conf's [Global], remove all connections to
> \\server\Printer in your workstations' Printers and
> the Registry.  Then re-install \\server\Printer as
> a Network Printer, and the Port it attaches to should
> show up listed in the Properties as a LAN Manager
> Printer Port.  This is the pre-spoolss type of printer
> connection, and I think the easier to set up/manage.

  I haven't even considered spoolss.

> 7.  Linux prints via cups, and you can see the share-
> you're almost there...

  To be honest, I'm not sure how I am printing from linux.  Maybe it is
cups...maybe not.  Sorry.  I am able to see the share from the windows
client though.

> Good luck!

  Thanks, I think I need it.  I appreciate your help!

> Jim
>


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Samba as BDC in windows domain?

[David Lee]

On Tue, 11 Jun 2002, Paul Reilly wrote:

> I've been reading about setting up Samba as a PDC with LDAP storage.
> However if I am to do this it needs to co-exist with the exisitng windows
> NT domain using windows NT PDC's. Everything I've read so far says you
> can't have a Samba BDC unless it's in a Samba PDC controlled domain. Is this
> correct? Is there *any_possible_way* of having a Samba BDC get SAM updates
> from a windows NT PDC ?
> 
> If not, is there any other way to sync an OpenLDAP server against a NT PDC ?

Might be possible, but first the disclaimer...

Disclaimer:  I have absolutely zero knowledge of PDC/BDC/NT internals.
Zero, zilch, rein, nothing, nil, nowt, ...

OK...

At our site, we have just started dabbling with a thing called "Microsoft
Services for UNIX" (hereinafter called "SFU") that our PC folk obtained.

Until now, our service has been basically UNIX.  Although most of the
user-visible front-end (i.e. desktop machines) is a variant of W2K, the
"real work" has hitherto been UNIX: the identifier and password the user
gives is actually a UNIX pair, used to authenticate their Samba drive from
UNIX.  (Behind the scenes on W2K, there was simply a blanket guest-type
login just before this.)


Now...  we are contemplating a migration to Active Directory ("AD") of
these accounts: some 20,000 or them.  (Gives me, as a UNIX person, the
shudders, but that's another story...!)  One reason is so that the id/pw
pair can be a real Windows authentication, so they can do real Windozy
things.  We are very keen to preserve the "single authentication" model.

Our plan is to set up accounts for all users in AD.  We would then use
UNIX password-aging mechanisms to "persuade" all users to change their
password "at leisure, in their own time".  But behind the scenes we would
be using the UNIX PAM module from Microsoft's SFU to copy (synchronise)
these password changes out from UNIX into AD.  (We'll also be using SFU's
corresponding "ssod" daemon for a small number of real-AD folk who might
want to maintain synchronisation from AD towards UNIX.)

Our initial, very small, tests look promising.

I've no real idea whether that can map to your environment, but it might
be worth looking at.

Hope that helps.

-- 

:  David LeeI.T. Service  :
:  Systems Programmer   Computer Centre   :
:   University of Durham  :
:  http://www.dur.ac.uk/t.d.lee/South Road:
:   Durham:
:  Phone: +44 191 374 2882  U.K.  :


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] spoolss back connections to client

[Van Sickler, Jim]

>From \winnt\system32\drivers\etc\services:

microsoft-ds  445/tcp
microsoft-ds  445/udp
--

Why is the connection refused?

Is this preventing Win2k from properly
displaying printer status?  I've noticed that
now we're running Win2k on all wkstns, noone can
tell when I've got a printer's queue disabled.
The printer is Paused, but jobs can be sent to
it, and no feedback is received to indicate
the job couldn't be queued...it just goes into
the bit bucket.

(I've also updated LPRng to 3.8.12, and samba to
2.2.5pre...something is broken somewhere, but I'm
not sure where.)

Jim

> -Original Message-
> From: Gerald Carter [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, June 11, 2002 4:35 AM
> To: Tom Vandepoel
> Cc: [EMAIL PROTECTED]
> Subject: Re: [Samba] spoolss back connections to client
> 
> 
> On Tue, 11 Jun 2002, Tom Vandepoel wrote:
> 
> > Since we've switched to spoolss printing (samba 2.2.4) it 
> seems that the
> > server is always trying to connect to the client. 
> > 
> > [2002/06/11 10:52:41, 3] lib/util_sock.c:open_socket_out(843)
> >   Connecting to 10.0.40.80 at port 445
> > [2002/06/11 10:52:41, 2] lib/util_sock.c:open_socket_out(871)
> >   error connecting to 10.0.40.80:445 (Connection refused)
> > [2002/06/11 10:52:41, 3] lib/util_sock.c:open_socket_out(843)
> >   Connecting to 10.0.40.80 at port 139
> > 
> > I've traced this back in the source to the 
> "spoolss_connect_to_client"
> > call in rpc_server/srv_spoolss_nt.c. It seems this is used 
> to reply back
> > to the client with printing info.
> 
> This is the printer change notification back channel.
> 
> > However, in our environment, such connections typically fail, as we
> > disable the "Server" service on NT/W2K clients as much as 
> possible. In
> > those cases, printing still works fine, so I'm starting to wonder if
> > these back connections are absolutely needed. They are especially
> > annoying when the back connection is made to a firewalled client; it
> > slows down response of the print server enormously (the server waits
> > until the back connection times out).
> > 
> > So, I was thinking; is there an smb.conf option (or could it be
> > implemented) to disable these back connections? What would 
> the impact be
> > if I modified the src_spoolss_replyopenprinter() routine to always
> > return false? Would that break anything?
> 
> Better to just comment out the SPOOLSS_RFFPCN and SPOOLSS_RFNPCN
> server functions.  However, certain changes will not be reflected on
> the client such as josb listings, etc
> 
> btwthis is MS's model.  You'll have the same problem with
> a Win2k print server.  I do agree that it is a brain dead design...
> 
> 
> 
> 
> 
> 
> cheers, jerry
>  -
>  Hewlett-Packard http://www.hp.com
>  SAMBA Team   http://www.samba.org
>  --http://www.plainjoe.org
>  "Sam's Teach Yourself Samba in 24 Hours" 2ed.  ISBN 0-672-32269-2
>  --"I never saved anything for the swim back." Ethan Hawk in Gattaca--
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Samba as BDC in windows domain?

[Volker Lendecke]

On Tue, Jun 11, 2002 at 04:00:08PM +0100, Paul Reilly wrote:
> I've been reading about setting up Samba as a PDC with LDAP storage.
> However if I am to do this it needs to co-exist with the exisitng windows
> NT domain using windows NT PDC's. Everything I've read so far says you
> can't have a Samba BDC unless it's in a Samba PDC controlled domain. Is this
> correct? Is there *any_possible_way* of having a Samba BDC get SAM updates
> from a windows NT PDC ?
> 
> If not, is there any other way to sync an OpenLDAP server against a NT PDC ?

As far as I know, no.

Volker



msg03980/pgp0.pgp
Description: PGP signature

RE: RE: [Samba] printer drivers

[Van Sickler, Jim]

I think I've lost the big picture...time to
step back and look at what you're trying
(and unable) to do.

1.  Is \\server\Printer being added to
the clients as a Network or Local Printer?

2.  If Network, are you trying to install
the printer drivers from the server?

3.  Are you a member of the Linux admins
group?

4.  Did you delete the default printer
apps on the Linux box, and create symlinks
to the cups equivalents? (e.g. lpr, lprm, lpd, lpq)
(This has bitten me on OpenBSD upgrades;  the
upgrade overwrites the symlinks with executables,
and I have to go back and redo the LPRng symlinks)

5.  Re-read the doc's and HOW-TOs for printing
setup-a lot has changed in 2.2.x...maybe something
will pop up that you missed.

