[Samba] no access to passdb when domainlogin from xp client
wehave problems with thesamba domaincontroller. Upon login of a win XP machine we get the error message: Can not open passdb. What are the reasons for this? how to avoid the problem? User gets veryfied, but not password. thanks a lot, greetings berthold christukat
[Samba] Re: samba (2.2.7a) + openldap (2.0.x)
C.Lee Taylor wrote: Buchan Milne wrote: OK, I stayed a bit late, waiting for things to finish compiling etc ... You should not work that hard ... ;-) Tell me about it, but we're on a tight schedule, and I have a day-job (if you call MSc.Eng thesis a job ...) and did some tests. It seems to work. What I did was just point the production DC at a slave server, and then Kewl ... 1)try and change my password a)while both ldap servers were running (works) Great ... did you watch the traffic follow by any chance ... I did, (openldap log level 256) but the clocks on the machines weren't synced, so I couldn't see exactly the sequence of events, but there were MOD requests to both ... b)while only the slave is running (doesn't work) That should not, at least not by the standards that I understand that LDAP replcia works ... c)while only the master is running (doesn't work) That should work, but I think that might be a smb.conf thing ... Ideally it should work for failover, but I think this will only be available in 3 with passdb backend = ldap://host1 ldap://host2 (Ok, got your other mail which indicates that 'ldap server = host1 host2' should work. OK, I will see if I can do a different test which doesn't force me to mess with the DC, we have a replica running on the box which will become the new DC next week, might as well test it there ) 2)connect to my homes share a)while both servers were running (works) b)while only the slave was running (works) c)while only the master is running (doesn't work) Same as the above ... So, it seems to be all correct, but it would be nice to have ldap failover (multiple ldap servers listed in smb.conf?), but not absolutely necessary. Now our WAN setup should work! This is how I intend it to work, but have not finish testing ... And, I also seem to not be able to have machine accounts created by samba. I lost the (samba) log now, but while I had smbcontrol'ed the smbd handling my domain join, I saw an ldap search string something like this: ((uid=machine_)(objectclass=sambaAccount)) where it should have been like this: ((uid=machine$)(objectclass=sambaAccount)) This I am not certain about this ... but I would think it better to use LDAP scripts to add the accounts, which I think IDXP or something like that does have ... remember, if you use the normal way, Samba is tring to add an account into passwd and shadow, which will not work ... The mandrake RPMs ship with idealx-tools setup by default in /usr/share/samba/scripts, with the config in /etc/samba/smbldap_conf/pm, and I have: add user script = /usr/share/samba/scripts/smbldap-useradd.pl -w -d /dev/null -g machines -s /bin/false %u This worked fine until yesterday when I upgraded from 2.2.6 to 2.2.7a Without the LDAP entry in the server, I got a No mapping was done between etc error on the client. Do you have the LDAP enter at all ... I lost my level 5 debug log when I wanted to see samba referral later when I set debug level to 10 :-(. Will test again a bit later ... and save the log this time ... I also had a local machine account (in passwd) at which time I did not get the error AFAICR, but it failed to join. Mmm, I have had problems when there is an account already ... something fails ... I do remember somework in Head to get around this, but not in 2.2 I was hoping to release 2.2.7a RPMs for Mandrake now, but they can't ship like this ... I have made some RPMs for RedHat 8.0, which is what I am about to test, and I see Herb Lewis has sent me a patch for the autoconf check, which I have not looked at yet either ... but I am hoping this can all come together soon ... Wouldn't mind seeing the patch, but would like to have ldap machine addition working (and test machine addition without ldap) before we ship updates ... BTW, anyone who as a working setup for testing large file support in smbtar/smbclient on a Mandrake 8.2 or 9.0 box, please contact me as I have RPMs with both patches for those releases, and I don't currently have resources to test those ... Buchan -- |--Another happy Mandrake Club member--| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Message Command
From the smb.conf help document regarding the message command field:- You could make this command send mail, or whatever else takes your fancy. Please let us know of any really interesting ideas you have. First, my question:- Does Samba do anything in particular with the standard output of the program specified here? What would it take to have it WinPopUp-ed back to the sender of the message? I'm presently working on a program** to enable simple commands of some kind to be WinPopUp-ed to a Linux box and acted on or responded to in some way. For example, rather than having to telnet to my Linux box, log in, enter ifup ppp0 to dial into my ISP and then something else to activate my masquerading, I think it would be rather nice if I could simply WinPopUp a simple command such as DIAL_IN and then get a nice, user-friendly response such as Your Internet connection is now active popped back to me upon successful completion. ** Note well at this point:- I'm **NOT** a qualified or experienced programmer in any way, shape or form. In fact, I've only just finished wading through Herb Schildt's Teach Yourself C so this project is perhaps an over-ambitious second step up from the ...int main()..., printf(Hello World); league. Needless to say, if I actually end up with anything you guys couldn't bash out in five minutes with your eyes closed, I'll be more than happy to contribute it to the Samba project!!! Regards, -- David Andrew Patterson [EMAIL PROTECTED] -- Let me know, heaven sees Shines on life, our memories Make me feel all that you are Angel child or a radiant star -Chantal Kreviazuk -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Message Command
If you want to run a command on the linux server, why not just use the exec parameter? Are you wanting to send a pop up message to a windows or linux client? Although I don't use it right now, there is a well defined mechanism for sending popup messages to windows clients. Joel On Fri, Jan 10, 2003 at 10:54:49PM +1100, David Andrew Patterson wrote: From the smb.conf help document regarding the message command field:- You could make this command send mail, or whatever else takes your fancy. Please let us know of any really interesting ideas you have. First, my question:- Does Samba do anything in particular with the standard output of the program specified here? What would it take to have it WinPopUp-ed back to the sender of the message? I'm presently working on a program** to enable simple commands of some kind to be WinPopUp-ed to a Linux box and acted on or responded to in some way. For example, rather than having to telnet to my Linux box, log in, enter ifup ppp0 to dial into my ISP and then something else to activate my masquerading, I think it would be rather nice if I could simply WinPopUp a simple command such as DIAL_IN and then get a nice, user-friendly response such as Your Internet connection is now active popped back to me upon successful completion. ** Note well at this point:- I'm **NOT** a qualified or experienced programmer in any way, shape or form. In fact, I've only just finished wading through Herb Schildt's Teach Yourself C so this project is perhaps an over-ambitious second step up from the ...int main()..., printf(Hello World); league. Needless to say, if I actually end up with anything you guys couldn't bash out in five minutes with your eyes closed, I'll be more than happy to contribute it to the Samba project!!! Regards, -- David Andrew Patterson [EMAIL PROTECTED] -- Let me know, heaven sees Shines on life, our memories Make me feel all that you are Angel child or a radiant star -Chantal Kreviazuk -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] The use of Samba
Now that I have Samba all set up and working well with all the machines I have - some linux, some Win98, some WinXP , what more can I do with Samba than just allow access to each of these machines. Right now I can sit at any machine and access any others. I can move files around I can play music files from any machine and I can print on any Printer that is in the network. What more can I look forward to?? Or is this it?? -- T.L.Gervais Coldbrook, NS Canada. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] The use of Samba
you can use samba as a domain controller and print server too... -Original Message- From: Ted Gervais [mailto:[EMAIL PROTECTED]] Sent: Friday, January 10, 2003 7:45 AM To: [EMAIL PROTECTED] Subject: [Samba] The use of Samba Now that I have Samba all set up and working well with all the machines I have - some linux, some Win98, some WinXP , what more can I do with Samba than just allow access to each of these machines. Right now I can sit at any machine and access any others. I can move files around I can play music files from any machine and I can print on any Printer that is in the network. What more can I look forward to?? Or is this it?? -- T.L.Gervais Coldbrook, NS Canada. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: Samba locking problems
Hi Bernd, For now, we have backed down to 2.2.4. This seems to have solved our problems. This is frustrating, though, since we wanted to upgrade to at least 2.2.5+patches to possibly improve our situation with downloadable printer drivers. In my last post to the Samba mailing list, I mentioned that downgrading to 2.2.4 fixed my problems and asked for suggestions, but yours has been the only reply. Of course, this was right before the holidays, so I don't know how many actually saw that post or have even had the chance to think about it. Are you on HP-UX 11.x or 10.20? My systems are running mainly 11.0 and 11i, with a couple of exceptions. For 11.x systems, we might try using HP's CIFS/9000 server, since it is basically Samba with more integration/qualification with HP-UX. The last time I looked at it, it was based on a rather old release of Samba, but I believe that it is now much closer to the latest stable Samba release. Thanks for your input. I may have the chance in a week or so to give CIFS/9000 a try. I will update you and the list if I do. Best Regards, Dave Windsor AdW/MOE2.12 Team Leader, Test Systems Engineering Robert Bosch Corporation Anderson, SC, USA Voice: (864) 260-8459 Fax: (864) 260-8142 email: mailto:[EMAIL PROTECTED] -Original Message- From: Bernd Haeussermann [mailto:[EMAIL PROTECTED]] Sent: Friday, January 10, 2003 3:35 AM To: [EMAIL PROTECTED] Subject: Samba locking problems Hi Dave, we have exactly the same problems since upgrating our HP-UX server to 2.2.5. But not with Labview. We have those problems when several users use Microsoft applications. If you have a solution, could you please tell me? Thank You, Bernd Haeussermann Marconi Communications GmbH, AF/MTC6 Microwave Antennas - Center of Competence - Research and Development Gerberstr. 33, D-71522 Backnang Phone +49 7191 13 3015, Fax +49 7191 13 2603 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: serious problem with W2K TS and 2.2.7 PDC
Robert, Tomoki, With regards to the multipleusersonconnection Registry key value listed for WTS, this indeed does not work under the Windows 2000 version of terminal server. What I did to work around all the users getting the same SMB process was create different aliases to the samba file server for each user. In my case, in my terminal server host file, I added an user id alias for the samba server for each user connecting from the terminal server. When an user connected their samba share drives using their user id alias instead of the server name, they receive a separate smb process. An alternative way of doing this, that was suggested to me from the list, is you could use the netbios aliases parameter available in the smb.conf file. I did some tests with this and it seemed to work the same way as my local aliases, however I do not know if there is a maximum value for this. For example, say I have a user with the user id smitjoh and he goes to make a connection to my samba server, called samba1, from my terminal server. Instead of going \\samba1\myshare when he connects the share, I would have created an alias to samba1 called smitjoh and the user would connect the share as \\smitjoh\myshare. The same would then be done for the user to any other share from the samba server. Hope this helps. = Message: 1 From: Robert Stuart [EMAIL PROTECTED] Organization: Queensland Studies Authority To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Date: Tue, 10 Dec 2002 15:29:34 +1000 Subject: [Samba] Re: serious problem with W2K TS and 2.2.7 PDC Tomoki AONO wrote: In [EMAIL PROTECTED], [EMAIL PROTECTED] wrote: RedHat 7.3 PDC server with samba 2.2.7 rpm rebuilt with max connections patch and ldapsam and a few other minor changes, openldap 2.0.23-4. Windows 2000 Terminal Server with SP3, with various pre SP4 updates too. Various Win2K Pro, Win95 OSR2 clients. Is it likely that the %U expansion fixes broke this - some assumption with one pid/connection == one user? Yes. Would docs/Registry/WindowsTerminalServer.reg (in source file. I don't know where it place in the package) solve your problem? Unfortunately not. This reg file only applies to Windows NT 4.0 Terminal Server Edition. It has no effect on Win2K. I think its really silly that it doesn't, specially as TS/Citrix tuning info specifically suggests that this get turned on for NT4. Thanks for the suggestion. Robert Stuart Systems Administrator -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Linux platform for samba 2.2.7
Title: Message I had problems installing on RH 7.2 Reported back that files (I later found are parts of CUPS) were missing. I was able to run Samba 2.2.5 on RH 7.2 (my server is currently running that way). On the workstation, since I was going to upgrade RH (7.3 and 8.0 seem to be supported better). I upgraded all the way to RH8.0. If you're subscribed to RHN, the updates to the RH 8.0 distribution will take you to Samba 2.2.7. Tom Winfield -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Nir LivniSent: Thursday, January 09, 2003 4:16 AMTo: '[EMAIL PROTECTED]'Subject: [Samba] Linux platform for samba 2.2.7 What is the recommended linux version (RH 7.x) for samba 2.2.7 ? Are there any known issues with RH7.2 / RH7.3 ?
