[Samba] Error when add machine
Hi, I used samba+ldap on rh8. FirstI add machine to my-domain then I remove that from my-domain. I restart it and add to my-domain again. But I can't add it to my-domain. Error was shown "The specified user does not exist" Although that machine was appeared in ldap because of the first addition (uid=computer1,dc=my-domain,dc=com) Thank you.With Yahoo! Mail you can get a bigger mailbox -- choose a size that fits your needs
[Samba] Integrating a samba server in a samba controlled domain
Hi ! I have followed the Samba-Howto, but I still have some problems. Our network is composed of Win2K stations and two samba servers (2.2.5) running under SuSE Linux 8.1. HIROSHIMAN is configured as PDC (domaine CHERYLNET) and everything is running fine, from login to share and printer access. VLOUCHI is a second file server and its workgroup (thus domain) is also CHERYLNET ; security is set to domain and password server to HIROSHIMAN. The goal is that VLOUCHI shares the same userbase than HIROSHIMAN After having logged on on the W2K station, when I go to HIROSHIMAN, everything works fine. But when I first try to go to the VLOUCHI server, I am asked to give in a login/pwd. I cannot connect to the server even if a provide a pair which I know to exist on the PDC. I also have create a Linux account for my test user on VLOUCHI, but this does not help neither. Any help would be greatly appreciated Kind regards, Gerd C. Michalke -- -- [EMAIL PROTECTED]\\_// (. .) Powered by SuSE Linux 8.1 ---oOOo-oOOo-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] can't print more copys than one
Yeah -- it works ! At least it was a driver problem! I tested a few other drivers -- originally I took the ones from the HP homepage .. now I took the maybe older drivers from the original CDROM and they work well !! So now .. I'm happy *g* thx for advance! Phil On Sun, 15 Dec 2002 15:42:02 -0500 Joel Hammer [EMAIL PROTECTED] wrote: I assume you get multiple copies when the printer is connected directly to the windows client. We had the same complaint a while back. Are you the same person that complained before? I looked into how the multiple copy thing worked at that time. I did some testing. I used a postscript format for the print jobs. From both linux (abiword) and windows (word), only a single document is sent to print. Contained within each document was the code (postscript is a computer language which runs on some printers.) to output multiple copies. That is, samba has no influence on the number of copies printed, at least with postscript printers. So, maybe this is a driver problem, not a samba problem? Shifting now to pure speculation, maybe the windows client computer and the printer need to be in two way communication to allow multiple copies to be printed. I have found (On my little home network) that the best solution to most printing problems is to set up a queue on the linux server which handles postscript files well, and then send everything to that queue as a postscript job. I use HP Laserjet III + and it works fine, and all flavors of windows seems to have that printer driver available. Joel On Sun, Dec 15, 2002 at 03:46:42PM +0100, Phil wrote: I'm using Samba 2.2.3 (Debian-testing) and CUPS 1.1.15 with a HP-Deskjet950c Printing from all Linux-Clients works fine. I also can print any document from the Windows-Boxes ( XP 2k ). The Problem is : If I want to make more copys than one I still get one paper printed out! This problem only appears when printing from Windows to the Samba-Share. I also tested lpr/lpd printer spooling system - same result: With Windows I could only make one copy of the document. With Linux all works fine. my smb.conf : [global] workgroup = IMMORTUX netbios name = blub guest account = blub server string = %h server (Samba %v) load printers = yes printcap name = /etc/printcap.cups printing = bsd # I also testet with option 'cups' and without option 'print command' same result.. invalid users = root log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 security = share encrypt passwords = false dns proxy = no passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n . obey pam restrictions = yes [printers] comment = All Printers browseable = yes path = /tmp printable = yes public = yes print command = /usr/bin/lpr -o raw -P%p -r %s create mode = 0700 guest ok = yes I read the docu without getting new ideas so the mailinglist is my last hope *g* thx4reading Phil -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Integrating a samba server in a samba controlled domain
Have you correctly configured Winbind? If you haven't the second machine won't be able to authenticate domain users against the first. Read the winbind section in the how-to. Gareth Davies Willowbrook I.T. Ext. 235 - Original Message - From: Gerd-Christian Michalke [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, December 18, 2002 9:31 AM Subject: [Samba] Integrating a samba server in a samba controlled domain Hi ! I have followed the Samba-Howto, but I still have some problems. Our network is composed of Win2K stations and two samba servers (2.2.5) running under SuSE Linux 8.1. HIROSHIMAN is configured as PDC (domaine CHERYLNET) and everything is running fine, from login to share and printer access. VLOUCHI is a second file server and its workgroup (thus domain) is also CHERYLNET ; security is set to domain and password server to HIROSHIMAN. The goal is that VLOUCHI shares the same userbase than HIROSHIMAN After having logged on on the W2K station, when I go to HIROSHIMAN, everything works fine. But when I first try to go to the VLOUCHI server, I am asked to give in a login/pwd. I cannot connect to the server even if a provide a pair which I know to exist on the PDC. I also have create a Linux account for my test user on VLOUCHI, but this does not help neither. Any help would be greatly appreciated Kind regards, Gerd C. Michalke -- -- [EMAIL PROTECTED]\\_// (. .) Powered by SuSE Linux 8.1 ---oOOo-oOOo-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Integrating a samba server in a samba controlled domain
I rewrite you mail from list : You have not yet joined the Samba machine to the domain, so the domain controller doesn't know the machine yet. Here's what I understand you'll need to do; others may have more to say on the subject: Use smbpasswd (as root) to add the machine VLOUCHI to the domain. There are two ways this is done: a. If the computer's trust account is already set up on the domain controller, do: smbpasswd -j DN where DN is the name of the domain you're joining. b. If the trust account is not set up on the PDC, do this: smbpasswd -j DN -U username where username is a name authorized to add computers to the domain. If you don't have such a username, you'll have to get a suitable admin to add the trust account on the PDC and then do step a above. HTH, Ray Simard - Original Message - From: Gerd-Christian Michalke [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, December 18, 2002 10:31 AM Subject: [Samba] Integrating a samba server in a samba controlled domain Hi ! I have followed the Samba-Howto, but I still have some problems. Our network is composed of Win2K stations and two samba servers (2.2.5) running under SuSE Linux 8.1. HIROSHIMAN is configured as PDC (domaine CHERYLNET) and everything is running fine, from login to share and printer access. VLOUCHI is a second file server and its workgroup (thus domain) is also CHERYLNET ; security is set to domain and password server to HIROSHIMAN. The goal is that VLOUCHI shares the same userbase than HIROSHIMAN After having logged on on the W2K station, when I go to HIROSHIMAN, everything works fine. But when I first try to go to the VLOUCHI server, I am asked to give in a login/pwd. I cannot connect to the server even if a provide a pair which I know to exist on the PDC. I also have create a Linux account for my test user on VLOUCHI, but this does not help neither. Any help would be greatly appreciated Kind regards, Gerd C. Michalke -- -- [EMAIL PROTECTED]\\_// (. .) Powered by SuSE Linux 8.1 ---oOOo-oOOo-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Integrating a samba server in a samba controlled domain
On Mittwoch, 18. Dezember 2002 11:23, Marian Mlcoch, Ing wrote: I rewrite you mail from list : You have not yet joined the Samba machine to the domain, so the domain controller doesn't know the machine yet. Here's what I understand you'll need to do; others may have more to say on the subject: Use smbpasswd (as root) to add the machine VLOUCHI to the domain. There are two ways this is done: a. If the computer's trust account is already set up on the domain controller, do: smbpasswd -j DN where DN is the name of the domain you're joining. b. If the trust account is not set up on the PDC, do this: smbpasswd -j DN -U username where username is a name authorized to add computers to the domain. If you don't have such a username, you'll have to get a suitable admin to add the trust account on the PDC and then do step a above. The trust did actually exist (sorry, I forgot to mention it) ; I have a Linux user named vlouchi$ and in /etc/samba/smbpasswd, the line with vlouchi$ also does exist, so I guess it must be OK. By typing smbclient -L hiroshiman I saw that I had a DNS problem, which I resolved into adding the adhoc entries in /etc/hosts (ok, it is quick and dirty) Typing smbpasswd -j CHERYLNET -r HIROSHIMAN -U root Now works, but I cannot still access to the share on VLOUCHI I guess, I'll have to dig into Winbind, now. Oh yes, I forgot to mention, I am really a Samba and Windows networks newbie, so thanks a lot for your patience Regards Gerd HTH, Ray Simard -- -- [EMAIL PROTECTED]\\_// (. .) Powered by SuSE Linux 8.1 ---oOOo-oOOo-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How important are oplocks?