6.  If you're not interested in the spoolss support,
or it gives you more pain than pleasure (my case!!!)
use "disable spoolss=yes" and "use printer driver=no"
in smb.conf's [Global], remove all connections to
\\server\Printer in your workstations' Printers and
the Registry.  Then re-install \\server\Printer as 
a Network Printer, and the Port it attaches to should
show up listed in the Properties as a LAN Manager
Printer Port.  This is the pre-spoolss type of printer
connection, and I think the easier to set up/manage.

7.  Linux prints via cups, and you can see the share-
you're almost there...

Good luck!
Jim

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] samba performance issue

[Oliver Thinnes]

I' m also testing version 2.2.4 with ACL and winbind support on EXT3 with 
filesystem ACLs.

On a DELL dual PIII Xeon 900 MHz with 2 GB RAM RAID 5 it took about 4,5 
minutes to copy the folder "I386" (3.300 files, 77 MB) of the NT 4.0 
installation cdrom with ACLs enabled from the local drive to the 
fileserver. Without ACL it took 90 seconds.

On a "simple" PC with a U160 SCSI drive with samba 2.2.0 it takes

Also the configuration option "hide unreadable" is responsible for the 
performance.

Therefore I disabled ACL (not compiled in), set "create mask", "directory 
mask" to "777" , use default ACLs and let the filesystem set the access 
rights appropreate.

I get the same result on mandrake 8.2 with XFS an samba 2.2.3.a with ACL 
enabled.

-Original Message-
From:   Martyn Ranyard [SMTP:[EMAIL PROTECTED]]
Sent:   Tuesday, June 11, 2002 4:50 PM
To: Trey Nolen
Cc: [EMAIL PROTECTED]
Subject:Re: [Samba] samba performance issue

Very strange,

   Feel not alone, however - I too have some performance concerns :

   A Samba 2.0.8 Slackware 7 Machine was working fine for nigh on a year,
and then it started to degrade, to the point where an app that used network 
database which used to come up almost instantaneously started taking 5
seconds.  Annoying, as the customer had got used to the speed.  Also on a
100Mb Switch, with only 6 client machines.

   As a last effort we upgraded to 2.2.4 and it felt much faster, however,
I did some testing before and after the upgrade :

   Before the upgrade, a file transfer from a client (50MB random data) was 
taking 50 Seconds and not utilising all the bandwidth.
   Before the upgrade, a file transfer to a client (50MB random data) was
taking 100 Seconds and not utilising all the bandwidth.
   After the upgrade, a file transfer from a client (50MB random data) was
taking 25 Seconds and not utilising all the bandwidth.
   After the upgrade, a file transfer to a client (50MB random data) was
taking 50 Seconds and not utilising all the bandwidth.
   Before and after the upgrade, and ftp transfer of the same file took 20
seconds either way.

   This really got me stumped, but as the speed was near normal again, I
have left the site, but would like to know if this double time transfers is 
usual or if there is anything we can do to find out why.

Martyn

At 09:34 AM 6/11/02 -0500, Trey Nolen wrote:
>Now, the problem...I'm getting very poor performance. The machine we
>replaced was a Pentium I 200 with 64MB of RAM, and it was faster than this
>thing.  All of my client machines are Win98 SE.  The biggest problem is
>when the executable itself is on the server. If it is, the program loads
>VERY slowly. I have loaded Netstat to look at the network throughput. When
>I am loading an EXE from the server, my throughput is very low.  I made a
>300 MB test file to copy back and forth across the network. On each
>machine, I'm getting about 35Mbit. I can copy the same file to two 
machines
>at the same time and get 35Mbit on both. I have not tested three at a time
>because this was enough to show me that the network was not the 
bottleneck.
>This network is 100Mbit on a switch.  When copying the files, the client
>machine's processor always shows 100%. When loading programs from the
>server the machines also show 100%.  BUT, I get the same performance from 
a
>550 Mhz PIII machine, a 1000Mhz Athlon machine, and an 1800+ Athlon XP.
>Also, like I said, the Novell server makes the clients much faster. I have
>eliminated all the protocol traffic that I can -- all machines are on
>TCP/IP only. I can put the EXEs on the client machines and just read the
>data from the server for improved performace, but it is still not as good
>as it should be (or as good as the old server).
>
>Now for the questiondoes anyone know of anything I can do to improve
>performance? Or do I need to go back and install Novell on the new machine
>(I really don't want to)?
>
>
>Thanks in advance.
>
>Trey Nolen
>
>
>
>--
>To unsubscribe from this list go to the following URL and read the
>instructions:  http://lists.samba.org/mailman/listinfo/samba

Martyn Ranyard
Free Software Advocate

icq - 122500800
irc - Joran on OPN
msn - [EMAIL PROTECTED]
y!  - ranyardm
e   - [EMAIL PROTECTED]


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] wbinfo / NT4 PDC

[Billy Passauer]

I'm having a really strange problem with winbind and my NT4 PDC.  The
PDC was here before I started working here, so I'm not sure what all
has been done to it.  Here's the layout:

* NT4 PDC (no BDC)- Up to date with all service packs and hotfixes.
  Running Cyberwall-Plus firewall.

* RHL 7.2 (2.4.9-31custom) with Samba 2.2.4 (compiled from src).

I was able to join the domain.  The secret is good.  I can translate
names to SID's and vice-versa.  I can "authenticate" using wbinfo (at
least I believe this output means it succeeded):

plaintext password authentication failed
error code was NT_STATUS_INVALID_PARAMETER (0xc00d)
Could not authenticate user user%password with plaintext password
challenge/response password authentication succeeded
error code was NT_STATUS_OK (0x0)

However, I can not get the user or group listing from the PDC using
wbinfo -u or -g ("Error looking up domain/groups").  Also, 
getent password/group only returns info from the local files on the 
linux machine.

It's not a firewall configuration issue, because during testing, I've 
disabled the firewalls on both systems.

Now the odd part.  I set up a test NT system, with all the latest
service packs and hotfixes, and installed it as a BDC to our original
PDC.  I even installed the same firewall with the same ruleset as what
is on the PDC.  In smb.conf, if I change the "password server=" entry
to point to the BDC, everything works perfectly!  I can get the
user/group listings via wbinfo -u/-g and getent.  And, most importantly,
as this is the goal of everything I'm trying to do here, I can even 
authenticate windows/macintosh users via pam.

In searching through the samba list archives, I thought I had found a
glimmer of hope in the "restrict anonymous" registry setting, because
the PDC had it, but the BDC did not.  But unfortunately that was not it.
The logs and debug info show nothing obvious (at least to me).

I'm hoping that someone might have an idea of what could be different
between the PDC and BDC that would allow one to work and not the other.
Or maybe some way to help me make that determination.
Thanks for ANY help.

-- 
  _ .  [EMAIL PROTECTED]  | Computers are just like air
conditioners:
 |_) ||   | They stop working properly when
 |_)_|| you open windows.
Passauer_||

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] smbmount and win2k permissions

[LAUTIER Sabrina]

> From there, you can use smbmount to mount SMB shares (from
> Windows systems or Samba servers) in your Linux filesystem. 
smbmount works fine :
$ smbmount //DOMAIN_controler/sharedir /home/toto/smb -o
credentials=/home/win2k/DOMAIN/toto/.smbpw,uid='DOMAIN+toto',gid='DOMAIN+Domain
users',fmask=664,dmask=775

The user toto is a domain user authenticated from the Win2k server.
I can then see that toto owns all files and directories
(fmask=664,dmask=775):  does this mean that he can do what he wants ?
As if the SMB share was a regular linux fs ?
Isn't there permissions checking from the win2k server ?
Are the windows ACLs still valid ?