RE: [Samba] Slow performance with lots of files in one directory
Unless you are a programmer, I am afraid the only thing you can do is to modify how the files are stored in that directory. I had the files on a ext3 RAID5 with lots of memory config and any type of access to that directory would bring smb to a crawl. I even tried putting the files on a separate XFS RAID5 server and mount the directory, but seemed to just make it worse even with a 1Gig connection between the servers. The files that I store are from our in-house imaging program. Our file names were all numeric so it was just a case of changing the name structure from 123456.TIF to /3/2/1/456.TIF. In the new file name format, a directory has no more than 999+10 directory entries. Now the system is working better than ever. Regards - Gerald Drouillard Owner and Consultant Drouillard Associates, Inc. http://www.Drouillard.ca -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Anders Nordby Sent: Thursday, January 09, 2003 10:19 AM To: [EMAIL PROTECTED] Subject: [Samba] Slow performance with lots of files in one directory Hello, I've got performance problems with copying small files over to a Samba share in a directory that has lots of small files (1 to 2 files). It takes too long time to copy new files (they drip in at a fast pace), and smbd eats a lot of CPU time. Is there any way to make Samba run faster in this situation? Cheers, -- Anders Nordby Aftenposten AS, Systemteknisk avd. Tlf.: +47 22864083 Fax: +47 22864074 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba Authentication against NT domain
No, not in my experience. Since Samba (in domain mode) will forward all authentication requests to the PDC of the domain, it just has to join the domain (which causes the PDC to create a machine account for the Samba server automagically). Beast [EMAIL PROTECTED] 01/09/03 20:20 PM At 01:48 PM 1/9/2003 -0600, you wrote: Try something like this... ... # useradd machine% -- with the dollar sign # smbpasswd -a -m machine Is this command required? its for samba acting as PDC only. from man page : -m This option tells smbpasswd that the account being changed is a MACHINE account. Currently this is used when Samba is being used as an NT Primary Domain Controller. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Message Command
On Fri, Jan 10, 2003 at 10:54:49PM +1100, David Andrew Patterson wrote: First, my question:- Does Samba do anything in particular with the standard output of the program specified here? What would it take to have it WinPopUp-ed back to the sender of the message? Have your message command run smbclient to send a winpopup back. I'm presently working on a program** to enable simple commands of some kind to be WinPopUp-ed to a Linux box and acted on or responded to in some way. For example, rather than having to telnet to my Linux box, log in, enter ifup ppp0 to dial into my ISP and then something else to activate my masquerading, I think it would be rather nice if I could simply WinPopUp a simple command such as DIAL_IN and then get a nice, user-friendly response such as Your Internet connection is now active popped back to me upon successful completion. One problem you're going to face is that the message command gets run as the guest account (defaults to nobody). In order to run something like ifup you're going to have to either use a setuid executable (which raises all sorts of potential security issues) or set your guest account to something privileged like root (which raises even bigger security issues). -- Michael Heironimus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: samba (2.2.7a) + openldap (2.0.x)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 9 Jan 2003, Buchan Milne wrote: ((uid=machine_)(objectclass=sambaAccount)) where it should have been like this: ((uid=machine$)(objectclass=sambaAccount)) This is the alpha_strcpy() stuff again trying to remove unsafe shell characters. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc ISBN 0-672-32269-2 SAMS Teach Yourself Samba in 24 Hours 2ed You can never go home again, Oatman, but I guess you can shop there. --John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+HvPWIR7qMdg1EfYRAna/AKCPPu9q/bbah5tewH5B/CacmgtoaACgsWJV a64IYqboRQPn6msGl3zpdLQ= =ZCUy -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: samba (2.2.7a) + openldap (2.0.x)
((uid=machine_)(objectclass=sambaAccount)) where it should have been like this: ((uid=machine$)(objectclass=sambaAccount)) This is the alpha_strcpy() stuff again trying to remove unsafe shell characters. I am sure, but I am sure that I did a Machine Account add with 2.2.7, is this a change in 2.2.7a ... I don't remember seeing that in CVS logs ... but then I have been offline for about a month ... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Default domain for winbindd?
The reason why your line was badly formed was because it sounds like you used the name of the paramater without specifying any value... so the badly formed line gets ignored and the default (= no) used instead. What you were looking for was 'winbind use default domain = yes' ... That being said, do not use this in 2.x because it was meant for 3.x and has problems in 2.x releases ( http://marc.theaimsgroup.com/?l=sambam=103608357527005w=2 , http://marc.theaimsgroup.com/?l=sambam=103238578221048w=2 ). You can try it, but if you need to use this then you should really be in 3.x. ~ Daniel -Original Message- From: Chris Palmer Sent: Thursday, January 09, 2003 3:04 PM To: Buchan Milne; [EMAIL PROTECTED] Subject: Re: [Samba] Default domain for winbindd? Buchan Milne writes: It'd be nice if there were an smb.conf option for [global] like default = winbind domain =3D WHATEVER. Is there a plan to include such a feature = in the future, or does this feature exist and I just haven't found it? Try 'winbind use default domain' in the global section of smb.conf, and it will use the default domain (the one which is already listed in 'workgroup'). I added that and restarted winbindd (and Samba just for good luck). It didn't seem to help; I could not log in via SSH as merely chris.palmer. I had to do the full GENEEDINC+chris.palmer as before. Also, I get this error: === params.c:Parameter() - Ignoring badly formed line in configuration file: winbind use default domain === So it looks like my version of winbind (from Samba 2.2.7) doesn't have support for this feature. It's not supported by the samba team on 2.2.x, but it works quite well for authentication via pam (there are apparently issues with samba, specifically ACLs). Yeah; doesn't seem to work for me at all. Well, thanks for the tip. Will I just have to wait for Samba 3 for this feature? Its lack is hardly a deal-breaker, so I can wait. -- Chris Palmer Systems Programmer GeneEd -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- This message is the property of Time Inc. or its affiliates. It may be legally privileged and/or confidential and is intended only for the use of the addressee(s). No addressee should forward, print, copy, or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as a recipient. If the reader of this message is not the intended recipient, you are hereby notified that any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is strictly prohibited. If you have received this communication in error, please immediately notify the sender and delete this message. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Keeping local Profiles in WinNT and W2K
Yesterday I moved my LAN domain from a W2K server to Samba and I have problems logging on to my WinNT 4 machine using local profiles. My boss's computer is a freshly installed W2K and it had no problem at all with the change. My computer is a WinNT4 SP 6 and when I tried to log on with my user it said it couldnt find the profile and logged me off immediately. I used to have a roaming profile stored in that same machine with WINNT\Profiles shared in the network. Now I want to have LOCAL profiles. I logged on as a local Aministrator and mistakenly managed to delete my old profile, but it doesn´t matter. So I still can´t log on to my winnt machine, whereas my boss has no problem on his w2k. I tried playing a little with the variables logon path and logon home with no luck. All the examples I´ve found talk about storing the profiles remotely (for example in the server machine) but I havent found a useful explanation of how to keep them local. In fact, the W2K machine *is* keeping it locally in Documents and Settings but WinNT can't The man page says the the default value for logon path is \\%N\%U\profile with %N being the name of your NIS home directory server which I'm not sure what it means. Whatever it means, it works fine for W2K but NT gives all kinds of errors about not being able to load the profile, or about some path being to long or wrong (so it logs me in but I just have a blue desktop and that's it... it can't start explorer)... well, different kinds of errors depending on how I set the logon path I tried sharing WINNT\Profiles but then it says it can't write a PDS file (however it created the barspi directory perfectly well inside the shared resource) IN SUM!! I want to know if there 's a way so that each computer stores its profiles locally, whether they are W2K or NT. Since I'm not 100% certain of all steps I took, I'll explain them here. * First I demoted the W2K machine (command dcpromo) so it became just a regular server and not the PDC. * Then I wrote a smb.conf file which I'll copy below. * I recreated the users as explained in the Samba PDC HOWTO. * I created by hand a machine account for my boss's computer (W2K) but then tried the line add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u which simplifies this step (taken from PDC HOWTO). * I rejoined 4 computers to the new PDC (my boss's newly installed W2K, the old W2K PDC that now isn't :-), a WinNT 4.0 workstation, and my own WinNT 4.0 server) * The rest of the network is made of Win98 and they have no problems with the change. I should mention that I'm using Samba 2.2.1a and the NT machines are up to SP 6 Follownig are the relevant parts of smb.conf [global] workgroup = CREACION netbios name = ROUTER # BBB PDC os level = 64 security = user preferred master = True domain master = True local master = True domain logons = yes encrypt passwords = Yes smb passwd file = /etc/samba/smbpasswd unix password sync = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* ;obey pam restrictions = Yes ;pam password change = Yes username map = /etc/samba/smbusers add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u name resolve order = bcast host lmhosts wins wins support = yes wins proxy = yes dns proxy = no ;BBB logon path = \\%m\Profiles\%U #=== Share Definitions [netlogon] path = /var/samba/lib/netlogon read only = yes write list = ntadmin [homes] comment = Home Directories browseable = no writable = yes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Windows XP and Samba 2.2.7a Print drivers--they upload fine, but driver list for printers is emtpy.
I am logged on as a domain admin and printer admin. I have created and assigned the correct rights to /srv/printers and have created W32X86 and WIN40 subdirectories. I was able to go into server properties and upload all the necessary drivers. When I right click on the printer and say No. to Printer driver not installed, do you want to install the driver now? the drivers list in the Advanced tab is empty. I can't choose from the printer drivers I've uploaded. This is the correct procedure, according to Samba Essentials for Windows Administrators (A book that I don't really recommend, BTW... It only focuses on SWAT and Webmin as management tools...and just glosses over the config files.). Here is my relevant globals, printers, and print$ sections from smb.conf: domain admin group = root printer admin = root printing = lprng print command = /usr/bin/lpr -P%p -r %s lpq command = /usr/bin/lpq -P%p lprm command = /usr/bin/lprm -P%p %j [printers] comment = All Printers path = /var/spool/samba printable = yes browseable = yes printer admin = root @users [print$] path = /srv/printers guest ok = yes browseable = yes read only = yes write list = root Any ideas what's wrong? Is this an XP Thang? And if so, other than setting up an NT box (which really isn't an option), is there a suitable workaround? Thanks! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] The use of Samba
On Fri, 2003-01-10 at 04:45, Ted Gervais wrote: Now that I have Samba all set up and working well Right now I can sit at any machine and access any others. What more can I look forward to?? Or is this it?? Here are some thoughts, Ted. Mostly if you're bored :-) 1) Move Samba/PDC over to using LDAP. Check that this works. 2) Then, move your Linux box(es?) over to using the same LDAP for authentication. One trick I found useful is to open two consoles to your target machine, leaving one firmly SSH'd in (so you can recover when the other terminal gets locked out :-O ). Now, you will be enjoying one single point of maintenance (LDAP) for all your Win/Lin users. Sooner or later, though, a Win user will try to log into a Linux box, and you'll see an error about lack of a home-directory, or no shell, or no .profile, or some such... 3) Assuming that your Samba setup gives each Windows user a home-dir upon login, it's now time to duplicate that in Linux. Server uses exports file, client will use Automount (auto.home). Now, the same home-dir is available on both Win and Linux logins. (seeing as you're also a ham - I'm VA7GP, and VA7SFU for Simon Fraser University) - you could hook your HF radio to your Linux box. Run twpsk to experience PSK-31 data-over-radio, or gmfsk for either RTTY or MFSK-16. While this has next-to-nothing to to with Samba :-) it's a great way to pass some indoor winter months :-) ). -Gord -- Gordon Pritchard, P.Eng. | Institute of Electrical and Research Labs Manager| Electronics Engineers Simon Fraser University, Surrey | Quarter Century Wireless Ass'n [EMAIL PROTECTED] | Telephone Pioneers of America phone: 604.586.6186 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] smbclient thinks passwordless account is anonymous
set-up an account on the Linux machine, Then put null passwords = yes in the smb.conf file ( the global section) then do a smbpasswd -an username which will create a samba account with no password ( or a null password ). When the user logs on it will use his machine username should be seen in smbstatus hope that helps Ken -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: 04 January 2003 1:33 AM To: Gerald (Jerry) Carter Cc: John Tyner; [EMAIL PROTECTED] Subject: Re: [Samba] smbclient thinks passwordless account is anonymous On Thu, Jan 02, 2003 at 01:20:13PM -0600, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 26 Dec 2002, John Tyner wrote: I want to use a passwordless account on my windows box to connect to from my linux box. When I do a smbclient -L host -U name, smbclient always prints Anonymous login successful even though I supplied a username. If I supply a password on the command line instead, then I don't get the Anonymous login message. Neither way works since the account actually doesn't have a password, but if I set a password and use it with smbclient then everything works as expected. It seems that if you don't supply smbclient with a password, then it assumes anonymous login regardless of whether or not the -U option was given. Is this the intended behavior or a bug? This sounds like our bug. Do you have a patch? If not, it will be al ittle while before I get caught up and can look into it. I took a quick look at this. To use an account with no password try smbclient -L host -Uname% instead. If the password is not supplied then smbclient will always try again with an anonymous request. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Windoz Browsing
Hello all, I'm having a problem with browsing, I have SAMBA setup on a small home network, on the windows clients I can see the Samba server in the network neighborhood but if I try to connect or use "net view" or "net use" I get a error 53 the computer name specified in the network path cannot be located. I can browse to the two windows clients on the network just not the Samba server, I have also added the Samba server to the LMHOSTS file but this did not help. Any ideas? # Samba config file created using SWAT# from UNKNOWN (127.0.0.1)# Date: 2003/01/10 12:59:20# Global parameters[global]workgroup = REVELATIONnetbios name = DANIELserver string = Samba Serverencrypt passwords = Yesobey pam restrictions = Yespam password change = Yespasswd program = /usr/bin/passwd %upasswd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*unix password sync = Yeslog file = /var/log/samba/%m.logmax log size = 0socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192preferred master = Falselocal master = Nodomain master = Falsehosts allow = 192.168.1.101printing = lprng[homes]comment = Home Directoriesvalid users = %Sread only = Nocreate mask = 0664directory mask = 0775[printers]comment = All Printerspath = /var/spool/sambaprintable = Yesbrowseable = No[test]comment = Test Share for Samba Userpath = /export/samba/testguest ok = Yes
RE: [Samba] Default domain for winbindd?