oplocks are great when they work. So, they can be left on. But, some times that can result in corrupted files back on the server if the client machine and the server lose contact with each other. Experiment and see. oplocks can be enabled on a per share basis, I believe. A lot may depend on the quality of your network. Joel Hello, I'm wondering just how critical it really is to turn off oplocks. It appears that not only Windows 2k server, but also Netware 5 and above defaults to having these enabled. I just spoke with two software companies running databases off of file servers (no database server, just MDAC stuff), and they had never heard of it, much less require it to be disabled. Everything I've read online says to turn them off, but I'm getting a serious performance hit with these turned off, compared to the Netware server that Samba just replaced. Comments??? Bob -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Pretty much a newbie - Profiles and XP
Hi, how can I make my Samba PDC create roaming profiles for my XP-Environments? Further I would like to know whether there is the possiblity to remote (from XP) administer the Samba-Server. Thanks, Martin -- == I. Thessalonians 4:16 Thanks, Dad, for just letting me be a nerd. We don't stop playing because we grow older, We grow older because we stop playing. Being paranoid does not mean they are not out to get you. Important Information: This is best viewed with Netscape Explorer 21.5, at 3200x1800 pixels with 8xFSAA, 48bit color, 27 TFT (16x9), and a nail in the knee. == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] master browser election between samba bdc ang nt pdc
Hi!, I have several samba machine on my NT domain, they are all configured to be the BDC for the NT4 PDC. Just recent I notice on the event log of my PDC that the samba BDC are announcing that they believe to the master browser for my domain. what seems to be the problem and only the two of them when there 4 of them. Below is a copy of the smb.conf of the two servers. # Global parameters [global] workgroup = NCCC.COM netbios name = DATASERVER server string = NCCC Data Server Samba %v (RedHat 7.3) security = DOMAIN encrypt passwords = Yes password server = davao davao2 inventory replicator log file = /var/log/samba/%m.log max log size = 0 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = No wins server = 10.33.33.1 winbind uid = 1-2 winbind gid = 1-2 winbind separator = + printing = lprng Thanks, Jhun Bacala -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Synching browsing with two subnets
You add or distribute via DHCP the WINS configuration to your stations??? ... - Original Message - From: Shishir Singhai [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, December 09, 2002 11:03 PM Subject: RE: [Samba] Synching browsing with two subnets Yes Wins Server is on Master Samba cheers:) Shishir Singhai -Original Message- From: Joel Hammer [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 10, 2002 5:51 PM To: Shishir Singhai; [EMAIL PROTECTED] Subject: Re: [Samba] Synching browsing with two subnets Have you installed a wins server? Joel On Tue, Dec 10, 2002 at 05:29:59AM +0530, Shishir Singhai wrote: Hi All I had got two subnets A (192.168.1.xxx) and B (192.168.2.xxx). both subnets A and B are connected to one server (FreeBSD4.5) which takes care of routing, Proxy and a samba server (Master) browser. Subnet B also has one samba server (local). Both subnets have Win-95/98/ME clients. I am stuck in synchronizing both the subnets browsing. I can browse but its two slow and often clients go off and on from the Intranet. Both subnets have approx 20-25 clients. One subnet is on a 10/100 Mbps Hub and other on 100 Mbps Switch. Thanks in advance :) Regards Shishir Singhai -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.431 / Virus Database: 242 - Release Date: 17/12/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Pretty much a newbie - Profiles and XP
On Wednesday 18 December 2002 12:49, Martin Peter Hanke wrote: Hi, how can I make my Samba PDC create roaming profiles for my XP-Environments? Further I would like to know whether there is the possiblity to remote (from XP) administer the Samba-Server. Thanks, Martin For the roaming profiles read the documentation. It's covered in smb.conf(5). For remote administration, there's swat which is included with the source code distribution. Most package maintainers split samba up into a myriad of different packages and you'll have to look for it. Might already be installed. Or you just ssh into your samba server and use the command line. Which is my preferred method. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] multiple permissions, multiple groups
Hi, I have a problem, i can specify permissions on a specific share by using Security and access control after clicking on the share in the share listing, but when i save and save again and go back to the share listings its picking up one of the permissions settings and not the other. eg. i specify read only groups as test and read/write groups as garith then when i save and save again i see that says Read only to group test Read/write to all other known users is there a way for me actually specify that the read/write permissions are only for group garith instead of it saying to all other known uswers? thank you garith -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How important are oplocks?
But, some times that can result in corrupted files back on the server if... ... no need to say more :-) IMHO, this is a real good reason to disable oplocks. I don't believe that in a production environment one could take such a risk. I personaly had Excel files corrupted. Had to take it back from backup sets. I really had to find good BOFH excuses for my users :-/ Editing the corrupted .xls file, I found that Samba loggued kind of samba log output in it instead putting it to /var/log/log.smbd :-) Search for my mail on bug 26128 in this list for example and/or more info. I really think oplocks could be is real good thing if there were no such risks using it :-) Cheers, -- Jean-Paul ARGUDO -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba pdc, Norton Ghost enterprise edition and joining the domain?
Lars, You could try a batch file with NETDOM /Domain:MYDOMAIN /user:adminuser /password:apassword MEMBER MYCOMPUTER /JOINDOMAIN Then NETDOM /Domain:MYDOMAIN MEMBER MYCOMPUTER /JOINDOMAIN search microsoft.com for comand line join domain for more info. Bob -Original Message- From: Lars O. Grobe [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 18, 2002 7:53 AM To: [EMAIL PROTECTED] Subject: [Samba] Samba pdc, Norton Ghost enterprise edition and joining the domain? Hi List. We have a Samba 3.0pre21 PDC set up here on our prim. fileserver. We use Windows 2000 SP2 on our PC clients. We install clients with system images from disk and than install applications from one central machine running Norton Ghost EE. Ghost has the functionality not only to install the software from the console on the ghost server, but it is also able to make the clients join the domain. So we would not have to go to the client, log in as admin and join the domain, but could make this part of our remote installation procedure. However, we have not been able to do this with our samba pdc. Is there anybody out there with a similar configuration and attempts to integrate Ghost into a Samba-controlled domain? Or are there other (better) ways to remot-join the domain? Thank You, CU, Lars. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re[2]: [Samba] Samba domain with non-domain Win98
Hello, Bob. No effects. In log I see: [2002/12/18 16:55:36, 0] smbd/password.c:domain_client_validate(1556) domain_client_validate: could not fetch trust account password for domain OFFICE [2002/12/18 16:55:36, 2] smbd/reply.c:reply_sesssetup_and_X(982) Defaulting to Lanman password for test [2002/12/18 16:55:36, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'test' in passdb. [2002/12/18 16:55:36, 1] smbd/reply.c:reply_sesssetup_and_X(998) Rejecting user 'test': authentication failed [2002/12/18 16:55:36, 0] smbd/password.c:domain_client_validate(1556) domain_client_validate: could not fetch trust account password for domain OFFICE [2002/12/18 16:55:36, 2] smbd/reply.c:reply_sesssetup_and_X(982) Defaulting to Lanman password for test [2002/12/18 16:55:36, 1] smbd/password.c:pass_check_smb(545) Couldn't find user 'test' in passdb. [2002/12/18 16:55:36, 1] smbd/reply.c:reply_sesssetup_and_X(998) Rejecting user 'test': authentication failed OB Create the user pcguest or nobody is the default. What does it mean create user is the default? OB Give permissions to pcguest for [common_share] Done to user nobody OB [global] OB guest account = pcguest Done guest account = nobody OB [common_share] OB path = /path/to/dir OB browseable = yes OB writeable = yes OB guest ok = yes OB force user = ftp changed to nobody OB force group = ftp changed to nobody OB * public = yes fixed OB But when I'm trying to connect to this share I've been asked for OB password to IPC$. -- Alexander mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba domain with non-domain Win98
Lets suppose you have /home/public to be accessed by anyone on your network: You _must_ have /home/public set to nobody.nogroup (recursively huh :) # ll /home/public/ -d drwxrwxrwx8 nobody nogroup 4096 Dec 16 20:26 /home/public/ and in smb.conf: [public] path=/home/public browseable=Yes writeable=Yes guest ok=yes force user=nobody comment=Common share This should work fine, works for me in 2.2.3a (Debian stable) My 2 cts -- Jean-Paul ARGUDO -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] oplocks and samba 2.2.7
On Tue, 2002-12-17 at 23:49, Keith G. Murphy wrote: Simo Sorce wrote: Samba 2.2.3a has been realeased on february the 6th, they are 10 (ten) months !!! And 2.2.7a contains *lot* of bugfixes that will make also woody users a lot more happy. Simo. Well, there is this: http://www.perrier.eu.org/debian/index.html.en I just noticed it, linked to by this: http://www.apt-get.org/ Cannot vouch for these unofficial packages, of course. :-) Unfortunately there is no access there: http://www.perrier.eu.org/samba-debian/ Forbidden You don't have permission to access /samba-debian/ on this server. However I'm going to build team packages for debian. Simo. -- Simo Sorce- [EMAIL PROTECTED] Samba Team- http://www.samba.org Italian Site - http://samba.xsec.it -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How important are oplocks?
If Samba is corrupting the data files, then why wouldn't this be turned OFF by default? I would think data corruption would be a major, MAJOR problem, and reduce the usability of Samba. Is this really true? Bob On Wed, 18 Dec 2002 14:43:06 +0100, Jean-Paul ARGUDO wrote But, some times that can result in corrupted files back on the server if... ... no need to say more :-) IMHO, this is a real good reason to disable oplocks. I don't believe that in a production environment one could take such a risk. I personaly had Excel files corrupted. Had to take it back from backup sets. I really had to find good BOFH excuses for my users :-/ Editing the corrupted .xls file, I found that Samba loggued kind of samba log output in it instead putting it to /var/log/log.smbd :-) Search for my mail on bug 26128 in this list for example and/or more info. I really think oplocks could be is real good thing if there were no such risks using it :-) Cheers, -- Jean-Paul ARGUDO -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Profiles and Win2000
On Tuesday 17 December 2002 21:29, John H Terpstra wrote: Fridtjof, The attached registry update file will solve your problem. Just double-click on it while logged in as 'Administrator' and it will set the registry so that on log-out each the user's roaming profile will be deleted from the local cache. PS: I added this file to the ~samba/docs/Registry directory for future reference. It will be in samba-3.0.0. Now it works, thanks. I had to add a ']' in the patch (otherwise nothing happend), the old profiles needed to be deleted and I had to add 'csc policy = disable', but I'm much happier now! -- Fridtjof Busse Why you can't find your system administrator: They're seeing a therapist who doesn't have any computers in their office, a non-threatening place. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re[2]: [Samba] Samba domain with non-domain Win98
Hello, Jean-Paul. JPA Lets suppose you have JPA /home/public to be accessed by anyone on your network: JPA You _must_ have /home/public set to nobody.nogroup (recursively huh :) I have trouble to connect to samba server, not to existing share. When I try to open server in explorer I get dialog to enter password for share IPC$. Samba server (2.2.6) is PDC. Machine not in domain. -- Alexander mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] oplocks and samba 2.2.7
On Wed, 2002-12-18 at 17:02, Keith G. Murphy wrote: To get it, you need to put this line into your /etc/sources.list: deb http://www.perrier.eu.org/samba-debian stable main Of course you need, but if you do not have access to the directory it is really difficult apt-get will have either (and it does not have infact) !! Then run apt-get update. apt-get install samba --simulate will show you what the installation *would* do then. Been there, done that. Simo. -- Simo Sorce- [EMAIL PROTECTED] Samba Team- http://www.samba.org Italian Site - http://samba.xsec.it -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How important are oplocks?
Bob Puff@NLE wrote: If Samba is corrupting the data files, It is not Samba that is corrupting the files, but the clients, which fail to handle oplocks correctly. then why wouldn't this be turned OFF by default? I would think data corruption would be a major, MAJOR problem, and reduce the usability of Samba. Is this really true? The main thing to watch out for is programs that are writing records to files, as with database software. That is, when a program opens a file, writes some data to it, and then closes it. This is actually not common, since most applications write to files when saving documents. They don't write directly to the old file, but create a new file, write out all the data to it, then rename the new copy to the old copy's filename. On the other hand, database software (and some other applications) may have multiple users opening the _same_ file, writing to it concurrently, then closing it at different times. If there is a miscommunication regarding oplocks (specifically, not responding to oplock break requests) then the file can become corrupt. BTW, one cause of oplock failure is flaky network hardware (NICs, hubs), which the Samba Team can not do much about. The choice to have oplock support enabled or disabled by default is not an easy one; enabling oplocks can result in a 30% performance gain, and cases where corruption happens are relatively rare. To disable oplocks, simply put the following in your smb.conf: [global] oplocks = off You may lose some performance, but maybe you will rest easier. A more intelligent, although more complicated, approach is to study contents of the directories you are sharing with your Samba server, and determine if the oplock break issue affects those shares at all. It seems that most of the problems are caused by one of two things: 1. Database software, with the database files served by Samba. 2. Microsoft Office applicatons, accessing files served by Samba. There are others, but they are relatively rare. After analyzing your system, perhaps you can enable oplocks on shares for which they are ok, and maybe even for your whole server. If there are only a few problem files, you may be able to use the veto oplock files parameter to turn oplocks off for just those. Jay Ts author, Using Samba, 2nd edition (O'Reilly) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] oplocks and samba 2.2.7
Simo Sorce wrote: On Wed, 2002-12-18 at 17:02, Keith G. Murphy wrote: To get it, you need to put this line into your /etc/sources.list: deb http://www.perrier.eu.org/samba-debian stable main Of course you need, but if you do not have access to the directory it is really difficult apt-get will have either (and it does not have infact) !! Well, I do not have access to it through the browser, but apt-get works with that line just fine. I think you should try it again. Use the *exact* line I showed above. I just tested it and it works. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] [newbie] access config
I wanna give access just for 3 machines to my linux machine. my network is composed for 16 machines. the others 13 machines even would not see the linux machine. tks
Re: [Samba] multiple permissions, multiple groups
Hi, how can i limit the number of connections per user. someting like the user can´t log in on two machines on the same time? ... --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.431 / Virus Database: 242 - Release Date: 17/12/2002 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] File Locking and MS Access (this probably belongs onthe MySQL lists now)
Spaces in the table names (and field names)? Yup, my experiences exactly. Had to eradicate tons of 'em. Wanted to kill the guy who wrote the thing in the first place. Actually, I wanted to kill MS for letting Access let him put spaces in. Another indication of a toy database. But it works sweet now. As far as quirks go, I had to re-write some forms such that they did not try to pull in all the tables data at once. Other than that, it's been smooth, and really cheap, too! Later - Mark Ehle David Brodbeck wrote: -Original Message- From: Mark Ehle [mailto:[EMAIL PROTECTED]] Why? MySql and MyOBDC are free, and perform much better than Access. You still use access to, well, access the MySQL server. The data sits on the server and MySQL handles the transactions. You can even put MySQL on a windows machine if you want to. It works pretty well that way. I just set this up here. It was a lot of work, because we had some Access table names with spaces in them. (Illegal in MySQL.) The result was I had to rewrite all the queries. The users have been happy with it, though...no more spates of database corruption that result in losing a day or two of work. There *are* some quirks and gotchas with Access and MyODBC. Anyone thinking of doing this should read the FAQs carefully. By itself Access is a toy database. It works fine until you have more than five or six people accessing the file simultaneously, then it fails in nasty ways. This is part of Microsoft's business model -- the database works until it gets big enough to be important to your company, then it fails and they sell you Microsoft SQL Server as a back end. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How important are oplocks?
If Samba is corrupting the data files, then why wouldn't this be turned OFF by default? I would think data corruption would be a major, MAJOR problem, and reduce the usability of Samba. Is this really true? Yep, it's true. There has been a lot of discussion on it. Check over the archives. I agree that oplocks should be turned off by default, but it causes a big performance hit. People that are just trying Samba or don't know much about it would probably just drop it instead of trying to get better performance. I guess the developers figure it is more important to have a lot of people using it than to protect data. Unfortunately, this problem has been around a long time, so I guess it is just not fixable. In Samba's defense, I have used programs that advised you to turn off oplocks even if using an NT(or 2000) server. It just seems to affect Samba more than NT. Trey Nolen donning flame resistant suit now -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Solution (was Re: [Samba] Integrating a samba server in a samba controlled domain)
Hi again ! OK, after hacking a bit, that's how I solved the issue - follow the instructions in the Winbind Howto and joining a Domain with a linux box. This is all to be found in the PDF on the Samba.org site - and : use a wins server. I set up the PDC as a WINS server (I am I running against a Wall doing this ?), and set up the VLOUCHI server to use the PDC as WIns Server. It seems to work. Is it OK I did it that way ? Have a nice day ! Regards, Gerd Michalke On Mittwoch, 18. Dezember 2002 10:31, Gerd-Christian Michalke wrote: Hi ! I have followed the Samba-Howto, but I still have some problems. Our network is composed of Win2K stations and two samba servers (2.2.5) running under SuSE Linux 8.1. HIROSHIMAN is configured as PDC (domaine CHERYLNET) and everything is running fine, from login to share and printer access. VLOUCHI is a second file server and its workgroup (thus domain) is also CHERYLNET ; security is set to domain and password server to HIROSHIMAN. The goal is that VLOUCHI shares the same userbase than HIROSHIMAN After having logged on on the W2K station, when I go to HIROSHIMAN, everything works fine. But when I first try to go to the VLOUCHI server, I am asked to give in a login/pwd. I cannot connect to the server even if a provide a pair which I know to exist on the PDC. I also have create a Linux account for my test user on VLOUCHI, but this does not help neither. Any help would be greatly appreciated Kind regards, Gerd C. Michalke -- Gerd-Christian Michalke Home : +32 2 376 43 36 Gieterijstraat 59Office : +32 2 391 45 41 B - 1601 Ruisbroek Mobile : +32 497 44 57 27 -- [EMAIL PROTECTED]\\_// (. .) Powered by SuSE Linux 8.1 ---oOOo-oOOo-- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How important are oplocks?
On Wed, 2002-12-18 at 09:52, Bob Puff@NLE wrote: If Samba is corrupting the data files, then why wouldn't this be turned OFF by default? I would think data corruption would be a major, MAJOR problem, and reduce the usability of Samba. Is this really true? It comes down to the fact that Samba is faithfully mimicking a Windows NT/2000 server. Windows NT and Windows 2000 servers *BY DEFAULT* also have OPLOCKS enabled. Oplocks provide a *SIGNIFICANT* performance boost for network file operatings when a single user is accessing a file. They allow the *CLIENT* machine to basically cache the file locally, just like caching a local file on a local hard drive. Writes to the file are cached as well. Where oplocks cause problems is when a second client wants to open the same file (as in a shared file database). Then the Samba/NT/2000 server must issue what is called an 'oplock break request' to the first client that has oplocks on the file. The client is supposed to then flush any changes to disk, and release the oplocks on the file. The server must then wait on this to happen before the second client can be granted access to the file. Problems arise when the client takes too long to respond, or fails to respond to the oplock break request from the server. The second client sees a long delay in opening the file. Furthermore, if file IS opened by the second client and the first client never responded, or responds after the timeout occurs, then you can end up with file corruption, as the first client finally flushes changes to disk, after the second client has read the now outdated data, and is using it. Regardless of the problems, the fact of the matter is that if Samba does not enable oplocks by default, just as Windows NT and 2000 servers do, then Samba servers yeild much lower performance for many server file operations performed by the typical Windows network client. You would have everyone screaming about how slow the network is, and Samba would come nowhere near the performance of Windows NT/2000 servers in benchmarks. I have been using shared file databases on Windows NT and Windows 2000 servers for years now (dBASE files). For all customer installs, we *MUST* disable oplocks on the NT/2000 servers in order to maintain database integrity. So this problem is not unique to Samba. Samba handles it much more gracefully than NT/2000 do! On NT/2000 servers, you have to edit a registry key that disables oplocks globally on the entire server. With Samba, I can disable them on a share or file wildcard pattern basis, using the 'veto oplock files' option in smb.conf. The user that compared Samba with/without oplocks to his Netware server's performance is not comparing apples to apples. Samba clients are using the Windows Networking client - and really can only be compared to a comparably equipped and configured Windows NT/2000 server. Netware servers require the use of a Netware client package. The Netware client has an entirely different implementation of locking mechanisms, caching algorithms, and the entire network protocol and file sharing model is different. As is the Netware server. I think most experts that have ever researched the topic will agree that for sheer file serving performance, nothing can beat Netware. Historically anyway. I've not seen any benchmarks that included Netware in a few years. Where Netware falls down is in 3rd party support (these days), and the ability to run general purpose applications on your server. Plus, the server and client licenses are a LOT more expensive than a Samba server solution. I'll hazard a bet that if one were to examine the Netware IPX/SPX protocol, it is nowhere nearly as convoluted and ad-hoc as the SMB protocol, which Microsoft hodge-podged together. You really have to step back and think about the amount of effort involved by the Samba Team in faithfully reverse engineering and reproducing all the intricate details of a protocol that is such a mess! Keep up the good work, 'Team Samba'! -- /--- | Jim Morris | Email: [EMAIL PROTECTED] | |AIM: JFM2001 \--- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Rights NT on samba
Hello, I have a samba v2.2.5 running in a windows NT domain. The PDC is a windows NT server but when I try to change rights on a directory or a folder, this change dont work. The nt acl support is activated. Is there another parametre to change in order to controle rights on samba with windows? Sebastien -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] BIG samba PDC problems
I have Samba 2.2.7a PDC and BDC, using NIS+, on Solaris 8. After some time clients are no longer allowed to connect (Connection denied from...) and if I try smbpasswd -S (both on BDC and PDC) I get: attempt_netbios_session_request: SYRIUS rejected the session for name *SMBSERVER with error Not listening for calling name fetch_domain_sid: machine SYRIUS rejected the NetBIOS session request. Failed to get domain SID for DOMAIN (SYRIUS is the PDC) The time till this happens varies from a couple of day to maybe some minutes. I shut down the BDC and PDC and the restart the PDC. Sometimes it starts ok, but sometimes it doesn't and I get the same message when I run smbpasswd -S The system run before without any problems with samba 2.2.2a on PDC and 2.2.5 on BDC. This started only after I upgraded the PDC from 2.2.2a to 2.2.7. I upgraded the BDC first and there was no problem. Thanx in advance for any suggestions/solutions Mihai Barbos -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How important are oplocks?
On Wed, 18 Dec 2002, Jim Morris wrote: I'll hazard a bet that if one were to examine the Netware IPX/SPX protocol, it is nowhere nearly as convoluted and ad-hoc as the SMB protocol, which Microsoft hodge-podged together. You really have to step back and think about the amount of effort involved by the Samba Team in faithfully reverse engineering and reproducing all the intricate details of a protocol that is such a mess! Jim, Keep in mind that NetWare can use IPX/SPX but more likely, for a number of years now is using NCP (NetWare Core Protocol) over TCP/IP. NCP is a well oiled machine compared with CIFS. However, when in Rome ... ie: If all your clients speak Swingoli it does no good to insist that Mockaputri is much better (not that I speak either of them!). - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] [newbie] access config
Try, "hosts allow = 192.168.1.1 192.168.1.2 192.168.1.3 192.168.1.4" in your smb.conf global. Can also use "valid users =@4person-group" to the [share] They will have to have static IPs. -Original Message-From: Gilberto Garcia Jr. [mailto:[EMAIL PROTECTED]]Sent: Wednesday, December 18, 2002 10:49 AMTo: SambaSubject: [Samba] [newbie] access config I wanna give access just for 3 machines to my linux machine. my network is composed for 16 machines. the others 13 machines even would not see the linux machine. tks
[Samba] Trouble Printing
I've having a heck of time getting all of my Windows 2000/XP clients to print. Some can print fine. Others get an error that it can't write to the printer. I'm getting this message in log for someone that's having trouble: [2002/12/18 11:05:24, 0] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(398) unmarshall_rpc_header: FIRST endianness flag (0) different in next PDU ! I'm at a total loss. I've been banging my head on this for the last three days. I thought switching to cups would solve this, no go. I just can't figure out why this works for some and not for others. Any thoughts or ideas would be greatly appreciated. Chris -- Chris Dos -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba and ipchains
I am having major set backs trying to access through my firewall (ipchains). The default policy on my chains is set to deny and then i am giving the following ipchains rule for samba. ipchains -A input -p tcp -s $Internal_subnet -d Internal_net 137:139 -j ACCEPT ipchains -A input -p udp -s $Internal_subnet -d Internal_net 137:139 -j ACCEPT ipchains -A output -p tcp -d $Internal_subnet -s Internal_net 137:139 -j ACCEPT ipchains -A output -p udp -d $Internal_subnet -s Internal_net 137:139 -j ACCEPT this does not work. BUT, If i change the policy to accept all, then the samba is accessible from my win client machines. just to make sure that the ipchains was configured properly i ran my ftp server from all 3 ports and tested the connection from a client machine. i was able to connect to the ftp server. can someone please tell me what i am missing. Thankyou = Poorav Chaudhari __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Unable to lookup names to display / .NET client problem (fwd)
Hi, I am running samba 2.2.7 on FreeBSD 4.7 as PDC with LDAP database backend. I have serveral Windows XP Pro client. Eveything fine about joining the domain ( after change the reg key ), logging in. But when I run, .NET application on the client, it says user need to be in Debugger User Group on local machine. Is there any way to make it work ?? My workaround is trying to change permission on some folders, assuming that if i add Domain User as full permission, it might solve. But when I add the permission, it give me the error Unable to lookup user names for display and I cann't add the group. But I still can add individual user. I need to add the group since i have thousand of users and I cannot add all. I searched around the mailing list and the unable to lookup names problem is said to be fixed in ver 2.2.3. But why am i haveing problem ?? Am I doing something wrong ?? Here is my snipplet from my smb.conf file. ldap admin dn = cn=root,dc=cs,dc=mydomain,dc=com ldap server = directory.cs.mydomain.com ldap suffix = ou=People,dc=cs,dc=mydomain,dc=com ldap port = 389 ldap ssl = start tls ## ## Passwords Authentication ## security = user encrypt passwords = yes domain logons = yes domain admin group = @smbadmin domain guest group = @smbguest wins support = yes Pls help Thanks in advance. Myo -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] samba and ipchains
try opening port 445 as well. smb runs over tcp/ip in newer versions of windows if you have it enabled. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Poorav Chaudhari Sent: Wednesday, December 18, 2002 1:59 PM To: [EMAIL PROTECTED] Subject: [Samba] samba and ipchains I am having major set backs trying to access through my firewall (ipchains). The default policy on my chains is set to deny and then i am giving the following ipchains rule for samba. ipchains -A input -p tcp -s $Internal_subnet -d Internal_net 137:139 -j ACCEPT ipchains -A input -p udp -s $Internal_subnet -d Internal_net 137:139 -j ACCEPT ipchains -A output -p tcp -d $Internal_subnet -s Internal_net 137:139 -j ACCEPT ipchains -A output -p udp -d $Internal_subnet -s Internal_net 137:139 -j ACCEPT this does not work. BUT, If i change the policy to accept all, then the samba is accessible from my win client machines. just to make sure that the ipchains was configured properly i ran my ftp server from all 3 ports and tested the connection from a client machine. i was able to connect to the ftp server. can someone please tell me what i am missing. Thankyou = Poorav Chaudhari __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Winbindd question/problem
I have just installed Samba 2.2.7 with Winbindd. I have been following a document called Unified Logons between Windows NT ans UNIX using Winbind Everything has gone smooth untill I got to the wbinfo command. When I run wbinfo -u I get the following error message: Error looking up domain users Can anyone tell me what to do about this? I have installed this on an HP-UX 11.00 system. Thanks, Dan Boskovich -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Winbindd question/problem
Dan Boskovich 12/18/2002 03:02 PM To:[EMAIL PROTECTED] cc: Subject:Re: Winbindd question/problem (Document link: Dan Boskovich) I have just installed Samba 2.2.7 with Winbindd. I have been following a document called Unified Logons between Windows NT ans UNIX using Winbind Everything has gone smooth untill I got to the wbinfo command. When I run wbinfo -u I get the following error message: Error looking up domain users Can anyone tell me what to do about this? I have installed this on an HP-UX 11.00 system. Thanks, Dan Boskovich -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: Winbindd question/problem
-Original Message- From: [EMAIL PROTECTED] I have just installed Samba 2.2.7 with Winbindd. I have been following a document called Unified Logons between Windows NT ans UNIX using Winbind Everything has gone smooth untill I got to the wbinfo command. When I run wbinfo -u I get the following error message: Error looking up domain users What do you get when you run 'winbind -t'? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: Winbindd question/problem
Sorry, my bad. I meant 'wbinfo -t'. Didn't mean to confuse you. :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 18, 2002 3:10 PM To: David Brodbeck Subject: RE: [Samba] Re: Winbindd question/problem Hmmm! I do not have an executable called winbind I have the daemon winbindd Dan David Brodbeck [EMAIL PROTECTED] on 12/18/2002 03:06:57 PM To:'[EMAIL PROTECTED]' [EMAIL PROTECTED], [EMAIL PROTECTED] cc: Subject:RE: [Samba] Re: Winbindd question/problem -Original Message- From: [EMAIL PROTECTED] I have just installed Samba 2.2.7 with Winbindd. I have been following a document called Unified Logons between Windows NT ans UNIX using Winbind Everything has gone smooth untill I got to the wbinfo command. When I run wbinfo -u I get the following error message: Error looking up domain users What do you get when you run 'winbind -t'? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Winbindd question/problem
On Mittwoch, 18. Dezember 2002 21:03, [EMAIL PROTECTED] wrote:
Dan Boskovich
12/18/2002 03:02 PM
To:[EMAIL PROTECTED]
cc:
Subject:Re: Winbindd question/problem (Document link: Dan Boskovich)
I have just installed Samba 2.2.7 with Winbindd. I have been following a
document called Unified Logons between Windows NT ans UNIX using Winbind
Everything has gone smooth untill I got to the wbinfo command. When I run
wbinfo -u I get the following error message: Error looking up domain users
Can anyone tell me what to do about this? I have installed this on an HP-UX
11.00 system.
Hello Dan,
I use Samba 2.2.5 on a SuSE Linux 8.1 and I had the same problem. My server is
PDC, File Server and print server. I resolved it by configuring the server as
a WINS server authoritative for my domain.
Here are the relevant parts of my smb.conf
[global]
workgroup = CHERYLNET
netbios name = HIROSHIMAN
server string = Serveur samba (%h)
encrypt passwords = yes
netbios aliases = finance production
include = /etc/samba/smb.%L.conf
default service = default
domain master = yes
preferred master = yes
local master = yes
os level = 64
security = user
domain logons = yes
wins support = yes
The other servers where set up this way :
[global]
workgroup = CHERYLNET
netbios name = BOULGA
os level = 2
time server = yes
unix extensions = yes
encrypt passwords = yes
printing = CUPS
printcap name = CUPS
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
wins support = no
character set = ISO8859-15
client code page = 850
security = domain
password server = *
winbind uid = 1-2
winbind gid = 1-2
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
wins server = 192.168.0.200
veto files = /*.eml/*.nws/riched20.dll/*.{*}/
Hope it helps
Thanks,
Dan Boskovich
Kind regards,
Gerd Michalke
--
--
[EMAIL PROTECTED]\\_//
(. .) Powered by SuSE Linux 8.1
---oOOo-oOOo--
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How important are oplocks?
On Wed, 2002-12-18 at 11:24, John H Terpstra wrote: Keep in mind that NetWare can use IPX/SPX but more likely, for a number of years now is using NCP (NetWare Core Protocol) over TCP/IP. NCP is a well oiled machine compared with CIFS. However, when in Rome ... ie: If all your clients speak Swingoli it does no good to insist that Mockaputri is much better (not that I speak either of them!). Oh - I wholeheartedly agree. I was just making the point about Netware because a poster on this thread was comparing the performance of his Netware server to Samba with oplocks disabled. If your clients are using SMB, obviously the server must speak SMB! ;-) My Netware experience predates NCP over TCP/IP. I shutdown my last Netware 3.11 server in 1994 to replace it with Samba on Linux! That server was a bear to get up too - it was on a PS/2 Model 80 (Microchannel anyone?), and I had to roll my own ethernet driver for Linux to work with the Microchannel ethernet card I had available. That took about 2 weeks of kernel hacking at the time but ultimately, the Samba on Linux solution scaled much better than Netware did on that 386-20 system. -- /--- | Jim Morris | Email: [EMAIL PROTECTED] | |AIM: JFM2001 \--- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Odd problems with XP
I have one Samba server with my Raid 5 can on it, and a NT 4 PDC and BDC, and im running samba 2.2.7, for most of my clients browsing the shares is just fine, but on some browsing the shares hangs or takes a long time to return with a result here is my smb.conf file: [global] netbios name = xx load printers = no workgroup = XXX encrypt passwords = Yes security = domain allow trusted domains = yes password server = time server = Yes socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE SO_RCVBUF=4096 SO_SNDBUF=4096 os level = 34 name resolve order = wins hosts bcast write raw = yes read raw = yes hide files = /:2eDS_Store/resource.frk/TheFindByContentFolder/TheVolumeSettingsFolder/DesktopFolderDB/Network Trash Folder/resource.frk/.*/ oplocks = yes max xmit = 65535 level2oplocks = yes dead time = 7 getwd cache = yes nt acl support = no [private] comment = Private Storage for %U path = %H/private create mode = 0600 directory mode = 0700 valid users = %U follow symlinks = yes writeable = yes [public] comment = Public Storage for %U path = %H/public create mode = 0600 directory mode = 0700 valid users = %U follow symlinks = yes writeable = yes [web] comment = Web root for %U path = %H/web Thanks for any help -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 2 gigabyte issue
On Wed, 11 Dec 2002 [EMAIL PROTECTED] wrote: Is this an issue with smbfs? smbmount? anyone have a workaround? Perhaps you have already found the answer... http://www.hojdpunkten.ac.se/054/samba/index.html smbfs and smbmount need patches to support large files. But you don't actually say if you are using those. /Urban -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] ownership of smbfs mounts
Hi, I'm trying to mount Windows 2000 directories onto a Red Hat 7.2 machine. The Windows machine is windows1 and the Linux machine is linux1. I've created a shared folder on windows1 called public. As a normal user on linux1, I've created a directory /home/windows1 with ownership me:users. As the normal user, I can execute this at the command prompt: smbmount //windows1/public /home/windows1 -o username=me,password=pass The Windows directory gets mounted on /home/windows1, and the ownership of /home/windows1 is still me:users. If I put the mount statement into /etc/fstab as //windows1/public /home/windows1 smbfs username=me,password=pass 0 0 and then do 'mount -a' as root, the ownership of /home/windows1 changes to root:root. How can I put the mount command into /etc/fstab, and maintain me:users ownership of the mount point? Thanks, Hidong -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba to samba via LDAP
Hi all, I have lots of samba servers and want them to all authenticate against a single password file which will be a LDAP database. Where I want to be: Login to a domain called FROST that passes the username:passwd to a domain called ACR which checks LDAP. Where I'm at: I can login (from a W2K machine) to a test server called LIBIT which uses LDAP beautifully (after long hours/days of profanity). I can also join/login to the samba domains called ACR (anytime) and FROST (if I change passwd server and security settings to a stand alone). I have 2 samba servers I'm testing out with the goal of passing passwords...the servers are FROST and the authenticating server is called ACR. I know that the login:passwd pair is being passed from FROST to ACR. The command I tested this with is: smbclient -L smbfrost -U jeffw #smbclient -L netbios name -U user btw, jeffw has a valid unix account on frost, but is not in the smbpasswd file. I then see a list of shares on the FROST domain. So, my question is this. Can I have a domain called FROST which a W2K/XP machine can join/login to while doing all authenticating against a samba server called ACR? Does any of this make sense? Here are condensed/cleaned smb.conf files: --- Begin Frost smb.conf file [global] workgroup = frost netbios name = smbfrost server string = Samba Frostbite encrypt passwords = yes null passwords = no log file = /var/log/samba/log.%m max log size = 150 name resolve order = lmhost host wins bcast domain logons = yes os level = 30 preferred master = yes domain master = no security = server password server = ACRC hosts allow = --- End Frost smb.conf file --- Begin ACR smb.conf file --- [global] netbios name = ACRC workgroup = ACR server string = ACRC Server domain master = yes browseable = Yes logon path = \\%N\profiles\%U\profile name resolve order = lmhost host wins bcast null passwords = Yes encrypt passwords = Yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u short preserve case = no wins support = true max log size = 50 logon script = %u.bat writable = yes security = user domain logons = yes max disk size = 5 local master = yes log file = /var/log/samba/log.%m os level = 64 locking = no --- End ACR smb.conf file --- any help would be wonderfulunless your a RTFM person because I wouldn't have gotten this far if I hadn't. thanks -- Jeff Maybe I'll make a deal with my boss...Boss, I'll say, Let's upgrade to Linux on all campus computers and I'll pay for the licensing out of my own pocket. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba pdc does not rember default keyboard layout
Hi Im using Samba 3.0alpha21 as a pdc with a win2k (englisch) as a client... My problem is that even though I use an english windows, I have a german Keyboard layout. for the local administrator account i works well, but for the roaming profiles I have to change the layout every time I log in. correct me if I'm wrong but since it works locally i thought it might be a samba problem... so can anybody help me, please? thanks mfg Albert Dengg -- Albert Dengg [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: SMBFS files receiving incorrect timestamps
On Thu, 5 Dec 2002, Jacob Anawalt wrote: tar: filename: file changed as we read it ... mtime tar puts into the archive: (no matter how many times I run tar) 2002-01-30 13:41:57 This is the same value reported by the file properties on the Windows 2k server. I posted something regarding this just now, but here is a repeat: Find fs/smbfs/proc.c in your kernel source tree. Search for smb_proc_close_inode(). See if changing any of the operations it does there helps. - remove the code after the Kludge alert - remove smb_proc_setattr_ext() - replace ino-i_mtime in the smb_proc_close() call with a 0 I have been a bit busy recently but I will eventually get around to looking more closely at this. /Urban -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbmount for soalris
On Sun, 15 Dec 2002, Sundaram wrote: Hi in linux you can mount a windows partition by the smbmount command. How can i do this in solaris ? smbmount is only a tool to mount smbfs, which is a linux kernel filesystem. On its own it is fairly useless. sharity should work with solaris, or you can use smbclient or perhaps smbsh (smbwrapper). /Urban -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Trouble mounting Win2000 directory on RedHat Linux
On Sun, 8 Dec 2002, Jason Rizer wrote: mount -t smbfs -o username=jrizer/MyDomain //MyMachine/projects /mnt/MyMachine Now when I issue this command I get the following error: 1729: tree connect failed: ERRDOS - Errnosuchshare (You specified an invalid share name) It seems that it can't locate the projects directory. No, it's not the directory it can't locate, it's the share. Check if you can see it with smbclient -L or something. If instead I replace //MyMachine/projects with //MyMachine/c$ and replace jrizer with Administrator I'm able to mount my c drive but only certain subdirectories are present in the mount. For example 'ls -l /mnt/MyMachine' only displays certain of the subdirectories which actually exist. Did someone move the machines around? (IP-wise) Almost sounds like you are connecting to the wrong machine ... There are known smbfs/win2k bugs regarding file listings, but those are more sporadic (win2k sometimes skips files from the list it returns). /Urban -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] max log size setting ignored
I work at a university and we are in the process of moving basically everything, and I mean everything to samba, eg.: bash-2.03$ /usr/local/samba/bin/smbstatus | wc -l 1669 As you might imagine my log.smbd grows quite rapidly. Even at log level 1 it routinely exceeds 5 Meg. a day and then is renamed log.smbd.old and a new log.smbd is created. NO MATTER WHAT I SET max log size equal to! Be it a large value like 30 which is what I want, or 0 for infinite, its just always seems to be ignored and the default 5000 is always in effect. Is anybody else experiencing this? I have a feeling it has to do with the sheer load this server experiences and/or the complexity of the smb.conf file although its really not THAT complex. I'm doing the dual personality thing with include = /usr/local/samba/lib/%L.smb.conf and make a lot of use of %U and %G and a bit of %S and some force user and some force group and root prexec and root prexec close but REALLY NOTHING THAT complicated and EVERYTHING works perfectly except for the max log size setting. This used to happen when I used to build Samba with gcc on Solaris and it still happens although now I use Sun's Forte compiler. I've been annoyed by this version after version of Samba and everytime I upgrade I always eagerly check if my log files will grow beyond 5 Meg and they never do. I just upgraded to 2.2.7 last week and am still experiencing this problem so I've decided to finally post about it. Tom Schaefer I -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba with Global File System
Is it possible to use Linux Samba with a Global File System and have all servers reading and writing the same files at the same time? I've heard that Samba maintains a small database that contains meta data type information that is not communicated to other Samba servers. And because Samba sits above the file system, GFS cannot guarantee it has correct information about the files. Does anyone know if this is true or if Samba runs in a stateless fashion? Thanks for your assistance. Montgomery S. Mouw 612-638-0532 (direct) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Scrambled Jobnames when Printing
Dear Samba! I use a perl script to move print jobs around for users, and there is a custom printer interface to pick up the jobs. Windows clients print to the samba printer, which basically moves the job to another share to be picked up by the print server client, depending on the users \\Machine Name. A sample from the conf file: [tcacol-prn] comment = Printer for Colour at Talss CA path = /var/spool/samba public = yes writable = no printable = yes create mode = 0700 print command = /usr/bin/perl /home/lxp/bin/lxp.pl %m % s /home/lxp/spool/tcacol-spool/ 2 /home/lxp/logs/lxpprt.log Everything works perfectly - however, as users migrated from W98 to W2k winXP the Print Jobnames that they've been using have been turning into something similar to smbprn.003702.d4aZ5g I don't understand why - however if you print to a windows printer queue - the name of the document turns up perfectly. Any Ideas? -- Gavin-Francis Fernandes SCPS - Systems TeamLeader Queensland University of Technology Phone: 3864 1289 Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba and ipchains
The general way of running down this sort of problem is to enable logging in you firewall rules and then watch what happens. You would have a better idea of what is going on by printing out your firewall ipchains rules with ipchains-save. You can easily edit them with a wordprocessor. Add -l at the end of the rules to log the rule activity, like so: -A input -s 0.0.0.0/0.0.0.0 -d 67.34.39.58/255.255.255.255 80:80 -i eth1 -p 6 -j DENY -l (67.34.39.58 is my server) You can then ipchains -F;cat fileofipchains | ipchain-restore to reload your rules. Joel ipchains-saveOn Wed, Dec 18, 2002 at 10:59:29AM -0800, Poorav Chaudhari wrote: I am having major set backs trying to access through my firewall (ipchains). The default policy on my chains is set to deny and then i am giving the following ipchains rule for samba. ipchains -A input -p tcp -s $Internal_subnet -d Internal_net 137:139 -j ACCEPT ipchains -A input -p udp -s $Internal_subnet -d Internal_net 137:139 -j ACCEPT ipchains -A output -p tcp -d $Internal_subnet -s Internal_net 137:139 -j ACCEPT ipchains -A output -p udp -d $Internal_subnet -s Internal_net 137:139 -j ACCEPT this does not work. BUT, If i change the policy to accept all, then the samba is accessible from my win client machines. just to make sure that the ipchains was configured properly i ran my ftp server from all 3 ports and tested the connection from a client machine. i was able to connect to the ftp server. can someone please tell me what i am missing. Thankyou = Poorav Chaudhari __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Large File support not quiet working..
Hey all, I'd like some hints on getting LFS properly working. I've got a samba server sharing a directory, and I've got a samba client (both client and server are linux, slackware 7.1 and 8.1) that's mounting the directory. this is with samba 2.2.7a. what happens is when I do an LS on the client in the mounted directory with large files in it, I see strange numbers. I've created test files both around 3 gigs each in size, an ls -aFlh displays the file sizes as being 16E, a plain ls -aFl lists them as being: 18446744072380445270 and 18446744072635809792 obviously a lot larger than 3G. when I configured the samba packages, I used --with-libsmbclient --with-ssl --with-smbmount --prefix=/usr I verified that LFS support in the configure output messages was detected as yes any ideas? -- http://www.23.org/~chs/ -- AIM/AOL: bdsmchs - Among the many misdeeds of the British rule in India, history will look upon the act of depriving a whole nation of arms, as the blackest. Mahatma Gandhi - -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] max log size setting ignored
On Wed, 18 Dec 2002, Tom Schaefer wrote: I work at a university and we are in the process of moving basically everything, and I mean everything to samba, eg.: bash-2.03$ /usr/local/samba/bin/smbstatus | wc -l 1669 As you might imagine my log.smbd grows quite rapidly. Even at log level 1 it routinely exceeds 5 Meg. a day and then is renamed log.smbd.old and a new log.smbd is created. NO MATTER WHAT I SET max log size equal to! Be it a large value like 30 which is what I want, or 0 for infinite, its just always seems to be ignored and the default 5000 is always in effect. You might try setting in your smb.conf [globals]: log file = /var/log/samba/log.%m max log size = 100 log level = 1 Should keep the log file 100 Kb per client. This works for me. - John T. Is anybody else experiencing this? I have a feeling it has to do with the sheer load this server experiences and/or the complexity of the smb.conf file although its really not THAT complex. I'm doing the dual personality thing with include = /usr/local/samba/lib/%L.smb.conf and make a lot of use of %U and %G and a bit of %S and some force user and some force group and root prexec and root prexec close but REALLY NOTHING THAT complicated and EVERYTHING works perfectly except for the max log size setting. This used to happen when I used to build Samba with gcc on Solaris and it still happens although now I use Sun's Forte compiler. I've been annoyed by this version after version of Samba and everytime I upgrade I always eagerly check if my log files will grow beyond 5 Meg and they never do. I just upgraded to 2.2.7 last week and am still experiencing this problem so I've decided to finally post about it. Tom Schaefer I -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How important are oplocks?
Hi Bob. I had never had anything to do with the oplocks switch with routine samba shares for file access, but I recently commissioned a new Samba server (Red Hat 8.0) which is running a Windows time and attendance database and we had intermittent problems opening a database session from various Windows PCs. The Windows error was indicating that the database was in use and could not be accessed by another user. Sure enough, when no one was logged in and one workstation accessed the database, they could apparently get in every time. However, this is a multi-user database that everyone should be able to get in to. By applying oplocks = no to the samba share, the problem was solved with everyone now able to open a session every time. As speed is not crucial to our usage I have not noticed any speed degradation. Regards, Brad On Wednesday 18 December 2002 17:00, [EMAIL PROTECTED] wrote: Hello, I'm wondering just how critical it really is to turn off oplocks. It appears that not only Windows 2k server, but also Netware 5 and above defaults to having these enabled. I just spoke with two software companies running databases off of file servers (no database server, just MDAC stuff), and they had never heard of it, much less require it to be disabled. Everything I've read online says to turn them off, but I'm getting a serious performance hit with these turned off, compared to the Netware server that Samba just replaced. Comments??? Bob -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Create time changing by itself?
On Wed, 2002-12-18 at 23:37, Urban Widmark wrote: tar: /mnt/cygwin/home/Timo Sirainen/xxx/x.xxx: file changed as we read it Yes, this is known. smbfs does some strange time operations when closing a file. I think the idea is to make sure the time is changed when a file has been written to (NT4 doesn't, or not always?). Well, tar is opening the file as read-only. The check it does is first lstat() and later fstat() just before closing. If their ctimes differ, it complains. lstat()'s ctime seems to be two seconds behind fstat(). I had someone that I thought I had tricked into testing this but I haven't heard anything for a while. The relevant code is (probably) this file/function in the kernel source tree: fs/smbfs/proc.c:smb_proc_close_inode() Try removing the Kludge alert parts and if that fails, the smb_proc_setattr_ext() call. Didn't help. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ownership of smbfs mounts
Thanks! Adding the uid and gid fixed it. M. D. Chappell wrote: On Wed, 2002-12-18 at 21:04, Hidong Kim wrote: If I put the mount statement into /etc/fstab as //windows1/public /home/windows1 smbfs username=me,password=pass 0 0 and then do 'mount -a' as root, the ownership of /home/windows1 changes to root:root. How can I put the mount command into /etc/fstab, and maintain me:users ownership of the mount point? Thanks, Try //windows1/public /home/windows1 smbfs username=me,password=pass,uid=uid,gid=gid 0 0 by uid gid I mean the numbers not the names. Mark Chappell -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] creating read/write files for everyone from a SAMBA client
Can anyone tell me what to include or change in my 'smb.conf' files to enable anyone accessing a 'SAMBA' server share to have '777' permissions for directories, and '666' permissions on files they create, move or copy there? I have two SAMBA servers running; one on an IRIX machine and the other on a 'Linux' machine in a LAN environment. The folks on the Win boxes can create files on both machines, but I want the permissions on the directories and files they create on the SAMBA servers to be accessable to eveyone else on the LAN. TIA Ron Smith _ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] private user accounts
hello guys.. I have put up a share for a particular user. The user can access the directory from linux boxes using 'smbclient //IP/share -U privateuser . But cant do it from a windows machine. When I provide the privateuser,password, i get the error 'The credentials supplied conflict with an existing set of credentials.' Why is this? Thanks for the help. __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Creating read/write directories and files for everyone from an smb client
Can anyone tell me what to include or change in my 'smb.conf' files to enable anyone accessing a 'SAMBA' server share to have '777' permissions for directories, and '666' permissions on files they create, move or copy there? I have two SAMBA servers running; one on an IRIX machine and the other on a 'Linux' machine in a LAN environment. The folks on the Win boxes can create files on both machines, but I want the permissions on the directories and files they create on the SAMBA servers to be accessable to eveyone else on the LAN. TIA Ron Smith _ The new MSN 8: smart spam protection and 2 months FREE* http://join.msn.com/?page=features/junkmail -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba]
×ð¾´µÄÐÂÀÏ¿Í»§£º ´ó¼ÒºÃ£¡ Ò×ÍøÊÇÒ»¼ÒרҵÌṩÍøÕ¾½¨Éè¼°Íƹã·þÎñÊÇÍøÂ繫˾. ÏÖÔÚÎÒÃÇÏòÈ«¹ú³ÏÕ÷´úÀí. »¶ÓÓÐ־֮ʿ¼ÓÈëÎÒÃǵÄÐÐÁÐ. ÎÒÃdzÐŵÈÃÎÒÃǵĴúÀíÉÌ»ñµÃÈ«¹úͬÀà²úÆ·×îµÍµÄ´úÀí¼Û!! ÎÒÃǵÄÒµÎñÓÐ: ÓòÃû×¢²á, ÐéÄâÖ÷»ú(ÆÕͨ,ÂÛ̳,½ºþ,ÁÄÌìÊÒ), ÆóÒµÓÊ¾Ö Õû»ú×âÓÃ, ÍøÕ¾Íƹã,ÍøÂçʵÃûµÈ ÏêϸÇé¿öÇë²é¿´ÎÒÃǵÄÍøÕ¾: http://www.001dns.com ´úÀí±¨¼Û: mailto:[EMAIL PROTECTED] ²¿·Ö¿Í»§ÍøÕ¾:http://www.lqwl.com ¸£ÖÝÒ×Íø·þÎñÓÐÏÞ¹«Ë¾ µç»°£º0591-3943627 [EMAIL PROTECTED] QQ:149149520 ÁªÏµÈË£ºÑîС½ã £¨ÏêϸÁªÏµ·½Ê½²Î¼ûÍøÕ¾http://www.001dns.com£© ___ Èç¹ûÓдòÈŵ½ÄúµÄµØ·½£¬ÎÒÔÚ´ËÏòÄúµÀǸ£¡ Èç¹û²»Ï£ÍûÊÕµ½¸ÃÀàÓʼþÇëµã»÷¾Ü¾ø°´Å¤»ò¸øÎÒÃÇ»ØÐÅ,Ä㽫²»»áÔÙÊÕµ½¸ÃÀàÓʼþ!лл!! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Prevent winbind idmap corruption
Hi,
the attached patch prevents winbindd from corrupting the
id mapping database in case of write failure. For example when
the filesystem hosting the TDB file is full.
Storing a new meapping consists of three steps
1. allocate UID/GID (increment HWM)
2. store mapping UID/GID : SID
3. store reverse mapping SID : UID/GID
which should be done as a transaction, either completely or not
at all.
The present winbindd_idmap.c does not check success of the
operations above, and will result in an inconsistent mapping
database when any of them fails.
The patched version does check success, and rolls back in
case of failure.
It's not 100% failure proof (transaction is not atomic), but
better than before IMO. :)
Michael
Index: nsswitch/winbindd_idmap.c
===
RCS file: /cvsroot/samba/source/nsswitch/winbindd_idmap.c,v
retrieving revision 1.3.4.13
diff -u -r1.3.4.13 winbindd_idmap.c
--- nsswitch/winbindd_idmap.c 27 Apr 2002 03:04:08 - 1.3.4.13
+++ nsswitch/winbindd_idmap.c 18 Dec 2002 14:51:08 -
@@ -44,6 +44,8 @@
if ((hwm = tdb_fetch_int32(idmap_tdb,
isgroup ? HWM_GROUP : HWM_USER)) == -1) {
+DEBUG(0, (Failed to fetch %s : %s\n, isgroup ? HWM_GROUP : HWM_USER,
+tdb_errorstr(idmap_tdb)));
return False;
}
@@ -63,7 +65,45 @@
/* Store new high water mark */
-tdb_store_int32(idmap_tdb, isgroup ? HWM_GROUP : HWM_USER, hwm);
+if (tdb_store_int32(idmap_tdb, isgroup ? HWM_GROUP : HWM_USER, hwm)) {
+DEBUG(0, (Failed to store %s %d : %s\n, isgroup ? HWM_GROUP : HWM_USER,
+hwm, tdb_errorstr(idmap_tdb)));
+return False;
+}
+
+return True;
+}
+
+/* Deallocate either a user or group id, used for failure rollback */
+
+static BOOL deallocate_id(uid_t id, BOOL isgroup)
+{
+int hwm;
+
+/* Get current high water mark */
+
+if ((hwm = tdb_fetch_int32(idmap_tdb,
+ isgroup ? HWM_GROUP : HWM_USER)) == -1) {
+DEBUG(0, (Failed to fetch %s : %s\n, isgroup ? HWM_GROUP : HWM_USER,
+tdb_errorstr(idmap_tdb)));
+return False;
+}
+
+if (hwm != id + 1) {
+/* Should actually never happen, internal redundancy... */
+DEBUG(0, (winbind %s mismatch on deallocation!\n, isgroup ? HWM_GROUP :
+HWM_USER));
+return False;
+}
+
+hwm--;
+
+/* Store new high water mark */
+
+if (tdb_store_int32(idmap_tdb, isgroup ? HWM_GROUP : HWM_USER, hwm)) {
+DEBUG(0, (Failed to store %s %d : %s\n, isgroup ? HWM_GROUP : HWM_USER,
+ hwm, tdb_errorstr(idmap_tdb)));
+return False;
+}
return True;
}
@@ -109,16 +149,37 @@
fstring keystr2;
/* Store new id */
-
+
slprintf(keystr2, sizeof(keystr2), %s %d, isgroup ? GID : UID, *id);
data.dptr = keystr2;
data.dsize = strlen(keystr2) + 1;
-tdb_store(idmap_tdb, key, data, TDB_REPLACE);
-tdb_store(idmap_tdb, data, key, TDB_REPLACE);
+/* If any of the following actions fails try to
+ revert modifications successfully made so far. */
result = True;
+
+if (result tdb_store(idmap_tdb, key, data, TDB_REPLACE)) {
+DEBUG(0, (Failed to store id mapping %s:%s : %s\n,
+ key.dptr, data.dptr, tdb_errorstr(idmap_tdb)));
+
+if (!deallocate_id(*id, isgroup))
+DEBUG(0, (Failed to rollback id mapping\n));
+
+result = False;
+}
+
+if (result tdb_store(idmap_tdb, data, key, TDB_REPLACE)) {
+DEBUG(0, (Failed to store reverse id mapping %s:%s : %s\n,
+ data.dptr, key.dptr, tdb_errorstr(idmap_tdb)));
+
+if (!deallocate_id(*id, isgroup) || tdb_delete(idmap_tdb, key))
+DEBUG(0, (Failed to rollback id mapping\n));
+
+tdb_delete(idmap_tdb, key);
+result = False;
+}
}
}
Another Bug and Temporary Fix (LDAP Trust Account)
Developers, I hope I am not giving you another item that is already resolved in CVS somewhere (my CVS skills are rusty), but here is what I have found with respect to a trust relationship using an LDAP backend with 3.0a21. I have this: 1. NT Domain: NTDOMAIN 2. Samba Domain: SMBDOMAIN I want my NT domain to trust my SAMBA domain. So I create the user account (posixAccount objectClass only) for my NT domain in the LDAP directory: dn: uid=NTDOMAIN$, dc=example, dc=org objectclass: top objectclass: posixAccount uid: NTDOMAIN$ uidNumber: ... gidNumber: ... and so on. I tell Samba to setup this as a new trust: net rpc trustdom add COMMUNICATION -U Administrator Which succeeds and updates the above LDIF with the usual sambaAccount attributes, including this one: acctFlags: [I ] I tell Samba to set the initial password for this account: $ smbpasswd NTDOMAIN$ New Password: ... Which also succeeds. Then I go to my NT domain controller, fire up User Manager, and tell it to trust my SMBDOMAIN system, which appears to succeed but gives me a warning about verification of the trust failing. But the trust doesn't work just yet. If I look at my LDIF again at this point, I see that 'acctFlags' has been changed to: acctFlags: [U ] So I go in with my favorite tool and change it back to: acctFlags: [I ] And now my trust works. But I had to make that last manual change to the LDAP entry for NTDOMAIN$ to make the trust actually function. Did I do something wrong in my setup, or should the 'smbd' that received the trust request from my NT PDC have not changed that flag from 'I' to 'U'? Thanks again, Matt
[PATCH] module stuff (BIG patch :-)
initialized
vfs_op_tuple[] array
which describes all operations this module claims to intercept. This
function
is called whenever module is loaded into smbd process using sys_dlopen().
vfs_*_init must have a list (indexed by the SNUM(conn) or CNUM(conn))
for storing the default_vfs_ops and if module wants to store private
information for further usage.
Prototypes:
vfs_op_tuple *vfs_recycle_init(struct connection_struct *conn, struct
vfs_ops *default_vfs_ops, const char *param);
'vfs path' is removed
'vfs options' is removed ( parametric options should be used)
'vfs object' move to 'vfs objects' ( but 'vfs object' is an alias)
'vfs objects = module1_name{[module2_name]}
- vfs_audit.c is installed as audit.so
- vfs_recycle.c is installed as recycle.so
- vfs_nettalk.c is installed as nettalk.so
vfs_audit.c and vfs_recycle.c are now per connection safe
vfs_netatalk.c should be updated to use SMB_VFS_INTERFACE_VERSION 6 later
I have tested this patch this afternoon and I have no problems...
metze
-
Stefan metze Metzmacher [EMAIL PROTECTED]
modules-20021218-02.diff.tgz
Description: application/compressed
RE: Kerberized SMB client? User level SMB client?
On Mon, 16 Dec 2002, Naomaru Itoi wrote: Thanks, Steve, I was actually asking about SMB/CIFS client *filesystem*. Excuse me for being unclear ... smbfs (not userspace) works just fine (*) with kerberos. All kerberos work is done by smbmount (userspace) and that code is the same as the one used by smbclient. The filesystem parts doesn't care about kerberos when it is only used for authentication. smbfs signals back to smbmount if it wants it to reconnect. But perhaps you wanted more than authentication. /Urban * - Well, it needs some changes to use ntstatus error codes, but that has nothing to do with kerberos.
Samba-3.0.0aplha builds on SuSE Linux
Hi, Would anyone who is building samba-3.0.0alphas on SuSE 8.1 please drop me a line on [EMAIL PROTECTED]. I'd like to know what options you are passing to configure. Thanks. - John T. -- John H Terpstra Email: [EMAIL PROTECTED]
RE: Performance Enhancements for Samba/VMS 2.2.4
Thank you. Much, much better on directory opening. Mike Ober. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 17, 2002 7:16 AM To: Samba VMS Subject: Performance Enhancements for Samba/VMS 2.2.4 Hi. There is a new version of Samba/VMS 2.2.4 that can be found, as usual, at http://www.pi-net.dyndns.org/anonymous/jyc/ This version gives (I think) quite important peormance enhancements, especially about the time needed for browsing directories. The performance problem is due to two factors : 1. There is a great number of calls to stat() for the same file, and stat() on VMS is quite time-consuming. One option, as Mr Carl Perkins proposed in this mailing list, would be to rewrite stat() completely, and optimize it by directly reading the INDEXF.SYS file. for the time being, I did not choose that option, because it looks too much undocumented to me, and a little complicated too. The format of the INDEXF.SYS file and of the file headers are not supposed to stay the way they are forever. Even today, you would have to deal with ODS-5 and ODS-2 different structures. However, I agree it could dramatically enhance the performance. My option was to reduce the actual calls to stat() by caching the information, and keeping it in memory as long as possible (i.e. as long as it has a chance to be accurate). I did this by using the Volume lock, which value block is changed each time the structure of the volume is changed (file creation/deletion,...). As far as my tests are accurate, it seems to divide by 3 or 4 the number of actual calls to stat() 2. The other reason is that, for variable-record and VFC files, I had to actually read the file in order to know its real size. When you call stat(), VMS gives you the actual number of bytes in the file. However, if you read it record by record, and format each record with and ending CRLF, for making it useable by Windows, the actual number of bytes you send is slightly lower than the number of bytes given by stat(). This has no importance for most Windows tools and product (notepad, word, excel, etc...). If you use WORDPAD, however, you'll see some additional characters at the end of the file. This is because WORDPAD first asks for the size of the file, then reads the file, and pads with zeroes if the number of bytes obtained is lower than the previously obtained size. For those of you that have no need for editing variable-record VMS files using WORDPAD, I added a logical name (SAMBA_REAL_FILE_SIZE), that is defined by default in SMBD_STARTUP.COM, but that you can remove. If you remove it, no special size checking is done, and the overall performance is dramatically enhanced for directories with numerous and/or big Variable-record files. So, if you feel like it, please download and test the new Samba/VMS 2.2.4. I think (and hope) that you'll be happy with its new performances. Merry Chritsmas to all of you. Jean-Yves Collot
ÌؼÛÐÂÊé-298ÔªÂòÒ»×ùͼÊé¹Ý
ΪӽÓÊ¥µ®¡¢Ôªµ©£¬ÉîÛÚÍøÂçÊéµêÌØÍƳöÒ»Åúµç×ÓͼÊé¼°ÌؼÛÐÂÊé¡£ÄúÖ»Ð軨298Ôª¼´¿ÉÓµÓÐÒ»×ù3000²áͼÊéµÄ¼ÒͥͼÊé¹Ý¡£ »áÒé¡¢¸öÈ˽»ÍùÖеÄÀ¡Ôù¾«Æ· ¸öÈËÊղصÄÕäÆ·¡¢Ñ§Ï°µÄ¹¤¾ßÊé µ¥Î»½±ÀøÔ±¹¤µÄÉϼѽ±Æ·¼°¼ÍÄîÆ· ¹Ø°®º¢×ӳɳ¤µÄÌùÉíÀñÎï µç×ÓͼÊéĿ¼£º ¼ÒÍ¥²ØÊ鼯½õ£¨10CD£©298Ôª ÖлªÀúÊ·È«¼¯£¨11CD£©268Ôª ÖÐÍâÎÄѧÃûÖø1000²¿£¨12CD£© 268Ôª Öлª´«ÊÀ²ØÊ飨5CD£© 98Ôª ÖлªÑÞÇéÎĿ⣨4CD£© 98Ôª ÖлªÀúÊ·ÎĿ⣨7CD£© 168Ôª Öлª¾µäÎĿ⣨13CD£©328Ôª ÖлªÕäϡС˵ÎĿ⣨8CD£© 228Ôª ÖйúС°Ù¿ÆÈ«Ê飨1CD£© 38Ôª ÖйúÏÖ´úÎÄѧÃûÖø¾µä¶þ£¨1CD£© 38Ôª ÖÐѧÉú±Ø¶ÁÖÐÍâÎÄѧÃûÖø£¨1CD£© 38Ôª ѧÉú´Çº£´ÇÔ´£¨2CD£© 48Ôª ÊÀ½çÃûÈË´«¼ÇÎÄѧ£¨1CD£© 38Ôª ÏÖÔÚµã»÷½øÈëÉîÛÚÍøÂçÊéµê£º¡¡http://www.szbookshop.com --- ʹÓü«ÐÇÓʼþȺ·¢£¬ÎÞÐëͨ¹ýÓʼþ·þÎñÆ÷£¬Ö±´ï¶Ô·½ÓÊÏ䣬ËٶȾø¶ÔÒ»Á÷£¡ ÏÂÔØÍøÖ·£ºhttp://love2net.51.net/£¬¸ü¶àÃâ·ÑµÄ³¬¿áÈí¼þµÈÄãÀ´Ï¡¡ INFORMATION This message has been sent using a trial-run version of the TSmtpRelayServer Delphi Component.
CVS update: samba/source/client
Date: Wed Dec 18 16:00:58 2002 Author: idra Update of /data/cvs/samba/source/client In directory dp.samba.org:/tmp/cvs-serv23383/client Modified Files: Tag: SAMBA_2_2 client.c Log Message: counter should be unsigned Revisions: client.c1.148.2.33 = 1.148.2.34 http://www.samba.org/cgi-bin/cvsweb/samba/source/client/client.c?r1=1.148.2.33r2=1.148.2.34
CVS update: samba/docs/Registry
Date: Wed Dec 18 17:02:36 2002 Author: jht Update of /home/cvs/samba/docs/Registry In directory dp.samba.org:/tmp/cvs-serv28762/Registry Modified Files: Tag: SAMBA_3_0 Win-NT-2K-XP-DeleteRoamingProfile.reg Log Message: Fixed typo. Revisions: Win-NT-2K-XP-DeleteRoamingProfile.reg 1.1.2.1 = 1.1.2.2 http://www.samba.org/cgi-bin/cvsweb/samba/docs/Registry/Win-NT-2K-XP-DeleteRoamingProfile.reg?r1=1.1.2.1r2=1.1.2.2
CVS update: samba/docs/docbook/manpages
Date: Wed Dec 18 20:12:45 2002 Author: jht Update of /data/cvs/samba/docs/docbook/manpages In directory dp.samba.org:/tmp/cvs-serv12996/docs/docbook/manpages Modified Files: Tag: SAMBA_2_2 smb.conf.5.sgml Log Message: Updates from SuSE. Revisions: smb.conf.5.sgml 1.1.2.108 = 1.1.2.109 http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/manpages/smb.conf.5.sgml?r1=1.1.2.108r2=1.1.2.109
CVS update: samba/docs/manpages
Date: Wed Dec 18 20:16:38 2002 Author: jht Update of /data/cvs/samba/docs/manpages In directory dp.samba.org:/tmp/cvs-serv13278/docs/manpages Modified Files: Tag: SAMBA_2_2 pdbedit.8 Log Message: Added batch mode option to pdbedit from patch supplied by SuSE. Revisions: pdbedit.8 1.1.2.4 = 1.1.2.5 http://www.samba.org/cgi-bin/cvsweb/samba/docs/manpages/pdbedit.8?r1=1.1.2.4r2=1.1.2.5
CVS update: samba/source/utils
Date: Wed Dec 18 20:16:38 2002 Author: jht Update of /data/cvs/samba/source/utils In directory dp.samba.org:/tmp/cvs-serv13278/source/utils Modified Files: Tag: SAMBA_2_2 pdbedit.c Log Message: Added batch mode option to pdbedit from patch supplied by SuSE. Revisions: pdbedit.c 1.9.2.9 = 1.9.2.10 http://www.samba.org/cgi-bin/cvsweb/samba/source/utils/pdbedit.c?r1=1.9.2.9r2=1.9.2.10
CVS update: samba/docs/docbook/manpages
Date: Wed Dec 18 20:21:31 2002 Author: jht Update of /home/cvs/samba/docs/docbook/manpages In directory dp.samba.org:/tmp/cvs-serv13783/docs/docbook/manpages Modified Files: Tag: SAMBA_3_0 smb.conf.5.sgml Log Message: Applied typoe fix from SuSE. Revisions: smb.conf.5.sgml 1.24.2.13 = 1.24.2.14 http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/manpages/smb.conf.5.sgml?r1=1.24.2.13r2=1.24.2.14
CVS update: samba/source
Date: Wed Dec 18 21:19:24 2002 Author: jht Update of /home/cvs/samba/source In directory dp.samba.org:/tmp/cvs-serv18021 Modified Files: Tag: SAMBA_3_0 smbadduser Log Message: Updated from Samba-2.2.7 code tree. Revisions: smbadduser 1.2 = 1.2.30.1 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbadduser?r1=1.2r2=1.2.30.1
CVS update: sambaweb/docs
Date: Wed Dec 18 22:23:23 2002 Author: crh Update of /data/cvs/sambaweb/docs In directory dp.samba.org:/tmp/cvs-serv23737 Modified Files: index.html Log Message: Fixed broken links to the SNIA CIFS reference and the old Leach/Perry article. Revisions: index.html 1.52 = 1.53 http://www.samba.org/cgi-bin/cvsweb/sambaweb/docs/index.html?r1=1.52r2=1.53
CVS update: sambaweb/docs
Date: Wed Dec 18 22:32:53 2002 Author: crh Update of /data/cvs/sambaweb/docs In directory dp.samba.org:/tmp/cvs-serv24326 Modified Files: index.html Log Message: Fiddled the formatting of the book listings. Revisions: index.html 1.53 = 1.54 http://www.samba.org/cgi-bin/cvsweb/sambaweb/docs/index.html?r1=1.53r2=1.54
CVS update: sambaweb/docs
Date: Wed Dec 18 23:10:49 2002 Author: crh Update of /data/cvs/sambaweb/docs In directory dp.samba.org:/tmp/cvs-serv27817 Modified Files: index.html Log Message: One more formatting tweak. Revisions: index.html 1.54 = 1.55 http://www.samba.org/cgi-bin/cvsweb/sambaweb/docs/index.html?r1=1.54r2=1.55
CVS update: sambaweb
Date: Thu Dec 19 11:24:24 2002 Author: mbp Update of /data/cvs/sambaweb In directory dp.samba.org:/tmp/cvs-serv32265 Modified Files: samba.html Log Message: * Add announcement of linuxforum.net mirror. Revisions: samba.html 1.172 = 1.173 http://www.samba.org/cgi-bin/cvsweb/sambaweb/samba.html?r1=1.172r2=1.173
CVS update: samba/source/nsswitch
Date: Thu Dec 19 03:25:22 2002 Author: tpot Update of /data/cvs/samba/source/nsswitch In directory dp.samba.org:/tmp/cvs-serv12470 Modified Files: Tag: APPLIANCE_HEAD wbinfo.c Log Message: When checking machine account password, return 'could not check secret' when domain controller could not be found. CR373 Revisions: wbinfo.c1.2.2.14 = 1.2.2.15 http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/wbinfo.c?r1=1.2.2.14r2=1.2.2.15