Regards.

-
Powered by Alinto (http://www.alinto.net)
for lavache.com (http://www.lavacheautomatique.com)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Samba as BDC in windows domain?

[Paul Reilly]

I've been reading about setting up Samba as a PDC with LDAP storage.
However if I am to do this it needs to co-exist with the exisitng windows
NT domain using windows NT PDC's. Everything I've read so far says you
can't have a Samba BDC unless it's in a Samba PDC controlled domain. Is this
correct? Is there *any_possible_way* of having a Samba BDC get SAM updates
from a windows NT PDC ?

If not, is there any other way to sync an OpenLDAP server against a NT PDC ?

Paul


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] 2nd edition of Using Samba

[LAUTIER Sabrina]

> (The first edition of Using Samba is _slightly_ out of date. ;-)
Is the 2nd edition of Using Samba already out ? If yes where to find
it ?

Regards.

-
Powered by Alinto (http://www.alinto.net)
for lavache.com (http://www.lavacheautomatique.com)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] spoolss back connections to client

[Tom Vandepoel]

Gerald Carter wrote:
> 
> On Tue, 11 Jun 2002, Tom Vandepoel wrote:
> 
> > Since we've switched to spoolss printing (samba 2.2.4) it seems that the
> > server is always trying to connect to the client.
> >
> > [2002/06/11 10:52:41, 3] lib/util_sock.c:open_socket_out(843)
> >   Connecting to 10.0.40.80 at port 445
> > [2002/06/11 10:52:41, 2] lib/util_sock.c:open_socket_out(871)
> >   error connecting to 10.0.40.80:445 (Connection refused)
> > [2002/06/11 10:52:41, 3] lib/util_sock.c:open_socket_out(843)
> >   Connecting to 10.0.40.80 at port 139
> >
> > I've traced this back in the source to the "spoolss_connect_to_client"
> > call in rpc_server/srv_spoolss_nt.c. It seems this is used to reply back
> > to the client with printing info.
> 
> This is the printer change notification back channel.
> 
> > However, in our environment, such connections typically fail, as we
> > disable the "Server" service on NT/W2K clients as much as possible. In
> > those cases, printing still works fine, so I'm starting to wonder if
> > these back connections are absolutely needed. They are especially
> > annoying when the back connection is made to a firewalled client; it
> > slows down response of the print server enormously (the server waits
> > until the back connection times out).
> >
> > So, I was thinking; is there an smb.conf option (or could it be
> > implemented) to disable these back connections? What would the impact be
> > if I modified the src_spoolss_replyopenprinter() routine to always
> > return false? Would that break anything?
> 
> Better to just comment out the SPOOLSS_RFFPCN and SPOOLSS_RFNPCN
> server functions.  However, certain changes will not be reflected on
> the client such as josb listings, etc
> 
> btwthis is MS's model.  You'll have the same problem with
> a Win2k print server.  I do agree that it is a brain dead design...
> 

Thought so; just wanted to make sure I didn't cripple something
essential.
I pretty much don't care about updating job listings, so I guess I will
disable this in the source.
I'll let you know how it reacts ;-)

Might be usefull to have an smb.conf option for this, if this proves
stable ;-)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba performance issue

[Martyn Ranyard]

Very strange,

   Feel not alone, however - I too have some performance concerns :

   A Samba 2.0.8 Slackware 7 Machine was working fine for nigh on a year, 
and then it started to degrade, to the point where an app that used network 
database which used to come up almost instantaneously started taking 5 
seconds.  Annoying, as the customer had got used to the speed.  Also on a 
100Mb Switch, with only 6 client machines.

   As a last effort we upgraded to 2.2.4 and it felt much faster, however, 
I did some testing before and after the upgrade :

   Before the upgrade, a file transfer from a client (50MB random data) was 
taking 50 Seconds and not utilising all the bandwidth.
   Before the upgrade, a file transfer to a client (50MB random data) was 
taking 100 Seconds and not utilising all the bandwidth.
   After the upgrade, a file transfer from a client (50MB random data) was 
taking 25 Seconds and not utilising all the bandwidth.
   After the upgrade, a file transfer to a client (50MB random data) was 
taking 50 Seconds and not utilising all the bandwidth.
   Before and after the upgrade, and ftp transfer of the same file took 20 
seconds either way.

   This really got me stumped, but as the speed was near normal again, I 
have left the site, but would like to know if this double time transfers is 
usual or if there is anything we can do to find out why.

Martyn

At 09:34 AM 6/11/02 -0500, Trey Nolen wrote:
>Now, the problem...I'm getting very poor performance. The machine we
>replaced was a Pentium I 200 with 64MB of RAM, and it was faster than this
>thing.  All of my client machines are Win98 SE.  The biggest problem is
>when the executable itself is on the server. If it is, the program loads
>VERY slowly. I have loaded Netstat to look at the network throughput. When
>I am loading an EXE from the server, my throughput is very low.  I made a
>300 MB test file to copy back and forth across the network. On each
>machine, I'm getting about 35Mbit. I can copy the same file to two machines
>at the same time and get 35Mbit on both. I have not tested three at a time
>because this was enough to show me that the network was not the bottleneck.
>This network is 100Mbit on a switch.  When copying the files, the client
>machine's processor always shows 100%. When loading programs from the
>server the machines also show 100%.  BUT, I get the same performance from a
>550 Mhz PIII machine, a 1000Mhz Athlon machine, and an 1800+ Athlon XP.
>Also, like I said, the Novell server makes the clients much faster. I have
>eliminated all the protocol traffic that I can -- all machines are on
>TCP/IP only. I can put the EXEs on the client machines and just read the
>data from the server for improved performace, but it is still not as good
>as it should be (or as good as the old server).
>
>Now for the questiondoes anyone know of anything I can do to improve
>performance? Or do I need to go back and install Novell on the new machine
>(I really don't want to)?
>
>
>Thanks in advance.
>
>Trey Nolen
>
>
>
>--
>To unsubscribe from this list go to the following URL and read the
>instructions:  http://lists.samba.org/mailman/listinfo/samba

Martyn Ranyard
Free Software Advocate

icq - 122500800
irc - Joran on OPN
msn - [EMAIL PROTECTED]
y!  - ranyardm
e   - [EMAIL PROTECTED]


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Testing results for version 2.2.5. pre1

[Oliver Thinnes]

Hello.