Message: 16 Subject: RE: [Samba] Default domain for winbindd? Date: Fri, 10 Jan 2003 11:50:30 -0500 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED], [EMAIL PROTECTED] The reason why your line was badly formed was because it sounds like you used the name of the paramater without specifying any value... so the badly formed line gets ignored and the default (= no) used instead. What you were looking for was 'winbind use default domain = yes' ... Should have put in a real entry instead of assuming people would read a man page ... That being said, do not use this in 2.x because it was meant for 3.x and has problems in 2.x releases ( http://marc.theaimsgroup.com/?l=sambam=103608357527005w=2 , http://marc.theaimsgroup.com/?l=sambam=103238578221048w=2 ). You can try it, but if you need to use this then you should really be in 3.x. I think it's a bit suspect to suggest 3.0alpha over 2.2.x, depending on the application. For plain authentication use (ie desktops, ssh, cvs over ssh, pop/imap etc), it seems to work very well. I have a production server at a client, that I have never had problems with, service 600+ mailboxes to 60+ concurrent users. I am quite sure 3.0alpha isn't supported yet either (which is the gist of the messages regarding winbind use default domain = yes). Regards, Buchan -- |--Another happy Mandrake Club member--| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Default domain for winbindd?
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] The reason why your line was badly formed was because it sounds like you used the name of the paramater without specifying any value... so the badly formed line gets ignored and the default (= no) used instead. What you were looking for was 'winbind use default domain = yes' ... heh! Yes, it works now. That being said, do not use this in 2.x because it was meant for 3.x and has problems in 2.x releases Okay, thanks. -- Chris PalmerSystems ProgrammerGeneEd -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Windoz Browsing
First of all get rid of the hosts allow directive. After you get everything working than you should put in security directives. Original Message - From: Michael Louis To: [EMAIL PROTECTED] Sent: Friday, January 10, 2003 1:12 PM Subject: [Samba] Windoz Browsing Hello all, I'm having a problem with browsing, I have SAMBA setup on a small home network, on the windows clients I can see the Samba server in the network neighborhood but if I try to connect or use net view or net use I get a error 53 the computer name specified in the network path cannot be located. I can browse to the two windows clients on the network just not the Samba server, I have also added the Samba server to the LMHOSTS file but this did not help. Any ideas? # Samba config file created using SWAT # from UNKNOWN (127.0.0.1) # Date: 2003/01/10 12:59:20 # Global parameters [global] workgroup = REVELATION netbios name = DANIEL server string = Samba Server encrypt passwords = Yes obey pam restrictions = Yes pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* unix password sync = Yes log file = /var/log/samba/%m.log max log size = 0 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 preferred master = False local master = No domain master = False hosts allow = 192.168.1.101 printing = lprng [homes] comment = Home Directories valid users = %S read only = No create mask = 0664 directory mask = 0775 [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [test] comment = Test Share for Samba User path = /export/samba/test guest ok = Yes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] strange printing problem
Hello, we have some trouble with printing via samba. Sometimes users get the windows error message that the system couldn't find the file. sorry for bad translation from german to english. ;-) After klicking on repeat a lot of times printing works. Installed version is 2.2.7a. Following lines are in client machine logfiles: [2003/01/10 18:14:47, 0] tdb/tdbutil.c:tdb_log(531) tdb(/opt/samba/var/locks/printing.tdb): rec_free_read bad magic 0xfee1dead at offset=53512 [2003/01/10 18:14:48, 0] tdb/tdbutil.c:tdb_log(531) tdb(/opt/samba/var/locks/printing.tdb): rec_free_read bad magic 0xfee1dead at offset=53512 [2003/01/10 18:14:53, 0] tdb/tdbutil.c:tdb_log(531) tdb(/opt/samba/var/locks/printing.tdb): remove_from_freelist: not on list at off=61156 [2003/01/10 18:14:53, 0] tdb/tdbutil.c:tdb_log(531) tdb(/opt/samba/var/locks/printing.tdb): tdb_free: left free failed at 61156 I'm not sure but I guess these messages have something to do with my printing problem. As far as I remember we haven't had these messages with 2.2.6. And of course also not this strange problem. It seems to me this appears since upgrade to 2.2.7. I hoped it will disappear with 2.2.7a but it doesn't. Any ideas what to do? btw, going back to 2.2.6 is not exactly what I want to have to do. ;-) Thanks in advance Gustav -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Please help! Updated to Redhat 8.0, now can't get samba to work
I just installed Redhat 8.0, got the errata samba packages, but I still can't get Samba to work. I have gone through the Diagnosis.txt file with the following results: Test 1: everything appears OK Test 2: pings work both ways Test 3: OK Test 4: # nmblookup -B lion __SAMBA__ querying __SAMBA__ on 192.168.8.14 192.168.8.14 __SAMBA__00 OK Test 5: # nmblookup -B cub '*' querying * on 192.168.8.15 192.168.8.15 *00 Test 6: # nmblookup -d 2 '*' added interface ip=192.168.8.14 bcast=192.168.255.255 nmask=255.255.0.0 added interface ip=172.16.191.1 bcast=172.16.191.255 nmask=255.255.255.0 added interface ip=192.168.250.1 bcast=192.168.250.255 nmask=255.255.255.0 querying * on 192.168.255.255 querying * on 172.16.191.255 Got a positive name query response from 172.16.191.128 ( 172.16.191.128) 172.16.191.128 *00 Not the same as Test 5, but I think it's still okay. Test 7: OK Test 8: C:\WINDOWS net view \\lion Error 59: An unexpected network error has occurred. Quit all running programs, restart your computer, and then try again. If the problem persists, contact your network administrator. The problem persists. I'm not an expert in network stuff and this is just a network between my Linux host and my PC runinng on VMWare on the same machine. I have no idea what would cause this. Please help. Test 9: C:\WINDOWS net use x: \\lion\tmp Same message as in Test 8 Test 10: # nmblookup -M Workgroup querying Workgroup on 192.168.255.255 querying Workgroup on 172.16.191.255 172.16.191.128 Workgroup1d Test 11: File manager won't connect to it. Please help me understand what is wrong and how to fix it. Below, I've included my smb.conf. Let me know of any other information that is needed. Thanks! Rosina # This is the main Samba configuration file. You should read the # smb.conf(5) manual page in order to understand the options listed # here. Samba has a huge number of configurable options (perhaps too # many!) most of which are not shown in this example # # Any line which starts with a ; (semi-colon) or a # (hash) # is a comment and is ignored. In this example we will use a # # for commentry and a ; for parts of the config file that you # may wish to enable # # NOTE: Whenever you modify this file you should run the command testparm # to check that you have not made any basic syntactic errors. # #=== Global Settings = [global] # workgroup = NT-Domain-Name or Workgroup-Name workgroup = Workgroup # server string is the equivalent of the NT Description field server string = Samba Server # This option is important for security. It allows you to restrict # connections to machines which are on your local network. The # following example restricts access to two C class networks and # the loopback interface. For more examples of the syntax see # the smb.conf man page hosts deny = ALL hosts allow = 192.168. 127. 172.16. # if you want to automatically load your printer list rather # than setting them up individually then you'll need this printcap name = /etc/printcap load printers = yes # It should not be necessary to spell out the print system type unless # yours is non-standard. Currently supported print systems include: # bsd, sysv, plp, lprng, aix, hpux, qnx printing = lprng # Uncomment this if you want a guest account, you must add this to /etc/passwd # otherwise the user nobody is used ; guest account = pcguest # this tells Samba to use a separate log file for each machine # that connects log file = /var/log/samba/%m.log # Put a capping on the size of the log files (in Kb). max log size = 50 # Security mode. Most people will want user level security. See # security_level.txt for details. security = user # Use password server option only with security = server # The argument list may include: # password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name] # or to auto-locate the domain controller/s # password server = * ; password server = NT-Server-Name # Password Level allows matching of _n_ characters of the password for # all combinations of upper and lower case. ; password level = 8 ; username level = 8 # You may wish to use password encryption. Please read # ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation. # Do not enable this option unless you have read those documents encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd # The following is needed to keep smbclient from spouting spurious errors # when Samba is built with support for SSL. ; ssl CA certFile = /usr/share/ssl/certs/ca-bundle.crt # The following are needed to allow password changing from Windows to # update the Linux system password also. # NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above. # NOTE2: You do NOT need these to allow workstations to change only #the encrypted SMB passwords. They allow the Unix password #to be kept in sync with the SMB password.
[Samba] Deleting hosts
How does one delete machines from the WINS list when samba is the WINS server? They seem to hang around forever. Even temporary machines that plug into our network leave their own domain names and host names hanging around. Michael D. Black [EMAIL PROTECTED] http://www.csi-inc.com/ http://www.csi-inc.com/~mike 321-676-2923, x203 Melbourne FL -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] add printer
Hi, I have a couple of Intel NetPro Print Servers and would like to integrate them into Samba. May I ask if I should setup them up as Windows print servers then use Samba (CUPS) to add them into Samba? What's the proper way of doing this? This is different from JetDirect right? Regards, Norman -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Movies
Attached file:
[Samba] Re: samba (2.2.7a) + openldap (2.0.x)
Buchan Milne wrote: C.Lee Taylor wrote: OK, I stayed a bit late, waiting for things to finish compiling etc ... and did some tests. It seems to work. What I did was just point the production DC at a slave server, and then 1)try and change my password a)while both ldap servers were running (works) b)while only the slave is running (doesn't work) c)while only the master is running (doesn't work) 2)connect to my homes share a)while both servers were running (works) b)while only the slave was running (works) c)while only the master is running (doesn't work) So, it seems to be all correct, but it would be nice to have ldap failover (multiple ldap servers listed in smb.conf?), but not absolutely necessary. Now our WAN setup should work! Well, not quite. I did a new test, this time with: ldap/pdc: master ldap server and original dc bgmilne: slave ldap hercules: slave ldap, 2nd dc thinkpad1: win2k/linux dual-boox client pdc, hermes and hercules are on the same net, thinkpad1 is on a crossover cable with hercules. I could authenticate to hercules after doing the ldap setup only (did not join hercules to the domain, just imported the domain SID). However, I could not change the password, either from win2k, or from the commandilne on hercules (smbpasswd -r hercules). I will go through the unav.es howto again and see if I have missed soemthing. Also, for some reason the profile didn't work. It's not specificed in LDAP, but works on PDC when in the normal net. Ditto for login scripts. The shares defined in hercules's smb.conf are accessible after login though (but profiles are on root-squashed NFS to pdc, could be the issue). Failover (ldap server = bgmilne ldap) seems to work, but wasn't tested extensively. Regards, Buchan -- |--Another happy Mandrake Club member--| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Move existing Local Profile to Roaming
Bob and all: Here is what I ended up doing and it worked well in most cases. *Create the new UNIX account and Samba account on the Linux box *Log into the Client computer with the existing local profile as an account in the Admin List *Right-Click on my computer, pick the User Profiles tab, select the users local profile and click on the Copy To button. *A dialog box pops up, I typed \\sambaserver\profile\username into the top text box. Then you hit the Copy button twice. The first time it creates the directory, the second time it copies all of the profile to the Samba server. *Next you have to changes the permissions on the profile in Linux. I telnet to the samba server and change the permissions like so `chown -R username.username /home/samba/profiles/username So that's essentially what I did. It worked in most cases. One of the users had a profile that kept crashing explorer.exe so I had to manually copy her stuff, but otherwise I was pleased. A Cline From: Owens, Bob [EMAIL PROTECTED] To: 'A Cline' [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: RE: [Samba] Move existing Local Profile to Roaming Date: Thu, 9 Jan 2003 19:21:19 -0600 Also try making a roaming profile for them before copying over there old profile in to the new roaming one? Which would be ishy is you have a lot of users. -Original Message- From: A Cline [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 09, 2003 7:00 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: [Samba] Move existing Local Profile to Roaming Bob: Yes, the 20 or so new computers that I have attached to the PDC are all using Roaming profiles and they work great. Here are the lines from my smb.conf that you requested. [global] logon path = \\%L\profiles\%U [profiles] path = /home/samba/profiles guest ok = yes browseable = no read only = no create mask = 0600 directory mask = 0700 share modes = no My and your lines are very similar at the least. Thanks for any additional info. From: Owens, Bob [EMAIL PROTECTED] To: 'A Cline' [EMAIL PROTECTED], [EMAIL PROTECTED] Subject: RE: [Samba] Move existing Local Profile to Roaming Date: Thu, 9 Jan 2003 18:49:15 -0600 Do you have the following? [global] # Where to store roving profiles (only for Win95 and WinNT) #%L substitutes for this servers netbios name, %U is username #You must uncomment the [Profiles] share below logon path = \\%L\Profiles\%U [Profiles] path = /data/domain/Profiles/ browseable = no writable = yes valid users = @domusers create mode = 0770 directory mode = 0770 force group = root -Original Message- From: A Cline [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 09, 2003 5:59 PM To: [EMAIL PROTECTED] Subject: [Samba] Move existing Local Profile to Roaming Hello: I have a Redhat 7.3 samba server acting as a PDC and running samba 2.2.3a-13. I have a few computers with extensive existing profiles and I want to know if anyone knows of a good way to get the COMPLETE profile to the roaming profile on the samba server. Every manual copy way that I have tried thus far has failed miserably. Thanks, A Cline _ Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba _ MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE* http://join.msn.com/?page=features/virus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbclient thinks passwordless account is anonymous
This sounds like our bug. Do you have a patch? If not, it will be al ittle while before I get caught up and can look into it. I took a quick look at this. To use an account with no password try smbclient -L host -Uname% Here is the output: $ smbclient -L refresco -Ujohn% added interface ip=192.168.0.2 bcast=192.168.0.255 nmask=255.255.255.0 Anonymous login successful Domain=[COOL] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager] Sharename Type Comment - --- Error returning browse list: NT_STATUS_ACCESS_DENIED Server Comment ---- WorkgroupMaster ---- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Default domain for winbindd?
