[Samba] parse error near 'view'
Hi all,
I just set up my bind server. But I keep on receivind 2 error messages
in my syslog. Those are:
/etc/bind/named.conf:55: parse error near 'view'
/etc/bind/named.conf:103: parse error near 'view'
I cannot figure out why I get these messages, so if anyone could give me
a hand...!!
This is the part of my named.conf
view "internal" {
match-clients { 127.0.0.0/8; 192.168.0.0/24; };
recursion yes;
view "external" {
match-clients { any; };
recursion no;
If I just comment this parts out I works without ginving me any error
messages in syslog, but I don't think this is how it should be.
Thanks in advance,
Ronald Roeleveld.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba3.0a20 PDC + win2k client
On Wed, Oct 09, 2002 at 10:31:16PM -0700, Hesham S. Ahmed wrote: > Has anyone added windows 2000 computers to Samba3.0a20 > PDC, I have been trying to do that and I always get > "Incorrect Parameter" message on windows 2000 client, > the same problem occured with alpha19, but joining > alpha18 PDC used to work fine with me. Any > suggestions? > > My smb.conf file > > [global] > workgroup = ZSQUID > netbios name = hsalin > server string = Samba 3.0alpha20 > security = user > > encrypt passwords = Yes > > passdb backend = smbpasswd > use spnego = No This might be interesting. We have this 'fixed', so you should not longer set this option. > domain logons = Yes > os level = 64 > lm announce = Auto > lm interval = 60 > preferred master = Auto > local master = Yes > domain master = Auto > browse list = Yes > enhanced browsing = Yes > wins support = Yes > > admin users = root > map to guest = Bad User This might do 'weird stuff'. > null passwords = yes > > winbind uid = 1-2 > winbind gid = 1-2 > template homedir = /home/%D/%U > template shell = /bin/false > winbind cache time = 15 > winbind use default domain = Yes Andrew Bartlett -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba3.0a20 PDC + win2k client
Has anyone added windows 2000 computers to Samba3.0a20 PDC, I have been trying to do that and I always get "Incorrect Parameter" message on windows 2000 client, the same problem occured with alpha19, but joining alpha18 PDC used to work fine with me. Any suggestions? My smb.conf file [global] workgroup = ZSQUID netbios name = hsalin server string = Samba 3.0alpha20 security = user encrypt passwords = Yes passdb backend = smbpasswd use spnego = No domain logons = Yes os level = 64 lm announce = Auto lm interval = 60 preferred master = Auto local master = Yes domain master = Auto browse list = Yes enhanced browsing = Yes wins support = Yes admin users = root map to guest = Bad User null passwords = yes winbind uid = 1-2 winbind gid = 1-2 template homedir = /home/%D/%U template shell = /bin/false winbind cache time = 15 winbind use default domain = Yes __ Do you Yahoo!? Faith Hill - Exclusive Performances, Videos & More http://faith.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind+samba3.0 pdc on the same machine
On Wed, Oct 09, 2002 at 10:19:14PM -0700, Hesham S. Ahmed wrote: > Its working now for me (atleast per my requirements) > the problem was nsswitch.conf, the moment winbind is > added to the passwd and group lines, the problem > starts appearing. In my case I only wanted to > authenticate users using squid's ntlm authentication, > that is now working, I still have to create dual > accounts though, linux and samba. OK - that makes sense. We have a deadlock situation here, and this would give you exactly these errors. When I say I have this on my PDC, I should have mentaioned that I don't have it in nsswtich either. You can get around the need for seperate unix accounts if you set 'winbind use default domain' in your smb.conf, and use pam_winbind. Andrew Bartlett -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind+samba3.0 pdc on the same machine
Its working now for me (atleast per my requirements) the problem was nsswitch.conf, the moment winbind is added to the passwd and group lines, the problem starts appearing. In my case I only wanted to authenticate users using squid's ntlm authentication, that is now working, I still have to create dual accounts though, linux and samba. --- Andrew Bartlett <[EMAIL PROTECTED]> wrote: > "Hesham S. Ahmed" wrote: > > > > Joining the PDC to the domain is successfull. And > > seems to work fine. Its just winbind that fails. > Below > > is my smb.conf and parts of log.winbindd. When I > do > > "wbinfo -t" I recieve the following error > > > > [root@hsalin var]# wbinfo -t > > checking the trust secret via RPC calls failed > > error code was NT_STATUS_UNSUCCESSFUL (0xc001) > > Could not check secret > > > > The log.winbindd below is associated with the > above > > message. > > > > smb.conf > > > > [global] > > workgroup = ZSQUID > > netbios name = hsalin > > server string = Samba 3.0alpha20 > > security = user > > > > encrypt passwords = Yes > > > > passdb backend = smbpasswd > > use spnego = No > > > > domain logons = Yes > > os level = 64 > > lm announce = Auto > > lm interval = 60 > > preferred master = Auto > > local master = Yes > > domain master = Auto > > browse list = Yes > > enhanced browsing = Yes > > wins support = Yes > > > > admin users = root > > > > winbind uid = 1-2 > > winbind gid = 1-2 > > template homedir = /home/%D/%U > > template shell = /bin/false > > winbind cache time = 15 > > winbind use default domain = Yes > > > > ; necessary share for domain controller > > [netlogon] > > path = /usr/local/samba/lib/netlogon > > read only = yes > > write list = ntadmin > > > > > > > > log.winbindd > > [2002/10/08 09:24:11, 3] > > nsswitch/winbindd_misc.c:winbindd_info(203) > > [11569]: request misc info > > [2002/10/08 09:24:18, 3] > > > nsswitch/winbindd_misc.c:winbindd_check_machine_acct(52) > > [11570]: check machine account > > [2002/10/08 09:24:18, 3] > > libsmb/namequery.c:resolve_lmhosts(721) > > resolve_lmhosts: Attempting lmhosts lookup for > name > > ZSQUID<0x1b> > > [2002/10/08 09:24:18, 3] > > libsmb/namequery.c:resolve_wins(628) > > resolve_wins: Attempting wins lookup for name > > ZSQUID<0x1b> > > [2002/10/08 09:24:18, 3] > > libsmb/namequery.c:resolve_wins(667) > > resolve_wins: using WINS server 127.0.0.1 and > tag > > '*' > > [2002/10/08 09:24:18, 2] > > libsmb/namequery.c:name_query(404) > > Got a positive name query response from > 127.0.0.1 ( > > 141.99.11.209 ) > > [2002/10/08 09:24:18, 3] > > nsswitch/winbindd_cm.c:cm_get_dc_name(281) > > cm_get_dc_name: Returning DC HSALIN > (141.99.11.209) > > for domain ZSQUID > > [2002/10/08 09:24:18, 3] > > nsswitch/winbindd_cm.c:cm_get_ipc_userpass(307) > > IPC$ connections done by user ZSQUID\root > > [2002/10/08 09:24:18, 3] > > libsmb/cliconnect.c:cli_full_connection(1199) > > Connecting to host=HSALIN share=IPC$ > > [2002/10/08 09:24:18, 3] > > lib/util_sock.c:open_socket_out(752) > > Connecting to 141.99.11.209 at port 445 > > [2002/10/08 09:24:39, 1] > > libsmb/cliconnect.c:cli_full_connection(1242) > > failed session setup with NT_STATUS_OK > > I need to know why this is happening. Can you turn > up the debug, or > possibly get a sniffer trace? > > Andrew Bartlett > > -- > Andrew Bartlett > [EMAIL PROTECTED] > Manager, Authentication Subsystems, Samba Team > [EMAIL PROTECTED] > Student Network Administrator, Hawker College > [EMAIL PROTECTED] > http://samba.org http://build.samba.org http://hawkerc.net __ Do you Yahoo!? Faith Hill - Exclusive Performances, Videos & More http://faith.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 2.2.6 rc2 released
Folks, We have just posted Samba 2.2.6rc2 (don't ask me about rc1... I'm still a little bitter about). It all goes well, 2.2.6 is just around the corner Source tarballs at http://download.samba.org/samba/ftp/pre/ and RedHat RPMS for testing at http://download.samba.org/samba/ftp/Binary_Packages/redhat/ Mirrors will be updated shortly. -- Enjoy, The SAMBA Team WHAT'S NEW IN Samba 2.2.6rc2 - 9th October 2002 This is a prelease snapshot of SAMBA_2_2 cvs branch. This is a non-production release provided for testing purposes only. The following new new smb.conf(5) options have been added in this preview release: * profile acls (S) The following options have been added to Samba's configure script --with-sendfileEnable experimental sendfile support --with-winbind-ldap-hack Enable winbindd_ldap_hack() functionality for Windows 2000 native mode domains Changes since 2.2.6rc1 -- 1) Default all LDAP connections to v3 with compiling with --with-ldapsam Changes since 2.2.6pre2 --- 1) Merge in free list unlock on error fix 2) Correctly fail opens with mismatching SYSTEM or HIDDEN attributes if we are mapping system or hidden 3) Fix bug with stat mode open being done on read-only open with truncate 4) Fix crash bug discovered where cli struct was being deallocated in a called function 5) Ensure we open UNIX fifo's non-blocking 6) Fix DeletePrinterDriver() (hopefully for the last time...yeah right) 7) only lowercase global_myname in the %L substitution, not the whole string 8) Merged Steve French's fix for OS/2 EA return error being removed 9) Patch from Steve French to fix difference in responses to smbclient //server/share ls / on Samba and Windows 2000 10) Print error and exit if smb.conf doesn't have security=domain and encrypt passwords=yes when joining domain 11) Added final Steve French patch for "required" attributes with old dir listings 12) Initialize user_rid value in WINBIND_USERINFO structure returned by the rpc version of query_user() 13) Ensure we've failed a lock with a lock denied message before automatically pushing it onto the blocking queue 14) Add experimental --with-sendfile code 15) alignment fix in printing code merged from HEAD 16) Merge fix for other sids in token from HEAD 17) Merge winbindd with current (more advanced) state of play in APPLIANCE_HEAD 18) fix smbclient / Win98 off by one bug 19) Never, *ever* hold a mutex lock in the message database where there may be traversals being attempted 20) Add LDAP hack for retrieving the SAM sequence number when a member of a Windows 2000 native mode domain 21) Fix race condition when changing a machine account password as we were no longer locking the secrets entry 22) Allow '@' as a valid character in domain names 23) remove jobs from the spool directory when using cups 24) removed -lresolv for --enable-ldapsam 25) Memory leak fix and correct use of negative caching in winbindd 26) Updated spoolss parsing code with known good state of APPLIANCE_HEAD 27) Delete printer security check was reversed 28) Windows allows delete printer on a handle opened by an admin user, then used on a pipe handle created by an anonymous user...We do to now... 29) Make explicit the difference between a tdb key with no data attached, and a non existent entry 30) Ensure we register the 1c name on the unicast subnet. 31) Fix inheritance problem when recursively setting ACLs on directories 32) prevent ACL set on read-only share 33) Ensure we never have more than MAX_PRINT_JOBS in a queue 34) Added timeout to tdb_lock_bystring() 35) Ensure we set FIRST+LAST flags on a bind request 36) Add version strings to the usage message for smbcacls and smbpasswd 37) Fix bug in the write cache code 38) make the default printed values for boolean the same for all parameters -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] For developers: charset conversion on user names
On Wed, Oct 09, 2002 at 12:29:26PM -0500, Gerald Carter wrote: > On Wed, 9 Oct 2002, Vladimir I. Umnov wrote: > > > GC> See the "client code page" and "character set" parameters in > > GC> smb.conf(5). > > This applies to file names, but I need user names conversion! This > > don't work. > > Duh. I should read the message better. Hmmthis would be but > then but IIRC "client code page" applied to all characters sent by > by the client (including usersnames). Jeremy is "Mr. international" > though. It is meant to work on usernames, although there may be some bugs here Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba+MYOB
Hello all,We are experiencing problems using MYOB Premier V6.0.2 on Windows 2000 computers SP3, with the data file residing on shared drive on Linux (Redhat 7.2) file server running Samba Version 2.2.1a and kernel 2.4.9-34. The MYOB Tech support have told me that it is a problem with our network but could not give me any hints where the problem might be.The MYOB database has been corrupted at least 8 times over the last 4 days and every time we have to go back to our backups thereby losing all of the transactions entered in the interim. Has anyone had any experience with a similar problem and could give me any suggestions? Following is the smb.conf configuration related to the MYOB share [myob] comment = MYOB Directory path = /data/MYOB read only = No admin users = @myob Any Help would be highly appreciated. Thanks, Ramzi
[Samba] PDC not found - Samba 3.0 alpha20
Recently we have upgraded our test environment to alpha 20 for Samba 3.0. Once we did the sever that was acting as the PDC for the domain has disappeared from the browse list, and shows up as location "unknown" in the Windows find computer dialog. It worked perfectly under previous alpha code. Is there a new parameter that is needed or have any of the previous defaults changed? Also do you need to use any special configure/compile settings? We are using OpenLdap 2.1.5 as the passdb backend. The smb.conf file we use is listed below, as well as the log.nmbd file with debug set to 255. Any help would be appreciated. Thanks. *-SMB.CONF - --* # Samba config file created # Date: 2002/08/15 15:51:53 # Global parameters [global] workgroup = PHC netbios name = JANUS server string = Samba %v On RedHat 7.3 encrypt passwords = Yes passdb backend = ldapsam:ldap://localhost/ ;Logging log file = /usr/local/samba/var/%m.log max log size = 0 log level = 0 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 ;Time Service time server = Yes ;Windows Domain Data domain logons = Yes os level = 80 preferred master = Yes domain master = Yes local master = Yes dns proxy = No wins server = 10.1.1.7 logon script = logon.bat security = user admin users root ; SAMBA-LDAP declarations ldap suffix = dc=phc,dc=com ldap user suffix = ou=users,dc=phc,dc=com ldap machine suffix = ou=computers,dc=phc,dc=com ldap admin dn = cn=mgr,dc=phc,dc=com ldap ssl = No # Printing parameters load printers = no printing = lprng ;Maintenance Scripts passwd program = /usr/local/bin/smbldap-passwd.pl -o %u passwd chat = *new*password* %n\n *new*password* %n\n *sucessfully* add machine script = /usr/local/bin/smbldap-useradd.pl -w %m$ add user script = /usr/local/bin/smbldap-useradd.pl -a %u delete user script = /usr/local/bin/smbldap-userdel.pl %u add group script = /usr/local/bin/smbldap-groupadd.pl %u delete group script = /usr/local/bin-groupdel.pl %u # Disable ADS negotiation use spnego = no [homes] comment = Home Directories read only = No create mask = 0664 directory mode = 0755 browseable = No [netlogon] comment = Network Logon Service path = /usr/local/samba/netlogon guest ok = Yes browseable = No [profiles] comment = Roaming Netwok Profile Store path = /usr/local/samba/profiles writeable = yes browsable = No create mode = 0644 directory mode = 0755 guest ok = yes [tmp] comment = Temporary file space path = /tmp read only = no guest ok = Yes *- NMBD Log File * [2002/10/09 21:34:33, 0] nmbd/nmbd.c:main(801) Netbios nameserver version 3.0alpha20 started. Copyright Andrew Tridgell and the Samba Team 1994-2002 [2002/10/09 21:34:33, 3] param/loadparm.c:lp_load(3615) lp_load: refreshing parameters [2002/10/09 21:34:33, 3] param/loadparm.c:init_globals(1243) Initialising global parameters [2002/10/09 21:34:33, 3] param/params.c:pm_process(566) params.c:pm_process() - Processing configuration file "/usr/local/samba/lib/smb.conf" [2002/10/09 21:34:33, 3] param/loadparm.c:do_section(3124) Processing section "[global]" doing parameter workgroup = PHC doing parameter netbios name = JANUS [2002/10/09 21:34:33, 4] param/loadparm.c:handle_netbios_name(2377) handle_netbios_name: set global_myname to: JANUS doing parameter server string = Samba %v On RedHat 7.3 doing parameter encrypt passwords = Yes doing parameter unix password sync = No doing parameter passdb backend = ldapsam:ldap://localhost/ doing parameter log file = /usr/local/samba/var/%m.log doing parameter max log size = 0 doing parameter log level = 0 [2002/10/09 21:34:33, 0] nmbd/nmbd_logonnames.c:add_logon_names(154) add_domain_logon_names: Attempting to become logon server for workgroup PHC on subnet 10.1.1.1 [2002/10/09 21:34:33, 0] nmbd/nmbd_logonnames.c:add_logon_names(154) add_domain_logon_names: Attempting to become logon server for workgroup PHC on subnet UNICAST_SUBNET [2002/10/09 21:34:33, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(337) become_domain_master_browser_wins: Attempting to become domain master browser on workgroup PHC, subnet UNICAST_SUBNET. [2002/10/09 21:34:33, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(350) become_domain_master_browser_wins: querying WINS server from IP 0.0.0.0 for domain master browser name PHC<1b> on work
Re: [Samba] Filesystem for Samba server
On Wed, Oct 09, 2002 at 09:03:44PM -0400, Bradley W. Langhorst wrote: > remember that raid5 can only tolerate one failure and if you build the This is why you should always have at least one hot spare. Any even halfway-decent RAID setup will detect failure and automatically begin rebuilding the failed drive on to the spare. I've worked with arrays that had more than 12 drives and I have never seen more than one failure at a time. Of course that was with server-quality hardware, if you go out and buy the cheapest drives you can find and run them off the cheapest power supply you can find then you might have a lot more failures -- Michael Heironimus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Filesystem for Samba server
Do you know how much time does it take to backup 1.3 TB ? The usage on this disk array would be almost zero, this is supposed to be a backup server... where all the other servers send their backup. [It] Will be (conveniently) located on a different building. On the production servers I'd normally use 4-disk arrays and daily-incremental weekly-full backup policy. By the way, I got some spare hard drives (just like the ones i'm setting up). Greetings, Omar -Original Message- From: Bradley W. Langhorst [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 09, 2002 7:04 PM To: Omar Castaneda Acosta Cc: Yura Pismerov; Donal Byrne; [EMAIL PROTECTED] Subject: RE: [Samba] Filesystem for Samba server On Wed, 2002-10-09 at 20:52, Omar Castaneda Acosta wrote: > Actually I tested my RAID card with 2x6, 3x4 and 1x12 configurations, > the 1x12 was the fastest one (of course this is not an SCSI RAID card). remember that raid5 can only tolerate one failure and if you build the array new then all your disks will have the same usage pattern and be likely to fail at the same time... also - don't forget about backing up too you probably know this but raid doesn't save you from having to do backups. brad -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Filesystem for Samba server
On Wed, 2002-10-09 at 20:52, Omar Castaneda Acosta wrote: > Actually I tested my RAID card with 2x6, 3x4 and 1x12 configurations, > the 1x12 was the fastest one (of course this is not an SCSI RAID card). remember that raid5 can only tolerate one failure and if you build the array new then all your disks will have the same usage pattern and be likely to fail at the same time... also - don't forget about backing up too you probably know this but raid doesn't save you from having to do backups. brad -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Filesystem for Samba server
Omar Castaneda Acosta wrote: > > Actually I tested my RAID card with 2x6, 3x4 and 1x12 configurations, > the 1x12 was the fastest one (of course this is not an SCSI RAID card). > > Regarding ext3, it's a journaling file system with not support at all > for B(*/+)trees indexes and metadata storage. It's based on ext2 and > it's a good way to add _journaling_ to an existing system, but not > giving any more extra features. Well, I know what ext3 is. But I believe for most people journal feature is the only feature they need. Just to avoid long filesystem checks should the box be booted after crash... > > I checked several sources and XFS seems to be the best contestant. Ok, I think I should try it again. :) > > http://freshmeat.net/articles/view/212/ > http://linuxgazette.com/issue55/florido.html > http://www.linux-france.org/article/sys/ext3fs/Benchmarks/ > http://aurora.zemris.fer.hr/filesystems/ > http://bulmalug.net/body.phtml?nIdNoticia=642 > > Thanks for the input. > > Omar > > -Original Message- > From: Yura Pismerov [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, October 09, 2002 6:34 PM > To: Bradley W. Langhorst > Cc: Donal Byrne; '[EMAIL PROTECTED]' > Subject: Re: [Samba] Filesystem for Samba server > > I said ext3 because it is part of any kernel source code (hence no > patches needed when you upgrade). Though you will need patches for ACL > and extended attributes support. Also I think it is still fastest on > majority benchmark tests. ReiserFS that is part of 2.4.x kernels can > compete too. XFS, last time I checked it was noticeable slow on > writings. Things might change since then though. When I worked with SGI > Irix I loved XFS. IMHO it is one of the best journalling filesystems. > AFAIK it was invented and written from scratch in SGI. I hope the Linux > port will be soon as good as its original. > > And yes, LVM is way to go. If you plan to grow your filesystem > eventually it will be a matter of adding hardrives, creating a volume > and adding it to a group. Then you can use standard utilities (depending > on FS you choose) to grow the partition. > > "Bradley W. Langhorst" wrote: > > > > On Wed, 2002-10-09 at 06:53, Donal Byrne wrote: > > > Thanks Yura, bust any reason why ext3 would be better? > > > > > > -Original Message- > > > From: Yura Pismerov [mailto:[EMAIL PROTECTED]] > > > Sent: 08 October 2002 22:53 > > > To: Donal Byrne > > > Cc: '[EMAIL PROTECTED]' > > > Subject: Re: [Samba] Filesystem for Samba server > > > > > > > > > > > > ext3 is probably the best choice. > > > > > > > > > Donal Byrne wrote: > > > > > > > > > Hi, > > > > > Sorry if this is a stupid question (bit of a newbie). I'm building a > > > Samba > > > > > fileserver on a box with a hardware raid array of about 65GB which I'm > > > > > hoping to share out to the local LAN . I was wondering if the filesystem > > > > > used (ext2,ext3, reiserfs etc) on the partition where the Samba shares > > > > > will reside makes much of a difference? I'd obviously like to use a > > > > > journalling filesystem but can't seem to find any info to guide my > > > choice. > > I think you should use XFS - > > > > 1) it is well supported by sgi > > 2) it is mature > > 3) it is fast > > 4) it is in use on such large filesystems already > > 5) acls are native > > > > I saw somewhere in this thread that someone was considering a 12 disk > > raid 5. I'd suggest splitting this into a couple of raid5s and use LVM > > if you need the space to be contiguous. I've found that performance is > > optimal with about 5 disks > > > > brad > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Filesystem for Samba server
Actually I tested my RAID card with 2x6, 3x4 and 1x12 configurations, the 1x12 was the fastest one (of course this is not an SCSI RAID card). Regarding ext3, it's a journaling file system with not support at all for B(*/+)trees indexes and metadata storage. It's based on ext2 and it's a good way to add _journaling_ to an existing system, but not giving any more extra features. I checked several sources and XFS seems to be the best contestant. http://freshmeat.net/articles/view/212/ http://linuxgazette.com/issue55/florido.html http://www.linux-france.org/article/sys/ext3fs/Benchmarks/ http://aurora.zemris.fer.hr/filesystems/ http://bulmalug.net/body.phtml?nIdNoticia=642 Thanks for the input. Omar -Original Message- From: Yura Pismerov [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 09, 2002 6:34 PM To: Bradley W. Langhorst Cc: Donal Byrne; '[EMAIL PROTECTED]' Subject: Re: [Samba] Filesystem for Samba server I said ext3 because it is part of any kernel source code (hence no patches needed when you upgrade). Though you will need patches for ACL and extended attributes support. Also I think it is still fastest on majority benchmark tests. ReiserFS that is part of 2.4.x kernels can compete too. XFS, last time I checked it was noticeable slow on writings. Things might change since then though. When I worked with SGI Irix I loved XFS. IMHO it is one of the best journalling filesystems. AFAIK it was invented and written from scratch in SGI. I hope the Linux port will be soon as good as its original. And yes, LVM is way to go. If you plan to grow your filesystem eventually it will be a matter of adding hardrives, creating a volume and adding it to a group. Then you can use standard utilities (depending on FS you choose) to grow the partition. "Bradley W. Langhorst" wrote: > > On Wed, 2002-10-09 at 06:53, Donal Byrne wrote: > > Thanks Yura, bust any reason why ext3 would be better? > > > > -Original Message- > > From: Yura Pismerov [mailto:[EMAIL PROTECTED]] > > Sent: 08 October 2002 22:53 > > To: Donal Byrne > > Cc: '[EMAIL PROTECTED]' > > Subject: Re: [Samba] Filesystem for Samba server > > > > > > > > ext3 is probably the best choice. > > > > > > Donal Byrne wrote: > > > > > > > Hi, > > > > Sorry if this is a stupid question (bit of a newbie). I'm building a > > Samba > > > > fileserver on a box with a hardware raid array of about 65GB which I'm > > > > hoping to share out to the local LAN . I was wondering if the filesystem > > > > used (ext2,ext3, reiserfs etc) on the partition where the Samba shares > > > > will reside makes much of a difference? I'd obviously like to use a > > > > journalling filesystem but can't seem to find any info to guide my > > choice. > I think you should use XFS - > > 1) it is well supported by sgi > 2) it is mature > 3) it is fast > 4) it is in use on such large filesystems already > 5) acls are native > > I saw somewhere in this thread that someone was considering a 12 disk > raid 5. I'd suggest splitting this into a couple of raid5s and use LVM > if you need the space to be contiguous. I've found that performance is > optimal with about 5 disks > > brad > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Multiple Domains?
To accomplish that task you will have to run multiple Samba instances (one per Domain/group). Network aliases are your friends. You can create aliases on each NIC and bind Samba instances to separate aliases on the same network. Hope this helps. Steve Morley wrote: > > Hi All, > > I just joined this list, and I'm looking for some help. > > I've been running a Samba server for a few years now, and it's been doing > everything I've asked it too, but I'm hitting a wall trying to implement > something new. Google searches aren't turning up too much, except to > indicate that other people have done what I want, but I haven't gotten > much responses when I tried to contact them :( The few vague instructions > I turned up in my searches seem to fail... > > I need to make my current Samba server (one FreebSD box) serve up multiple > domains. > > I added a second NIC for the second network, and all the TCP/IP stuff is > configured and working properly. Whenever I try to add stuff for a second > domain though, the whole thing (Samba) fails so I've undone everything to > keep the current status. > > Here's the scoop on the Network: > > Two completely seperate LANs, one on 192.168.1 and the other on 192.168.2 > The students are all on .1, and the staff is on .2 The students currently > log into the "STUDENTS" workgroup with no problem. As the staff has > increased, we now need the staff to log into a workgroup themselves. > > I have two choices: > > 1) re-configure the current server (preferred) > 2) build a duplicate LAN out of spare parts and start from scratch > > I'm more than happy to do either, I just want to know if someone has indeed > gotten a single Samba box to server up multiple domains at the same time. > > TIA > Steve > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Filesystem for Samba server
I said ext3 because it is part of any kernel source code (hence no patches needed when you upgrade). Though you will need patches for ACL and extended attributes support. Also I think it is still fastest on majority benchmark tests. ReiserFS that is part of 2.4.x kernels can compete too. XFS, last time I checked it was noticeable slow on writings. Things might change since then though. When I worked with SGI Irix I loved XFS. IMHO it is one of the best journalling filesystems. AFAIK it was invented and written from scratch in SGI. I hope the Linux port will be soon as good as its original. And yes, LVM is way to go. If you plan to grow your filesystem eventually it will be a matter of adding hardrives, creating a volume and adding it to a group. Then you can use standard utilities (depending on FS you choose) to grow the partition. "Bradley W. Langhorst" wrote: > > On Wed, 2002-10-09 at 06:53, Donal Byrne wrote: > > Thanks Yura, bust any reason why ext3 would be better? > > > > -Original Message- > > From: Yura Pismerov [mailto:[EMAIL PROTECTED]] > > Sent: 08 October 2002 22:53 > > To: Donal Byrne > > Cc: '[EMAIL PROTECTED]' > > Subject: Re: [Samba] Filesystem for Samba server > > > > > > > > ext3 is probably the best choice. > > > > > > Donal Byrne wrote: > > > > > > > Hi, > > > > Sorry if this is a stupid question (bit of a newbie). I'm building a > > Samba > > > > fileserver on a box with a hardware raid array of about 65GB which I'm > > > > hoping to share out to the local LAN . I was wondering if the filesystem > > > > used (ext2,ext3, reiserfs etc) on the partition where the Samba shares > > > > will reside makes much of a difference? I'd obviously like to use a > > > > journalling filesystem but can't seem to find any info to guide my > > choice. > I think you should use XFS - > > 1) it is well supported by sgi > 2) it is mature > 3) it is fast > 4) it is in use on such large filesystems already > 5) acls are native > > I saw somewhere in this thread that someone was considering a 12 disk > raid 5. I'd suggest splitting this into a couple of raid5s and use LVM > if you need the space to be contiguous. I've found that performance is > optimal with about 5 disks > > brad > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba client Bug : First letter of directory name missing
Hi everybody ! I have a problem with the sambaclient when I connect to some client and type ls it lists the directories without the first letter and furthermore it doesn't list them as directory but as file of 0kB. And when I mount the share the filenames are ok. I don't know the type of server that are running those hosts since findsmb don't report anything about them. Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Please assist with Winbind issues!
[EMAIL PROTECTED] wrote: > > Hello, > > I've been trying for a couple of weeks now to get Samba to authenticate via Winbind >to an NT domain. I've scoured Google and the mailing lists to no avail. I've tried >various configurations that I've found during my searches, but none of them have >worked for me. > > I need to be able to authenticate users, that do not have an account on the Linux >box, against the NT domain, and automatically create a home directory for them. This >is the purpose of Winbind (except the home directory part, which pam_mkhomedir is >supposed to do), as I understand it. Something between winbind and pam is failing >since the connecting user gets authenticated as guest rather than an actual user. > > My current configuration is RedHat 7.3 and Samba 2.2.5. My most current samba >installation is an RPM generated via the makerpms.sh script in the packaging/RedHat >folder of the 2.2.5 samba distribution. > > I've added the following compilation flags in the samba2.spec file: This is my >latest attempt, since nothing else seemed to work. > > --with-ssl \ > --with-sslinc=/usr/include/openssl \ > --with-ssllib=/usr/lib/ssl \ SSL support is being removed in Samba 3.0, and is unsupported in 2.2. While this is probably unrelated to your problem, don't make you life more difficult than it needs to be. No Microsoft client supports SMB over SSL. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Multiple Domains?
Hi All, I just joined this list, and I'm looking for some help. I've been running a Samba server for a few years now, and it's been doing everything I've asked it too, but I'm hitting a wall trying to implement something new. Google searches aren't turning up too much, except to indicate that other people have done what I want, but I haven't gotten much responses when I tried to contact them :( The few vague instructions I turned up in my searches seem to fail... I need to make my current Samba server (one FreebSD box) serve up multiple domains. I added a second NIC for the second network, and all the TCP/IP stuff is configured and working properly. Whenever I try to add stuff for a second domain though, the whole thing (Samba) fails so I've undone everything to keep the current status. Here's the scoop on the Network: Two completely seperate LANs, one on 192.168.1 and the other on 192.168.2 The students are all on .1, and the staff is on .2 The students currently log into the "STUDENTS" workgroup with no problem. As the staff has increased, we now need the staff to log into a workgroup themselves. I have two choices: 1) re-configure the current server (preferred) 2) build a duplicate LAN out of spare parts and start from scratch I'm more than happy to do either, I just want to know if someone has indeed gotten a single Samba box to server up multiple domains at the same time. TIA Steve -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] NTLM version?
Hi, Anybody can tell me what version of NTLM do we support in 2.2.5, 3.0a20 and after 3.0 is out? If not version numbers, what features? Chere -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 2.2.5 burning from network share not possible
Hi, I wrote: > Is there a known bug in Samba 2.2.5 with burning images from network > shares with CloneCd, if files named like "IMAGE(Install).CCD"? Samba > will access > > Images2/IMAGE(Install).CCD > > but the files is here: > > Images2/abc/IMAGE(Install).CCD I have level 10 debug logs for this from a user with this problem. May be a locking issue, because I found a lot of [2002/10/09 18:54:45, 5] locking/posix.c:set_posix_lock(1063) set_posix_lock: Lock fail !: Type = READ: offset = 0, count = 9223372036854775808. Errno = Value too large for defined data type in the logs. Or may be a hashing problem with hash2, because files named other then xyz.ccd were found with Samba ... Is there anybody interested in this problem/the logs? tom -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] VFS and CVS
Hi, I am a newbie to linux and Samba but was wondering if anyone had implemented a VFS in samba which versions the files using CVS? Thanks Trampas -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Error 54 with Net Use
Hello, I've got a samba 2.2.5 server running with 5 or 6 users logging in with no problem. One user cannot get in (eventho initially I believe he could get in).I can ping and tracert from server to desktop and desktop to server (using both IPs and names). I am trying to map using the IP address, so the name resolution isn't an issue. When I use net use to map the drive this is the error I'm getting: ~~~ C:\WINDOWS>net use h: \\192.168.0.208\hq Error 54: The network is currently busy processing other requests or is out of resources. Try again later, or verify your network configuration to be sure that enough network resources are specified. ~~~ Running tail -f on that users log file doesn't even show anything hitting the server. Other network activities work fine. (All the network settings seem to be correct, I had another guy look over them with me today). Thoughts? Thanks. --John -- John Anderson Ceeva, Inc. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re[2]: [Samba] How to forbid user to login?
Hello, Skip. SD> Vladamir, SD> If you modify the /etc/passwd file and use /dev/null in the shell field for SD> the users you wish to disable for unix login, they will not be able to login SD> but will still have access to the permissions for smb access to the SD> services. May be it my poor english, but I mean that I don't want to allow login user into domain and don't want allow him create profile and use home directory, but I want allow this local autentificates in PDC. May be I need run for him some script for logout user? I repeat, this user only needit for determine, that this user in domain is correct and can access to other read only resources on all network (ofcourse, if that resources on PC, that joined into domain). -- Vladimir I. Umnov mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Print server on all linux network
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Well, I've licked it. I upgraded to a more recent version of Samba and it took care the problem. It seems that the version I was using didn't handle users correctly in the print que, and there was something wrong with the guest setup. The new version worked out of the box. Thanks for all the help, Joel! - -Dan On Sunday 06 October 2002 20:23, Joel Hammer wrote: > Hmmm... > I thought you can print well from the server itself? > Are you sure you were ever using BSD printing. Maybe you were really using > lprng. > I think samba defaults to bsd. Have you got a printing parameter in your > smb.conf? > Joel > > On Sun, Oct 06, 2002 at 07:13:17PM -0700, Dan Sawyer wrote: > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > Second update: > > > > On the advice of someone else on this mailing list, I converted from BSD > > printing to CUPS (still using samba). Doing so has given me what is > > perhaps a more identifiable error message. When I send a job to the > > server, I check the que and get the following response: > > > > thedude@floyd:~> lpstat -t > > scheduler is running > > system default destination: lp > > device for lp: samba://192.168.1.101/lp > > lp accepting requests > > printer lp disabled - > > reason unknown > > lp-1thedude 164864 Sun Oct 6 19:07:36 2002 > > > > So it seems that the printer is disabled for some reason. The job just > > stays there in the que and never prints. > > > > - -Dan > > > > On Thursday 03 October 2002 15:23, Joel Hammer wrote: > > > Do you understand how printing works with samba? > > > Essentially, you just transfer the file to the samba spool directory, > > > and invoke lpr to print the file. You will need to look at your > > > smb.conf file to see what is supposed to happen. I would set up a share > > > just for your printer and not rely on the generic printer share that > > > smb.conf comes with. > > > > > > Here is the sort of printer share I have: > > > This take a postscript file as input, invokes lpr to print to queue ps > > > on the server, which translates postscript files for my lexmark > > > printer. > > > > > > Joel > > > > > > > > > > > > [ps] > > > path = /tmp > > > read only = No > > > create mask = 0700 > > > guest ok = yes > > > hosts allow = 192.168. > > > printable = Yes > > > printing = lprng > > > print command = echo %J %p %s >> /tmp/junkJ;\ > > >a="`echo '%J' | sed "s/^.*- //"`" ;\ > > > echo This is truncated $a >> /tmp/junkJ;\ > > >/usr/bin/lpr -Pps -J"$a" %s;\ > > >rm %s > > > lpq command = /usr/bin/lpq -Pps > > > lprm command = /usr/bin/lprm -Pps %j > > > lppause command = /usr/sbin/lpc hold z53 %j > > > lpresume command = /usr/sbin/lpc release z53 %j > > > share modes = No > > > use client driver = yes > > > > > > On Thu, Oct 03, 2002 at 12:47:27PM -0700, Dan Sawyer wrote: > > > > -BEGIN PGP SIGNED MESSAGE- > > > > Hash: SHA1 > > > > > > > > Hello, everyone - > > > > > > > > I've been trying for two weeks now to get my print server operational > > > > under Samba. After walking through the howtos and tweaking the > > > > configs per spec, it just ain't working. Printing from a client > > > > machine sends, and then nothing happens. No error messages or > > > > anything similar. > > > > > > > > Printing from the server works fine, but not from the clients. > > > > > > > > Setup: > > > > > > > > 4 machine network, 3 clients, 1 samba file/print server > > > > SuSE 7.3 running on all machines. > > > > HP 2P parallel printer on lp0 of server > > > > > > > > What else can I tell you to help figure this out? > > > > - -Dan Sawyer > > > > -BEGIN PGP SIGNATURE- > > > > Version: GnuPG v1.0.6 (GNU/Linux) > > > > Comment: For info see http://www.gnupg.org > > > > > > > > iD8DBQE9nJ7TaB8ur/y6V8gRArm9AJ9rRc8yhDm5Catchqv4SXedOqs5qwCfSWS/ > > > > 2IayciR10uTYysD/3F24UdE= > > > > =TMQV > > > > -END PGP SIGNATURE- > > > > -- > > > > To unsubscribe from this list go to the following URL and read the > > > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > -BEGIN PGP SIGNATURE- > > Version: GnuPG v1.0.6 (GNU/Linux) > > Comment: For info see http://www.gnupg.org > > > > iD8DBQE9oO3BaB8ur/y6V8gRAiAJAJwNmGtKOhWamaEBO2oX2bTlI0T7DACfXWEj > > WPZ2VS/XixCF6xBqgXbDQyc= > > =nwXl > > -END PGP SIGNATURE- -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE9pJN6aB8ur/y6V8gRAldLAKCBb6kvijPQSZ2C2PgddHQenWKhgACeLYgj Y0xbKueAJHMs0xuWTUlnSeA= =sor+ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] How to forbid user to login?
Vladamir, If you modify the /etc/passwd file and use /dev/null in the shell field for the users you wish to disable for unix login, they will not be able to login but will still have access to the permissions for smb access to the services. Skip Dobrin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Vladimir I. Umnov Sent: Wednesday, October 09, 2002 11:15 AM To: [EMAIL PROTECTED] Subject: [Samba] How to forbid user to login? Hello, samba. How to forbid user to login, but user can access to the services. -- Vladimir I. Umnov mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba print server as part of Win2000 domain, having access issues from winXP
Hello samba gurus, Here is my issue, it may actually be a windows issue but because samba is in the mix I feel like it should be presented here. Here are the three principle players: a) pdcbox - A windows 2000 server box functioning as a PDC (in compatibility mode) b) printbox - a SuSE linux box running Samba 2.2.3a functioning as a print server (with cups) and a WINS server. c) clientbox - An XP Pro machine trying to print. I am logged into clientbox as user "tim", which is a user in my Win2K domain. When I attempt to print or look at my available printers I get an "access denied" message. If I open up printbox in Windows explorer it asks me for a username and password. If I type in my own username and password it fails. If I type in another username and password (just another user in the domain with the same priveledges as myself) it works, after this I can print. What gives? I have verified that my account is valid and no different from the one that works. printbox is configured thusly: [global] workgroup = somedomain security = domain password server = pdcbox map to guest = Bad Password socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY character set = ISO8859-15 os level = 0 local master = yes preferred master = no domain master = no wins support = yes DNS Proxy = no guest account = guest printing = cups encrypt passwords = yes [printers] comment = All Printers path = /var/tmp create mask = 0600 printable = Yes postscript = No browseable = No guest ok = yes [phaser3] path = /var/tmp read only = No create mask = 0600 guest ok = Yes printable = Yes postscript = Yes printer name = phaser3 use client driver = Yes oplocks = No Any help would be appreciated. Regards, Tim MacDonald [EMAIL PROTECTED] __ Do you Yahoo!? Faith Hill - Exclusive Performances, Videos & More http://faith.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 我有全市最便宜的市话通卖
ÎÒÓÐÈ«ÊÐ×î±ãÒ˵ÄÊл°Í¨Âô ÄãÒªÂð£¬Çëµç26840989 = ¸ÃÓʼþʹÓà ¿ÆÌØÓʼþȺ·¢Èí¼þ ·¢ËÍ,ÓʼþÄÚÈÝÓë¿ÆÌØÈí¼þÎÞ¹Ø ¿ÆÌØÈí¼þ http://www.caretop.com = -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] KDE
On Wednesday 09 October 2002 17:23, [EMAIL PROTECTED] wrote: > i'm using samba 2.2.5 and mandrake 8.5 as a pdc for test. Whenever i create > a trust account PC123$ for a machine to login it appears as user in the KDE > interface, i know its not samba specific but if i have 100 users thats a > lot of $ users on the login list! Hi, what exactly do you mean by "KDE interface"? The user manager (kuser) or the graphical login (kdm)? If the latter, you can configure which users it shows (either include only specified ones or exclude specified ones), see Control Center->System Administration->Login Manager->Users. You might also file a wishlist for kdm to exclude users by regexp (.*\$ for samba machine accounts) at http://bugs.kde.org If it's kuser, IMHO it's okay to have them there, otherwise file a wishlist item for it (also bugs.kde.org).In any case you won't get the feature too early though since KDE is already feature-frozen for the upcoming 3.1 release :-( As an alternative, if you know C++ you could implement such a feature yourself and submit a patch to [EMAIL PROTECTED], you could then use it right now... Regards, Malte -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Please assist with Winbind issues!
John, Thanks for spotting the typo. I fixed that, but the behavior is the same as before... Thank you. Sven -Original Message- From: John H. Reinhardt [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 09, 2002 7:25 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Please assist with Winbind issues! Sven, Being somewhat of a newbie, I cannot comment on everything that you've included here with authority, but I did notice a typographic error in the pam_winbind.so line for PAM account checking in your "/etc/pam.d/system-auth" file. It's pointed out below. Seems like that could be the problem since you can authenticate, but just not with the correct account. John Reinhardt >Message: 14 >From: [EMAIL PROTECTED] >To: [EMAIL PROTECTED] >Date: Tue, 8 Oct 2002 17:29:23 -0400 >Subject: [Samba] Please assist with Winbind issues! > <> >Here is my /etc/pam.d/system-auth > >authrequired /lib/security/pam_env.so >authsufficient/lib/security/pam_winbind.so >authsufficient/lib/security/pam_unix.so likeauth nullok >use_first_pa >ss >authrequired /lib/security/pam_deny.so > >account sufficient/lib/secutiry/pam_winbind.so ^^^ <== Typo here... >account required /lib/security/pam_unix.so > >passwordrequired /lib/security/pam_cracklib.so retry=3 >passwordsufficient/lib/security/pam_unix.so nullok use_authtok md5 >shado >w >passwordrequired /lib/security/pam_deny.so > >session required /lib/security/pam_mkhomedir.so skel=/etc/skel/ >umask=0 >022 >session required /lib/security/pam_limits.so >session required /lib/security/pam_unix.so > >Here is my /etc/samba/smb.conf: > >[global] > workgroup = CHICAGO > netbios name = SILCHRS03 > server string = > security = DOMAIN > encrypt passwords = Yes > password server = * > log level = 3 > log file = /var/log/samba/log.%m > max log size = 50 > large readwrite = Yes > name resolve order = host wins bcast > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > load printers = No > preferred master = False > local master = No > domain master = False > dns proxy = No > wins server = 172.30.XXX.XXX > winbind uid = 1-5 > winbind gid = 1-5 > template shell = /bin/bash > guest account = ftp > invalid users = root bin daemon adm sync shutdown halt mail news > uucp operator gopher > printer admin = +PrinterAdmins > nt acl support = No > printing = cups > >[homes] > comment = Home Directories > read only = No > browseable = No > >[printers] > comment = All Printers > path = /var/spool/samba > printable = Yes > browseable = No > > >I really want this to work, so any help is appreciated. >Please include my e-mail address in any replies. > >Thank you! > > >Sven -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Please assist with Winbind issues!
-Original Message- From: Gareth Davies [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 09, 2002 4:52 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Samba] Please assist with Winbind issues! Have you tried: Manually putting password server = IP adress rather than *. >>>Winbind fails to find the domain if I do this. [homes] comment = Home Directories browseable = no writable = yes valid users =%D+%S The chmod for home directory should be 700, chown to the user and chown group to 'DOMAIN+Domain Users' >>>chown doesn't find the domain users or groups. If you can use getent passwd and getent groups I presume it's just a permissions thing. I haven't been able to get pam_mkhomedir.so to work so I just manually create the accounts. >>>I don't see pam_mkhomedir working, but I don't think it's getting that far... I've >created home directories for the test accounts, but that doesn't work either. I'm just writing a guide on how to do it now on Debian 3.0. Good luck, Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, October 08, 2002 10:29 PM Subject: [Samba] Please assist with Winbind issues! > Hello, > > I've been trying for a couple of weeks now to get Samba to authenticate via Winbind to an NT domain. I've scoured Google and the mailing lists to no avail. I've tried various configurations that I've found during my searches, but none of them have worked for me. > > I need to be able to authenticate users, that do not have an account on the Linux box, against the NT domain, and automatically create a home directory for them. This is the purpose of Winbind (except the home directory part, which pam_mkhomedir is supposed to do), as I understand it. Something between winbind and pam is failing since the connecting user gets authenticated as guest rather than an actual user. > > My current configuration is RedHat 7.3 and Samba 2.2.5. My most current samba installation is an RPM generated via the makerpms.sh script in the packaging/RedHat folder of the 2.2.5 samba distribution. > > I've added the following compilation flags in the samba2.spec file: This is my latest attempt, since nothing else seemed to work. > > --with-ssl \ > --with-sslinc=/usr/include/openssl \ > --with-ssllib=/usr/lib/ssl \ > --with-acl-support \ > --with-winbind \ > --with-winbind-auth-challenge \ > > 'getent passwd' and 'getent group' work properly so I think winbind works, too. I think the problem lies somewhere with pam, but I'm not a pam guru by any stretch of the imagination. > > The problem is one I've seen discussed a couple of times, but have not seen any kind of resolution. The next few lines are from the log file of the client attempting to connect to the server with an account called ilchtest. > > [2002/10/08 15:00:50, 3] lib/util_sock.c:open_socket_out(845) > Connecting to 10.226.XXX.XXX at port 139 > [2002/10/08 15:00:50, 3] smbd/reply.c:reply_sesssetup_and_X(1045) > No such user ilchtest [CHICAGO] - using guest account > > > > The following is the last line of what 'winbindd -d5 -i' spits out when I start it from the root prompt: > > tdb(unknown): tdb_brlock failed (fd=10) at offset 4 rw_type=1 lck_type=13> > > > The following is what 'winbindd -d5 -i' spits out when the client trys to connect: > > rpc_read: num_read = 4, read offset: 0, to read: 4 > 18 samr_io_r_close_hnd > 0018 data1: > 001c data2: > 0020 data3: > 0022 data4: > 0024 data5: 00 00 00 00 00 00 00 00 > 002c status: NT_STATUS_OK > [23826]: sid to gid S-1-5-21-178404139-331375567-1660491571-2273 > [23826]: gid to sid 1 > [23826]: gid to sid 10001 > [23826]: getgroups ftp <---Guest account was nobody and I changed it to ftp. > > > > Here is my /etc/nsswitch.conf > > passwd: files winbind > shadow: files > group: files winbind > > #hosts: db files nisplus nis dns > hosts: files winbind dns > > > > > > Here is my /etc/pam.d/system-auth > > authrequired /lib/security/pam_env.so > authsufficient/lib/security/pam_winbind.so > authsufficient/lib/security/pam_unix.so likeauth nullok use_first_pa > ss > authrequired /lib/security/pam_deny.so > > account sufficient/lib/secutiry/pam_winbind.so > account required /lib/security/pam_unix.so > > passwordrequired /lib/security/pam_cracklib.so retry=3 > passwordsufficient/lib/security/pam_unix.so nullok use_authtok md5 shado > w > passwordrequired /lib/security/pam_deny.so > > session required /lib/security/pam_mkhomedir.so skel=/etc/skel/ umask=0 > 022 > session required /lib/security/pam_limits.so > session required /lib/security/pam_unix.so >
[Samba] tail -f & the missing data:2.2.5, 2.2.19-6.2.16,
Hi, I have a strange problem viewing data in real time. I wonder can anyone help? I run tail -f on a file which is served by a windows 2000 machine. I start a simple program running on windows 2000 which writes numbered lines of text to this file. I notice that tail -f is missing some of the lines. If I edit the file afterwards the data is there it's just that tail seems to miss bits of it when viewing it in real time. [Background] Redhat 6.2 2.2.19-6.2.16 Samba 2.2.5 Windows 2000 [reproduce by] cd /share/mount/point touch sean.txt tail -f sean.txt | tee /tmp/sean-tail.txt start program on windows 2000 I stop the Windows 2000 process. I compare sean.txt and /tmp/sean-tail.txt and they are different. [already tried] upgrading to latest RH kernel and samba stable. handwritten tool to ensure tail was not acting crazy. Can anyone help me with this? I noticed some other reports of problems with tail -f in the archive, but they appear to be a different problem. Thanks, Sean. different-content.zip Description: Zip compressed data
Re: [Samba] Strange issue with pam_smbpass
On 9 Oct 2002, Diego Rivera wrote: > Hello all!! > > Something strange is happening recently with pam_smbpass.so. > > I get the errors: > > passwd: PAM unable to dlopen(pam_smbpass.so) > passwd: PAM [dlerror: pam_smbpass.so: undefined symbol: ldap_value_free] > passwd: PAM adding faulty module: pam_smbpass.so I think this is already fixed in SAMBA_2_2 (i vaguely remember a similar bug report). Can you retest and let me know for the upcoming 2.2.6 release. cheers, jerry - Hewlett-Packard http://www.hp.com SAMBA Team http://www.samba.org --http://www.plainjoe.org "SAMS Teach Yourself Samba in 24 Hours" 2ed. ISBN 0-672-32269-2 --"I never saved anything for the swim back." Ethan Hawk in Gattaca-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re[2]: [Samba] For developers: charset conversion on user names
On Wed, 9 Oct 2002, Vladimir I. Umnov wrote: > GC> See the "client code page" and "character set" parameters in > GC> smb.conf(5). > This applies to file names, but I need user names conversion! This > don't work. Duh. I should read the message better. Hmmthis would be but then but IIRC "client code page" applied to all characters sent by by the client (including usersnames). Jeremy is "Mr. international" though. cheers, jerry -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re[2]: [Samba] For developers: charset conversion on user names
Hello, Gerald. GC> On Wed, 9 Oct 2002, Vladimir I. Umnov wrote: >> Hello, samba. >> >> If I have names in /etc/passwd in koi8-r charset and my windows >> clients read it in cp866 or win1251 I see "bla-bla" insted of Real >> Names. I want to use names in koi8-r under linux box, but I want to >> see this names under w2k. GC> See the "client code page" and "character set" parameters in GC> smb.conf(5). This applies to file names, but I need user names conversion! This don't work. -- Vladimir I. Umnov mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 2.2.5 Security Bug?
Hi Jerry Thanks for the answer! > UNIX does not prevent you from setting an empty password. > Maybe you PAM stack does. With UNIX I meant Solrais 2.x (default), I don't know exactly how it is for linux (I suppose it's similiar) -> man passwd: SunOS 5.8 Last change: 21 Oct 19991 User Commands passwd(1) Passwords must be constructed to meet the following require- ments: o Each password must have PASSLENGTH characters, where PASSLENGTH is defined in /etc/default/passwd and is set to 6. Only the first eight characters are signifi- cant. o Each password must contain at least two alphabetic characters and at least one numeric or special charac- ter. In this case, "alphabetic" refers to all upper or lower case letters. > Try using pam_smbpass.so and the pam_crack.so library for controlling > password strength. Thanks for the tip, I'll do it, pitty that Samba dosen't do it out of the box. > Samba just gives you the bullet. If you shoot yourself in the foot, > we can't stop that If you want, modify smbpasswd so that > > if ( !lp_null_passwords() && !strlen(new_passwd) ) > fail; The bullet is ok for root but not for the normal users, or do your users have the root password in your environment? I'll try to change the code too, but it's not Samba standard anymore! > As of this moment, we are not planning on changing the current > behavior. That's really pitty! Anyway can you please tell me why did the attitude of smbpasswd change between the versions before and after 2.0 (just concerning the empty string not the whole concept)? Is that not a sort of a downgrade? Thanks for the discussion! Regards, Imed -- +++ GMX - Mail, Messaging & more http://www.gmx.net +++ NEU: Mit GMX ins Internet. Rund um die Uhr für 1 ct/ Min. surfen! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] KDE
> To: [EMAIL PROTECTED] > From: [EMAIL PROTECTED] > Date: Wed, 9 Oct 2002 16:23:17 +0100 > Subject: [Samba] KDE > > i'm using samba 2.2.5 and mandrake 8.5 as a pdc for test. > Whenever i create > a trust account PC123$ for a machine to login it appears as user > in the KDE > interface, i know its not samba specific but if i have 100 users thats a > lot of $ users on the login list! You probably want to create trust account with a uid in a specific range, then exclude uids in that range from appearing in your KDE greeter. That can be done in /usr/share/config/kdm/kdmrc (or wherever else your kdmrc is located) -- Nick -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] For developers: charset conversion on user names
On Wed, 9 Oct 2002, Vladimir I. Umnov wrote: > Hello, samba. > > If I have names in /etc/passwd in koi8-r charset and my windows > clients read it in cp866 or win1251 I see "bla-bla" insted of Real > Names. I want to use names in koi8-r under linux box, but I want to > see this names under w2k. See the "client code page" and "character set" parameters in smb.conf(5). cheers, jerry - Hewlett-Packard http://www.hp.com SAMBA Team http://www.samba.org --http://www.plainjoe.org "SAMS Teach Yourself Samba in 24 Hours" 2ed. ISBN 0-672-32269-2 --"I never saved anything for the swim back." Ethan Hawk in Gattaca-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Compile samb with vfs
On Wed, 9 Oct 2002, Elliot wrote: > Hi guys.. I have a working samba pdc > > It seems now I want to install Openantivirus vscan for on access virus > scanning feature. But it mentions that I need to compile samba with vfs > support The --with-vfs flag was removed in 2.2.4 (?) since the VFS layer was always being used anyways. VFS support is included ni 2.2.4+ and later cheers, jerry -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 2.2.5 Security Bug?
On Tue, 8 Oct 2002 [EMAIL PROTECTED] wrote: > > No password is different from the password "" (an empty password). > > "" is actually hashed as an empty string and is a valid password, > > NO PASSWORD is treated differently. > > That not very consistent! With SWAT it's not possible for the user user > to set an empty password, this is Unix like. UNIX does not prevent you from setting an empty password. Maybe you PAM stack does. > No password is just allowed for root, that's ok, because it's under > root's control. An empty password is possible for all user and this > really bad, because you don't have any control on the user passwords, > even not in the smb.conf file! Try using pam_smbpass.so and the pam_crack.so library for controlling password strength. > Is there any cogent reason, why should "" (an empty password) now be a > valid password? Samba just gives you the bullet. If you shoot yourself in the foot, we can't stop that If you want, modify smbpasswd so that if ( !lp_null_passwords() && !strlen(new_passwd) ) fail; As of this moment, we are not planning on changing the current behavior. cheers, jerry -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Where to download samba-client-2.2.5-1 for RH7.3/RH8.0
On Wed, 2002-10-09 at 11:38, Stephen Liu wrote: > Hi All, > > OS - RH7.3/RH8.0 > > I jush have samba-2.2.5-1.i386,rpm downloaded from Samba.org but could > not find samba-client-2.2.5-1.i386.rpm there. > > From Internet I found sam-client-2.2.5-1.4mlx.i386.rpm. Could I use > it or where can I download samba-client-2.2.5-1.i386.rpm? > no - don't mix and match packages from different vendors' official samba rpms contain both the client and server code in one package brad -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Strange issue with pam_smbpass
Hello all!! Something strange is happening recently with pam_smbpass.so. I get the errors: passwd: PAM unable to dlopen(pam_smbpass.so) passwd: PAM [dlerror: pam_smbpass.so: undefined symbol: ldap_value_free] passwd: PAM adding faulty module: pam_smbpass.so And the passwd command returns "Module unknown". The rest of Samba is working fine as a PDC - can log in, out, copy files, etc. The SAM is on LDAP, also working fine. I never noticed that before, so I don't know if it's always been there. All I know is that now, all of a sudden, I can't synchronize my Windows/Linux passwords using the passwd command, as I used to before. This is a fresh rebuild from a source RPM with a slightly modified spec file. The mods to the specfile go only so far as to produce one set of packages when LDAP support is enabled (which are the ones I'm using), and one set of packages when LDAP is not enabled. I did this to correct the dependencies and package clashes, which were kind of messy. Now, dependencies are fine (i.e, LDAP-enabled packages only depend on other LDAP-enabled packages, and likewise for non-LDAP), but for some reason either pam_smbpass is being linked against the wrong libraries, or I'm missing something. Best Diego -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Satellite TV hex files for Funcards, Goldcards
Hello there Did you know that you can program smart cards with files from the internet and open lots of pay per view chanells for your televisual pleasure. Take a look at http://MagicFun.da.ru for the latest hex files. Many thanks Jay.
[Samba] Satellite TV hex files for Funcards, Goldcards
Hello there Did you know that you can program smart cards with files from the internet and open lots of pay per view chanells for your televisual pleasure. Take a look at http://MagicFun.da.ru for the latest hex files. Many thanks Jay.
[Samba] Where to download samba-client-2.2.5-1 for RH7.3/RH8.0
Hi All, OS - RH7.3/RH8.0 I jush have samba-2.2.5-1.i386,rpm downloaded from Samba.org but could not find samba-client-2.2.5-1.i386.rpm there. From Internet I found sam-client-2.2.5-1.4mlx.i386.rpm. Could I use it or where can I download samba-client-2.2.5-1.i386.rpm? Thanks in advance. Stephen Liu -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] [Fwd: samba client problems???]
Hello, I have scoured the samba archives, and have found a few suggestions to this problem, like setting registry setting on the Windows machine to allow clear text passwords, and making sure permissions are setup correctly in the smb.conf and with the directory to share... but to no avail... Can someone shed some further light on this topic. None of the prior posting's actually had a "solution" noted down. Thanks, Joel Original Message From: - Tue Oct 08 14:04:22 2002 X-Mozilla-Status: 0001 X-Mozilla-Status2: Message-ID: <[EMAIL PROTECTED]> Date: Tue, 08 Oct 2002 14:04:21 -0700 From: Joel Thompson <[EMAIL PROTECTED]> User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:0.9.4.1) Gecko/20020508 Netscape6/6.2.3 X-Accept-Language: en-us MIME-Version: 1.0 To: [EMAIL PROTECTED] Subject: samba client problems??? Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Hi, When I use smbclient from the linux (redhat 7.2) machine, with the following command, I get connected OK, but when I attempt a MAP from a Windoz 2k box (with \\10.1.1.77\ethan - and I changed the user and password), it doesn't work - it just hangs for a while and says "network path \\10.1.1.77\ethan could not be found" Any suggestions? smbclient //10.1.1.77/ethan -U joel (THIS WORKS GREAT WHEN I RUN FROM THE LINUX MACHINE). Thanks, Joel -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] File validation errors?
Two days ago I got a whole slew of smbfs errors in my system logs, all stemming from an apparent inability to read two files. Here are some samples: Oct 7 14:36:41 server kernel: smb_file_read: cur/1033577524.16219.server.iatdev.com,S=230098@2,T validation failed, error=4294967294 Oct 7 14:36:47 server last message repeated 5984 times Oct 7 14:36:47 server kernel: smb_file_read: cur/1033577524.16219.server.iatdev.com,S=230098@2,T validation failed, error=4294967294 Oct 7 14:36:47 server last message repeated 36 times Oct 7 14:36:47 server kernel: smb_file_read: cur/1033577524.16219.server.iatdev.com,S=230098@2,T validation failed, error=4294967294 Oct 7 14:36:47 server last message repeated 36 times Oct 7 14:41:53 server kernel: smb_file_read: cur/1034013088.13474.server.iatdev.com,S=263201@2,T validation failed, error=4294967294 Oct 7 14:42:25 server last message repeated 43245 times Oct 7 14:42:35 server last message repeated 19848 times Oct 7 14:43:36 server kernel: smb_file_read: cur/1034013088.13474.server.iatdev.com,S=263201@2,T validation failed, error=4294967294 Oct 7 14:43:37 server last message repeated 598 times This happened over the course of about 7 minutes (the first and last relevant log entries are shown above), and affected only the two files listed. Does anybody know what may have caused this? If it's something to worry about, what can I do to prevent it from happening again? I found in the list archives where a person got a batch of similar log entries, and it was suggested this was due to the SMB connection being dropped. I do not believe that is the case here, because there were no SMB connection errors logged during this time frame. Currently there are two servers that access the same SMB share (hosted by a Windows 2000 Server machine), and it is entirely possible the other server was accessing or even deleting these files while this server was trying to read them. Could this have caused the error messages? It seems strange that the server would try multiple thousands (!) of times to access the files if this were the case. I'm running Red Hat's release of kernel 2.4.9-34 for Red Hat 7.1. Any insight will be appreciated. If more info is needed, just let me know. Thanks! ---Kris Kelley -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] KDE
i'm using samba 2.2.5 and mandrake 8.5 as a pdc for test. Whenever i create a trust account PC123$ for a machine to login it appears as user in the KDE interface, i know its not samba specific but if i have 100 users thats a lot of $ users on the login list! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How to forbid user to login?
Hello, samba. How to forbid user to login, but user can access to the services. -- Vladimir I. Umnov mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 2.2.x and domain groups
On Wed, 2002-10-09 at 11:09, Bert Rapp wrote: > I appreciate the response, but I want to be sure I understand this fully. > > If I wanted a group DomainSpecificApplicationUsers. And then I wanted > to give this group read only permissions to a directory on an NT box. > If I am using Samba 2.2 as the PDC, I cannot do this? > right - you can't do that. you could make DomainSpecificApplicationUsers a unix group and map it to Domain Users and grant Domain Users the access you want on the client not much granularity there - thus the new group mapping stuff. brad -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 2.2.x and domain groups
I appreciate the response, but I want to be sure I understand this fully. If I wanted a group DomainSpecificApplicationUsers. And then I wanted to give this group read only permissions to a directory on an NT box. If I am using Samba 2.2 as the PDC, I cannot do this? Bradley W. Langhorst wrote: >On Wed, 2002-10-09 at 10:34, Bert Rapp wrote: > > >>I've heard mention that Samba 2.2.x does not support domain groups. >>What does this mean for me if I want to use Samba 2.2.x as a PDC. >>Will I have to select users for all permissions? And not be able to >>use groups at all? >> >> >samba2 does support >Domain Admins and >Domain Users > >you can map unix groups to those groups but you can't >make a new domain group - like Domain Power Users and use that new group >in the NT usermanager. > >arbitrary group mapping is working in samba3 (still under development) > >brad > > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ftp upload to a smbmounted folder
On Wed, 2002-10-09 at 10:52, Johan Andersson wrote: > Hello, i have a problem regarding upload/creating/deleting via ftp on smbmounted >folder.. I have smbmounted a windows > XP folder to my ftp. I use glftpd. i have tried lots of things.. -o rw dont work.. >It works fine to connect to the ftp and > DOWNLOAD from the mounted directory, but not to upload/delete. In the shell it >works while beeing "root" to > create/delete but not any other users.. What should i to make this work? i have >tried smbmount 2.0.8 and now i'm using > 2.999+3.0.alpha20-2 for Debian. > > Many thanks > Johan can you write to the mounted dir as the ftp user on the unix machine? if so then there is a problem with your ftpd if not - that's your trouble. brad -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 2.2.x and domain groups
On Wed, 2002-10-09 at 10:34, Bert Rapp wrote: > I've heard mention that Samba 2.2.x does not support domain groups. > What does this mean for me if I want to use Samba 2.2.x as a PDC. > Will I have to select users for all permissions? And not be able to > use groups at all? samba2 does support Domain Admins and Domain Users you can map unix groups to those groups but you can't make a new domain group - like Domain Power Users and use that new group in the NT usermanager. arbitrary group mapping is working in samba3 (still under development) brad -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] ftp upload to a smbmounted folder
Read the manpage for smbmount. You want the uid and gid options. Clark -Original Message- From: Johan Andersson [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 09, 2002 9:52 AM To: [EMAIL PROTECTED] Subject: [Samba] ftp upload to a smbmounted folder Hello, i have a problem regarding upload/creating/deleting via ftp on smbmounted folder.. I have smbmounted a windows XP folder to my ftp. I use glftpd. i have tried lots of things.. -o rw dont work.. It works fine to connect to the ftp and DOWNLOAD from the mounted directory, but not to upload/delete. In the shell it works while beeing "root" to create/delete but not any other users.. What should i to make this work? i have tried smbmount 2.0.8 and now i'm using 2.999+3.0.alpha20-2 for Debian. Many thanks Johan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] ftp upload to a smbmounted folder
Hello, i have a problem regarding upload/creating/deleting via ftp on smbmounted folder.. I have smbmounted a windows XP folder to my ftp. I use glftpd. i have tried lots of things.. -o rw dont work.. It works fine to connect to the ftp and DOWNLOAD from the mounted directory, but not to upload/delete. In the shell it works while beeing "root" to create/delete but not any other users.. What should i to make this work? i have tried smbmount 2.0.8 and now i'm using 2.999+3.0.alpha20-2 for Debian. Many thanks Johan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 2.2.x and domain groups
I've heard mention that Samba 2.2.x does not support domain groups. What does this mean for me if I want to use Samba 2.2.x as a PDC. Will I have to select users for all permissions? And not be able to use groups at all? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] multiple shares
I would appreciate advice on how to configure Samba, so that we can log into the various shared folders each owned by different Linux users from the same Win machine at the same time. (Does that make sense?) Currently, once logged into one of the shared folders of the Linux machine, the user name and password combination are kept throughout the session. So when we try to log into another shared Linux folder with a different owner, we are denied access and writing privileges through Windows Explorer even after the new user name and password is input. Closing and reopening Explorer does not help, either. We can log in as the second user, only by restarting the Win machine, or by going to the Linux machine and manually terminating the first session using SWAT (This of course stops the samba session of the first user). 1. Background- The names of our window machine users and linux machine are different. - Various folders of the Linux machine with different owners are set to be shared.- RedHat 7.2 and Win NT and WIN 98 systems. 2. Some of the major global settings Security = ShareValid users = names of all necessary usersWrite list = names of all necessary usersHost allow = address of necessary win machines 4. QuestionsQuestion 1.Is it possible with a Security setting of Share to login to various folders, each with different owners, at the same time? If so, what settings are necessary? Question 2.I just do not understand the relationship between Linux file/folder permissions settings and the Samba permission settings (valid users, write list, etc.). Does the samba permissions take precedent? What does the write list for each of the shared folders do, and how are these different from the global write list? Thanks for any input. I am a newbie so I would appreciate stepwise advice. Do you Yahoo!? Faith Hill - Exclusive Performances, Videos, & more faith.yahoo.com
[Samba] Newbie needing help - Samba 2.2.3a & Windows clients RDR - redirector??
Title: Newbie needing help - Samba 2.2.3a & Windows clients RDR - redirector?? Hello Guru's - I'm a new to Samba and I am having some NT 4 client problems that appear to be Samba related. We're running Samba 2.2.3a on a HPUX 11i server for sharing out a database application files (Rational Clearcase). My smb.conf file: # Global parameters [global] client code page = 437 workgroup = DEV netbios name = CMSSF server string = %h Samba %v Server security = DOMAIN encrypt passwords = Yes password server = * log file = /var/opt/samba/log.%m max log size = 50 time server = Yes load printers = No show add printer wizard = No preferred master = False local master = No domain master = False dns proxy = No wins server = xxx.xx.xx.xx kernel oplocks = No read only = No create mask = 0775 directory mask = 0775 hide dot files = No oplocks = No [rdms] comment = RDMS Clearcase dbs path = /rd1/rdms write list = @dms guest ok = Yes browseable = No (Have multiple shares configured the same way) On a few NT clients some users are having problems downloading with certain files that generate application errors while others don't get the problem. Having the user try the same operations on one of these non-problematic boxes, everything to works fine so I can rule out user/file permission problems. These errors are sporadic and do not always occur on the same file. I've noticed that at the same time as these Clearcase errors, the host's NT event log record a RDR warning - "The redirector has timed out a request to ". Looking at the Samba log files I get the following Various hosts log files having this problem has similar entries like this: [2002/10/04 10:13:43, 0] lib/util_sock.c:(436) read_data: read failure for 8015. Error = Connection reset by peer log.smbd has various entries like below: [2002/10/07 13:41:29, 5] tdb/tdbutil.c:(475) tdb((NULL)): tdb_brlock failed (fd=10) at offset 4 rw_type=2 lck_type=6 Is this SAMBA related issue or something else.. network?.. client?? Is there a config parameter that I can set to resolve these problems? Any help would be greatly appreciated as this is all new to me. Thanks Norman Dignard
[Samba] Kayak & Boat Fall Clearance
"I would like to personally thank Sea Eagle for making a product that is so well made." - Victor Bernardo Fall Clearance SaleOn Sea Eagle Inflatable Kayaks Sea Eagle 330 Our best selling product, the Sea Eagle 330 can handle up to class 3 whitewater but makes a great canoe for lake and stream paddling. An excellent all-round canoe, the SE 330 is a portable, affordable starter canoe for many different uses. Explorer 380x A serious whitewater kayak, the Explorer 380x Inflatable Kayak can also be used for long flatwater paddles and camping trips. At 12'4", this kayak has room for two adults and a week or more of gear. Built of the same 1000 denier fabric as our Sport Boats, this kayak can be inflated to 3.2 PSI. This, and hefty 12 1/2" diameter tubes give the SE 380x the structure needed to cut through rough, class 4 whitewater. Explorer 340x Our smaller size Explorer 340x kayak. Large enough to hold two adults and several days of camping gear, but small enough to make a quick, nimble whitewater kayak, the 340x gives you a lot of options. Fall Package prices valid until Thursday, October 31, 2002
Re: [Samba] new box can't join domain since switch to ldapsam
Louis-David Mitterrand wrote: > > Hello, > > Since changing to "passdb backend = ldapsam" on my debian unstable PDC > things work well, however a new winxp machine can't join the domain. > > Here is the /var/log/samba/log.smbd output. It seems the sticking point > is about a missing user RID? (the new machine is sylla). Use either ldapsam_nua as the passdb backend, or use an add machine script to add a 'unix' account for the machine. getpwnam(machinename$) must function by the time the add to the domain is attempted, or if you use the _nua hack, it will try to do without - see the doco on this one. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winbind+samba3.0 pdc on the same machine
"Hesham S. Ahmed" wrote: > > Joining the PDC to the domain is successfull. And > seems to work fine. Its just winbind that fails. Below > is my smb.conf and parts of log.winbindd. When I do > "wbinfo -t" I recieve the following error > > [root@hsalin var]# wbinfo -t > checking the trust secret via RPC calls failed > error code was NT_STATUS_UNSUCCESSFUL (0xc001) > Could not check secret > > The log.winbindd below is associated with the above > message. > > smb.conf > > [global] > workgroup = ZSQUID > netbios name = hsalin > server string = Samba 3.0alpha20 > security = user > > encrypt passwords = Yes > > passdb backend = smbpasswd > use spnego = No > > domain logons = Yes > os level = 64 > lm announce = Auto > lm interval = 60 > preferred master = Auto > local master = Yes > domain master = Auto > browse list = Yes > enhanced browsing = Yes > wins support = Yes > > admin users = root > > winbind uid = 1-2 > winbind gid = 1-2 > template homedir = /home/%D/%U > template shell = /bin/false > winbind cache time = 15 > winbind use default domain = Yes > > ; necessary share for domain controller > [netlogon] > path = /usr/local/samba/lib/netlogon > read only = yes > write list = ntadmin > > > > log.winbindd > [2002/10/08 09:24:11, 3] > nsswitch/winbindd_misc.c:winbindd_info(203) > [11569]: request misc info > [2002/10/08 09:24:18, 3] > nsswitch/winbindd_misc.c:winbindd_check_machine_acct(52) > [11570]: check machine account > [2002/10/08 09:24:18, 3] > libsmb/namequery.c:resolve_lmhosts(721) > resolve_lmhosts: Attempting lmhosts lookup for name > ZSQUID<0x1b> > [2002/10/08 09:24:18, 3] > libsmb/namequery.c:resolve_wins(628) > resolve_wins: Attempting wins lookup for name > ZSQUID<0x1b> > [2002/10/08 09:24:18, 3] > libsmb/namequery.c:resolve_wins(667) > resolve_wins: using WINS server 127.0.0.1 and tag > '*' > [2002/10/08 09:24:18, 2] > libsmb/namequery.c:name_query(404) > Got a positive name query response from 127.0.0.1 ( > 141.99.11.209 ) > [2002/10/08 09:24:18, 3] > nsswitch/winbindd_cm.c:cm_get_dc_name(281) > cm_get_dc_name: Returning DC HSALIN (141.99.11.209) > for domain ZSQUID > [2002/10/08 09:24:18, 3] > nsswitch/winbindd_cm.c:cm_get_ipc_userpass(307) > IPC$ connections done by user ZSQUID\root > [2002/10/08 09:24:18, 3] > libsmb/cliconnect.c:cli_full_connection(1199) > Connecting to host=HSALIN share=IPC$ > [2002/10/08 09:24:18, 3] > lib/util_sock.c:open_socket_out(752) > Connecting to 141.99.11.209 at port 445 > [2002/10/08 09:24:39, 1] > libsmb/cliconnect.c:cli_full_connection(1242) > failed session setup with NT_STATUS_OK I need to know why this is happening. Can you turn up the debug, or possibly get a sniffer trace? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Netlogon script with samba
Hello, I try to use a Netlogon script with Samba-LDAP 2.2.3 acting as a PDC. I have searched on several forum but I cannot manage with finding any response. Here is my configuration: --- smb.conf --- [global] workgroup = MDK server string = Samba Server %v printing = cups log file = /var/log/samba/log.%m max log size = 5000 security = user encrypt passwords = yes ldap admin dn = "cn=manager,id=1" ldap server = 10.0.1.10 ldap ssl = off ldap port = 389 ldap suffix = "id=1" ldap filter = "(&(uid=%u)(objectclass=sambaAccount))" unix password sync = Yes passwd program = /usr/local/sbin/smbldap-passwd.pl %u passwd chat = *New*password*:* %n\r *Retype*new*password*:* %n\r *all*authentication*tokens*updated*successfully* socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 logon path = "" logon script = STARTUP.BAT dns proxy = no netbios name = ThePDC map to guest = bad user password level = 0 null passwords = no os level = 0 preferred master = yes domain master = yes wins support = no dead time = 0 status = yes domain logons = yes interfaces = eth0 name resolve order = host bcast load printers = yes client code page = 850 character set = ISO8859-15 password server = 10.0.1.12 [homes] comment = Home Directories browseable = yes writable = yes available = yes public = no only user = no preexec close = no root preexec close = no [Profiles] path = /var/lib/samba/profiles browseable = no guest ok = yes writable = yes [netlogon] available = yes path = /var/lib/samba/netlogon guest ok = yes preexec close = no root preexec close = no browseable = no comment = Network Logon SErvice [printers] comment = Les imprimantes available = yes printable = yes browseable = yes public = yes --- end - smb.conf --- --- STARTUP.BAT (/var/lib/samba/netlogon) --- NET USE W: "\\THEPDC\%USERNAME%" --- end - STARTUP.BAT (/var/lib/samba/netlogon) --- When I try to bind to the PDC, I have the following log error: [2002/10/09 14:41:23, 0] rpc_server/srv_netlog.c:api_net_sam_logon(206) api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON. [2002/10/09 14:41:23, 0] rpc_server/srv_pipe.c:api_rpcTNP(1200) api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed. Can anyone point me a clue ? Thanks in advance Matthieu -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Filesystem for Samba server
On Wed, 2002-10-09 at 06:53, Donal Byrne wrote: > Thanks Yura, bust any reason why ext3 would be better? > > -Original Message- > From: Yura Pismerov [mailto:[EMAIL PROTECTED]] > Sent: 08 October 2002 22:53 > To: Donal Byrne > Cc: '[EMAIL PROTECTED]' > Subject: Re: [Samba] Filesystem for Samba server > > > > ext3 is probably the best choice. > > > Donal Byrne wrote: > > > > > Hi, > > > Sorry if this is a stupid question (bit of a newbie). I'm building a > Samba > > > fileserver on a box with a hardware raid array of about 65GB which I'm > > > hoping to share out to the local LAN . I was wondering if the filesystem > > > used (ext2,ext3, reiserfs etc) on the partition where the Samba shares > > > will reside makes much of a difference? I'd obviously like to use a > > > journalling filesystem but can't seem to find any info to guide my > choice. I think you should use XFS - 1) it is well supported by sgi 2) it is mature 3) it is fast 4) it is in use on such large filesystems already 5) acls are native I saw somewhere in this thread that someone was considering a 12 disk raid 5. I'd suggest splitting this into a couple of raid5s and use LVM if you need the space to be contiguous. I've found that performance is optimal with about 5 disks brad -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] protocol error with OpenLDAP, v3
"Malte Müller" wrote: > > I sort of succesfully installed samba2.2.5 with OpenLDAP 2.0.26 as a PDC on one > machine. > Alas the performance is very poor. Authentication process takes 10 Seconds pser, >noticable one or two seconds per "net use d:" in the logon script. > The process which consumes all CPU cycles is slap. I tried to tune with some h > help of openLDAP mailinglist members (indices, nscd), but i didn't solve the > problem. > Now I try to set up a second machine with SuSE 8.1 with OpenLDAP 2.1.x and > Samba 2.2.6pre2. It compiles and links fine, but when I try to log in > it says: > passdb/pdb_ldap.c: ldap_open_connection(216) connection opened > passdb/pdb_ldap.c: ldap_connect_system(246) Bind failed: protocol error > > I can search the ldap-database and authenticate against it from command-line > i.e. ldasearch -w -W uid=administrator. > I assume that samba can not handle ldap v3? Samba just doesn't use it by default, in 2.2. I added this to 3.0, when i got bitten by the same issue. The OpenLDAP folks decided that they would force people to use LDAPv3, unless you explicitly configured otherwise. Some distributions set this, for admin sanity. Lookup the OpenLDAP doco, and reenable v2 binds. I'll bug jerry about adding the extra 1 line to 2.2.6 before it's released. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] New User in Samba 2.2.4
I suspect it could be a problem with your passwords Please check that both the password in the unix and smbpassword ARE the same. Reset both the passwords and try again. I dont think it could be a problem because of upgrade. Check your smb.conf Do a smbclient from your samba pdc and try connecting to the samba share with that USERNAME that is giving the problem -Original Message- From: Gianluca Urbano [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 09, 2002 8:10 PM To: 'Elliot' Cc: '[EMAIL PROTECTED]' Subject: AW: [Samba] New User in Samba 2.2.4 Yes, joining the domain is not the problem but whe I try to login with an user that I have created it doesn't work. If I have a look at the two files (smbpasswd & passwd) I can see the user. I have created the user like it is described in the samba-pdc-howto but does not work. Eventually this is the problem, I have updated from an older samba version to samba-2.2.4 and now I have added this new user and this one does not work. -Ursprüngliche Nachricht- Von: Elliot [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 9. Oktober 2002 14:10 An: Gianluca Urbano Cc: [EMAIL PROTECTED] Betreff: RE: [Samba] New User in Samba 2.2.4 When you login as root when you join to the domain, what happens? Does it say WELCOME TO YOUR DOMAIN? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Gianluca Urbano Sent: Wednesday, October 09, 2002 7:55 PM To: 'Elliot' Cc: '[EMAIL PROTECTED]' Subject: AW: [Samba] New User in Samba 2.2.4 That's what I tried but I don't get any access from the windows 2000 machine to the domain. -Ursprüngliche Nachricht- Von: Elliot [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 9. Oktober 2002 13:54 An: Gianluca Urbano; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Betreff: RE: [Samba] New User in Samba 2.2.4 Just create a normal user in unix or linux .. Then use smbpassword to create a user in samba -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Gianluca Urbano Sent: Wednesday, October 09, 2002 7:38 PM To: '[EMAIL PROTECTED]' Cc: '[EMAIL PROTECTED]' Subject: AW: [Samba] New User in Samba 2.2.4 sorry but I don't understand exactly what you mean. When I create a new user I'm logged in as root. How can I create a new user with an trust account?? -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 9. Oktober 2002 13:45 An: Gianluca Urbano Betreff: Re: [Samba] New User in Samba 2.2.4 i'm new 2, but i think u need a trust account for the machine as well as the user. Gianluca Urbano ebcom.ch> cc: Sent by:Subject: [Samba] New User in Samba 2.2.4 samba-admin@lists .samba.org 09/10/2002 12:16 Hi all, I've got a question. Actually I trie to add a new user to samba with smbpasswd -a but from the Windows 2000 machine I can not login, he tells me always to check username and password. I can see the user in the smbpasswd file and as well in the passwd file. I have also tried to enable the user with smbpasswd -e but does not work. Where could the problem be? Do I have forgot something? Thanks a lot in advance Gianni -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] New User in Samba 2.2.4
Yes, joining the domain is not the problem but whe I try to login with an user that I have created it doesn't work. If I have a look at the two files (smbpasswd & passwd) I can see the user. I have created the user like it is described in the samba-pdc-howto but does not work. Eventually this is the problem, I have updated from an older samba version to samba-2.2.4 and now I have added this new user and this one does not work. -Ursprüngliche Nachricht- Von: Elliot [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 9. Oktober 2002 14:10 An: Gianluca Urbano Cc: [EMAIL PROTECTED] Betreff: RE: [Samba] New User in Samba 2.2.4 When you login as root when you join to the domain, what happens? Does it say WELCOME TO YOUR DOMAIN? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Gianluca Urbano Sent: Wednesday, October 09, 2002 7:55 PM To: 'Elliot' Cc: '[EMAIL PROTECTED]' Subject: AW: [Samba] New User in Samba 2.2.4 That's what I tried but I don't get any access from the windows 2000 machine to the domain. -Ursprüngliche Nachricht- Von: Elliot [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 9. Oktober 2002 13:54 An: Gianluca Urbano; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Betreff: RE: [Samba] New User in Samba 2.2.4 Just create a normal user in unix or linux .. Then use smbpassword to create a user in samba -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Gianluca Urbano Sent: Wednesday, October 09, 2002 7:38 PM To: '[EMAIL PROTECTED]' Cc: '[EMAIL PROTECTED]' Subject: AW: [Samba] New User in Samba 2.2.4 sorry but I don't understand exactly what you mean. When I create a new user I'm logged in as root. How can I create a new user with an trust account?? -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 9. Oktober 2002 13:45 An: Gianluca Urbano Betreff: Re: [Samba] New User in Samba 2.2.4 i'm new 2, but i think u need a trust account for the machine as well as the user. Gianluca Urbano ebcom.ch> cc: Sent by:Subject: [Samba] New User in Samba 2.2.4 samba-admin@lists .samba.org 09/10/2002 12:16 Hi all, I've got a question. Actually I trie to add a new user to samba with smbpasswd -a but from the Windows 2000 machine I can not login, he tells me always to check username and password. I can see the user in the smbpasswd file and as well in the passwd file. I have also tried to enable the user with smbpasswd -e but does not work. Where could the problem be? Do I have forgot something? Thanks a lot in advance Gianni -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Please assist with Winbind issues!
Sven, Being somewhat of a newbie, I cannot comment on everything that you've included here with authority, but I did notice a typographic error in the pam_winbind.so line for PAM account checking in your "/etc/pam.d/system-auth" file. It's pointed out below. Seems like that could be the problem since you can authenticate, but just not with the correct account. John Reinhardt >Message: 14 >From: [EMAIL PROTECTED] >To: [EMAIL PROTECTED] >Date: Tue, 8 Oct 2002 17:29:23 -0400 >Subject: [Samba] Please assist with Winbind issues! > <> >Here is my /etc/pam.d/system-auth > >authrequired /lib/security/pam_env.so >authsufficient/lib/security/pam_winbind.so >authsufficient/lib/security/pam_unix.so likeauth nullok >use_first_pa >ss >authrequired /lib/security/pam_deny.so > >account sufficient/lib/secutiry/pam_winbind.so ^^^ <== Typo here... >account required /lib/security/pam_unix.so > >passwordrequired /lib/security/pam_cracklib.so retry=3 >passwordsufficient/lib/security/pam_unix.so nullok use_authtok md5 >shado >w >passwordrequired /lib/security/pam_deny.so > >session required /lib/security/pam_mkhomedir.so skel=/etc/skel/ >umask=0 >022 >session required /lib/security/pam_limits.so >session required /lib/security/pam_unix.so > >Here is my /etc/samba/smb.conf: > >[global] > workgroup = CHICAGO > netbios name = SILCHRS03 > server string = > security = DOMAIN > encrypt passwords = Yes > password server = * > log level = 3 > log file = /var/log/samba/log.%m > max log size = 50 > large readwrite = Yes > name resolve order = host wins bcast > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > load printers = No > preferred master = False > local master = No > domain master = False > dns proxy = No > wins server = 172.30.XXX.XXX > winbind uid = 1-5 > winbind gid = 1-5 > template shell = /bin/bash > guest account = ftp > invalid users = root bin daemon adm sync shutdown halt mail news > uucp operator gopher > printer admin = +PrinterAdmins > nt acl support = No > printing = cups > >[homes] > comment = Home Directories > read only = No > browseable = No > >[printers] > comment = All Printers > path = /var/spool/samba > printable = Yes > browseable = No > > >I really want this to work, so any help is appreciated. >Please include my e-mail address in any replies. > >Thank you! > > >Sven -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] New User in Samba 2.2.4
When you login as root when you join to the domain, what happens? Does it say WELCOME TO YOUR DOMAIN? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Gianluca Urbano Sent: Wednesday, October 09, 2002 7:55 PM To: 'Elliot' Cc: '[EMAIL PROTECTED]' Subject: AW: [Samba] New User in Samba 2.2.4 That's what I tried but I don't get any access from the windows 2000 machine to the domain. -Ursprüngliche Nachricht- Von: Elliot [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 9. Oktober 2002 13:54 An: Gianluca Urbano; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Betreff: RE: [Samba] New User in Samba 2.2.4 Just create a normal user in unix or linux .. Then use smbpassword to create a user in samba -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Gianluca Urbano Sent: Wednesday, October 09, 2002 7:38 PM To: '[EMAIL PROTECTED]' Cc: '[EMAIL PROTECTED]' Subject: AW: [Samba] New User in Samba 2.2.4 sorry but I don't understand exactly what you mean. When I create a new user I'm logged in as root. How can I create a new user with an trust account?? -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 9. Oktober 2002 13:45 An: Gianluca Urbano Betreff: Re: [Samba] New User in Samba 2.2.4 i'm new 2, but i think u need a trust account for the machine as well as the user. Gianluca Urbano ebcom.ch> cc: Sent by:Subject: [Samba] New User in Samba 2.2.4 samba-admin@lists .samba.org 09/10/2002 12:16 Hi all, I've got a question. Actually I trie to add a new user to samba with smbpasswd -a but from the Windows 2000 machine I can not login, he tells me always to check username and password. I can see the user in the smbpasswd file and as well in the passwd file. I have also tried to enable the user with smbpasswd -e but does not work. Where could the problem be? Do I have forgot something? Thanks a lot in advance Gianni -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] New User in Samba 2.2.4
That's what I tried but I don't get any access from the windows 2000 machine to the domain. -Ursprüngliche Nachricht- Von: Elliot [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 9. Oktober 2002 13:54 An: Gianluca Urbano; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Betreff: RE: [Samba] New User in Samba 2.2.4 Just create a normal user in unix or linux .. Then use smbpassword to create a user in samba -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Gianluca Urbano Sent: Wednesday, October 09, 2002 7:38 PM To: '[EMAIL PROTECTED]' Cc: '[EMAIL PROTECTED]' Subject: AW: [Samba] New User in Samba 2.2.4 sorry but I don't understand exactly what you mean. When I create a new user I'm logged in as root. How can I create a new user with an trust account?? -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 9. Oktober 2002 13:45 An: Gianluca Urbano Betreff: Re: [Samba] New User in Samba 2.2.4 i'm new 2, but i think u need a trust account for the machine as well as the user. Gianluca Urbano ebcom.ch> cc: Sent by:Subject: [Samba] New User in Samba 2.2.4 samba-admin@lists .samba.org 09/10/2002 12:16 Hi all, I've got a question. Actually I trie to add a new user to samba with smbpasswd -a but from the Windows 2000 machine I can not login, he tells me always to check username and password. I can see the user in the smbpasswd file and as well in the passwd file. I have also tried to enable the user with smbpasswd -e but does not work. Where could the problem be? Do I have forgot something? Thanks a lot in advance Gianni -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] New User in Samba 2.2.4
Just create a normal user in unix or linux .. Then use smbpassword to create a user in samba -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Gianluca Urbano Sent: Wednesday, October 09, 2002 7:38 PM To: '[EMAIL PROTECTED]' Cc: '[EMAIL PROTECTED]' Subject: AW: [Samba] New User in Samba 2.2.4 sorry but I don't understand exactly what you mean. When I create a new user I'm logged in as root. How can I create a new user with an trust account?? -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 9. Oktober 2002 13:45 An: Gianluca Urbano Betreff: Re: [Samba] New User in Samba 2.2.4 i'm new 2, but i think u need a trust account for the machine as well as the user. Gianluca Urbano ebcom.ch> cc: Sent by:Subject: [Samba] New User in Samba 2.2.4 samba-admin@lists .samba.org 09/10/2002 12:16 Hi all, I've got a question. Actually I trie to add a new user to samba with smbpasswd -a but from the Windows 2000 machine I can not login, he tells me always to check username and password. I can see the user in the smbpasswd file and as well in the passwd file. I have also tried to enable the user with smbpasswd -e but does not work. Where could the problem be? Do I have forgot something? Thanks a lot in advance Gianni -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Problem with mails
Hhehe Sorry guys... Was just testing it out .. Seems that I have been only getting mailing list digest.. Is it that something is wrong with my account or is no one posting to the samba mailing list? -Original Message- From: Gareth Davies [mailto:[EMAIL PROTECTED]] Sent: Wednesday, October 09, 2002 7:47 PM To: Elliot Subject: Re: [Samba] Problem with mails Yes of course we can we're all Psychic :) Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. - Original Message - From: "Elliot" <[EMAIL PROTECTED]> To: "Samba Mailing List" <[EMAIL PROTECTED]> Sent: Wednesday, October 09, 2002 12:43 PM Subject: [Samba] Problem with mails > I got a problem sending to this mail listing. Can someone pls figure > it out? > > > > cheers` > > Elliot Williams > IT Executive > - > > ebius tagline. This is a moebius tagline. This is a mo > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] New User in Samba 2.2.4
sorry but I don't understand exactly what you mean. When I create a new user I'm logged in as root. How can I create a new user with an trust account?? -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Gesendet: Mittwoch, 9. Oktober 2002 13:45 An: Gianluca Urbano Betreff: Re: [Samba] New User in Samba 2.2.4 i'm new 2, but i think u need a trust account for the machine as well as the user. Gianluca Urbano ebcom.ch> cc: Sent by:Subject: [Samba] New User in Samba 2.2.4 samba-admin@lists .samba.org 09/10/2002 12:16 Hi all, I've got a question. Actually I trie to add a new user to samba with smbpasswd -a but from the Windows 2000 machine I can not login, he tells me always to check username and password. I can see the user in the smbpasswd file and as well in the passwd file. I have also tried to enable the user with smbpasswd -e but does not work. Where could the problem be? Do I have forgot something? Thanks a lot in advance Gianni -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with mails
I got a problem sending to this mail listing. Can someone pls figure it out? cheers` Elliot Williams IT Executive - ebius tagline. This is a moebius tagline. This is a mo -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Numéro de procédure hors de l'intervalle admis
Hello, I have a problem to integrate a PC Windows 2000 Professionnal in te samba domain. The message of error is "Numéro de procédure hors de l'intervalle admis". Could you help me, i am waiting for your answer. I have Suse Linux 7.2 and Samba version 2.2. Thank you. Serge Voide Cycle d'orientation Grône 3979 Grône (VS) Suisse [EMAIL PROTECTED]
Re: [Samba] SAMBA problem: nmblookup
Are you sure nmbd is running? The cat services just shows the ports involved. try ps ax | grep nmbd 21017 ?S 0:06 /usr/local/samba/bin/nmbd -D 9546 ttyp2S 0:00 grep nmbd or netstat -an | egrep 13[789] tcp 52 0 192.168.0.2:2960192.168.0.6:139 ESTABLISHED tcp0 0 0.0.0.0:139 0.0.0.0:* LISTEN udp0 0 192.168.0.2:138 0.0.0.0:* udp0 0 192.168.0.2:137 0.0.0.0:* udp0 0 0.0.0.0:138 0.0.0.0:* udp0 0 0.0.0.0:137 0.0.0.0:* Try netstat -anp if your box supports the p option. It shows which daemon is listening. Joel -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] compile
Hi There. I downloaded the samba vscan 025e. I seem to have trouble installing the fprot addon. I dunno how to carry on from after copying the fprot directory to my /samba-2.2.5/examples/VFS directory. The part where is says Make :-)is where I am confused. How do I make the vscan-fprotd.so I actually have a working samba PDC. The openantivirus website mentioned that I should compile my samba with VFS support. So I did a ./configure --enable vfs Is that all it is required? .. I checked the samba manual and it does not mention anything about this. Please help. Btw, I am using mandrake 9.0 cheers` Elliot Williams IT Executive - Do not seek to follow in the footsteps of the men of old; Seek what they sought. - Basho -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] New User in Samba 2.2.4
Hi all, I've got a question. Actually I trie to add a new user to samba with smbpasswd -a but from the Windows 2000 machine I can not login, he tells me always to check username and password. I can see the user in the smbpasswd file and as well in the passwd file. I have also tried to enable the user with smbpasswd -e but does not work. Where could the problem be? Do I have forgot something? Thanks a lot in advance Gianni -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Filesystem for Samba server
Thanks Yura, bust any reason why ext3 would be better? -Original Message- From: Yura Pismerov [mailto:[EMAIL PROTECTED]] Sent: 08 October 2002 22:53 To: Donal Byrne Cc: '[EMAIL PROTECTED]' Subject: Re: [Samba] Filesystem for Samba server ext3 is probably the best choice. Donal Byrne wrote: > > > Hi, > > Sorry if this is a stupid question (bit of a newbie). I'm building a Samba > > fileserver on a box with a hardware raid array of about 65GB which I'm > > hoping to share out to the local LAN . I was wondering if the filesystem > > used (ext2,ext3, reiserfs etc) on the partition where the Samba shares > > will reside makes much of a difference? I'd obviously like to use a > > journalling filesystem but can't seem to find any info to guide my choice. > > > > Thanks > > Donal > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: Protocol error with ldapv3
Syslog slow down slapd, if you 'forgot' the "-" just before /dev/tty??. With "-" in front of the outputfile, the syslog writes a asynchron. No.: local4.*-/var/log/ldap.log Besides, I tried to set 'loglevel 0' in slapd.conf. Every operation I try, all types of query are fast. Only when it comes to Samba things slow down. Its shure not samba to blame but I have no Ideas any more what I could change. Anyway got anybody ldapv3 to work with samba2.2.x? Thanks, Malte Mueller -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] protocol error with OpenLDAP, v3
On Tue, Oct 08, 2002 at 05:18:04PM +0200, Malte Müller wrote: > I sort of succesfully installed samba2.2.5 with OpenLDAP 2.0.26 as a PDC on one > machine. > Alas the performance is very poor. Authentication process takes 10 > Seconds pser, noticable one or two seconds per "net use d:" in the > logon script. The process which consumes all CPU cycles is slap. I > tried to tune with some h > help of openLDAP mailinglist members (indices, nscd), but i didn't solve the > problem. The first time a have a performance problem with slapd, a don't think about syslog. Syslog slow down slapd, if you 'forgot' the "-" just before /dev/tty??. With "-" in front of the outputfile, the syslog writes a asynchron. If not try to increase the debug level of slapd: loglevel296 # 8+32+256: # # connection management # # search filter processing # # stats logconnections/operations/results Take a look at "man slapd.conf" for the values. Frank. -- Frank Matthieß[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Joining a domain with smbpasswd
Hi everybody, I need help for joining my linux box to an existing NT domain. I'm using Red Hat 7.3 with samba 2.2.5 compiled with the Red Hat defaults plus "--with-winbind-auth-challenge". I've set up my smb.conf file and joined my DOMAIN with smbpasswd -j DOMAIN -r PDC -U Administrator Now I would like to do the same thing using a non-administrator NT account after having registered the linux box in the NT SAM: smbpasswd -j DOMAIN -r PDC -U user I now this works fine for native NT box joining the domain. Another thing I would like to do is to join separate domain or to configure winbindd to authenticate against separate not-trusted domain. Is it possible? Am I dreaming? :) If my questions are already answerd somewhere, please let me know an sorry for the lost of bandwidth. Thank you very much. ciao Michele De Martin -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Please assist with Winbind issues!
Have you tried: Manually putting password server = IP adress rather than *. [homes] comment = Home Directories browseable = no writable = yes valid users =%D+%S The chmod for home directory should be 700, chown to the user and chown group to 'DOMAIN+Domain Users' If you can use getent passwd and getent groups I presume it's just a permissions thing. I haven't been able to get pam_mkhomedir.so to work so I just manually create the accounts. I'm just writing a guide on how to do it now on Debian 3.0. Good luck, Shaolin - IT Systems WB Ltd. .: http://www.security-forums.com :. - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, October 08, 2002 10:29 PM Subject: [Samba] Please assist with Winbind issues! > Hello, > > I've been trying for a couple of weeks now to get Samba to authenticate via Winbind to an NT domain. I've scoured Google and the mailing lists to no avail. I've tried various configurations that I've found during my searches, but none of them have worked for me. > > I need to be able to authenticate users, that do not have an account on the Linux box, against the NT domain, and automatically create a home directory for them. This is the purpose of Winbind (except the home directory part, which pam_mkhomedir is supposed to do), as I understand it. Something between winbind and pam is failing since the connecting user gets authenticated as guest rather than an actual user. > > My current configuration is RedHat 7.3 and Samba 2.2.5. My most current samba installation is an RPM generated via the makerpms.sh script in the packaging/RedHat folder of the 2.2.5 samba distribution. > > I've added the following compilation flags in the samba2.spec file: This is my latest attempt, since nothing else seemed to work. > > --with-ssl \ > --with-sslinc=/usr/include/openssl \ > --with-ssllib=/usr/lib/ssl \ > --with-acl-support \ > --with-winbind \ > --with-winbind-auth-challenge \ > > 'getent passwd' and 'getent group' work properly so I think winbind works, too. I think the problem lies somewhere with pam, but I'm not a pam guru by any stretch of the imagination. > > The problem is one I've seen discussed a couple of times, but have not seen any kind of resolution. The next few lines are from the log file of the client attempting to connect to the server with an account called ilchtest. > > [2002/10/08 15:00:50, 3] lib/util_sock.c:open_socket_out(845) > Connecting to 10.226.XXX.XXX at port 139 > [2002/10/08 15:00:50, 3] smbd/reply.c:reply_sesssetup_and_X(1045) > No such user ilchtest [CHICAGO] - using guest account > > > > The following is the last line of what 'winbindd -d5 -i' spits out when I start it from the root prompt: > > tdb(unknown): tdb_brlock failed (fd=10) at offset 4 rw_type=1 lck_type=13> > > > The following is what 'winbindd -d5 -i' spits out when the client trys to connect: > > rpc_read: num_read = 4, read offset: 0, to read: 4 > 18 samr_io_r_close_hnd > 0018 data1: > 001c data2: > 0020 data3: > 0022 data4: > 0024 data5: 00 00 00 00 00 00 00 00 > 002c status: NT_STATUS_OK > [23826]: sid to gid S-1-5-21-178404139-331375567-1660491571-2273 > [23826]: gid to sid 1 > [23826]: gid to sid 10001 > [23826]: getgroups ftp <---Guest account was nobody and I changed it to ftp. > > > > Here is my /etc/nsswitch.conf > > passwd: files winbind > shadow: files > group: files winbind > > #hosts: db files nisplus nis dns > hosts: files winbind dns > > > > > > Here is my /etc/pam.d/system-auth > > authrequired /lib/security/pam_env.so > authsufficient/lib/security/pam_winbind.so > authsufficient/lib/security/pam_unix.so likeauth nullok use_first_pa > ss > authrequired /lib/security/pam_deny.so > > account sufficient/lib/secutiry/pam_winbind.so > account required /lib/security/pam_unix.so > > passwordrequired /lib/security/pam_cracklib.so retry=3 > passwordsufficient/lib/security/pam_unix.so nullok use_authtok md5 shado > w > passwordrequired /lib/security/pam_deny.so > > session required /lib/security/pam_mkhomedir.so skel=/etc/skel/ umask=0 > 022 > session required /lib/security/pam_limits.so > session required /lib/security/pam_unix.so > > Here is my /etc/samba/smb.conf: > > [global] > workgroup = CHICAGO > netbios name = SILCHRS03 > server string = > security = DOMAIN > encrypt passwords = Yes > password server = * > log level = 3 > log file = /var/log/samba/log.%m > max log size = 50 > large readwrite = Yes > name resolve order = host wins bcast > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > load printers = No > preferred master = False > local master = No > domain master = False > dns proxy = No >
[Samba] What version of Samba can work on Solaris 2.9 ?
Dear all, I am a newbie on SUN Solaris. Can anyone tell me what is the version can work on Solaris 2.9. I can only find the latest file "samba-2.2.4-sparc-solaris-2.8.pkg.gz" on Samba FTP Site. Does this one will work on Solaris 2.9 ? Thanks and regards, Kevin -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba with Win2000SRV as DC (with active dir.)
Hi, is there anybody who use Samba with Win2000srv (it is DC)? When I upgrade from WinNT to Win2000 I cannot set user right on directories on Samba´s PC. When I have NT with Samba then user data information (user acconouts) are replicated between NT and Samba, but with Win2000SRV it does not work. Can you help me? --- Odchozí zpráva neobsahuje viry. Zkontrolováno antivirovým systémem AVG (http://www.grisoft.cz). Verze: 6.0.394 / Virová báze: 224 - datum vydání: 3.10.2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How to access the RAS settings of the NT domain users with help of Samba ?
Hello all, Could somebody help me with this question please: Is there a way to get the information on whether dial-in is granted to the user, is there a callback set for him and what is the callback number provided we know the username and password ? Best regards, -- Serhiy Radochyn -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 2.2.5 - Managing ACL?
Dear All I'm currently playing with Linux Mandrake 8.2 and Samba 2.2.5 rpm. I have sucessfully managed to creaate a "domain" called NTGX , where i can now authenticate users etc. I am using Winbind as well. Do i need the PAM support so that i can use USERMGR and manage ACL's via a Domain Admin on W2K? kind regards rod -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] w2k machine fails to join Samba PDC domain
Hi, I have trouble to join a new w2k machine with SP3 and pre-SP4 hotfix into our Samba PDC (2.2.5). It works in a machine which as only SP3. I haven't yet tried remove the hotfix and it will be my next step. I have turned log level to 10 but I didn't see any error message on Samba side. Any suggest which I can debug this problem. Thanks, -Calvin -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Filesystem for Samba server
Le mer 09/10/2002 à 01:21, Omar Castaneda Acosta a écrit : > I've been thinking on this subject before, I'm setting up a 2 TB storage server > and I would like some advice on how would be the best way to setup the > disks (it's a 12*200GB array, single logical unit RAID5). Not that I don't trust > ext3, but some feedback would help. This is sort of untopic, so please don't reply > to the list. yes, please DO -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