With version 2.2.4 I had the the following problems that seem to be solved in version 
2.2.5 pre1

1. Problem with German special character 
- when listing NT domain users with "getent passwd", "getent group"
- when showing NT groups with "id"

2.
Using "veto files" with wildcards caused high load on my machine

3.
"hide unreadable = yes" caused high system load


Oliver

PS: Is there a list of known bugs / problems publicly available?

nd read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] samba performance issue

[Trey Nolen]

Hi, I recently installed a new samba server to replace an older Novell
machine.  Now, we are having performance issues. I have installed many
samba servers, and have not run into this problem before. Some background
info:

The server is an Athlon 1800+ w/ 512MB DDR RAM. We are using software raid
on 80GB IDE ATA 100 drives with the VIA 82C3XX chipset. When mirroring the
drives, we usually get 30+MB/sec. Filesystem is ext3. Kernel is 2.4.18.
Distro is Debian 3.0 and samba is 2.2.3a-6 for Debian.

smb.conf:
[global]
   printing = bsd
   printcap name = /etc/printcap
   load printers = yes
   use client driver = yes
   guest account = nobody
   add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M
%u
   domain admin group = @users
  security = user
   workgroup = HHS
   domain logons = yes
   logon script = startup.bat
   server string = %h server (Samba %v)
   syslog only = no
   syslog = 0;
   socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 SO_RCVBUF=4096
   encrypt passwords = yes
   wins support = no
   os level = 99
   domain master = yes
   local master = yes
   preferred master = yes
   name resolve order = lmhosts host wins bcast
   dns proxy = no
   preserve case = yes
   short preserve case = yes
   unix password sync = true
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
   max log size = 1000

[netlogon]
  path = /etc/samba/netlogon
  browseable = no
  read only = yes

[sys]
  comment = Shared files
  path = /home/shared
  writeable = yes
  op locks = no
  browseable = yes
  force directory mode = 0777
  force create mode = 0777
  public = yes
  guest ok = no

[homes]
   comment = Home Directories
   browseable = no
   read only = no
   create mask = 0770
   directory mask = 0770


[printers]
 guest ok = yes
 printable = yes
 print command =   /usr/bin/lpr  -U%U@%M -P%p -r %s
 lpq command   =   /usr/bin/lpq  -U%U@%M -P%p
 lprm command  =   /usr/bin/lprm -U%U@%M -P%p %j
 queuepause command =  /usr/sbin/lpc -U%U@%M -P%p stop
 queueresume command = /usr/sbin/lpc -U%U@%M -P%p start
 path = /tmp

[cdrom1]
   comment = Samba server's CD-ROM
   writable = no
   locking = no
   path = /cdrom1
   public = yes
   preexec = /bin/mount /cdrom1
   postexec = /bin/umount /cdrom1

[cdrom2]
   comment = Samba server's CD-ROM
   writable = no
   locking = no
   path = /cdrom2
   public = yes
   preexec = /bin/mount /cdrom2
   postexec = /bin/umount /cdrom2


Now, the problem...I'm getting very poor performance. The machine we
replaced was a Pentium I 200 with 64MB of RAM, and it was faster than this
thing.  All of my client machines are Win98 SE.  The biggest problem is
when the executable itself is on the server. If it is, the program loads
VERY slowly. I have loaded Netstat to look at the network throughput. When
I am loading an EXE from the server, my throughput is very low.  I made a
300 MB test file to copy back and forth across the network. On each
machine, I'm getting about 35Mbit. I can copy the same file to two machines
at the same time and get 35Mbit on both. I have not tested three at a time
because this was enough to show me that the network was not the bottleneck.
This network is 100Mbit on a switch.  When copying the files, the client
machine's processor always shows 100%. When loading programs from the
server the machines also show 100%.  BUT, I get the same performance from a
550 Mhz PIII machine, a 1000Mhz Athlon machine, and an 1800+ Athlon XP.
Also, like I said, the Novell server makes the clients much faster. I have
eliminated all the protocol traffic that I can -- all machines are on
TCP/IP only. I can put the EXEs on the client machines and just read the
data from the server for improved performace, but it is still not as good
as it should be (or as good as the old server).

Now for the questiondoes anyone know of anything I can do to improve
performance? Or do I need to go back and install Novell on the new machine
(I really don't want to)?


Thanks in advance.

Trey Nolen



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] NT user name doesn't match unix username when winbindd is runnin g

[Oliver Thinnes]

Hello Karen.

without winbind you have to create a user under UNIX correspondig to the NT 
user. Mapping is configured with "username map = /etc/samba/users.map".
If there are no spaces or special character in the NT username both 
usernames can be the same. We have a file for mapping NT user to UNIX user 
as our NT username are  mapped to .

When you use winbind there's no need anymore to create corresponding UNIX 
users / groups. Thats the big advantage.

-Original Message-
From:   Wieprecht, Karen M. [SMTP:[EMAIL PROTECTED]]
Sent:   Tuesday, June 11, 2002 3:49 PM
To: '[EMAIL PROTECTED]'
Subject:[Samba] NT user name doesn't match unix username when winbindd is 
runnin g

Samba team,

I posted the following message on May 30 to comp.protocols.smb,  but no one
has responded to the posting as of yet,  so I thought I'd try this email
list.


We are testing winbind and security=domain to authenticate NT users on
our UNIX box in samba (v2.2.3a).  Winbind is working correctly.  Wbinfo
shows
users as domainname+username (we are using "+" as the
separator),  however,  the NT usernames aren't automatically mapping
to their corresponding UNIX usernames as expected.  Perhaps I don't
understand how this is supposed to work?

>From what I understand,  security=domain WITHOUT winbind requires a
corresponding UNIX user (or dummy entry in the password file) for each
NT user who you want to authenticate. This works for us,  my NT karen
account gets matched to my Unix Karen account, new files I create from
the PC side get assigned the correct Unix UID,  my login directory is
shared via [HOMES] correctly, etc as long as I don't run winbindd.

However, when I turn on winbindd,  the NT karen account now gets
mapped to "domainname+karen" instead of "karen", so UID's don't match,
 and my home login directory isn't being shared to my NT Karen
account. Aren't the NT user names supposed to map to the UNIX user
name if one exists? We want the features of winbind so we don't have
to have a corresponding UNIX account for each NT user,  but we want
matching usernames to map automatically for those users who DO have
accounts on both sides.  It works when winbind is not running,  why
doesn't this work when I run winbind?  Is there some other parameter I
have to set to make this happen?

Thanks for your help ,
Karen Wieprecht


-
Karen Wieprecht
Senior Unix Systems Administrator
11100 Johns Hopkins Road
Laurel, MD, 20723
443-778-3075
[EMAIL PROTECTED]
-

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Tuning SaMBa in HP/UX 10.20 (200 Users)...

[Info - Demerson]

Hullo All,
 
I'm planning to build a SaMBa Server in HP/UX 10.20,
just for sharing some
stuff to at least 200 users.
Well, I have SaMBa running in HP/UX machines and
according to top, each
SaMBa process (smbd) takes about 2,1Mb of total
memory.
I wonder if there's some clue to reduce the amount
of memory per smbd...
Anybody knows that?

Thanks in advance...


__
Demerson Zounar
Analista de Suporte
[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] VFS and DOS attribs ...

[C.Lee Taylor]

Greetings ...

I remember a little while ago about someone talking about storing the DOS 
attribs in ext2 EA using a VFS module ... has any one taken this any further?

Thanks
Mailed
Lee


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] [Fwd: ldap + pdc + adding win2k clients...again(sigh)...argh]

[IOhannes zmoelnig]

thanks for the help i got off-list.
(ja axel, deutsch wär ok gewesen)

it turned out, that my main problem had nothing to with the 
machine-accounts but rather with win-clients not be willing to connect 
to my domain most of the time (which made debugging extremely hard sice 
it worked all the time when i expected it not to)
it seems, like NT-domains should be either longer than 3 chars or have 
not the same name as a unix-host.

on the other way, machine-accounts were hard to create for me too (which 
  made debugging even worse):
my solution for this (w2k-clients) turned out to be:
1.) create an ldap-entry for the host$ with the objectClass 
"posixAccount" (i use "ipHost" too), but *not* with the objectClass 
"sambaAccount" (this turned out to be important)
2.) add the machine-account from w2k with root/passwd. the sambaAccount 
is automatically added to the ldap-entry for the host

it also works, when an entry for host$ exists in the /etc/passwd. but 
then the beauty of ldap'ing is lost partly and additionally, the 
sambaAccount for the host will be automatically created in the root of 
the ldap-directory, which is very ugly. i didn't want to move all the 
created sambaAccounts to my computers-subdirectoy, so i prefer the basic 
ldap-entry.



mfg.cds.ar
IOhannes


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] NT user name doesn't match unix username when winbindd is running

[Wieprecht, Karen M.]