Should have put in a real entry instead of assuming people would read a man page ... ;) Actually, looking back now, he did reference the winbindd man page in his first post, and looked through logs. Maybe just ran out of steam at that stage of the process? http://marc.theaimsgroup.com/?l=sambam=103608357527005w=2 , http://marc.theaimsgroup.com/?l=sambam=103238578221048w=2 I think it's a bit suspect to suggest 3.0alpha over 2.2.x, depending on the application. For plain authentication use (ie desktops, ssh, cvs over ssh, pop/imap etc), it seems to work very well. I have a production server at a client, that I have never had problems with, service 600+ mailboxes to 60+ concurrent users. I had similar success when I tried it... the only problems I experienced were logs getting winbind errors for system accounts. But Jerry and Andrew both say don't use it in 2.x, and have said it more than once on this list. I am quite sure 3.0alpha isn't supported yet either (which is the gist of the messages regarding winbind use default domain = yes). Well, if he has winbind problems in 2.x with use default domain, I suspect the samba team would say it got placed in 2.x to satisfy a dependency of a code merge, has known flaws, and should not be used. If he has problems in 3.x with winbind use default domain = yes, he's likely to get more eyes. That's my best guess, at least, and I welcomed him to try it in 2.x, but suggested 3.x was the way to go if he really needed it. ~ Daniel --- This message is the property of Time Inc. or its affiliates. It may be legally privileged and/or confidential and is intended only for the use of the addressee(s). No addressee should forward, print, copy, or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as a recipient. If the reader of this message is not the intended recipient, you are hereby notified that any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is strictly prohibited. If you have received this communication in error, please immediately notify the sender and delete this message. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Win98 Samba Login Script Errors
Hello,
Can anybody please help me with the following errors. Whenever a user from the group
accounting logs in the the PDC, a login box pops up and the following message
appears Accessed Denied - Accou~!n.bat. The problems seems to ly with people who
belong to the accounting group and are running Win98se on the desktop. Absolutely
nothing has been changed on the system. The configuration on the server is as
follows:
Redhat 7.1
Kernel 2.4.18
Samba 2.2.3
SMB.CONF
[global]
hide dot files = yes
wins server = 172.17.10.60
domain master = yes
add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
create mode = 0660
dns proxy = no
encrypt passwords = yes
logon path =
time server = yes
status = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
max log size = 50
logon script = %G.bat
veto files =
/*.vbs/*.eml/*.nwc/readme.exe/admin.dll/riched20.dll/Desktop/History/Application
Data/Cookies/
directory mode = 0770
security = user
domain admin group = @domadm
domain logons = yes
delete veto files = yes
server string = Samba Server %v
workgroup = ADMIN
local master = yes
log level = 7
netbios name = adminserver
log file = /usr/local/samba/var/log.%m
guest account = samba
os level = 128
username map = /usr/local/samba/lib/users.map
logon drive = H:
logon home = \\%L\%U
[homes]
comment = Home Directories
browseable = no
writable = yes
nt acl support = yes
[netlogon]
comment = Network Logon Service
path = /samba/login
guest ok = yes
writable = yes
public = no
write list = @domadm
share modes = no
nt acl support = yes
[accounting]
path = /samba/groups/accounting
comment = Accounting Group
write list = @accounting,@domadm
create mode = 0660
directory mode = 0770
nt acl support = yes
If anybody has a questions or if you need any more info please let me know.
Regards,
Matt
S.èº{.nÇ+·®+%Ë`¢Ú-
çèZ0xD¶§v·vØ^{-®ç-ìÛiÿùb²Û,jfÚ¢¸?¨¥©ÿ+-wèþƦm
RE: [Samba] Win98 Samba Login Script Errors
LFNs (Long FileNames) in NT and 98 use a different algorithm when shortening them to 8.3 convention. Change your batch filenames to maintain the 8.3 (eight chars in the name max, and 3 chars in the extension), and I think you'll see this error go away. -Christopher -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, January 10, 2003 3:47 PM To: [EMAIL PROTECTED] Subject: [Samba] Win98 Samba Login Script Errors Hello, Can anybody please help me with the following errors. Whenever a user from the group accounting logs in the the PDC, a login box pops up and the following message appears Accessed Denied - Accou~!n.bat. The problems seems to ly with people who belong to the accounting group and are running Win98se on the desktop. Absolutely nothing has been changed on the system. The configuration on the server is as follows: Redhat 7.1 Kernel 2.4.18 Samba 2.2.3 SMB.CONF [global] hide dot files = yes wins server = 172.17.10.60 domain master = yes add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u create mode = 0660 dns proxy = no encrypt passwords = yes logon path = time server = yes status = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 max log size = 50 logon script = %G.bat veto files = /*.vbs/*.eml/*.nwc/readme.exe/admin.dll/riched20.dll/Desktop/History/Application Data/Cookies/ directory mode = 0770 security = user domain admin group = @domadm domain logons = yes delete veto files = yes server string = Samba Server %v workgroup = ADMIN local master = yes log level = 7 netbios name = adminserver log file = /usr/local/samba/var/log.%m guest account = samba os level = 128 username map = /usr/local/samba/lib/users.map logon drive = H: logon home = \\%L\%U [homes] comment = Home Directories browseable = no writable = yes nt acl support = yes [netlogon] comment = Network Logon Service path = /samba/login guest ok = yes writable = yes public = no write list = @domadm share modes = no nt acl support = yes [accounting] path = /samba/groups/accounting comment = Accounting Group write list = @accounting,@domadm create mode = 0660 directory mode = 0770 nt acl support = yes If anybody has a questions or if you need any more info please let me know. Regards, Matt S.N²rys²¶¢~£jy...²rz¶-²mfSY²~j -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Here is that sample
Attached file:
[Samba] user mount problems
Hi, i'm trying to get samba read write to work on my computer. I can write as root, but when i added this to my fsab //PLAYER/UPLOAD /home/ftpa/upload2 smbfs user,rw,username=xxx,password=xxx 0 0 and try to do a mount //PLAYER/UPLOAD i get. smbmnt must be installed suid root for direct user mounts (1011,1011) smbmnt failed: 1 What should i do? Any help would be appreciated -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Message Command
man smb.conf Then search for preexec and root preexec and postexec. for example, this should do it: /preexec Press n to repeat the search. This is part of samba. It allows samba to invoke commands when a user logs in or logs out of the share. It is very handy. Joel On Fri, Jan 10, 2003 at 11:35:43PM +1100, David Andrew Patterson wrote: At 07:28 AM 10/01/03 -0500, you wrote: If you want to run a command on the linux server, why not just use the exec parameter? Are you wanting to send a pop up message to a windows or linux client? Although I don't use it right now, there is a well defined mechanism for sending popup messages to windows clients. Joel Tell me more about this exec parameter (What is it, how do I use it, etc...) Is it part of Samba, or completely unrelated? -- David Andrew Patterson [EMAIL PROTECTED] -- Let me know, heaven sees Shines on life, our memories Make me feel all that you are Angel child or a radiant star -Chantal Kreviazuk -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Directly smbmounting share folder (a la w2k)
Hello: Is it possible to directly mount a folder within a windows share using smbmount? For example: smbmount //server/share/folder1 /mnt/folder1 This is do-able with a win2k client, but I can not get it to work with Samba. Here's my situation: I have a communal Linux system that is operating in a primarily Windows group, and I want to give each user access to their windows home directory. The windows sysadm has set up the home directories on a Windows NT server. The problem is that all of the home directories are within a single share UserHomes. The win2k clients have no problem mapping the folder (e.g. //server/userhomes/myuser) to a drive, and I would like to be able to do that with autofs and samba. Right now, the best I can do is to map the whole share each time: ==auto.master== /windows /etc/auto.windows -t 300 #EOF ==auto.windows== * -fstype=smbfs,credentials=/home//.smbpasswd,uid=,dmask=0700 \ ://server/userhomes #EOF This does work, but it adds a useless directory level: a user's (e.g. 'myuser') windows home directory shows up as: /windows/myuser/myuser/*. In addition, all the other windows users' home directories (but not directory contents) show up in /windows/myuser. Is there a solution, or is this a new-feature-request for 3.0+? Many thanks, john Siirola Department of Chemical Engineering Carnegie Mellon University -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba errror
Hi All I able to compile samba 2.2.7a source code on Sloaris 4 without any error and able create a package. I installed samba package also successfully. Start the smbd and nmbd saemon aswell. Then successfully joined to the domain by smbpasswd command. Now the problem is when goto window and see the unix server and try to click on share (example: by emp760 id) we get following error; I really need help please ASAP. I appriciate that. [root] /usr/local/samba/var WDoldDEV[5.4]wd01s001: ls -l total 18 drwxr-xr-x 2 root root 512 Jan 10 16:03 locks -rw-r--r-- 1 root root1884 Jan 10 15:07 log.emp760i -rw-r--r-- 1 root root 942 Jan 10 15:37 log.lvnv02w566 -rw-r--r-- 1 root root 942 Jan 10 15:40 log.slca04w417 -rw-r--r-- 1 root root2278 Jan 10 16:02 log.smbd -rw-r--r-- 1 root root 942 Jan 10 16:02 log.tpfl01w261 [root] /usr/local/samba/var WDoldDEV[5.4]wd01s001: DoldDEV[5.4]wd01s001: more log.emp760i [2003/01/10 15:06:51, 0] lib/fault.c:fault_report(38) === [2003/01/10 15:06:51, 0] lib/fault.c:fault_report(39) INTERNAL ERROR: Signal 11 in pid 1020 (2.2.7a) Please read the file BUGS.txt in the distribution [2003/01/10 15:06:51, 0] lib/fault.c:fault_report(41) === [2003/01/10 15:06:51, 0] lib/util.c:smb_panic(1094) PANIC: internal error [2003/01/10 15:06:52, 0] lib/fault.c:fault_report(38) === [2003/01/10 15:06:52, 0] lib/fault.c:fault_report(39) INTERNAL ERROR: Signal 11 in pid 1021 (2.2.7a) Please read the file BUGS.txt in the distribution [2003/01/10 15:06:52, 0] lib/fault.c:fault_report(41) === [2003/01/10 15:06:52, 0] lib/util.c:smb_panic(1094) PANIC: internal error [2003/01/10 15:07:03, 0] lib/fault.c:fault_report(38) === [2003/01/10 15:07:03, 0] lib/fault.c:fault_report(39) INTERNAL ERROR: Signal 11 in pid 1022 (2.2.7a) --More--(61%) Thanks and have a nice weekend. Dilip Patel Voice: 630-521-3284 Pager: 877-463-7334 HOUSEHOLD -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba errror
On Sat, 2003-01-11 at 09:05, Dilip X. Patel wrote: Hi All I able to compile samba 2.2.7a source code on Sloaris 4 without any error and able create a package. I installed samba package also successfully. Start the smbd and nmbd saemon aswell. Then successfully joined to the domain by smbpasswd command. Now the problem is when goto window and see the unix server and try to click on share (example: by emp760 id) we get following error; I really need help please ASAP. I appriciate that. [root] /usr/local/samba/var WDoldDEV[5.4]wd01s001: ls -l total 18 drwxr-xr-x 2 root root 512 Jan 10 16:03 locks -rw-r--r-- 1 root root1884 Jan 10 15:07 log.emp760i -rw-r--r-- 1 root root 942 Jan 10 15:37 log.lvnv02w566 -rw-r--r-- 1 root root 942 Jan 10 15:40 log.slca04w417 -rw-r--r-- 1 root root2278 Jan 10 16:02 log.smbd -rw-r--r-- 1 root root 942 Jan 10 16:02 log.tpfl01w261 [root] /usr/local/samba/var WDoldDEV[5.4]wd01s001: DoldDEV[5.4]wd01s001: more log.emp760i [2003/01/10 15:06:51, 0] lib/fault.c:fault_report(38) === [2003/01/10 15:06:51, 0] lib/fault.c:fault_report(39) INTERNAL ERROR: Signal 11 in pid 1020 (2.2.7a) Please read the file BUGS.txt in the distribution [2003/01/10 15:06:51, 0] lib/fault.c:fault_report(41) === What we need is a 'backtrace' so that we can see where the problem actually is. Setup a 'panic action = /bin/sleep 9000' in your smb.conf, then attach to the dead process with gdb. Get a 'bt full', and post it back to the list. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
Re: [Samba] Urgent help please: Samba constantly giving INTERNALERROR
On Thu, 2003-01-09 at 05:25, Patel, Pravin K (MED, GEMS-IT) wrote: Happy New Year Samba Team, Please help me withthe following error. On one particular SUN E420 sharing a directory constantly giving INTERNAL ERROR. It was working OK before and is working OK on other E420. === [2003/01/08 12:10:23, 0] lib/fault.c:(39) INTERNAL ERROR: Signal 11 in pid 3659 (2.2.4) Please read the file BUGS.txt in the distribution [2003/01/08 12:10:23, 0] lib/fault.c:(41) === [2003/01/08 12:10:23, 0] lib/util.c:(1092) PANIC: internal error The first thing to do is try and upgrade to Samba 2.2.7a. There are serious security issues with earlier versions anyway, and it might just solve your issue. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
[Samba] Domain Users cannot use quickbooks
Hi all; the other day we tried to get ambitious and get the office onto a samba domain. Things were fine, but our quickbooks users could not use quickbooks because they were domain restricted users and needed to be domain standard users. Anyone have any help on how to get the users in question to be power users? Mike hillyer -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] user mount problems
Well, like the man says, install smbmnt suid root. chmod +s smbmnt (where ever smbmnt is) might work. man chmod has more detail. You may have to fool with your fstab file, too. Joel On Sat, Jan 11, 2003 at 10:29:32PM +0100, Viktor Pirard wrote: Hi, i'm trying to get samba read write to work on my computer. I can write as root, but when i added this to my fsab //PLAYER/UPLOAD /home/ftpa/upload2 smbfs user,rw,username=xxx,password=xxx 0 0 and try to do a mount //PLAYER/UPLOAD i get. smbmnt must be installed suid root for direct user mounts (1011,1011) smbmnt failed: 1 What should i do? Any help would be appreciated -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem to access sambaserver from another subnet.
Hi, I have a network that has a NT4 PDC and 2 NT4 BDC plus one linux samba server. Then there is a VPNsubnet routed over ADSL to the main network. The problem is that I can't connect to the samba sever from the VPN with either W98 or W2k I can log on to the domain, can ping the servers, can see the server in the network neighbourhood. But I can't login, it says that wrong password or user name. The samba server is in security = domain mode and uses winbind to authenticate from the NT4 PDC. And it works fine in the local network. The network doesn't have a WINS server set up, can that be the problem? Can it be some kind of NT4 permission srewup? Thanks Mikko -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Can't add print drivers for existing printers
I've just upgraded from Samba 2.0 (Debian 2.2 potato) to Samba 2.2 (Debian 3.0 woody), and I'm trying to get the print driver functionality working. My test server is a Debian 3.0r1 system running Samba 2.2.3a. My test client is running Windows 2000 Professional SP1. I'm following the procedure in the Samba-HOWTO-Collection, namely: Browse to the Samba server Open the Printers folder Right-click a printer, select Properties Click No when asked if I want to install a print driver Advanced tab New Driver button If I don't have any printers installed on the client, I select the print driver from the list in the APDW and click Finish. At this point, a dialog asking me for the Windows 2000 CD pops up. (Exact text: Insert disk Please insert the Compact Disc labeled Windows 2000 Server CD-ROM into your CD-ROM drive (D:) and then click OK.) It does not appear to be able to locate the correct driver files on the Win2k disc, and the process fails. If I have already installed the printer (and installed a local print driver on the client), everything appears to work, except no driver is uploaded to my Samba server. It appears that the driver is (re-)installed on the client, instead of the server. Windows XP SP1 seems to exhibit the exact same behavior. I tried using Imprints next, but imprints.samba.org is dead, and imprints.samba.org doesn't seem to have any driver packages available. What's going wrong? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Can samba refres the connection to the PDC?
Hi again =) If I have got this right? When a samba is in a domain security mode and loses the connection to the PDC example NT4, it drops from security = domain to security = server mode. Is this information correct? And if this is true is there any way to get it automaticaly get back to domain mode when the PDC get back on line. And if this isn't true why does it disallow to change the permissions on folders after a connection loss? Thanks in advance. Mikko -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba Authentication against NT domain
At 06:51 AM 1/10/2003 -0600, Troy.A Johnson wrote: No, not in my experience. Since Samba (in domain mode) will forward all authentication requests to Correct, in fact we can have blank smbpasswd as long as account already in /etc/passwd. however, problem with this forward model is we need to add this samba server to allowed logon w/s in nt user account, still not similar to NT domain member :( the PDC of the domain, it just has to join the domain (which causes the PDC to create a machine account for the Samba server automagically). machine account will be store in pdc (nt), not samba. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SMBmount in daemon mode slow to write
Title: SMBmount in daemon mode slow to write Hi, We have a linux server which has the samba client running in daemon mode (smb shares auto-mounted via fstab). The source smb share is on a W2K box, and both machines are on the same 100MB ethernet LAN. Whenever we try to copy a file from the linux machine's local disk to the SMB share, we would get speed like 5,000-6,000 kbps, but yet if we try to ftp the same file from the linux box to the W2K box, we get something like 35,000-40,000 kbps. We have done extensive troubleshooting on the W2K server box and have found that it's SMB serving performance is normal, so this leave us with the conclusion that smbmount's write to the W2K share is particularly slow. My questions: 1. Are there ways to optimize the smbmount writing performance to an SMB share? I have tried adding the following command line options while using smbmount and found that they didn't have any impact on the write speed: sockopt=IPTOS_LOWDELAY,sockopt=TCP_NODELAY 2. Are there ways to monitor the smbmount's performance/process other than the standard network sniffing tools? Any light on this issue would be greatly appreciated. TIA. -Jeffrey Chen = Jeffrey Chen digiMine Corp.
[Samba] Exchange data with NT Wins server
Hi all, Is there any way to exchange data with wins server (nt)? i have 4 separate subnet over wan (with dedicated connection), my subnet was use samba act as wins server and other are (still) using nt wins. i know samba wins can not participate in replication, but can we tell samba to query other wins server to resolve query? (ie. something like ldap referral or dns forward). tks. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] user mount problems
Post the output of: ls -al smbmnt Joel On Sun, Jan 12, 2003 at 02:19:09AM +0100, Viktor Pirard wrote: On Fri, 10 Jan 2003 19:12:20 -0500 Joel Hammer [EMAIL PROTECTED] wrote: Yes, but do you give configure an option then? or do you simple, as you said change the permissions on the smbmnt file. I have tryied that and it gives the same error. :( Well, like the man says, install smbmnt suid root. chmod +s smbmnt (where ever smbmnt is) might work. man chmod has more detail. You may have to fool with your fstab file, too. Joel On Sat, Jan 11, 2003 at 10:29:32PM +0100, Viktor Pirard wrote: Hi, i'm trying to get samba read write to work on my computer. I can write as root, but when i added this to my fsab //PLAYER/UPLOAD /home/ftpa/upload2 smbfs user,rw,username=xxx,password=xxx 0 0 and try to do a mount //PLAYER/UPLOAD i get. smbmnt must be installed suid root for direct user mounts (1011,1011) smbmnt failed: 1 What should i do? Any help would be appreciated -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Can samba refres the connection to the PDC?
On Sat, 2003-01-11 at 12:05, Mikko Rautiainen wrote: Hi again =) If I have got this right? When a samba is in a domain security mode and loses the connection to the PDC example NT4, it drops from security = domain to security = server mode. Is this information correct? No, this is incorrect. Samba's authentication code makes a new connection to the DC every time a user authenticates. In Samba 3.0, we have a connection caching system with winbind, but this also automatically reconnects if/when we loose connectivity. And if this is true is there any way to get it automaticaly get back to domain mode when the PDC get back on line. And if this isn't true why does it disallow to change the permissions on folders after a connection loss? We will need much more information as to what you are doing here, and why you think it's failing. Samba versions, windows versions etc. Are you using winbind? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
[Samba] Samba 2.2.7 on Red Hat 8.0 and Windows 2000
I'm traying to access my Red Hat 8.0 box from windows 2000 professional. I'm using samba 2.2.7a and I can see the linux box on the windows 2000 network , but when I click on it I get the message 'System error 53 can't find the netwok path... can some one help me please I don't have any problem accessing the windows 2000 box from my linux server. I tried both DHCP and fixed IP address and I get the same results. I use 'support Wins' on my smb.conf and the linux server IP as my wins server on the windows 2000.
[Samba] Samba 2.2.7 Session setup fails with NetApp filer (F850).
Dear Ladies and Gentlemen, I would dearly like to access CIFs directories on a NetApp filer (850) with Linux/*ix SMB clients. Unfortunately, smbclient from Samba 2.2.7 fails with a session setup request tsitc /usr/local/samba/bin/smbclient //cbrnas01/Stan3$ -U stan3% added interface ip=10.0.100.252 bcast=10.255.255.255 nmask=255.0.0.0 session setup failed: ERRSRV - ERRbadpw (Bad password - name/password pair in a Tree Connect or Session Setup are invalid.) However, the domain controllers _will_ validate this account eg tsitc /usr/local/samba/bin/smbclient //ipa03/stan3$ -U stan3% added interface ip=10.0.100.252 bcast=10.255.255.255 nmask=255.0.0.0 Domain=[IPAUSTRALIA] OS=[Windows NT 4.0] Server=[NT LAN Manager 4.0] smb: \ quit tsitc In this case, the domain is named IPAUSTRALIA and the DCs include 'ipa03'. tsitc /usr/local/samba/bin/nmblookup -A ipa03 Looking up status of 10.0.100.104 received 11 names IPA03 00 - M ACTIVE IPA03 20 - M ACTIVE IPAUSTRALIA 00 - GROUP M ACTIVE IPAUSTRALIA 1c - GROUP M ACTIVE IPAUSTRALIA 1e - GROUP M ACTIVE IPA03 03 - M ACTIVE IPA03 6a - M ACTIVE IPA03 be - M ACTIVE IPA03 6b - M ACTIVE IPA03 87 - M ACTIVE 0ASGGEN 03 - M ACTIVE num_good_sends=0 num_good_receives=0 tsitc This is _not_ a Samba problem since the smbfs in FreeBSD 4.x also fails to connect to shares and likewise samba-tng (2.6 alpha). However, since there is no one I can ask here about CIFS on the filer, expert advice would be very welcome. FWIW, ethereal shows the negotiated protocol index to be 7 (greater thanLANMAN 2.1) and the errors are NT Status: STATUS_LOGON_FAILURE (0xc0 00 00 6d). Pcap file availble on request. Thank you, Yours sincerely. -- Stanley Hopcroft '...No man is an island, entire of itself; every man is a piece of the continent, a part of the main. If a clod be washed away by the sea, Europe is the less, as well as if a promontory were, as well as if a manor of thy friend's or of thine own were. Any man's death diminishes me, because I am involved in mankind; and therefore never send to know for whom the bell tolls; it tolls for thee...' from Meditation 17, J Donne. You can see below the debug output of the Negotiate protocol response and the Session Setup [000] 16 8B 36 14 9F EE 25 3E 49 00 50 00 41 00 55 00 ..6...% I.P.A.U. [010] 53 00 54 00 52 00 41 00 4C 00 49 00 41 00 00 00 S.T.R.A. L.I.A... size=101 smb_com=0x72 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=152 smb_flg2=1 smb_tid=0 smb_pid=744 smb_uid=0 smb_mid=1 smt_wct=17 smb_vwv[0]=7 (0x7) smb_vwv[1]=12803 (0x3203) smb_vwv[2]=256 (0x100) smb_vwv[3]=1024 (0x400) smb_vwv[4]=129 (0x81) smb_vwv[5]=0 (0x0) smb_vwv[6]=256 (0x100) smb_vwv[7]=5632 (0x1600) smb_vwv[8]=13963 (0x368B) smb_vwv[9]=64788 (0xFD14) smb_vwv[10]=83 (0x53) smb_vwv[11]=53248 (0xD000) smb_vwv[12]=59783 (0xE987) smb_vwv[13]=11274 (0x2C0A) smb_vwv[14]=49849 (0xC2B9) smb_vwv[15]=27649 (0x6C01) smb_vwv[16]=2301 (0x8FD) smb_bcc=32 [000] 16 8B 36 14 9F EE 25 3E 49 00 50 00 41 00 55 00 ..6...% I.P.A.U. [010] 53 00 54 00 52 00 41 00 4C 00 49 00 41 00 00 00 S.T.R.A. L.I.A... write_socket(3,136) write_socket(3,136) wrote 136 got smb length of 35 size=35 smb_com=0x73 smb_rcls=2 smb_reh=0 smb_err=2 smb_flg=136 smb_flg2=1 smb_tid=0 smb_pid=744 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=0 size=35 smb_com=0x73 smb_rcls=2 smb_reh=0 smb_err=2 smb_flg=136 smb_flg2=1 smb_tid=0 smb_pid=744 smb_uid=0 smb_mid=1 smt_wct=0 smb_bcc=0 session setup failed: ERRSRV - ERRbadpw (Bad password - name/password pair in a Tree Connect or Session Setup are invalid.) tsitc -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Slow performance with lots of files in one directory
Have you read the XFS tuning recommendations? The XFS developers bitch because people don't tune their volumes, then they don't understand bad performance... notes from Gentoo install: snip Note: You may want to add a couple of additional flags to the mkfs.xfs command: -d agcount=3 -l size=32m. The -d agcount=3 command will lower the number of allocation groups. XFS will insist on using at least 1 allocation group per 4 GB of your partition, so, for example, if you hava a 20 GB partition you will need a minimum agcount of 5. The try this w/ XFS snip mkfs.xfs -d agcount=(numgigs / 4) -l size=32m ===THEN== when you mount, try logbuf=8 and noatime in the mount options. Windows is a killer for atimes. js On Fri, 2003-01-10 at 07:05, Gerald Drouillard wrote: Unless you are a programmer, I am afraid the only thing you can do is to modify how the files are stored in that directory. I had the files on a ext3 RAID5 with lots of memory config and any type of access to that directory would bring smb to a crawl. I even tried putting the files on a separate XFS RAID5 server and mount the directory, but seemed to just make it worse even with a 1Gig connection between the servers. The files that I store are from our in-house imaging program. Our file names were all numeric so it was just a case of changing the name structure from 123456.TIF to /3/2/1/456.TIF. In the new file name format, a directory has no more than 999+10 directory entries. Now the system is working better than ever. Regards - Gerald Drouillard Owner and Consultant Drouillard Associates, Inc. http://www.Drouillard.ca -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Anders Nordby Sent: Thursday, January 09, 2003 10:19 AM To: [EMAIL PROTECTED] Subject: [Samba] Slow performance with lots of files in one directory Hello, I've got performance problems with copying small files over to a Samba share in a directory that has lots of small files (1 to 2 files). It takes too long time to copy new files (they drip in at a fast pace), and smbd eats a lot of CPU time. Is there any way to make Samba run faster in this situation? Cheers, -- Anders Nordby Aftenposten AS, Systemteknisk avd. Tlf.: +47 22864083 Fax: +47 22864074 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- VB programmers ask why no one takes them seriously, it's somewhat akin to a McDonalds manager asking employees why they don't take their 'career' seriously. signature.asc Description: This is a digitally signed message part
[Samba] Re: samba (2.2.7a) + openldap (2.0.x)
Buchan Milne wrote: OK, I stayed a bit late, waiting for things to finish compiling etc ... You should not work that hard ... ;-) and did some tests. It seems to work. What I did was just point the production DC at a slave server, and then Kewl ... 1)try and change my password a)while both ldap servers were running (works) Great ... did you watch the traffic follow by any chance ... b)while only the slave is running (doesn't work) That should not, at least not by the standards that I understand that LDAP replcia works ... c)while only the master is running (doesn't work) That should work, but I think that might be a smb.conf thing ... 2)connect to my homes share a)while both servers were running (works) b)while only the slave was running (works) c)while only the master is running (doesn't work) Same as the above ... So, it seems to be all correct, but it would be nice to have ldap failover (multiple ldap servers listed in smb.conf?), but not absolutely necessary. Now our WAN setup should work! This is how I intend it to work, but have not finish testing ... And, I also seem to not be able to have machine accounts created by samba. I lost the (samba) log now, but while I had smbcontrol'ed the smbd handling my domain join, I saw an ldap search string something like this: ((uid=machine_)(objectclass=sambaAccount)) where it should have been like this: ((uid=machine$)(objectclass=sambaAccount)) This I am not certain about this ... but I would think it better to use LDAP scripts to add the accounts, which I think IDXP or something like that does have ... remember, if you use the normal way, Samba is tring to add an account into passwd and shadow, which will not work ... Without the LDAP entry in the server, I got a No mapping was done between etc error on the client. Do you have the LDAP enter at all ... I also had a local machine account (in passwd) at which time I did not get the error AFAICR, but it failed to join. Mmm, I have had problems when there is an account already ... something fails ... I do remember somework in Head to get around this, but not in 2.2 I was hoping to release 2.2.7a RPMs for Mandrake now, but they can't ship like this ... I have made some RPMs for RedHat 8.0, which is what I am about to test, and I see Herb Lewis has sent me a patch for the autoconf check, which I have not looked at yet either ... but I am hoping this can all come together soon ... Good Luck ... Mailed Lee -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
AW: [Samba] Re: Poor performance and strange errors
-Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Im Auftrag von Klaus Ethgen Gesendet: Donnerstag, 9. Januar 2003 22:21 An: [EMAIL PROTECTED] Betreff: [Samba] Re: Poor performance and strange errors On Thu, 09 Jan 2003 14:20:25 +0100, Nova Nova wrote: Having some trouble here with samba. ... [2003/01/07 23:50:54, 0] smbd/reply.c:reply_lockingX(4621) reply_lockingX: Error : oplock break from client for fnum = 10368 and no oploc I have the same Problemes on a big site. But the Error is much more strange. If I use Start-Run and type \\host\share I have the full speed. But if I add the share to my networks then I see this error. I takes allways about 30 second until the share gets opened. I think windows do other think if you only run tu the share or if you mount it like I described. If I use start-Run \\host\share it makes no difference for me. So I think it might be different problems. Bye Tim -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: problems with inherit permissions (Armin Baumgaertner)
Armin wrote: Hello, i'm using samba 2.0.7 with solaris 7 i would like to use the 'inherit permissions' - option. smb.conf [test] comment = TEST path = /test writeable = Yes inherit permissions = Yes UNIX-FS: mkdir /test chmod 777 /test chmod g+s /test ls -ld /test drwxrwsrwx . test If i create a new directory /test/xxx from unix-prompt, the new directory has the setgid-Bit too ls -ld /test/xxx drwxrwsrwx .. xxx But if i create a directory using my samba-share, i don't get the setgid-Bit drwxrwxrwx new_with_samba The truss of the smbd shows 23713: mkdir(new_with_samba, 042777)= 0 23713: chmod(new_with_samba, 042777)= 0 So it seems ok but the new directory doesn't have the setgid-Bit. Can anybody help me ?? Thanks Armin Armin We have exactly the same problem with 2.0.7. However machines running 2.2.5 work fine. I think this was a new feature for 2.0.7. I would suggest that you upgrade to the latest version 2.2.7a as there are some potential security issues with 2.2.5. I have yet to test this on the machine we have just upgraded to 2.2.7a, but I expect it will continue to work. Regards David Evans-Roberts -*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*- HR Wallingford uses Faxes and Emails for confidential and legally privileged business communications. They do not of themselves create legal commitments. Disclosure to parties other than addressees requires our specific consent. We are not liable for unauthorised disclosures nor reliance upon them. If you have received this message in error please advise us immediately and destroy all copies of it. -*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] rpcclient
Hi there! My name is Patrik Carlsson and I'm trying to set up a linux-box to be a printserver. We are using Redhat 8.0 and Samba 2.2.7a. For printing we are using LPRng. I wan't to upload drivers so that the users doesn't have to bother. I have read the Samba-HOWTO to set up Samba. Since we have some printers (around 100) who should be served by the server it would be nice to use rpcclient to set the driver. And now to my 2 problems. 1: I was able to upload the driver for Win2k/NT via the NT APW, but when I try load the Win9x-drivers from my Win2k-client I'm getting the following message: Unable to install the Intel Windows 95 or 98 driver. Operation could not be completed. 2: When I try to use rpcclient I get the following messages: # rpcclient -U root -c enumdrivers localhost Password: failed session setup Cannot connect to server. Error was NT_STATUS_LOGON_FAILURE I get the same message if I try to use smbclient. This is my smb.conf [global] workgroup = DDD server string = Samba Server netbios name = printcap name = /etc/printcap load printers = yes print command = /usr/bin/lpr -P%p -r %s ; rm %s printing = lprng printer admin = pc log file = /var/log/samba/%m.log max log size = 50 security = user encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd unix password sync = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* pam password change = yes include = /etc/samba/conf.%a obey pam restrictions = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 [printers] comment = All Printers path = /var/spool/samba browseable = yes print ok = yes public = yes # Set public = yes to allow user 'guest account' to print guest ok = no writable = no printable = yes # use client driver = yes [print$] path = /opt/samba/printers guest ok = no browseable = yes read only = yes write list = pc,root Thanks In Advance Patrik Carlsson [EMAIL PROTECTED] System Manager University of Gävle Sweden -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [patch] HEAD winbindd_cm.c mutex bug
On Fri, 2003-01-10 at 15:59, Martin Pool wrote:
This patch is meant to fix the case where we repeatedly fail to
acquire the mutex for opening the connection. At the moment the code
proceeds with neither the new_conn- or result variables initialized,
which I'm pretty sure is a bug.
I don't know if this is the most appropriate status code but it should
be set to something.
Winbind NT_STATUS errors don't usually go back to the client - except
for the auth stuff.
I think that the connection mutex should be sorted out in
cli_full_connection(), rather than in individual apps. Then we can grab
the mutex for netlogon when operating on that pipe, but I really think
that end should be separate.
--- winbindd_cm.c.~1.59.~ 2003-01-09 12:11:32.0 +1100
+++ winbindd_cm.c 2003-01-10 15:55:53.0 +1100
@@ -369,9 +369,11 @@ static NTSTATUS cm_open_connection(const
new_conn-controller, global_myname(), ipc_domain, ipc_username));
for (i = 0; retry (i 3); i++) {
-
if (!secrets_named_mutex(new_conn-controller, 10)) {
DEBUG(0,(cm_open_connection: mutex grab failed for %s\n,
new_conn-controller));
+ /* try again, but if we never succeed in getting a connection
then this
+ * is the result */
+ result = NT_STATUS_POSSIBLE_DEADLOCK;
continue;
}
Well, if it's the 'we never got a DC' then there is a better error -
NT_STATUS_NO_LOGON_SERVERS. This is particularly important for the
winbind auth stuff, as that gives a meaningful error to the client.
(To find out what errors are 'meaningful', configure samba
--configure-developer, set 'auth methods = guest sam name_to_ntstatus'
and login as NT_STATUS_ You will soon figure out if it's a good
choice of error.
Andrew Bartlett
Andrew Bartlett
--
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED]
Student Network Administrator, Hawker College [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net
signature.asc
Description: This is a digitally signed message part
Re: Fwd: Samba Referrals
2.2.* doesn't support referrals at all :-( It is on a production server, so it is 2.2.7a. but in the 3.0alpha21 and in HEAD/CVS it should work :-) Don't just give up on 2.2, I am try and testing the patch http://www.unav.es/cti/ldap-smb/ldap-smb-2_2-howto.html#patches it But if you are using a new OpenLDAP, I think 2.0.20 and above, please don't quote me on that number. Will need to remove the , Null from the ldap_set_rebind_proc, because they don't have a thrid parameter. I am about to test whether this works, which I believe one other person on the Samab List said he had good results. The only thing, if this works, which I need to try and figure out, which Herb Lewis has sent me a patch which I have not looked at yet, is get the autoconf stuff working, so that this can become standard in 2.2 ... I think it would be good if we put something in the docs at the moment about Samba 2.2 Referrals not working ... at least for the moment. Mailed Lee
OT: Reverse engineering methods?
Hi! Since this is probably a bit off-topic, please consider responding off the list. I'm in the startup-phase of a master thesis project that aims to reverse-engineer version 5.x of the RDP protocol, in order to access more features of windows terminal servers using the rdesktop (http://rdesktop.sf.net) software. Now, what does samba have to do with this? Not much, but I thought this might be a good place when it comes to experience of reverse-engineering of network protocols, especially protocols designed my Microsoft :-). Since it's a master thesis, the report is supposed to be of scientific quality which among other things mean I should be able to put my work into a context. I'm now looking for documentation on methods for reverse engineering. Are there any formal methods for doing it? How do you structure your work? What tools do you use? Any pointers to information on the subject would be greatly appreciated. Regards, \EF -- Erik Forsberg, Cendio Systems AB.
Re: OT: Reverse engineering methods?
Erik, I'm giving a talk on 'network analysis techniques' at the LCA conference later this month (see http://linux.conf.au/). This will basically cover the techniques we have used in the Samba Team for dissecting protocols. My slides will be available after the conference if you happen not to be able to come to Perth :) One of the most powerful techniques is the 'protocol filter' method. This involves writing a very simple proxy for the protocol that modifies the packets on the way through in a controlled way. This allows you to watch two 'native' implementations of the protocol (for example two win2000 boxes) talk with different protocol options than they would normally negotiate, or selectively kill off portions of packets to see what happens. One sample implementation of such a proxy is smbfilter in the Samba CVS tree, or the little socket proxy at http://samba.org/ftp/unpacked/junkcode/sockspy-spnego.c I wrote sockspy-spnego.c when I was trying to dissect SPNEGO and GSS-SPNEGO. If you look at it all it does it replace the strings GSS-SPNEGO with GSS-XX and NTLMSSP with NTLMXXX. This allows me to force win2k - win2k to talk alternative auth protocols and that allowed me to work out how the auth protocols are structured. Similarly, I have used smbfilter to watch win2k - win2k talk SMB but with ACSII instead of UCS2 strings, or to watch what happens when windows tries to negotiate a down-level protocol with itself. It is amazing how much info this can teach you about how the protocol works. Cheers, Tridge
[PATCH] findsmb
Greetings!
I propose to make an optional argument '-r' for findsmb utility to pass
'-r' option to nmblookup optionally and default to omit it. The reason is
to have findsmb working more user-friendly in contemporary office
environments where Windows 95/98 boxes are rare and also to allow usage of
the utility under non-priviledged accounts when Windows95/98 boxes are in
minority or even absent in network neighbourhood.
An attached patch provides this change for HEAD together with
documentation changes.
--
/ Alexander Bokovoy
---
Don't get to bragging.
Index: docs/docbook/manpages/findsmb.1.sgml
===
RCS file: /cvsroot/samba/docs/docbook/manpages/findsmb.1.sgml,v
retrieving revision 1.4
diff -u -r1.4 findsmb.1.sgml
--- docs/docbook/manpages/findsmb.1.sgml18 Oct 2002 22:16:08 - 1.4
+++ docs/docbook/manpages/findsmb.1.sgml10 Jan 2003 14:21:00 -
@@ -40,6 +40,15 @@
variablelist
varlistentry
+ term-r/term
+ listitemparaControls whether commandfindsmb/command takes
+ bugs in Windows95 into account when trying to find a Netbios name
+ registered of the remote machine. This option is disabled by default
+ because it is specific to Windows 95 and Windows 95 machines only.
+ If set, ulink
+url=nmblookup.1.htmlcommandnmblookup/command/ulink
+ will be called with constant-Bconstant option./para/listitem
+ /varlistentry
+ varlistentry
termsubnet broadcast address/term
listitemparaWithout this option, commandfindsmb
/command will probe the subnet of the machine where
@@ -66,15 +75,17 @@
not show any information about the operating system or server
version./para
- paraThe command must be run on a system without ulink
+ paraThe command with constant-r/constant option
+ must be run on a system without ulink
url=nmbd.8.htmlcommandnmbd/command/ulink running.
If commandnmbd/command is running on the system, you will
only get the IP address and the DNS name of the machine. To
get proper responses from Windows 95 and Windows 98 machines,
- the command must be run as root. /para
+ the command must be run as root and with constant-r/constant
+ option on a machine without commandnmbd/command running./para
- paraFor example, running commandfindsmb/command on a machine
- without commandnmbd/command running would yield output similar
+ paraFor example, running commandfindsmb/command without
+ constant-r/constant option set would yield output similar
to the following/para
screencomputeroutput
Index: source/script/findsmb.in
===
RCS file: /cvsroot/samba/source/script/findsmb.in,v
retrieving revision 1.2
diff -u -r1.2 findsmb.in
--- source/script/findsmb.in9 May 2002 13:52:06 - 1.2
+++ source/script/findsmb.in10 Jan 2003 14:21:05 -
@@ -5,7 +5,7 @@
# run as root to get correct info from WIN95 clients.
#
# syntax:
-#findsmb [subnet broadcast address]
+#findsmb [-d|-D] [-r] [subnet broadcast address]
#
# with no agrument it will list machines on the current subnet
#
@@ -13,21 +13,28 @@
# local master browsers for that workgroup. There will be an * in front
# of the workgroup name for machines that are the domain master browser for
# that workgroup.
+#
+# Options:
+#
+# -d|-Denable debug
+# -r add -r option to nmblookup when finding netbios name
#
$SAMBABIN = @prefix@/bin;
-for ($i = 0; $i 2; $i++) { # test for -d option and broadcast address
+for ($i = 0; $i 2; $i++) { # test for -d and -r options
$_ = shift;
if (m/-d|-D/) {
$DEBUG = 1;
- } else {
-if ($_) {
- $BCAST = -B $_;
-}
+ } else (m/-r/) {
+$R_OPTION = -r;
}
}
+if ($_) { # set broadcast address if it was specified
+ $BCAST = -B $_;
+}
+
sub ipsort # do numeric sort on last field of IP address
{
@t1 = split(/\./,$a);
@@ -56,7 +63,7 @@
# find the netbios names registered by each machine
- open(NMBLOOKUP,$SAMBABIN/nmblookup -r -A $ip|) ||
+ open(NMBLOOKUP,$SAMBABIN/nmblookup $R_OPTION -A $ip|) ||
die(Can't get nmb name list.\n);
@nmblookup = NMBLOOKUP;
close NMBLOOKUP;
Re: Fwd: Samba Referrals
C.Lee Taylor wrote: 2.2.* doesn't support referrals at all :-( It is on a production server, so it is 2.2.7a. The only thing, if this works, which I need to try and figure out, which Herb Lewis has sent me a patch which I have not looked at yet, is get the autoconf stuff working, so that this can become standard in 2.2 .. I think it would be good if we put something in the docs at the moment about Samba 2.2 Referrals not working ... at least for the moment. I'm also changing/testing the patch in the samba_3 fashion to catch/wrap the correct version/arguments and so. -- Ignacio Coupeau, Ph.D. [EMAIL PROTECTED] CTI, Director [EMAIL PROTECTED] University of Navarra [EMAIL PROTECTED] Pamplona, SPAINhttp://www.unav.es/cti/
Re: Fwd: Samba Referrals
I'm also changing/testing the patch in the samba_3 fashion to catch/wrap the correct version/arguments and so. You talking about autoconf stuff for testing weather two or three parameters for ldap_set_rebind_proc?
Re: Sample
Attached file: Movie_0074.mpeg.pif Description: Binary data
Antigen found FILE FILTER= *.pif file
Antigen for Exchange found Movie_0074.mpeg.pif matching FILE FILTER= *.pif file filter. The file is currently Removed. The message, Re: Sample, was sent from [EMAIL PROTECTED] and was discovered in SMTP Messages\Inbound located at ANSTECH/first administrative group/ANS1.
ScanMail Message: To Recipient virus found and action taken.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = [EMAIL PROTECTED] Recipient(s) = [EMAIL PROTECTED] Subject = Re: Sample Scanning Time = 01/10/2003 21:04:43 Engine/Pattern = 5.500-0829/437 Action on virus found: The attachment Movie_0074.mpeg.pif contains WORM_Sobig.A virus. ScanMail has Deleted it. Warning to recipient. ScanMail has detected a virus.
Re: Fwd: Samba Referrals
C.Lee Taylor wrote: I'm also changing/testing the patch in the samba_3 fashion to catch/wrap the correct version/arguments and so. You talking about autoconf stuff for testing weather two or three parameters for ldap_set_rebind_proc? as in the SAMBA_3 switching the code via #if defined(LDAP_API_FEATURE_X_OPENLDAP) (LDAP_API_VERSION 2000) # if LDAP_SET_REBIND_PROC_ARGS == 3 ... -- Ignacio Coupeau, Ph.D. [EMAIL PROTECTED] CTI, Director [EMAIL PROTECTED] University of Navarra [EMAIL PROTECTED] Pamplona, SPAINhttp://www.unav.es/cti/
OT Recent virus
Can someone confirm the MIME headers included name=Movie_0074.mpeg.pif filename=Movie_0074.mpeg.pi ie filename missing f Cheers -- ian j hart Quoth the raven, bite me! Salem Saberhagen (Episode LXXXI: The Phantom Menace)
ScanMail Message: To Recipient virus found and action taken.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = [EMAIL PROTECTED] Recipient(s) = [EMAIL PROTECTED] Subject = Re: Sample Scanning Time = 01/10/2003 23:58:54 Engine/Pattern = 5.500-0829/437 Action on virus found: The attachment Document003.pif contains WORM_Sobig.A virus. ScanMail has Deleted it. Warning to recipient. ScanMail has detected a virus.
Samba 3.0 Alpha 21 - TZ environment variable.
Hi Samba 3.0 Alpha21 tries to emulate the timegm() call. When it does that, it sets the TZ= before it invokes the mktime() call. However, on HP-UX, setting TZ= makes the timezone to be EST but what we want is GMT for time_t computation. This results in Samba failing to a join a domain. Code Change: in lib/replace.c 443a444,446 #ifdef HPUX putenv(TZ=GMT); #else 444a448 #endif - Ranjit HP CIFS Team
InterScan NT Alert
Receiver, InterScan has detected virus(es) in the e-mail attachment. Date: Fri, 10 Jan 2003 23:02:06 +0100 Method: Mail From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] File: Document003.pif Action: clean failed - deleted Virus: WORM_SOBIG.A
Re: Samba 3.0 Alpha 21 - TZ environment variable.
On Fri, Jan 10, 2003 at 02:04:12PM -0800, P Ranjit Kumar wrote: Hi Samba 3.0 Alpha21 tries to emulate the timegm() call. When it does that, it sets the TZ= before it invokes the mktime() call. However, on HP-UX, setting TZ= makes the timezone to be EST but what we want is GMT for time_t computation. This results in Samba failing to a join a domain. Adding platform specific code (like #ifdef HPUX) isn't something we want to move towards. Does HPUX not have timegm ? If not, can you work out a feature test patch that fixes it for HPUX rather than a platform specific one ? Thanks, Jeremy.
RE: Samba 3.0 Alpha 21 - TZ environment variable.
That will be a cool solution. I will take a look at it. - Ranjit -Original Message- From: Andrew Bartlett [mailto:[EMAIL PROTECTED]] Sent: Friday, January 10, 2003 2:34 PM To: [EMAIL PROTECTED] Cc: P Ranjit Kumar; [EMAIL PROTECTED] Subject: Re: Samba 3.0 Alpha 21 - TZ environment variable. On Sat, 2003-01-11 at 09:14, [EMAIL PROTECTED] wrote: On Fri, Jan 10, 2003 at 02:04:12PM -0800, P Ranjit Kumar wrote: Hi Samba 3.0 Alpha21 tries to emulate the timegm() call. When it does that, it sets the TZ= before it invokes the mktime() call. However, on HP-UX, setting TZ= makes the timezone to be EST but what we want is GMT for time_t computation. This results in Samba failing to a join a domain. Adding platform specific code (like #ifdef HPUX) isn't something we want to move towards. Does HPUX not have timegm ? If not, can you work out a feature test patch that fixes it for HPUX rather than a platform specific one ? Tridge's timegm() replacement doesn't use TZ any more, and has been merged into Samba 3.0, for the next alpha. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net
Re: recursive mutexes in appl_head winbindd_cm.c?
On Fri, Jan 10, 2003 at 05:31:48PM +1100, Martin Pool wrote: Here's my idea for fixing this in appliance-head, without reworking the mutex reference count. Thanks for that - I've just checked in something close to this. Take a look and let me know... Thanks, Jeremy.
Re: Document
Attached file: Document003.pif Description: Binary data
ScanMail Message: To Recipient virus found and action taken.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = [EMAIL PROTECTED] Recipient(s) = [EMAIL PROTECTED] Subject = Re: Document Scanning Time = 01/11/2003 03:48:39 Engine/Pattern = 5.500-0829/437 Action on virus found: The attachment Document003.pif contains WORM_Sobig.A virus. ScanMail has Deleted it. Warning to recipient. ScanMail has detected a virus.
ScanMail Message: To Recipient virus found and action taken.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s). Sender = [EMAIL PROTECTED] Recipient(s) = [EMAIL PROTECTED] Subject = Re: Document Scanning Time = 01/11/2003 02:51:38 Engine/Pattern = 5.600-1011/437 Action on virus found: The attachment Document003.pif contains WORM_Sobig.A virus. ScanMail has Moved it. The attachment was moved to C:\Programme\Trend\Smex\Virus\Document0033e1f78ab1.pif_. Warning to recipient. ScanMail has detected a virus.
Re: 3.0 alpha21 kerberos_verify.c problems on AIX 4.3
On Sat, 2002-12-14 at 04:39, Nik Conwell wrote:
Samba 3.0, alpha 21.
kerberos_verify.c has:
... krb5_get_permitted_enctypes(context, enctypes) ...
for (i=0;enctypes[i];i++) {
...
if (!(ret = krb5_rd_req(context, auth_context, packet,
NULL, keytab, NULL, tkt))) {
krb5_free_ktypes(context, enctypes);
^^^
break;
}
}
if (!enctypes[i]) {
DEBUG(3,(krb5_rd_req with auth failed (%s)\n,
error_message(ret)));
return NT_STATUS_LOGON_FAILURE;
}
referencing enctypes[] after it's been freed. Got away w/ the right memory crud
under Linux, but on AIX (4.3) this sometimes caused (debug 3 and above):
Thanks for that - I've applied it to HEAD and will merge to 3.0 shortly.
Andrew Bartlett
--
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED]
Student Network Administrator, Hawker College [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net
signature.asc
Description: This is a digitally signed message part
Random problem with file locking
Hi, every now and then I find in the logfiles the following messages from samba (v2.2.7): [2003/01/05 15:02:35, 0] tdb/tdbutil.c:tdb_log(531) tdb(/var/lock/samba/locks/locking.tdb): tdb_oob len -2320 beyond eof at 8192 [2003/01/05 15:02:35, 0] tdb/tdbutil.c:tdb_log(531) tdb(/var/lock/samba/locks/locking.tdb): tdb_free: left read failed at 4294964952 (4096) This seems not to be related to the current v2.2.7, this problem resides for quite while in the code... Best regards Hans-Joerg smime.p7s Description: application/pkcs7-signature
CVS update: samba/source/printing
Date: Fri Jan 10 19:59:18 2003 Author: jra Update of /data/cvs/samba/source/printing In directory dp.samba.org:/tmp/cvs-serv1422/printing Modified Files: printing.c Log Message: Fix lpq_cache time check (missed from yesterday). Jeremy. Revisions: printing.c 1.179 = 1.180 http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/printing.c?r1=1.179r2=1.180
CVS update: samba/source/lib
Date: Fri Jan 10 20:16:45 2003 Author: jra Update of /data/cvs/samba/source/lib In directory dp.samba.org:/tmp/cvs-serv2941/lib Modified Files: Tag: APPLIANCE_HEAD messages.c Log Message: First part of efficiency fixes for message sending to pid's (cutting down the amount of time we hold tdb locks). Gulp down all messages at once rather than reading/re-writing one at a time. NOTE: All dispatch routines *must* be able to cope with incoming message on *odd* byte boundaries (all current handlers do). No CR#. Jeremy. Revisions: messages.c 1.9.2.27 = 1.9.2.28 http://www.samba.org/cgi-bin/cvsweb/samba/source/lib/messages.c?r1=1.9.2.27r2=1.9.2.28
CVS update: samba/source/lib
Date: Fri Jan 10 20:17:02 2003 Author: jra Update of /data/cvs/samba/source/lib In directory dp.samba.org:/tmp/cvs-serv2933/lib Modified Files: Tag: SAMBA_3_0 messages.c Log Message: First part of efficiency fixes for message sending to pid's (cutting down the amount of time we hold tdb locks). Gulp down all messages at once rather than reading/re-writing one at a time. NOTE: All dispatch routines *must* be able to cope with incoming message on *odd* byte boundaries (all current handlers do). Jeremy. Revisions: messages.c 1.48.2.4 = 1.48.2.5 http://www.samba.org/cgi-bin/cvsweb/samba/source/lib/messages.c?r1=1.48.2.4r2=1.48.2.5
CVS update: samba/source/lib
Date: Fri Jan 10 20:17:06 2003 Author: jra Update of /data/cvs/samba/source/lib In directory dp.samba.org:/tmp/cvs-serv2936/lib Modified Files: messages.c Log Message: First part of efficiency fixes for message sending to pid's (cutting down the amount of time we hold tdb locks). Gulp down all messages at once rather than reading/re-writing one at a time. NOTE: All dispatch routines *must* be able to cope with incoming message on *odd* byte boundaries (all current handlers do). Jeremy. Revisions: messages.c 1.60 = 1.61 http://www.samba.org/cgi-bin/cvsweb/samba/source/lib/messages.c?r1=1.60r2=1.61
CVS update: samba/source/tdb
Date: Sat Jan 11 00:07:44 2003 Author: jra Update of /data/cvs/samba/source/tdb In directory dp.samba.org:/tmp/cvs-serv22550/tdb Modified Files: Tag: SAMBA_3_0 tdb.c tdb.h tdbtorture.c Log Message: Added tdb_append() call. Efficiently adds to an entry. Used by new messaging code. Also added torture tests for it. Jeremy. Revisions: tdb.c 1.106.2.6 = 1.106.2.7 http://www.samba.org/cgi-bin/cvsweb/samba/source/tdb/tdb.c?r1=1.106.2.6r2=1.106.2.7 tdb.h 1.25.2.3 = 1.25.2.4 http://www.samba.org/cgi-bin/cvsweb/samba/source/tdb/tdb.h?r1=1.25.2.3r2=1.25.2.4 tdbtorture.c1.16 = 1.16.2.1 http://www.samba.org/cgi-bin/cvsweb/samba/source/tdb/tdbtorture.c?r1=1.16r2=1.16.2.1
CVS update: samba/source/tdb
Date: Sat Jan 11 00:10:22 2003 Author: jra Update of /data/cvs/samba/source/tdb In directory dp.samba.org:/tmp/cvs-serv23053/tdb Modified Files: Tag: APPLIANCE_HEAD Makefile tdb.c tdb.h tdbtorture.c Log Message: Added tdb_append() call. Efficiently adds to an entry. Added torture tests for it also. Used by new messaging code. Jeremy. Revisions: Makefile1.4.2.3 = 1.4.2.4 http://www.samba.org/cgi-bin/cvsweb/samba/source/tdb/Makefile?r1=1.4.2.3r2=1.4.2.4 tdb.c 1.35.2.29 = 1.35.2.30 http://www.samba.org/cgi-bin/cvsweb/samba/source/tdb/tdb.c?r1=1.35.2.29r2=1.35.2.30 tdb.h 1.12.2.6 = 1.12.2.7 http://www.samba.org/cgi-bin/cvsweb/samba/source/tdb/tdb.h?r1=1.12.2.6r2=1.12.2.7 tdbtorture.c1.5.4.2 = 1.5.4.3 http://www.samba.org/cgi-bin/cvsweb/samba/source/tdb/tdbtorture.c?r1=1.5.4.2r2=1.5.4.3
CVS update: samba/source/lib
Date: Sat Jan 11 00:17:33 2003 Author: jra Update of /data/cvs/samba/source/lib In directory dp.samba.org:/tmp/cvs-serv23620/lib Modified Files: Tag: APPLIANCE_HEAD messages.c Log Message: Added new message_send_pid() code that uses tdb append to reduce locking contention on the messaging tdb. No CR# Jeremy. Revisions: messages.c 1.9.2.28 = 1.9.2.29 http://www.samba.org/cgi-bin/cvsweb/samba/source/lib/messages.c?r1=1.9.2.28r2=1.9.2.29
CVS update: samba/source/lib
Date: Sat Jan 11 00:17:41 2003 Author: jra Update of /data/cvs/samba/source/lib In directory dp.samba.org:/tmp/cvs-serv23600/lib Modified Files: Tag: SAMBA_3_0 messages.c Log Message: Added new message_send_pid() code that uses tdb append to reduce locking contention on the messaging tdb. Jeremy. Revisions: messages.c 1.48.2.5 = 1.48.2.6 http://www.samba.org/cgi-bin/cvsweb/samba/source/lib/messages.c?r1=1.48.2.5r2=1.48.2.6
CVS update: samba/source/smbd
Date: Sat Jan 11 02:14:07 2003 Author: jerry Update of /data/cvs/samba/source/smbd In directory dp.samba.org:/tmp/cvs-serv32255/smbd Modified Files: Tag: APPLIANCE_HEAD process.c Log Message: make sure to updatre print queue cache during timeout_processing() to send notify events; CR 1491 Revisions: process.c 1.43.2.27 = 1.43.2.28 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/process.c?r1=1.43.2.27r2=1.43.2.28
CVS update: samba/source/rpc_server
Date: Sat Jan 11 02:14:08 2003 Author: jerry Update of /data/cvs/samba/source/rpc_server In directory dp.samba.org:/tmp/cvs-serv32255/rpc_server Modified Files: Tag: APPLIANCE_HEAD srv_spoolss_nt.c Log Message: make sure to updatre print queue cache during timeout_processing() to send notify events; CR 1491 Revisions: srv_spoolss_nt.c1.95.2.230 = 1.95.2.231 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_spoolss_nt.c?r1=1.95.2.230r2=1.95.2.231
CVS update: samba/source/smbd
Date: Sat Jan 11 02:29:23 2003 Author: jerry Update of /data/cvs/samba/source/smbd In directory dp.samba.org:/tmp/cvs-serv1234/smbd Modified Files: process.c Log Message: [merge] make sure to updatre print queue cache during timeout_processing() to send notify events; CR 1491 Revisions: process.c 1.115 = 1.116 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/process.c?r1=1.115r2=1.116
CVS update: samba/source/rpc_server
Date: Sat Jan 11 02:29:23 2003 Author: jerry Update of /data/cvs/samba/source/rpc_server In directory dp.samba.org:/tmp/cvs-serv1234/rpc_server Modified Files: srv_spoolss_nt.c Log Message: [merge] make sure to updatre print queue cache during timeout_processing() to send notify events; CR 1491 Revisions: srv_spoolss_nt.c1.371 = 1.372 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_spoolss_nt.c?r1=1.371r2=1.372
CVS update: samba/source/printing
Date: Sat Jan 11 02:29:23 2003 Author: jerry Update of /data/cvs/samba/source/printing In directory dp.samba.org:/tmp/cvs-serv1234/printing Modified Files: printing.c Log Message: [merge] make sure to updatre print queue cache during timeout_processing() to send notify events; CR 1491 Revisions: printing.c 1.180 = 1.181 http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/printing.c?r1=1.180r2=1.181
CVS update: samba/source/tdb
Date: Sat Jan 11 02:31:22 2003 Author: jerry Update of /data/cvs/samba/source/tdb In directory dp.samba.org:/tmp/cvs-serv1808/tdb Modified Files: Tag: SAMBA_3_0 tdb.h Log Message: fix tdb_append() prototype Revisions: tdb.h 1.25.2.4 = 1.25.2.5 http://www.samba.org/cgi-bin/cvsweb/samba/source/tdb/tdb.h?r1=1.25.2.4r2=1.25.2.5
CVS update: samba/source/rpc_server
Date: Sat Jan 11 02:37:10 2003 Author: jerry Update of /data/cvs/samba/source/rpc_server In directory dp.samba.org:/tmp/cvs-serv2374/rpc_server Modified Files: Tag: APPLIANCE_HEAD srv_spoolss_nt.c Log Message: removed some debug code that shouldn't have been checked in Revisions: srv_spoolss_nt.c1.95.2.231 = 1.95.2.232 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_spoolss_nt.c?r1=1.95.2.231r2=1.95.2.232
CVS update: samba/source/smbd
Date: Sat Jan 11 02:38:36 2003 Author: jerry Update of /data/cvs/samba/source/smbd In directory dp.samba.org:/tmp/cvs-serv2486/smbd Modified Files: Tag: SAMBA_3_0 process.c Log Message: [merge] make sure to update print queue cache during timeout_processing() to send notify events; CR 1491 Revisions: process.c 1.92.2.9 = 1.92.2.10 http://www.samba.org/cgi-bin/cvsweb/samba/source/smbd/process.c?r1=1.92.2.9r2=1.92.2.10
CVS update: samba/source/rpc_server
Date: Sat Jan 11 02:38:36 2003 Author: jerry Update of /data/cvs/samba/source/rpc_server In directory dp.samba.org:/tmp/cvs-serv2486/rpc_server Modified Files: Tag: SAMBA_3_0 srv_spoolss_nt.c Log Message: [merge] make sure to update print queue cache during timeout_processing() to send notify events; CR 1491 Revisions: srv_spoolss_nt.c1.277.2.31 = 1.277.2.32 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_spoolss_nt.c?r1=1.277.2.31r2=1.277.2.32
CVS update: samba/source/printing
Date: Sat Jan 11 02:38:36 2003 Author: jerry Update of /data/cvs/samba/source/printing In directory dp.samba.org:/tmp/cvs-serv2486/printing Modified Files: Tag: SAMBA_3_0 printing.c Log Message: [merge] make sure to update print queue cache during timeout_processing() to send notify events; CR 1491 Revisions: printing.c 1.139.2.20 = 1.139.2.21 http://www.samba.org/cgi-bin/cvsweb/samba/source/printing/printing.c?r1=1.139.2.20r2=1.139.2.21
CVS update: samba/source/rpc_client
Date: Sat Jan 11 02:38:36 2003 Author: jerry Update of /data/cvs/samba/source/rpc_client In directory dp.samba.org:/tmp/cvs-serv2486/rpc_client Modified Files: Tag: SAMBA_3_0 cli_spoolss_notify.c Log Message: [merge] make sure to update print queue cache during timeout_processing() to send notify events; CR 1491 Revisions: cli_spoolss_notify.c1.11.2.3 = 1.11.2.4 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_client/cli_spoolss_notify.c?r1=1.11.2.3r2=1.11.2.4