Samba team,

I posted the following message on May 30 to comp.protocols.smb,  but no one
has responded to the posting as of yet,  so I thought I'd try this email
list.  


We are testing winbind and security=domain to authenticate NT users on
our UNIX box in samba (v2.2.3a).  Winbind is working correctly.  Wbinfo
shows 
users as domainname+username (we are using "+" as the
separator),  however,  the NT usernames aren't automatically mapping
to their corresponding UNIX usernames as expected.  Perhaps I don't
understand how this is supposed to work?

>From what I understand,  security=domain WITHOUT winbind requires a
corresponding UNIX user (or dummy entry in the password file) for each
NT user who you want to authenticate. This works for us,  my NT karen
account gets matched to my Unix Karen account, new files I create from
the PC side get assigned the correct Unix UID,  my login directory is
shared via [HOMES] correctly, etc as long as I don't run winbindd.

However, when I turn on winbindd,  the NT karen account now gets
mapped to "domainname+karen" instead of "karen", so UID's don't match,
 and my home login directory isn't being shared to my NT Karen
account. Aren't the NT user names supposed to map to the UNIX user
name if one exists? We want the features of winbind so we don't have
to have a corresponding UNIX account for each NT user,  but we want
matching usernames to map automatically for those users who DO have
accounts on both sides.  It works when winbind is not running,  why
doesn't this work when I run winbind?  Is there some other parameter I
have to set to make this happen?

Thanks for your help ,
Karen Wieprecht


-
Karen Wieprecht
Senior Unix Systems Administrator
11100 Johns Hopkins Road
Laurel, MD, 20723
443-778-3075
[EMAIL PROTECTED]
-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbwrapper or smbmount ?

[LAUTIER Sabrina]

First of all, thanks for this good and quick answers !

> (The first edition of Using Samba is _slightly_ out of date. ;-)
Is the 2nd edition of Using Samba already out ? If yes where to find
it ?

> From there, you can use smbmount to mount SMB shares (from
> Windows systems or Samba servers) in your Linux filesystem. 
smbmount works fine :
$ smbmount //DOMAIN_controler/sharedir /home/toto/smb -o
credentials=/home/win2k/DOMAIN/toto/.smbpw,uid='DOMAIN+toto',gid='DOMAIN+Domain
users',fmask=664,dmask=775

The user toto is a domain user authenticated from the Win2k server.
I can then see that toto owns all files and directories
(fmask=664,dmask=775):  does this mean that he can do what he wants ?
As if the SMB share was a regular linux fs ?
Isn't there permissions checking from the win2k server ?

What about if I what a SMB share to be mounted automatically at user's
login ?
For example: I would like ALL win2k domain users to have the SMB share
//DOMAIN_controler/sharedir automatically mounted when they log in on
my linux box.
Is pam_mount the best solution ?

Regards.

-
Powered by Alinto (http://www.alinto.net)
for lavache.com (http://www.lavacheautomatique.com)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbwrapper or smbmount ?

[LAUTIER Sabrina]

First of all, thanks for this good and quick answer !

> (The first edition of Using Samba is _slightly_ out of date. ;-)
Is the 2nd edition of Using Samba already out ? If yes where to find
it ?

> From there, you can use smbmount to mount SMB shares (from
> Windows systems or Samba servers) in your Linux filesystem. 
smbmount works fine :
$ smbmount //DOMAIN_controler/sharedir /home/toto/smb -o
credentials=/home/win2k/DOMAIN/toto/.smbpw,uid='DOMAIN+toto',gid='DOMAIN+Domain
users',fmask=664,dmask=775

The user toto is a domain user authenticated from the Win2k server.
I can then see that toto owns all files and directories
(fmask=664,dmask=775):  does this mean that he can do what he wants ?
As if the SMB share was a regular linux fs ?
Isn't there permissions checking from the win2k server ?

What about if I what a SMB share to be mounted automatically at user's
login ?
For example: I would like ALL win2k domain users to have the SMB share
//DOMAIN_controler/sharedir automatically mounted when they log in on
my linux box.
Is pam_mount the best solution ?

Regards.

-
Powered by Alinto (http://www.alinto.net)
for lavache.com (http://www.lavacheautomatique.com)

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] NT-domain names:

[IOhannes zmoelnig]

hi !

i recently had problems with my ldap+pdc configuration.
now there's a light at the end of the tunnel:

i changed (among others) the name of the domain from "iem" to "iemnet" 
and it seems to work now.
is it possible, that NT-domains must have more than 3 characters ?
or might a problem arise, since there is a linux-host by that name 
("iem") ??

another question:
"iemnet" is my local unix-domain.
does it make sense or is it dangerous or at least bad style to use the 
same name for the NT-domain too ? (i would have done so without looking 
twice, but my NT-collegue said he had a bad feeling about this)
might there be any drawbacks ?


mfg.fdsa.sd
IOhannes


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Asking for Password

[Mark Brosius]

Marcus,
I think you need to have the line:
encrypt passwords = Yes
in the global section of smb.conf.

Mark

On Mon, 10 Jun 2002, Foster, Marcus wrote:

> Please forgive me but I am pretty new to Linux.   I have Samba set up on a
> Server and when I go to access it from a windows workstation one, a box pops
> up with the resourse as \\servername\IPC$   asking
> for a password. I have the right domain and my username is the same as my
> windows password?
> Why would I be getting these messages?What am I doing wrong?
>
> Marcus Foster
> IT Manager/Midwest Region
> 48 W. Seegers Rd
> Arlington Heights, Il  60005
> Ph: 847-472-6551
> Fax: 561-619-2487
>
>
>


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Is there a limit in the number of users in a NT group used by winbind ?

[Hans B. Randgaard]

First of all, I would like to thank everyone in the Samba Team for an
outstanding tool.

I have setup Samba 2.2.4 on a Solaris-8 server using winbind and ACL.
(config file at the end).
It works quite well, but I have a problem with certain global NT groups
in a trusted domain. I can do both:

"wbinfo -u" and "wbinfo -g"

to get all users and groups in all the domains. "getent passwd" also
works OK, but "getent group" ONLY returns the UNIX groups.
winbind is added to /etc/nsswitch.conf for both passwd and group.

One of the global NT groups that gives problems has 1949 members.
If I add this group to the ACL of a file using the NT-explorer(NT-4.0)
and do "getfacl" on Solaris, it hangs when it reaches this particular
group. The same happens if I do "getent group ".

My questions are:

1. Is there a limit in how many users winbind can handle inside NT
   groups.
2. Can it be a timeout problem, since the trusted domain inwhich
the group is located, acts much slower than our primary domain ?
3. Have any of you seen similar behaviour ?

Thanks in advance.

Best regards, Hans.

Hans Randgaard
Phone: +45 3363 4002

smb.conf:

-
[global]
workgroup = WG1
netbios name = SAMBA01
security = DOMAIN
interfaces = ge0 1.0.0.0/255.0.0.0 2.1.1.0/255.255.255.0
3.1.0.0/255.255.0.0
wins server = 1.1.1.1
encrypt passwords = Yes
password server = dc01, dc02
username map = /usr/local/samba/lib/users.map
admin users = WG1+testuser
log file = /usr/local/samba/var/log.%m
max log size = 100
deadtime = 180
character set = ISO8859-1
local master = No
valid chars = ø:Ø
winbind uid = 1-2
winbind gid = 1-2
winbind separator = +
winbind cache time = 3600

[share1]
comment = testshare 1
path = /test1
read only = No
browsable = Yes

[share2]
path = /test2
browseable = Yes


-


**
This e-mail and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to which they 
are addressed. If you have received this e-mail in error please notify 
the system manager at [EMAIL PROTECTED]

This e-mail and its contents do not constitute and shall not be 
considered as a financial commitment of Maersk Olie og Gas AS 
and its affiliates. 
Maersk Olie og Gas AS expressly disclaims any responsibility
as to the accuracy and use of this e-mail and its contents.
**


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] printing with passwords

[Bas van Besouw]

Hello,

After looking through the faq's and list archive I still have a question
that is not answered.
I have Samba working like a charm, files serving, print serving, even
turning ip forwarding on/off based on who is using the windows
computers.
Now I want it to do the following: I want samba to ask for a password
when a  user tries to print to the linux printer (this should be a
different password as her windows one).
She should be able to print after a password is given for 1 print job.
Sounds to me like something Samba is able to do, but how?

Thanks in advance 
Bas

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: spoolss back connections to client

[Tim Potter]

On Tue, Jun 11, 2002 at 11:12:08AM +0200, Tom Vandepoel wrote:

> Since we've switched to spoolss printing (samba 2.2.4) it seems that the
> server is always trying to connect to the client. 
> 
> [2002/06/11 10:52:41, 3] lib/util_sock.c:open_socket_out(843)
>   Connecting to 10.0.40.80 at port 445
> [2002/06/11 10:52:41, 2] lib/util_sock.c:open_socket_out(871)
>   error connecting to 10.0.40.80:445 (Connection refused)
> [2002/06/11 10:52:41, 3] lib/util_sock.c:open_socket_out(843)
>   Connecting to 10.0.40.80 at port 139
> 
> I've traced this back in the source to the "spoolss_connect_to_client"
> call in rpc_server/srv_spoolss_nt.c. It seems this is used to reply back
> to the client with printing info.

It's actually for the printer notifcation stuff.  I.e if you have a port
monitor open on one machine, then print a document from a second machine,
the port monitor will be notified asynchonrously that a new document
has been spooled.  Under Windows 9x/ME this doesn't happen.  The port
monitor must poll every 15 seconds or so to see if new jobs have been
spooled.

> However, in our environment, such connections typically fail, as we
> disable the "Server" service on NT/W2K clients as much as possible. In
> those cases, printing still works fine, so I'm starting to wonder if
> these back connections are absolutely needed. They are especially
> annoying when the back connection is made to a firewalled client; it
> slows down response of the print server enormously (the server waits
> until the back connection times out).

I've been poking at these last week and I'm pretty sure if there is an
error creating the back channel connection, it just falls back to polling
mode.  Also, with a back channel connection open when you hit 'Apply' on
a printer properties dialog box the hourglass appears until all notification
data has been sent to connected clients which can slow things down.

> So, I was thinking; is there an smb.conf option (or could it be
> implemented) to disable these back connections? What would the impact be
> if I modified the src_spoolss_replyopenprinter() routine to always
> return false? Would that break anything?

Good idea.  It should affect anything.  If you find any problems with
this post them to the list!


Regards,

Tim.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] 401 Bad Authorization

[Peter Zapletal]

I've tried it with passwd database and with smbpasswd database too, but it
always return error.


   
 
Martyn Ranyard 
 
 
.net>   cc: [EMAIL PROTECTED]  
 
Sent by:Subject: Re: [Samba] 401 Bad 
Authorization  
samba-admin@lists  
 
.samba.org 
 
   
 
   
 
11.06.2002 13:41   
 
   
 
   
 




At 01:27 PM 6/11/02 +0200, Peter Zapletal wrote:
>Hello,
>
>I have problem witch SWAT authorization for all users with the following
>error "username or password incorrect". With -a options SWAT works well.
>I've compiled samba-2.2.4 from sources on my RedHat Linux 6.1 with kernel
>2.2.21. I've compiled it with the following options:

As far as I remember, SWAT uses the passwd database, rather than the
smbpasswd database, although don't quote me on that, so you could try just
using your unix password instead of the smb password, which on some
machines are not the same.

--
Martyn Ranyard

I am not a member of the samba team,
and anything that I say may not be as
accurate as a response from one of the
team.  I reply to save those more
qualified time, which can more usefully
be spent developing SAMBA further.


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


*
Tato sprava a vsetky pripojene subory su doverne
a urcene vyhradne osobam alebo organizaciam, ktorym
boli adresovane. Ak ste dostali tento e-mail omylom,
prosim, upovedomte PRVU KOMUNALNU BANKU a.s.([EMAIL PROTECTED]).

This email and any files transmitted are confidential
and intended solely for the use of the individual
or entity to which they are addressed.
If you have received this email in error,
please notify PRVA KOMUNALNA BANKA a.s.([EMAIL PROTECTED]).


PRVA KOMUNALNA BANKA a.s.
Hodzova 11, 010 11 Zilina
ICO :31 575 951
ZAPISANA V OBCHODNOM REGISTRI OKRESNEHO SUDU V ZILINE
ODDIEL :Sa, VLOZKA CISLO :148/L
*


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] 401 Bad Authorization

[Martyn Ranyard]

At 01:27 PM 6/11/02 +0200, Peter Zapletal wrote:
>Hello,
>
>I have problem witch SWAT authorization for all users with the following
>error "username or password incorrect". With -a options SWAT works well.
>I've compiled samba-2.2.4 from sources on my RedHat Linux 6.1 with kernel
>2.2.21. I've compiled it with the following options:

As far as I remember, SWAT uses the passwd database, rather than the 
smbpasswd database, although don't quote me on that, so you could try just 
using your unix password instead of the smb password, which on some 
machines are not the same.

--
Martyn Ranyard

I am not a member of the samba team,
and anything that I say may not be as
accurate as a response from one of the
team.  I reply to save those more
qualified time, which can more usefully
be spent developing SAMBA further.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] spoolss back connections to client

[Gerald Carter]

On Tue, 11 Jun 2002, Tom Vandepoel wrote:

> Since we've switched to spoolss printing (samba 2.2.4) it seems that the
> server is always trying to connect to the client. 
> 
> [2002/06/11 10:52:41, 3] lib/util_sock.c:open_socket_out(843)
>   Connecting to 10.0.40.80 at port 445
> [2002/06/11 10:52:41, 2] lib/util_sock.c:open_socket_out(871)
>   error connecting to 10.0.40.80:445 (Connection refused)
> [2002/06/11 10:52:41, 3] lib/util_sock.c:open_socket_out(843)
>   Connecting to 10.0.40.80 at port 139
> 
> I've traced this back in the source to the "spoolss_connect_to_client"
> call in rpc_server/srv_spoolss_nt.c. It seems this is used to reply back
> to the client with printing info.

This is the printer change notification back channel.

> However, in our environment, such connections typically fail, as we
> disable the "Server" service on NT/W2K clients as much as possible. In
> those cases, printing still works fine, so I'm starting to wonder if
> these back connections are absolutely needed. They are especially
> annoying when the back connection is made to a firewalled client; it
> slows down response of the print server enormously (the server waits
> until the back connection times out).
> 
> So, I was thinking; is there an smb.conf option (or could it be
> implemented) to disable these back connections? What would the impact be
> if I modified the src_spoolss_replyopenprinter() routine to always
> return false? Would that break anything?

Better to just comment out the SPOOLSS_RFFPCN and SPOOLSS_RFNPCN
server functions.  However, certain changes will not be reflected on
the client such as josb listings, etc

btwthis is MS's model.  You'll have the same problem with
a Win2k print server.  I do agree that it is a brain dead design...






cheers, jerry
 -
 Hewlett-Packard http://www.hp.com
 SAMBA Team   http://www.samba.org
 --http://www.plainjoe.org
 "Sam's Teach Yourself Samba in 24 Hours" 2ed.  ISBN 0-672-32269-2
 --"I never saved anything for the swim back." Ethan Hawk in Gattaca--


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Darling

[20fgura]

WebShield SMTP V4.5 MR1a on EuroScan detected virus Exploit-MIME.gen in attachment
unknown from <[EMAIL PROTECTED] > and it was Cleaned and Quarantined.  For support
kindly contact Tel 2148 7994
.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] 401 Bad Authorization

[Peter Zapletal]

Hello,

I have problem witch SWAT authorization for all users with the following
error "username or password incorrect". With -a options SWAT works well.
I've compiled samba-2.2.4 from sources on my RedHat Linux 6.1 with kernel
2.2.21. I've compiled it with the following options:
./configure \
--prefix=/usr \
--localstatedir=/var \
--with-configdir=/etc/samba \
--with-privatedir=/etc/samba \
--with-codepagedir=/etc/codepages \
--with-fhs \
--with-quotas \
--with-smbmount \
--with-pam \
--with-syslog \
--with-utmp \
--with-sambabook=/usr/share/swat/using_samba \
--with-swatdir=/usr/share/swat

Can you help me?

Thanks Peter.
*
Tato sprava a vsetky pripojene subory su doverne
a urcene vyhradne osobam alebo organizaciam, ktorym
boli adresovane. Ak ste dostali tento e-mail omylom,
prosim, upovedomte PRVU KOMUNALNU BANKU a.s.([EMAIL PROTECTED]).

This email and any files transmitted are confidential
and intended solely for the use of the individual
or entity to which they are addressed.
If you have received this email in error,
please notify PRVA KOMUNALNA BANKA a.s.([EMAIL PROTECTED]).


PRVA KOMUNALNA BANKA a.s.
Hodzova 11, 010 11 Zilina
ICO :31 575 951
ZAPISANA V OBCHODNOM REGISTRI OKRESNEHO SUDU V ZILINE
ODDIEL :Sa, VLOZKA CISLO :148/L
*


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] smbpasswd

[Christian Barth]

Look at "update encrypted" in man smb.conf

Good Luck,

Christian


> Hallo,
>I want to start to use encryption passwd (now I use plain
>password). But I have 200 users in /etc/passwd at my server and I
>do not want to change passwd for every user. Is there any way to
>create file /etc/smbpasswd from file /etc/passwd except the users
>have to change their smbpasswd by theirself. If not, most of my
>users logon to the server only over samba or they only mount disk
>over samba server. How can I change their smbpasswd when they can
>not use another way to connect at my server only over samba
>protokol? Exist any samba client for platform Windows to remote
>connect to Samba server? Can you advice me best way to create file
>/etc/smbpasswd?
>
> Thanks. Dibi
>
>
>
>
> __
>  Kalend   Email.CZ - dokonal  organizace Va eho  asu:
> http://kalendar.email.cz
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>
>


   _(_)_  wWWWw   _
      (_)@(_)   vVVVv _   (___) _(_)_
  @@()@@ wWWWw  (_)\(___)   _(_)_  @@()@@   Y  (_)@(_)
     (___) `|/Y(_)@(_)     \|/   (_)\
/  Y   \|\|//(_)\|  |/  |
 \ | \ |/   | / \ | /  \|/   |/\|  \|/
jgs|//   \\|///  \\\|//\\\|/// \|///  \\\|//  \\|//  \\\|//
^


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] smbpasswd

[dibi]

Hallo,
  I want to set some security level at my samba server. In the documentation I found 
out that It set in section [global]. Is it possible to set it in my own section? For 
example for section [xxx] I want to set security=share and for section [yyy] I want to 
set  security=server. Is it possible?
Thanks. Dibi



__
Kalendář Email.CZ - dokonalá organizace Vašeho času: http://kalendar.email.cz


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] smbpasswd

[dibi]

Hallo,
   I want to start to use encryption passwd (now I use plain password). But I have 200 
users in /etc/passwd at my server and I do not want to change passwd for every user. 
Is there any way to create file /etc/smbpasswd from file /etc/passwd except the users 
have to change their smbpasswd by theirself. If not, most of my users logon to the 
server only over samba or they only mount disk over samba server. How can I change 
their smbpasswd when they can not use another way to connect at my server only over 
samba protokol? Exist any samba client for platform Windows to remote connect to Samba 
server? Can you advice me best way to create file /etc/smbpasswd? 

Thanks. Dibi 




__
Kalendář Email.CZ - dokonalá organizace Vašeho času: http://kalendar.email.cz


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] can't change samba password

[cksoo]

Hello,
 
I upgrade my samba for 2.07 to 2.21 as a pdc but i 
can't change user password for win 98 or win 2k machine before i upgrade 
changing password program can run very well. so the expert help me to solve the 
problem.
 
my os is redhat 7.2 and samba 2.21
 
thank you.

RE: [Samba] Monitoring samba shares

[Bruno Biedermann]

Thanks...

-Message d'origine-
De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]De
la part de Lennard Bakker
Envoyé : mardi 11 juin 2002 11:21
À : [EMAIL PROTECTED]
Cc : Samba Maillist
Objet : Re: [Samba] Monitoring samba shares


On Tue, 2002-06-11 at 10:53, Bruno Biedermann wrote:
> Hello,
>
> I would like to know if there is a simple way of knowing which user is
> connected to a share and if he's using it at the moment...

smbstatus

http://samba.nip.nl/samba/docs/man/smbstatus.1.html

Lennard



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Monitoring samba shares

[Lennard Bakker]

On Tue, 2002-06-11 at 10:53, Bruno Biedermann wrote:
> Hello,
> 
> I would like to know if there is a simple way of knowing which user is
> connected to a share and if he's using it at the moment...

smbstatus

http://samba.nip.nl/samba/docs/man/smbstatus.1.html

Lennard



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba with LDAP - conflict with pam_ldap?

[Laurent BLIN]

Thanks for your advices and Yura Pismerov of the Pam_LDAP mailing list. 
It appears that this bug occurs when I use "username level = 8" in 
the smb.conf file. Lots of request dues to this parameter...


  Laurent


Laurent BLIN wrote:

> Laurent Chauvirey wrote:
>
>>> Hi,
>>>
>> Hello
>>
>>> I'm using Samba 2.2.4 with LDAP support (OpenLDAP 2.0.23), and with
>>> pam_ldap included in the rpm nss_ldap 1.86 from Redhat (I'm on Linux
>>> Redhat 7.2).
>>>
>>> All these things are working well (I use the same object SambaAcount
>>> under PosixAccount in order to authenticate all these things), but a
>>> problem appears when I'm trying to list all the accounts and groups 
>>> from
>>> my Win2000 Workstation (select a file shared by Samba, security, add).
>>>
>>> Using NIS to authentificate, it takes me less than 1 sec to get all the
>>> users and groupes from Win2000.
>>> Using LDAP (PAM_LDAP), it takes about 1 mn in order to have it.
>>>
>>
>> I had a similar problem (slow lookup with Outlook plugged into my 
>> openldap)
>> until I set an index on the attributes used for the requests :
>>
>> -- slapd.conf :
>> ...
>> # Indices to maintain
>> index   objectClass eq
>> index   uid pres,eq
>> index   uidNumber,gidNumber,memberUid,rid   eq
>> index   mail,cn,sn,givenNameeq,sub
>> ...
>>
>
> I have almost the same indexes
>
>>
>>
>>> Looking for LDAP logs, it appears that Samba is looking over and over
>>> again with the same request. Don't know which.
>>>
>>
>> Perhaps the timeout because of the time the request takes... It might 
>> depend
>> on your db size.
>>
>
> Samba is looping on the same search in the LDAP base (and uses lots of 
> CPU). If I stop Samba, the LDAP search stops. And after a TimeOut, 
> Windows displays the users. Even if Samba has been stoped during the 
> process
>
>>> I'm using authconfig tool from Redhat to configure pam_ldap and 
>>> nss_ldap
>>> (files /etc/pam.d/system-auth, /etc/ldap.conf and /etc/nsswitch.conf).
>>>
>>> Does my problem could be because of using the same object to
>>> authenticate both Samba and Unix, or because of conflicts between samba
>>> and pam_ldap, or something else???
>>>
>>
>> No, I'm doing this also and it's just fine.
>>
> I had the same problem with RPM nss_ldap 1.72 and 1.89, and using 
> authconfig rpm 4.1.19-1 (bugged) and 4.1.19-2.
> Wich version of Samba and pam_ldap are you using??? Would you send me 
> your /etc/ldap.conf ??
>
> I have in my LDAP tree 2 ou: one for the computers and one for the 
> People, so I had to modify the /etc/ldap.conf in order to search 
> accounts. Could it be here the problem???
>
>
>
>




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] spoolss back connections to client

[Tom Vandepoel]

Since we've switched to spoolss printing (samba 2.2.4) it seems that the
server is always trying to connect to the client. 

[2002/06/11 10:52:41, 3] lib/util_sock.c:open_socket_out(843)
  Connecting to 10.0.40.80 at port 445
[2002/06/11 10:52:41, 2] lib/util_sock.c:open_socket_out(871)
  error connecting to 10.0.40.80:445 (Connection refused)
[2002/06/11 10:52:41, 3] lib/util_sock.c:open_socket_out(843)
  Connecting to 10.0.40.80 at port 139

I've traced this back in the source to the "spoolss_connect_to_client"
call in rpc_server/srv_spoolss_nt.c. It seems this is used to reply back
to the client with printing info.

However, in our environment, such connections typically fail, as we
disable the "Server" service on NT/W2K clients as much as possible. In
those cases, printing still works fine, so I'm starting to wonder if
these back connections are absolutely needed. They are especially
annoying when the back connection is made to a firewalled client; it
slows down response of the print server enormously (the server waits
until the back connection times out).

So, I was thinking; is there an smb.conf option (or could it be
implemented) to disable these back connections? What would the impact be
if I modified the src_spoolss_replyopenprinter() routine to always
return false? Would that break anything?

Thx,

Tom.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Samba with LDAP - conflict with pam_ldap?

[Laurent BLIN]

Laurent Chauvirey wrote:

>>Hi,
>>
>Hello
>
>>I'm using Samba 2.2.4 with LDAP support (OpenLDAP 2.0.23), and with
>>pam_ldap included in the rpm nss_ldap 1.86 from Redhat (I'm on Linux
>>Redhat 7.2).
>>
>>All these things are working well (I use the same object SambaAcount
>>under PosixAccount in order to authenticate all these things), but a
>>problem appears when I'm trying to list all the accounts and groups from
>>my Win2000 Workstation (select a file shared by Samba, security, add).
>>
>>Using NIS to authentificate, it takes me less than 1 sec to get all the
>>users and groupes from Win2000.
>>Using LDAP (PAM_LDAP), it takes about 1 mn in order to have it.
>>
>
>I had a similar problem (slow lookup with Outlook plugged into my openldap)
>until I set an index on the attributes used for the requests :
>
>-- slapd.conf :
>...
># Indices to maintain
>index   objectClass eq
>index   uid pres,eq
>index   uidNumber,gidNumber,memberUid,rid   eq
>index   mail,cn,sn,givenNameeq,sub
>...
>

I have almost the same indexes

>
>
>>Looking for LDAP logs, it appears that Samba is looking over and over
>>again with the same request. Don't know which.
>>
>
>Perhaps the timeout because of the time the request takes... It might depend
>on your db size.
>

Samba is looping on the same search in the LDAP base (and uses lots of 
CPU). If I stop Samba, the LDAP search stops. And after a TimeOut, 
Windows displays the users. Even if Samba has been stoped during the process

>>I'm using authconfig tool from Redhat to configure pam_ldap and nss_ldap
>>(files /etc/pam.d/system-auth, /etc/ldap.conf and /etc/nsswitch.conf).
>>
>>Does my problem could be because of using the same object to
>>authenticate both Samba and Unix, or because of conflicts between samba
>>and pam_ldap, or something else???
>>
>
>No, I'm doing this also and it's just fine.
>
I had the same problem with RPM nss_ldap 1.72 and 1.89, and using 
authconfig rpm 4.1.19-1 (bugged) and 4.1.19-2.
Wich version of Samba and pam_ldap are you using??? Would you send me 
your /etc/ldap.conf ??

I have in my LDAP tree 2 ou: one for the computers and one for the 
People, so I had to modify the /etc/ldap.conf in order to search 
accounts. Could it be here the problem???




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Monitoring samba shares

[Bruno Biedermann]

Hello,

I would like to know if there is a simple way of knowing which user is
connected to a share and if he's using it at the moment...

Thanks


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Samba with LDAP - conflict with pam_ldap?

[Laurent Chauvirey]

>
> Hi,
Hello

>
> I'm using Samba 2.2.4 with LDAP support (OpenLDAP 2.0.23), and with
> pam_ldap included in the rpm nss_ldap 1.86 from Redhat (I'm on Linux
> Redhat 7.2).
>
> All these things are working well (I use the same object SambaAcount
> under PosixAccount in order to authenticate all these things), but a
> problem appears when I'm trying to list all the accounts and groups from
> my Win2000 Workstation (select a file shared by Samba, security, add).
>
> Using NIS to authentificate, it takes me less than 1 sec to get all the
> users and groupes from Win2000.
> Using LDAP (PAM_LDAP), it takes about 1 mn in order to have it.

I had a similar problem (slow lookup with Outlook plugged into my openldap)
until I set an index on the attributes used for the requests :

-- slapd.conf :
...
# Indices to maintain
index   objectClass eq
index   uid pres,eq
index   uidNumber,gidNumber,memberUid,rid   eq
index   mail,cn,sn,givenNameeq,sub
...

>
> Looking for LDAP logs, it appears that Samba is looking over and over
> again with the same request. Don't know which.

Perhaps the timeout because of the time the request takes... It might depend
on your db size.

>
> I'm using authconfig tool from Redhat to configure pam_ldap and nss_ldap
> (files /etc/pam.d/system-auth, /etc/ldap.conf and /etc/nsswitch.conf).
>
> Does my problem could be because of using the same object to
> authenticate both Samba and Unix, or because of conflicts between samba
> and pam_ldap, or something else???

No, I'm doing this also and it's just fine.

>
> When I try to do the same thing using PAM_LDAP instead of NIS, it works
> fine until I restart the Samba server.

Seems to prove Samba is not the cause of your problem.

Laurent C.


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba