RE: [Samba] Samba 3 & ADS current capabilities [adr]
On Sat, 2003-02-01 at 11:57, Rick Segeberg wrote: > Andrew, > > Thanks for your response. This reply is actually not a request for > additional help. After much searching throught the lists and Google > along with a lot of experimentation, I think I've got it (mostly) figure > out. This post is just an effort to help others who might be struggling > with the same issues as I was. I'm sure it's far from perfect and if > anyone has suggestions on improving something, I'd like to hear them. > > Server Information: >Redhad 8.0 w/ kernel 2.4.28-18.8.0 >Samba 3.0 alpha 21 > > Just to be sure, I've started at the beginning and double checked > everything to make sure it matches the documentation I have. Also, I > apologize for the wordiness, but hopefully this will help someone else. > Here's what I've done so far: > > I successfully joined the domain (actually this shows me re-joining): > > # /usr/local/samba/bin/net ads join > [2003/01/30 15:30:04, 0] libads/ldap.c:ads_join_realm(1325) > Host account for lintest already exists - deleting old account > Joined 'LINTEST' to realm 'MYDOMAIN.ORG' > > Then to make sure I could actually authenticate up to the w2k ads > server: > > # ../bin/smbclient //postoffice/c\$ -k > added interface ip=10.1.46.5 bcast=10.1.47.255 nmask=255.255.240.0 > Doing spnego session setup (blob length=113) > Doing kerberos session setup > OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] > smb: \> > > At the prompt, I was able to traverse all directories, etc. > > In following the winbind documentation, I tried joining the domain again > after configuring my smb.conf file (figuring this wouldn't work since > it's quite a bit different than the 1st join command): > > # bin/net rpc join -s PDC -U john.doe I've just commited clarifications to the documentation, as this only applies to NT4 domains. The new documentation refers to 'net join', which detects which based on your 'security=' setting. > Figuring I've already joined the domain, I proceeded in following the > documentation. I started up winbindd (which shows as running after > issuing "ps ax"), then tried: > [root@lintest samba]# bin/wbinfo -t > checking the trust secret via RPC calls failed > error code was NT_STATUS_ACCESS_DENIED (0xc022) > Could not check secret > > Logs show: > > [2003/01/31 08:34:05, 1] > rpc_client/cli_netlogon.c:cli_nt_setup_creds(300) > cli_nt_setup_creds: auth2 challenge failed NT_STATUS_ACCESS_DENIED > [2003/01/31 08:34:05, 0] nsswitch/winbindd_cm.c:cm_get_netlogon_cli(936) > error connecting to domain password server: NT_STATUS_ACCESS_DENIED > > Windows event viewer shows this: > > The session setup from the computer LINTEST failed to authenticate. The > name of the account referenced in the security database is LINTEST$. > The following error occurred: > Access is denied. > > I finally found a fix for this. My nsswitch.conf file had the shadow > line incorrect. It was: That was not the fix for that issue. The only thing that can cause that error is an incorrect join. > == > ## nsswitch.conf > ## created by Rick > > passwd: files winbind > shadow: files winbind > group: files winbind > == > > It is now: > == > ## nsswitch.conf > ## created by Rick > > passwd: files winbind > shadow: files > group: files winbind > = > > Amazing how such a small oversight can effect things. That's because it was something else. > Now this works: > > [root@lintest samba]# bin/wbinfo -t > checking the trust secret via RPC calls succeeded > > Since this fix, my log now show: > > [2003/01/31 09:23:52, 1] > nsswitch/winbindd_util.c:add_trusted_domain(140) > Added domain MYDMN > [2003/01/31 09:24:02, 1] nsswitch/winbindd_util.c:init_domain_list(220) > Retrying startup domain sid fetch for MYDMN > > As you can see, this continues about every 10 seconds. > > I changed my smb.conf file back (I had been experimenting with the > difference in the security = domain vs. = ADS and password = * vs. = > ). I am now able to connect to the samba server from the > domain logged in w2k workstation (without asking for a password). > Yahoo!!! > > BUT - then it occurred to me that the user I'm using is in the > /etc/passwd file (but not in the smbpasswd file). I commented this user > out (using #). After this, the user could not connect to the samba > server. In the documentation, it appears that I need to use "getent > passwd" and "getent group" to pull down the user list and groups from > the server. This doesn't seem to work. Here's what I get: > > #getent passwd > > This seemed to only list the current contents of my /etc/passwd file. > It's my understanding that it should list this and then follow it with > the domain users with their new uids, gids, home direcoties and default > shells. All I got was th
Re: [Samba] Removing Print Driver?
The tab is greyed out on all of my Samba boxes, but I was able to use the rpcclient utility with the deldriver switch to remove the offending print driver. Thanks for taking the time to respond. On Mon, 2003-01-27 at 13:52, Gerald (Jerry) Carter wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 23 Jan 2003, Jeff Marcille wrote: > > > > > Is it possible to remove a printer driver with Samba? I can update one > > and install them through the add/remove wizard but can not remove one. > > Goto the drivers tab of the Server properties window (printers folder on > server; File -> Server Properties). Only shows up on Win2k/XP clients. > > > > > cheers, jerry > -- > Hewlett-Packard- http://www.hp.com > SAMBA Team -- http://www.samba.org > GnuPG Key http://www.plainjoe.org/gpg_public.asc > ISBN 0-672-32269-2 "SAMS Teach Yourself Samba in 24 Hours" 2ed > "You can never go home again, Oatman, but I guess you can shop there." > --John Cusack - "Grosse Point Blank" (1997) > > -BEGIN PGP SIGNATURE- > Version: GnuPG v1.2.0 (GNU/Linux) > Comment: For info see http://quantumlab.net/pine_privacy_guard/ > > iD8DBQE+NZv3IR7qMdg1EfYRAj0EAKDZFIktTBRcDPWMClQnyzJkTs9hZACeOoIa > LEiaRf8W9Ul6iStEY4zeJtc= > =nEud > -END PGP SIGNATURE- -- Jeff Marcille <[EMAIL PROTECTED]> -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [despammed] [Samba] Samba - winXP lookup
Hi > from time to time I get a ~30 second lockup Same for me! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Account Lockout using Security=Server
Em Fri, Jan 31, 2003 at 04:28:50PM -0600, Evans Chris - cevans escreveu: >I was wondering if any of you could help me out. I am not a Samba user > although we have several instances of Samba running in our organization. We > are running into a problem with Samba machines locking out user accounts in > our Windows 2000 domain. I have found a little information about this but > nothing in depth. The Samba servers are configured to use security=server > and are using our domain controllers as password servers. Every time a user > accesses one of the samba boxes 2 incorrect password attempts is logged on This is expected and is a drawback in this security mode. Check: http://us1.samba.org/samba/docs/Samba-HOWTO-Collection.html#AEN393 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3 & ADS current capabilities [adr]
Andrew, Thanks for your response. This reply is actually not a request for additional help. After much searching throught the lists and Google along with a lot of experimentation, I think I've got it (mostly) figure out. This post is just an effort to help others who might be struggling with the same issues as I was. I'm sure it's far from perfect and if anyone has suggestions on improving something, I'd like to hear them. Server Information: Redhad 8.0 w/ kernel 2.4.28-18.8.0 Samba 3.0 alpha 21 Just to be sure, I've started at the beginning and double checked everything to make sure it matches the documentation I have. Also, I apologize for the wordiness, but hopefully this will help someone else. Here's what I've done so far: I successfully joined the domain (actually this shows me re-joining): # /usr/local/samba/bin/net ads join [2003/01/30 15:30:04, 0] libads/ldap.c:ads_join_realm(1325) Host account for lintest already exists - deleting old account Joined 'LINTEST' to realm 'MYDOMAIN.ORG' Then to make sure I could actually authenticate up to the w2k ads server: # ../bin/smbclient //postoffice/c\$ -k added interface ip=10.1.46.5 bcast=10.1.47.255 nmask=255.255.240.0 Doing spnego session setup (blob length=113) Doing kerberos session setup OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] smb: \> At the prompt, I was able to traverse all directories, etc. In following the winbind documentation, I tried joining the domain again after configuring my smb.conf file (figuring this wouldn't work since it's quite a bit different than the 1st join command): # bin/net rpc join -s PDC -U john.doe [2003/01/30 16:06:41, 0] param/params.c:OpenConfFile(532) params.c:OpenConfFile() - Unable to open configuration file "PDC": No such file or directory [2003/01/30 16:06:42, 1] utils/net.c:net_find_server(224) no server to connect to Unable to find a suitable server [2003/01/30 16:06:43, 1] utils/net.c:net_find_server(224) no server to connect to Unable to find a suitable server Figuring I've already joined the domain, I proceeded in following the documentation. I started up winbindd (which shows as running after issuing "ps ax"), then tried: # bin/wbinfo -u MYDMN+Administrator MYDMN+Guest MYDMN+krbtgt MYDMN+john.doe MYDMN+jane.smith MYDMN+george Which finally worked. Then I tried: #wbinfo -g (this worked also) Then I tried: #wbinfo -t got this: [root@lintest samba]# bin/wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_ACCESS_DENIED (0xc022) Could not check secret Logs show: [2003/01/31 08:34:05, 1] rpc_client/cli_netlogon.c:cli_nt_setup_creds(300) cli_nt_setup_creds: auth2 challenge failed NT_STATUS_ACCESS_DENIED [2003/01/31 08:34:05, 0] nsswitch/winbindd_cm.c:cm_get_netlogon_cli(936) error connecting to domain password server: NT_STATUS_ACCESS_DENIED Windows event viewer shows this: The session setup from the computer LINTEST failed to authenticate. The name of the account referenced in the security database is LINTEST$. The following error occurred: Access is denied. I finally found a fix for this. My nsswitch.conf file had the shadow line incorrect. It was: == ## nsswitch.conf ## created by Rick passwd: files winbind shadow: files winbind group: files winbind == It is now: == ## nsswitch.conf ## created by Rick passwd: files winbind shadow: files group: files winbind = Amazing how such a small oversight can effect things. Now this works: [root@lintest samba]# bin/wbinfo -t checking the trust secret via RPC calls succeeded Since this fix, my log now show: [2003/01/31 09:23:52, 1] nsswitch/winbindd_util.c:add_trusted_domain(140) Added domain MYDMN [2003/01/31 09:24:02, 1] nsswitch/winbindd_util.c:init_domain_list(220) Retrying startup domain sid fetch for MYDMN [2003/01/31 09:24:12, 1] nsswitch/winbindd_util.c:init_domain_list(220) Retrying startup domain sid fetch for MYDMN [2003/01/31 09:24:22, 1] nsswitch/winbindd_util.c:init_domain_list(220) Retrying startup domain sid fetch for MYDMN [2003/01/31 09:24:34, 1] nsswitch/winbindd_util.c:init_domain_list(220) Retrying startup domain sid fetch for MYDMN [2003/01/31 09:24:44, 1] nsswitch/winbindd_util.c:init_domain_list(220) Retrying startup domain sid fetch for MYDMN [2003/01/31 09:24:54, 1] nsswitch/winbindd_util.c:init_domain_list(220) Retrying startup domain sid fetch for MYDMN [2003/01/31 09:25:06, 1] nsswitch/winbindd_util.c:init_domain_list(220) Retrying startup domain sid fetch for MYDMN [2003/01/31 09:25:16, 1] nsswitch/winbindd_util.c:init_domain_list(220) Retrying startup domain sid fetch for MYDMN As you can see, this continues about every 10 seconds. I changed my smb.conf file back (I had been experimenting with the difference in the security = domain
[Samba] exel
Hi, I'm having a weird problem. I have exel files with links in it to other exel files. When I share the map on a windows server (or windows os) eveything works. When I share it on a samba server it doesn't. When I open the file, it asks to enable macro's (I need them so say yes) - everything fine - After that It asks if I want to rework/check the links (don't know if reworks is the good word). If I say no, everything ok, when I say yes, exel hangs on reworking the links. With Open Office, I don't have this problem. I'm using samba 2.2.5 (with acl) on a 2.2.18 kernel ps the files are copied from he old NT4 server to the samba server. Did a chmod -R 777 on the files to test, but don't think it's a permission issue - can write and read the files- and if the files are open, it works also Luk Vermeylen Somebody had this problem before? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] what's up about NETAPP and SAMBA PDC ?
On Fri, 2003-01-31 at 01:10, [EMAIL PROTECTED] wrote: > Hi, > > I would like to known if anybody has solved connexion problem of a Network > appliance filer to a SAMBA PDC. I've explored many mailing list without > good news. It has been tested with a recent NetAPP and Samba 3.0 (alpha). We have got much closer to MS semantics in 3.0, so I would give that a try. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Account Lockout using Security=Server
Hi all, I was wondering if any of you could help me out. I am not a Samba user although we have several instances of Samba running in our organization. We are running into a problem with Samba machines locking out user accounts in our Windows 2000 domain. I have found a little information about this but nothing in depth. The Samba servers are configured to use security=server and are using our domain controllers as password servers. Every time a user accesses one of the samba boxes 2 incorrect password attempts is logged on the Windows 2000 domain controller. Apparently security=domain resolves this but if possible I would like an explanation of why Samba tries to use an incorrect password the first 2 times it tries to validate the user? Any information would be greatly appreciated. Thanks...Chris * The information contained in this communication is confidential, is intended only for the use of the recipient named above, and may be legally privileged. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please re-send this communication to the sender and delete the original message or any copy of it from your computer system. Thank You. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Account Lockout using Security=Server
Hi all, I was wondering if any of you could help me out. I am not a Samba user although we have several instances of Samba running in our organization. We are running into a problem with Samba machines locking out user accounts in our Windows 2000 domain. I have found a little information about this but nothing in depth. The Samba servers are configured to use security=server and are using our domain controllers as password servers. Every time a user accesses one of the samba boxes 2 incorrect password attempts is logged on the Windows 2000 domain controller. Apparently security=domain resolves this but if possible I would like an explanation of why Samba tries to use an incorrect password the first 2 times it tries to validate the user? Any information would be greatly appreciated. Thanks...Chris * The information contained in this communication is confidential, is intended only for the use of the recipient named above, and may be legally privileged. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please re-send this communication to the sender and delete the original message or any copy of it from your computer system. Thank You. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Can't see all of the directories in a share with 2.2.7a-1& RH8...but older version/kernel can
--- Joe Gerkman <[EMAIL PROTECTED]> wrote: > On Fri, 2003-01-31 at 07:47, Chris de Vidal wrote: > > Update: > > From a RedHat 8 box with Samba 2.2.7a from a > Samba.org > > RPM, I could see 1000 directories on a Windows > 2000 > > Pro share. > > > > From a RedHat 7.3 box with Samba 2.2.7a from a > > Samba.org SRPM tweaked to include ACL support, I > could > > see 1000 directories on a Windows 2000 Pro share. > > > > I created them with a for loop from my smbmount, > not > > from within Windows, in case it matters. > > I figured it wasn't a directory/file number > limitation, but wasn't > entirely sure...I guess this confirms it...just as a > check, were there > any particularly large files/directories in there? > I know that we have > some directories that can get as big a 8 GB in > size...just not sure if > size plays into this at all either... This is what I did from the RH 8 box: for ((i=1;i<=1000;i++)); do mkdir $i; done ls | wc -l 1000 At your question, I made a 2GB file in 10 directories (I couldn't create a 10GB file.. a Windows problem?): for ((i=1;i<=10;i++)); do dd if=/dev/zero of=$i/2GB bs=1M count=2000; done ls | wc -l 1000 I can't explain it. Perhaps some weird/corrupt binary or library? Try rpm -Va | grep '^..5' | grep -v ' c ' | less which will show every non-config file that has been modified since being installed from its original RPM. Look at libraries and binaries in particular. Reinstall a damaged RPM with rpm -Uvh --replacepkgs --force some_package.rpm paying special attention to any .rpmsave/orig/new files created, which might move an original conf file (so diff the *.rpmorig/save/new with the existing file). Also, ensure you are seeing the exact same files missing each time: ls > missing_at_12-24pm.txt ls > missing_at_2-56pm.txt diff missing_at_12-24pm.txt missing_at_2-56pm.txt Any differences might tell me to look at intermittent network connectivity... it's yet another shot in the dark. Sorry I could not offer more specific help; these are the troubleshooting steps I go through when looking at weird problems like these. > > Someone shared that the permissions were possibly > > incorrect, but that would only seem to apply to a > > Samba server, not smbmount. And you're not using > a > > umask, so the default umask is the one from the > > system, which is 0022, making permissions for > folders > > and files 755. > > > > The only thing I can offer now is possibly > ensuring > > that the username you access from the 6.2 box is > the > > same you use on the 7.x+ boxen. If the usernames > were > > different, perhaps permissions on Windows hide > those > > directories from view (but obviously not from cd). > > Yep...same id...same password. > > > Oh, and check the DOS permissions on those > > directories.. make sure they're not hidden. I > don't > > know if smbmount obeys that, but it's worth a > shot. > > I'll double-check that and let you know...but as > most of the directories > are created by a script (on the windows side), and > there haven't been > any changes to the script, they *should* all be the > same...but again, > I'll confirm that. > > > /dev/idal > > > Thanks again Chris... > > -Joe > > > --- Chris de Vidal <[EMAIL PROTECTED]> wrote: > > > To the list: We've been having some off-list > > > conversation and I wanted to clue you in here. > Our > > > thread might be useful for posterity's > (Google's?) > > > sake. > > > > > > /dev/idal > > > > > > --- Joe Gerkman <[EMAIL PROTECTED]> wrote: > > > > We're using the following command (from a > shell > > > > script): > > > > > > First (this isn't your fix but a nicety), it's > > > easier > > > when this is in /etc/fstab instead of with a > script. > > > > > > It can be done automatically at boot (RedHat > > > recognizes smbfs types and waits til network is > > > started) or manually with the noauto option. > Then, > > > you can just run > > > mount /blahblah/Data > > > > > > If you put your password in a credentials file > (see > > > below), you can protect your password. > > > > > > Again, not a fix for your issue but I thought > you'd > > > like to know that. > > > > > > > mount -f -t smbfs -o > > > > > > Second, I had to look up -f. man mount: > > > -f Causes everything to be done except for > the > > > actual system call; if it's not obvious, this > > > ``fakes'' mount-ing the file system. This > option > > > is useful in conjunction with the -v flag to > > > determine > > > what the mount command is trying to do. It can > also > > > be > > > used to add entries for devices that were > mounted > > > earlier with the -n option. > > > > > > I have little confidence this will fix your > problem, > > > but please try it without that flag anyway. > > > > > > It's just a shot in the dark... > > > > > > > > > > > > > username=xxx,password=xxx,uid=xxx,gid=x,fmask=770,dmask=770 > > > > //blahblah/Data /blahblah/Data > > > > > > Another nicety; use this option with mount o
Re: [Samba] interfaces parameter use needs clarification
Thanks for clearing that up. It's good to know that one can rely on the official docs. On Fri, 2003-01-31 at 15:07, John H Terpstra wrote: > On Fri, 31 Jan 2003, Chris Smith wrote: > > > On Fri, 2003-01-31 at 14:17, John H Terpstra wrote: > > > > > > Which clearly, and seemingly purposely, leaves out the lo interface. > > > > > > Which is always allowed except when explicitly NOT allowed. > > > > OK, so there is no need to add the lo interface because it is added by > > default. > > > > How about the format of the IP/submask pair: > > > > > > Furthermore in the "Unoffcial Samba HOWTO" it is stated: > > > > > > > > = > > > > A common mistake is to set the interfaces line to the specific IP > > > > address of the box, when it is actually the IP subnet that your > > > > interface is on that you want to use. Assuming your server runs on > > > > 192.168.0.1 and your netmask is 255.255.255.0, your smb.conf file should > > > > look like: > > > > > > > > interfaces = 192.168.0.0/255.255.255.0 127.0.0.1 > > > > = > > > > > > > > However this also does not reconcile with the smb.conf manual, nor the > > > > examples which clearly show the use of the IP address of the interface > > > > itself as proper. > > > > Is it indeed a mistake at all to use the IP of the interface vs the > > subnet's address or is the "Unofficial Samba HOWTO" in error here? > > I recognize that if I knew C I might have been able to answer this one > > myself, apologies. > > The code actually checks for valid interfaces and compares them to the > address pattern specified. In other words: > > Interface: 1.2.3.4/24, known as eth2 > > if: interfaces = 1.2.0.0/16 > interfaces = 1.0.0.0/8 > interfaces = eth2 > interfaces = 1.2.3.4 > interfaces = 1.2.3.4/255.255.255.0 > > will all work fine. > > > - John T. > -- > John H Terpstra > Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba - winXP lookup
On Fri, 31 Jan 2003, Jens Pettersson wrote: > Hi all, > > We're using samba, and we'd tried > it with multiple Windows versions: 98, ME, 2000 and XP, in that order. > However, when we migrated from 2000 to XP, a problem apeared that was not > present in any other Windows version. Everthing works fine, excepting that > when I am using the samba shares (browsing, opening files, etc...) from time > to time I get a ~30 second lockup. During that time, the Samba shares are > unresponsive from that computer (other computers work fine). > > I imagine this is probably an XP bug (since it doesn't happen in other > Windows versions). But I would like to know if anyone has this problem and > knows of a solution (from Samba or from XP). > > Is there a solution to this or do we have to live with it...hopefully not ;) I have seen this with some XP machines also. Send me your smb.conf and I'll see what help can be brought to bare. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba - winXP lookup
Hi all, We're using samba, and we'd tried it with multiple Windows versions: 98, ME, 2000 and XP, in that order. However, when we migrated from 2000 to XP, a problem apeared that was not present in any other Windows version. Everthing works fine, excepting that when I am using the samba shares (browsing, opening files, etc...) from time to time I get a ~30 second lockup. During that time, the Samba shares are unresponsive from that computer (other computers work fine). I imagine this is probably an XP bug (since it doesn't happen in other Windows versions). But I would like to know if anyone has this problem and knows of a solution (from Samba or from XP). Is there a solution to this or do we have to live with it...hopefully not ;) /Dive -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ls -l hangs
Hi Chris, Chris Unger wrote: I just installed Samba 2.2.7a, --with-winbind --with-pam. Everything appears to be working great, as far as logging in, authenicating to a Windows 2000 domain, creating/saving files. BUT, when I login to the UNIX box as root and goto the shared directory and type ls -al, all I get is: total 4 drwxrwxrwx 2 root other512 Jan 30 09:44 . drwxr-xr-x 32 root root1024 Jan 29 14:14 .. Running ls or ls -a work just fine. I am guessing it has something to do with the users/groups. This problem sounds familiar to me. I tried winbind on a linux box to allow users to log in using their win domain user. Having searched a lot the www (without success) and mailinglists, I finally found a posting on the samba-technical mailing list where somebody complained about the same problem. The problem seems to be a large number of users / groups in the domain together with winbind seeming to get a new list of all users / groups each time the corresponding pam module is called. So the question is: How large is your win domain? I think the guy I talked about had about 15,000 users, in "mine" there are over 60,000. The guy's "solution" was to change to samba 3.0 (it's alpha status today, as far as I know), as he had success with that version. Concerning "my" domain, I haven't tried samba 3.0 yet as I haven't been at the company for two months (it's a study/work combination). But I think I will try when I'm back at the end of february... Perhaps you will try sooner and tell us about your experience? Regards Heiko -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] win XP off_line
Hi > If your samba server is running as a stand-alone server, > then you have NO control over XP's decision to drop the > drive connection unless you hack the registry to no do so. Could you please tell me which registry string has to be changed (and with what value, obviously) or redirect me where I can find this info? Thanks. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] interfaces parameter use needs clarification
On Fri, 31 Jan 2003, Chris Smith wrote: > On Fri, 2003-01-31 at 14:17, John H Terpstra wrote: > > > > Which clearly, and seemingly purposely, leaves out the lo interface. > > > > Which is always allowed except when explicitly NOT allowed. > > OK, so there is no need to add the lo interface because it is added by > default. > > How about the format of the IP/submask pair: > > > > Furthermore in the "Unoffcial Samba HOWTO" it is stated: > > > > > > = > > > A common mistake is to set the interfaces line to the specific IP > > > address of the box, when it is actually the IP subnet that your > > > interface is on that you want to use. Assuming your server runs on > > > 192.168.0.1 and your netmask is 255.255.255.0, your smb.conf file should > > > look like: > > > > > > interfaces = 192.168.0.0/255.255.255.0 127.0.0.1 > > > = > > > > > > However this also does not reconcile with the smb.conf manual, nor the > > > examples which clearly show the use of the IP address of the interface > > > itself as proper. > > Is it indeed a mistake at all to use the IP of the interface vs the > subnet's address or is the "Unofficial Samba HOWTO" in error here? > I recognize that if I knew C I might have been able to answer this one > myself, apologies. The code actually checks for valid interfaces and compares them to the address pattern specified. In other words: Interface: 1.2.3.4/24, known as eth2 if: interfaces = 1.2.0.0/16 interfaces = 1.0.0.0/8 interfaces = eth2 interfaces = 1.2.3.4 interfaces = 1.2.3.4/255.255.255.0 will all work fine. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] interfaces parameter use needs clarification
On Fri, 2003-01-31 at 14:17, John H Terpstra wrote: > > Which clearly, and seemingly purposely, leaves out the lo interface. > > Which is always allowed except when explicitly NOT allowed. OK, so there is no need to add the lo interface because it is added by default. How about the format of the IP/submask pair: > > Furthermore in the "Unoffcial Samba HOWTO" it is stated: > > > > = > > A common mistake is to set the interfaces line to the specific IP > > address of the box, when it is actually the IP subnet that your > > interface is on that you want to use. Assuming your server runs on > > 192.168.0.1 and your netmask is 255.255.255.0, your smb.conf file should > > look like: > > > > interfaces = 192.168.0.0/255.255.255.0 127.0.0.1 > > = > > > > However this also does not reconcile with the smb.conf manual, nor the > > examples which clearly show the use of the IP address of the interface > > itself as proper. Is it indeed a mistake at all to use the IP of the interface vs the subnet's address or is the "Unofficial Samba HOWTO" in error here? I recognize that if I knew C I might have been able to answer this one myself, apologies. Thanks. Chris -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [found something] Problems making use of 2K PDC
Em Fri, Jan 31, 2003 at 04:05:06PM +, John H Terpstra escreveu: > My clear preference is to make the samba server a full Win2K domain > member. Of course the Win2K needs to be running either in NT4 domain > security mode _or_ Active Directory in mixed mode. John, many thanks for your help. I'm doing exactly this now, samba has joined the w2k domain and security = domain, the winxp client has also joined the w2k domain and can access the samba server without a hitch. winbind is also working. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: linux server completely hangs copying files with samba
>> final experiments; >> after realizing that unloading the usb-ohci module (non even the >> usbcore) system was fine, i compiled the kernel without modules >> support and without usb. the machine crashed and actually i was >> really angry, becuase i thought i had found the problem; but >> finally i discovered that if usb is not loaded the machine >> crashes, but if i load it and unload it (going back to the same >> situation) it doesn't crash. obviously if i disale usb from bios >> everything in ok. maybe is something about irq, so if it is >> enabled in bios the ira (11 for me) is used. loading and >> unloading the module will do something strange to the irq >> handles. cat /proc/interrupts gives 0 on usb. at this point i'm >> curios to find out why this happens; since i've red of >> many people having this problem maybe someone (not you, as you >> told me) had a similar situation. >> don't know if it's relevant, but only once the keyboard was >> blocked, i had to unplag and plug it back (ps/2 keyb) and it was >> ok, checking the interrupts they had jumped from 1500 to about >> 3000 in few seconds. going to work, nice day > >I forget how recent your hardware is, but have you tried booting with: > >lilo: linux noapic That's one of the fírst things I tried. Didn't help, but nodma (or something similar disabling IDE DMA) did. _ Get 25MB, POP3, Spam Filtering with LYCOS MAIL PLUS for $19.95/year. http://login.mail.lycos.com/brandPage.shtml?pageId=plus&ref=lmtplus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] interfaces parameter use needs clarification
Chris, >From ~samba/source/lib/interface.c: / interpret a single element from a interfaces= config line This handles the following different forms: 1) wildcard interface name 2) DNS name 3) IP/masklen 4) ip/mask 5) bcast/mask / And from ~samba/source/lib/access.c: /* return true if access should be allowed */ static BOOL allow_access_internal(const char **deny_list,const char **allow_list, const char *cname, const char *caddr) { const char *client[2]; client[0] = cname; client[1] = caddr; /* if it is loopback then always allow unless specifically denied */ if (strcmp(caddr, "127.0.0.1") == 0) { /* * If 127.0.0.1 matches both allow and deny then allow. * Patch from Steve Langasek [EMAIL PROTECTED] */ if (deny_list && list_match(deny_list,(const char *)client,client_match) && (!allow_list || !list_match(allow_list,(const char *)client, client_match))) { return False; } return True; } Some time ago we explicitly added support for the loopback interface because we were seeing so many users mess this up. Cheers, John T. On Fri, 31 Jan 2003, Chris Smith wrote: > In the thread titled: > > Re: [Samba] Mandrake 9.0: rpcclient problem exporting printers to samba > for windows > > There exists some advice whcih brings confusion: > > > > interfaces = 10.0.0.2/24 > > > > I think this could be a problem, you should list the loopback address in > > your interfaces list (lo or 127.0.0.1) > > > > I've seen this advice before in the "Unofficial Samba HOWTO" yet it > doesn't seem to jive with the "Offical" documentation. I wish someone in > the know would spill the beans on the real truth. > > The smb.conf doc states these choices: > > = > The option takes a list of interface strings. Each string can be in any > of the following forms: > > * a network interface name (such as eth0). This may include > shell-like wildcards so eth* will match any interface starting > with the substring "eth" > > * an IP address. In this case the netmask is determined from the > list of interfaces obtained from the kernel > > * an IP/mask pair. > > * a broadcast/mask pair. > = > > And provides an example: > > = > interfaces = eth0 192.168.2.10/24 192.168.3.10/255.255.255.0 > = > > As well as stating the default: > > = > Default: all active interfaces except 127.0.0.1 that are broadcast > capable > = > > Which clearly, and seemingly purposely, leaves out the lo interface. Which is always allowed except when explicitly NOT allowed. > > Furthermore in the "Unoffcial Samba HOWTO" it is stated: > > = > A common mistake is to set the interfaces line to the specific IP > address of the box, when it is actually the IP subnet that your > interface is on that you want to use. Assuming your server runs on > 192.168.0.1 and your netmask is 255.255.255.0, your smb.conf file should > look like: > > interfaces = 192.168.0.0/255.255.255.0 127.0.0.1 > = > > However this also does not reconcile with the smb.conf manual, nor the > examples which clearly show the use of the IP address of the interface > itself as proper. > > Please can someone clear this up. > > Thanks. > > Chris > > -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Need help with strange "rejected the tconX on the IPC$ share"error messages.
One Win2k client constantly generates these messages in the log: Jan 30 16:50:32 server smbd[30271]: [2003/01/30 16:50:32, 0] rpc_client/cli_spoolss_notify.c:spoolss_connect_to_client(134) Jan 30 16:50:32 server smbd[30271]: connect_to_client: machine KW1 rejected the tconX on the IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. Samba is a PDC, none of the other systems generate this error, the problem system outwardly works just fine, all of the users can logon to the domain and use the system. Any clues? Thanks. Chris -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] interfaces parameter use needs clarification
In the thread titled: Re: [Samba] Mandrake 9.0: rpcclient problem exporting printers to samba for windows There exists some advice whcih brings confusion: > > interfaces = 10.0.0.2/24 > > I think this could be a problem, you should list the loopback address in > your interfaces list (lo or 127.0.0.1) > I've seen this advice before in the "Unofficial Samba HOWTO" yet it doesn't seem to jive with the "Offical" documentation. I wish someone in the know would spill the beans on the real truth. The smb.conf doc states these choices: = The option takes a list of interface strings. Each string can be in any of the following forms: * a network interface name (such as eth0). This may include shell-like wildcards so eth* will match any interface starting with the substring "eth" * an IP address. In this case the netmask is determined from the list of interfaces obtained from the kernel * an IP/mask pair. * a broadcast/mask pair. = And provides an example: = interfaces = eth0 192.168.2.10/24 192.168.3.10/255.255.255.0 = As well as stating the default: = Default: all active interfaces except 127.0.0.1 that are broadcast capable = Which clearly, and seemingly purposely, leaves out the lo interface. Furthermore in the "Unoffcial Samba HOWTO" it is stated: = A common mistake is to set the interfaces line to the specific IP address of the box, when it is actually the IP subnet that your interface is on that you want to use. Assuming your server runs on 192.168.0.1 and your netmask is 255.255.255.0, your smb.conf file should look like: interfaces = 192.168.0.0/255.255.255.0 127.0.0.1 = However this also does not reconcile with the smb.conf manual, nor the examples which clearly show the use of the IP address of the interface itself as proper. Please can someone clear this up. Thanks. Chris -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Moterboard help Please
Well I have a gig of memory in this motherboard one of the reasons I wanted to try and get it back working. All newer motherboards do not support this type of memory already looked into it. -Original Message- From: Michael G. Noble [mailto:[EMAIL PROTECTED]] Sent: Friday, January 31, 2003 12:55 PM To: Elijah Savage III Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Moterboard help Please With the time spent trying to find a bios, I would go out and spend $80.00 for a new motherboard. You then have a motherboard that is newer and will support what you need. Mike On Fri, 2003-01-31 at 09:46, Brian wrote: > http://www.unicore.com > 1-800-800-BIOS > > They might be able to help you. > > Do you know what BIOS it used initially? Was it Phoenix BIOS 4.0 Ver. > 6.0? It might also be worthwhile then to call Phoenix tech support. ( > http://www.phoenix.com ) > > Also, where did you find the wrong BIOS? Can't you go back there, find > a new BIOS that will work and flash it to that? That is, why go back to > the original (which we can't find) when you know it won't support the > larger hard drives? The quest should be for a new BIOS that will be > compatible, no? > > Elijah Savage III wrote: > > >I meant to include Off topic in the subject line. There is not list for > >something like this that I know of and I have been a user of this > >mailing list for about 2 years and figured one of you out there might > >have this motherboard and be able to send me the bios for it. > > > >-Original Message- > >From: Gabriel D. Preston [mailto:[EMAIL PROTECTED]] > >Sent: Friday, January 31, 2003 11:09 AM > >To: Elijah Savage III > >Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] > >Subject: Re: [Samba] Moterboard help Please > > > >Elijah, > > > >I believe you have the wrong mail list for this type of problem, but > >maybe my brain just isn't working today and I'm wrong. > > > >-Gabriel > > > >Elijah Savage III wrote: > > > > > > > >>All, > >> > >>I have been terribly pleased with openbsd 3.2 I was using it as a > >>mail/samba server with postifx on a pentium pro 200 with 1 gig of > >>memory. Well I wanted to add a larger harddrive than what I have in it > >>now only 6.4 gig. Well the machine would not see it and for some reason > >>after hours and hours of trying I can't get a tekram 395UW and a 18gig > >>scsi to be the boot drive and having failed I was stuck with IDE. I > >>finally got tired of it being this way and decided to flash the > >>motherboard which is a Micronics Invader ATX m8s-fin motherboard. Well > >>dumb me I flashed it with the wrong bios. And I can't find the original > >>bios on the net anywhere do any of you all have this motherboard and > >> > >> > >can > > > > > >>send me the bios for it or possibly know where I can find it. Any of > >>your help would be greatly appreciated. And before I flashed it, it did > >>not ask me to backup the prior bios. > >>I would just hate to trash this setup. The machine still works but with > >>this current bios only the first pci slot works which means I can't use > >>a nic card or anything in it. > >> > >>Thank you > >>Elijah > >>http://www.digitalrage.org/ > >>For your technical news and HowTo's > >>Stop by and vote in the latest poll about > >>Mr. Spam King. > >> > >> > >> > >> > >> > >> > >> > > > > > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- Michael G. NobleRF Magic, Inc. Senior System Administrator 10182 Telesis Ct., 4th Floor San Diego, CA. 92121 email: [EMAIL PROTECTED] voice: (858) 546-2401 x207 fax: (858) 546-2402 -- There is Sanity in my Madness! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Moterboard help Please
Yes Phoenix 4.0 ver 6 is the correct one. At this point I do not care which one I got to I just want to get the machine back up and working. -Original Message- From: Brian [mailto:[EMAIL PROTECTED]] Sent: Friday, January 31, 2003 12:46 PM To: Elijah Savage III Cc: [EMAIL PROTECTED] Subject: Re: [Samba] Moterboard help Please http://www.unicore.com 1-800-800-BIOS They might be able to help you. Do you know what BIOS it used initially? Was it Phoenix BIOS 4.0 Ver. 6.0? It might also be worthwhile then to call Phoenix tech support. ( http://www.phoenix.com ) Also, where did you find the wrong BIOS? Can't you go back there, find a new BIOS that will work and flash it to that? That is, why go back to the original (which we can't find) when you know it won't support the larger hard drives? The quest should be for a new BIOS that will be compatible, no? Elijah Savage III wrote: >I meant to include Off topic in the subject line. There is not list for >something like this that I know of and I have been a user of this >mailing list for about 2 years and figured one of you out there might >have this motherboard and be able to send me the bios for it. > >-Original Message- >From: Gabriel D. Preston [mailto:[EMAIL PROTECTED]] >Sent: Friday, January 31, 2003 11:09 AM >To: Elijah Savage III >Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] >Subject: Re: [Samba] Moterboard help Please > >Elijah, > >I believe you have the wrong mail list for this type of problem, but >maybe my brain just isn't working today and I'm wrong. > >-Gabriel > >Elijah Savage III wrote: > > > >>All, >> >>I have been terribly pleased with openbsd 3.2 I was using it as a >>mail/samba server with postifx on a pentium pro 200 with 1 gig of >>memory. Well I wanted to add a larger harddrive than what I have in it >>now only 6.4 gig. Well the machine would not see it and for some reason >>after hours and hours of trying I can't get a tekram 395UW and a 18gig >>scsi to be the boot drive and having failed I was stuck with IDE. I >>finally got tired of it being this way and decided to flash the >>motherboard which is a Micronics Invader ATX m8s-fin motherboard. Well >>dumb me I flashed it with the wrong bios. And I can't find the original >>bios on the net anywhere do any of you all have this motherboard and >> >> >can > > >>send me the bios for it or possibly know where I can find it. Any of >>your help would be greatly appreciated. And before I flashed it, it did >>not ask me to backup the prior bios. >>I would just hate to trash this setup. The machine still works but with >>this current bios only the first pci slot works which means I can't use >>a nic card or anything in it. >> >>Thank you >>Elijah >>http://www.digitalrage.org/ >>For your technical news and HowTo's >>Stop by and vote in the latest poll about >>Mr. Spam King. >> >> >> >> >> >> >> > > > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Question about version 2.2.5
On Fri, 31 Jan 2003, Rodrigo Nascimento wrote: > Hi, I'm again... > > I have been studying a documentation of IBM (the Redbook) about Samba. In this > document says that to run the SWAT I can to run with any user, but to chance > something I need to log as root. > The document speak about version 2.0.x. > About this, my question is: > It's true for version 2.2.5? Yes. > And, in this document says also that when I pass the password, it is going in > text format. It's really on SAMBA 2.2.5 too? Yes. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] SWAT
On Fri, 31 Jan 2003, Rodrigo Nascimento wrote: > Hi List, > > I would like to make work my SWAT. > I have a AIX 4.3.3 and SAMBA 2.2.5. > > What is the lines I need to add at the /etc/services and /etc/inetd.conf for > it works? Please check the man page: man swat - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How to find out, if samba has SSL/LDAP support or not?
On Fri, 31 Jan 2003, Herb Lewis wrote: > With samba 3.0 you can run "smbd -b" to see the build options. There > is no such option in 2.2.x code. Another approach would be to tun 'testparm' on the samba-2.0 systems and look for the ssl and ldap entries. If not there, then support was not comiled in. Note: In samba-2.x testparm is verbose by default, in samba-3.x it is not. To get samba-3.x to be verbose use the -v option. - John T. > > Jan Schäfer wrote: > > > > Hi, > > > > I'm the developer of KSambaPlugin. > > Is there a way to find out if samba > > was compiled with SSL / LDAP support or not ? > > I want to disable the options in the > > case that samba doesn't support them. > > > > Thanks, > > > > Jan Schäfer > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Mandrake 9.0: rpcclient problem exporting printers tosamba for windows
>From [EMAIL PROTECTED] Fri Jan 31 11:55:08 2003 From: David Woodyard <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] To: Buchan Milne <[EMAIL PROTECTED]> Subject: Re: [Samba] Mandrake 9.0: rpcclient problem exporting printers to samba for windows Date: Fri, 31 Jan 2003 11:55:08 -0600 User-Agent: KMail/1.5 It works!!! Thanks very much for your help!!! I added 127.0.0.1/24 to interfaces. I also uninstalled the printer from cups and reinstalled it to make sure I had the process down. I actually added the printer from KDE print manager because CUPS does not have the driver and KDE does. I had to stop and restart samba before the rpcclient setdriver command worked. I installed (using your instructions below) the driver for my Deskjet printer from NT it got the drivers from the NT CD and it copied them to the samba printer directory. I then printed a test page and got the correct printout. It is all so easy when you have a good understanding of what needs to be done. Thanks again, David On Friday 31 January 2003 08:33 am, you wrote: > David Woodyard wrote: > > Thanks for your quick response. I added comments below after your > > questions. I have a Canon 5500 and HP Deskjet. Do you know where the > > print drivers are stored on WinNT? > > The way to do this from NT/2k is to: > 1)Go to //sambabox/Printers > 2)right-click on the printer, choose properties > 3)When prompted to install a driver, say no > 4)Click on the advanced tab, and click "New driver" > 5)When prompted for the windows server CD, point it at %windir%\inf > (usually c:\winnt\inf) > > > What next? > > > > Thanks again, > > David > > Subject: Re: [Samba] Mandrake 9.0: rpcclient problem exporting printers to samba for windows Date: Friday 31 January 2003 08:33 am From: Buchan Milne <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] David Woodyard wrote: > Thanks for your quick response. I added comments below after your > questions. I have a Canon 5500 and HP Deskjet. Do you know where the print > drivers are stored on WinNT? The way to do this from NT/2k is to: 1)Go to //sambabox/Printers 2)right-click on the printer, choose properties 3)When prompted to install a driver, say no 4)Click on the advanced tab, and click "New driver" 5)When prompted for the windows server CD, point it at %windir%\inf (usually c:\winnt\inf) > What next? > > Thanks again, > David > > On Friday 31 January 2003 03:18 am, you wrote: >>>Date: Thu, 30 Jan 2003 17:00:21 -0600 >>>From: David Woodyard <[EMAIL PROTECTED]> >>>To: [EMAIL PROTECTED] >>>Subject: [Samba] >>> Mandrake 9.0: rpcclient problem exporting printers to samba for windows >>>Message-ID: <[EMAIL PROTECTED]> >>>Content-Type: text/plain; >>> charset="us-ascii" >>>MIME-Version: 1.0 >>>Content-Transfer-Encoding: 7bit >>>Precedence: list >>>Reply-To: [EMAIL PROTECTED] >>>Message: 2 >>> >>>I am new to CUPS, after working for 4 days to get printing from WinNT to >>>Mandrake 9.0, I give up. Here is the problem: >>>the /etc/samba/smb.conf is setup with [printers] and [print$]. I copy the >>>postscript drivers from adobe. I then tried to export a printer to samba >>>with the following command >>> cupsaddsmb -v -U dwoody canon >>> >>>It did all of the commands successfully except for the last one. which >>>was: rpcclient localhost -N -Udwoody%password -c 'setdriver canon canon' >>> >>>It failed with NT_STATUS_UNSUCCESSFUL. >>>I ran the same rpcclient standalone with debug and I got several error >>>messages. They are >>> 1) connection refused on localhost:445 (it then used port 139 - should >>>it?) 2) WERR_ACCESS_DENIED (this was near the end of the output) >>> 3) NT_STATUS_UNSUCCESSFUL >>> >>>I have not been able to fix the first two errors. BTW, the drive shares >>>are working correctly. >> >>1)Is the user dwoody in the list of "printer admin"s >>2)Does the user dwoody have write access to the print$ share > > [global] >valid users = root, dwoody, rox > workgroup = WORKGROUP > printer admin = root, dwoody, rox > server string = Samba Server on Mandrake 9.0 > hosts allow = 127. 10. Be careful with hosts allow unless you are sure reverse dns lookups work for all clients. >load printers = yes >printcap name = cups >printing = cups > guest account = dwoody > log file = /var/log/samba/smb.%m >max log size = 50 >security = user > encrypt passwords = no > smb passwd file = /etc/samba/smbpasswd >socket options = TCP_NODELAY > interfaces = 10.0.0.2/24 I think this could be a problem, you should list the loopback address in your interfaces list (lo or 127.0.0.1) >remote announce = 10.255.255.255 >local master = no >dns proxy = no > [printers] >comment = All Printers >path = /var/spool/samba >browseable = no > allow hosts = 10. > write list = @users >guest ok = yes >readonly = yes >writable = no >printable = yes >create mask = 0700 > [print$] >path = /var/lib/samba/printers >browseable = yes >guest ok
Re: [Samba] Moterboard help Please
With the time spent trying to find a bios, I would go out and spend $80.00 for a new motherboard. You then have a motherboard that is newer and will support what you need. Mike On Fri, 2003-01-31 at 09:46, Brian wrote: > http://www.unicore.com > 1-800-800-BIOS > > They might be able to help you. > > Do you know what BIOS it used initially? Was it Phoenix BIOS 4.0 Ver. > 6.0? It might also be worthwhile then to call Phoenix tech support. ( > http://www.phoenix.com ) > > Also, where did you find the wrong BIOS? Can't you go back there, find > a new BIOS that will work and flash it to that? That is, why go back to > the original (which we can't find) when you know it won't support the > larger hard drives? The quest should be for a new BIOS that will be > compatible, no? > > Elijah Savage III wrote: > > >I meant to include Off topic in the subject line. There is not list for > >something like this that I know of and I have been a user of this > >mailing list for about 2 years and figured one of you out there might > >have this motherboard and be able to send me the bios for it. > > > >-Original Message- > >From: Gabriel D. Preston [mailto:[EMAIL PROTECTED]] > >Sent: Friday, January 31, 2003 11:09 AM > >To: Elijah Savage III > >Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] > >Subject: Re: [Samba] Moterboard help Please > > > >Elijah, > > > >I believe you have the wrong mail list for this type of problem, but > >maybe my brain just isn't working today and I'm wrong. > > > >-Gabriel > > > >Elijah Savage III wrote: > > > > > > > >>All, > >> > >>I have been terribly pleased with openbsd 3.2 I was using it as a > >>mail/samba server with postifx on a pentium pro 200 with 1 gig of > >>memory. Well I wanted to add a larger harddrive than what I have in it > >>now only 6.4 gig. Well the machine would not see it and for some reason > >>after hours and hours of trying I can't get a tekram 395UW and a 18gig > >>scsi to be the boot drive and having failed I was stuck with IDE. I > >>finally got tired of it being this way and decided to flash the > >>motherboard which is a Micronics Invader ATX m8s-fin motherboard. Well > >>dumb me I flashed it with the wrong bios. And I can't find the original > >>bios on the net anywhere do any of you all have this motherboard and > >> > >> > >can > > > > > >>send me the bios for it or possibly know where I can find it. Any of > >>your help would be greatly appreciated. And before I flashed it, it did > >>not ask me to backup the prior bios. > >>I would just hate to trash this setup. The machine still works but with > >>this current bios only the first pci slot works which means I can't use > >>a nic card or anything in it. > >> > >>Thank you > >>Elijah > >>http://www.digitalrage.org/ > >>For your technical news and HowTo's > >>Stop by and vote in the latest poll about > >>Mr. Spam King. > >> > >> > >> > >> > >> > >> > >> > > > > > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- Michael G. NobleRF Magic, Inc. Senior System Administrator 10182 Telesis Ct., 4th Floor San Diego, CA. 92121 email: [EMAIL PROTECTED] voice: (858) 546-2401 x207 fax: (858) 546-2402 -- There is Sanity in my Madness! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Using working devmode from windows clients on samba server?
Samba 2.2.7a (built from samba RPM's) with LPRng print subsystem. I've been having troubles with some print drivers which fail to work properly when uploaded to the samba server whether devmode gets left as null or a default devmode is used. Some drivers do not leave you in a position where you can "tickle" the driver to generate a devmode with page orientation etc before things start misbehaving. Stuff usually works when the client installs their own drivers locally. Is there any way to grab the devmode generated by the windows clients and inject it some place in samba's files to get a working devmode so driver downloads with spools can work with these drivers? Thanks for any suggestions, ~ Daniel --- This message is the property of Time Inc. or its affiliates. It may be legally privileged and/or confidential and is intended only for the use of the addressee(s). No addressee should forward, print, copy, or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as a recipient. If the reader of this message is not the intended recipient, you are hereby notified that any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is strictly prohibited. If you have received this communication in error, please immediately notify the sender and delete this message. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Moterboard help Please
http://www.unicore.com 1-800-800-BIOS They might be able to help you. Do you know what BIOS it used initially? Was it Phoenix BIOS 4.0 Ver. 6.0? It might also be worthwhile then to call Phoenix tech support. ( http://www.phoenix.com ) Also, where did you find the wrong BIOS? Can't you go back there, find a new BIOS that will work and flash it to that? That is, why go back to the original (which we can't find) when you know it won't support the larger hard drives? The quest should be for a new BIOS that will be compatible, no? Elijah Savage III wrote: I meant to include Off topic in the subject line. There is not list for something like this that I know of and I have been a user of this mailing list for about 2 years and figured one of you out there might have this motherboard and be able to send me the bios for it. -Original Message- From: Gabriel D. Preston [mailto:[EMAIL PROTECTED]] Sent: Friday, January 31, 2003 11:09 AM To: Elijah Savage III Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Samba] Moterboard help Please Elijah, I believe you have the wrong mail list for this type of problem, but maybe my brain just isn't working today and I'm wrong. -Gabriel Elijah Savage III wrote: All, I have been terribly pleased with openbsd 3.2 I was using it as a mail/samba server with postifx on a pentium pro 200 with 1 gig of memory. Well I wanted to add a larger harddrive than what I have in it now only 6.4 gig. Well the machine would not see it and for some reason after hours and hours of trying I can't get a tekram 395UW and a 18gig scsi to be the boot drive and having failed I was stuck with IDE. I finally got tired of it being this way and decided to flash the motherboard which is a Micronics Invader ATX m8s-fin motherboard. Well dumb me I flashed it with the wrong bios. And I can't find the original bios on the net anywhere do any of you all have this motherboard and can send me the bios for it or possibly know where I can find it. Any of your help would be greatly appreciated. And before I flashed it, it did not ask me to backup the prior bios. I would just hate to trash this setup. The machine still works but with this current bios only the first pci slot works which means I can't use a nic card or anything in it. Thank you Elijah http://www.digitalrage.org/ For your technical news and HowTo's Stop by and vote in the latest poll about Mr. Spam King. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Question about version 2.2.5
Hi, I'm again... I have been studying a documentation of IBM (the Redbook) about Samba. In this document says that to run the SWAT I can to run with any user, but to chance something I need to log as root. The document speak about version 2.0.x. About this, my question is: It's true for version 2.2.5? And, in this document says also that when I pass the password, it is going in text format. It's really on SAMBA 2.2.5 too? So long, ___ (0 0) +V+ | Rodrigo Nascimento | | Linux Users Brazil o0o o0o| +( )---( )+ http://www.ieg.com.br -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] SWAT
Hi List, I would like to make work my SWAT. I have a AIX 4.3.3 and SAMBA 2.2.5. What is the lines I need to add at the /etc/services and /etc/inetd.conf for it works? See you, ___ (0 0) +V+ | Rodrigo Nascimento | | Linux Users Brazil o0o o0o| +( )---( )+ http://www.ieg.com.br -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How to find out, if samba has SSL/LDAP support or not ?
With samba 3.0 you can run "smbd -b" to see the build options. There is no such option in 2.2.x code. Jan Schäfer wrote: > > Hi, > > I'm the developer of KSambaPlugin. > Is there a way to find out if samba > was compiled with SSL / LDAP support or not ? > I want to disable the options in the > case that samba doesn't support them. > > Thanks, > > Jan Schäfer > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba -- == Herb Lewis Silicon Graphics Networking Engineer 1600 Amphitheatre Pkwy MS-510 Strategic Software Organization Mountain View, CA 94043-1351 [EMAIL PROTECTED] Tel: 650-933-2177 http://www.sgi.com Fax: 650-932-2177 PGP Key: 0x8408D65D == -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Can't see all of the directories in a share with 2.2.7a-1& RH8...but older version/kernel can
On Fri, 2003-01-31 at 07:47, Chris de Vidal wrote: > Update: > From a RedHat 8 box with Samba 2.2.7a from a Samba.org > RPM, I could see 1000 directories on a Windows 2000 > Pro share. > > From a RedHat 7.3 box with Samba 2.2.7a from a > Samba.org SRPM tweaked to include ACL support, I could > see 1000 directories on a Windows 2000 Pro share. > > I created them with a for loop from my smbmount, not > from within Windows, in case it matters. I figured it wasn't a directory/file number limitation, but wasn't entirely sure...I guess this confirms it...just as a check, were there any particularly large files/directories in there? I know that we have some directories that can get as big a 8 GB in size...just not sure if size plays into this at all either... > Someone shared that the permissions were possibly > incorrect, but that would only seem to apply to a > Samba server, not smbmount. And you're not using a > umask, so the default umask is the one from the > system, which is 0022, making permissions for folders > and files 755. > > The only thing I can offer now is possibly ensuring > that the username you access from the 6.2 box is the > same you use on the 7.x+ boxen. If the usernames were > different, perhaps permissions on Windows hide those > directories from view (but obviously not from cd). Yep...same id...same password. > Oh, and check the DOS permissions on those > directories.. make sure they're not hidden. I don't > know if smbmount obeys that, but it's worth a shot. I'll double-check that and let you know...but as most of the directories are created by a script (on the windows side), and there haven't been any changes to the script, they *should* all be the same...but again, I'll confirm that. > /dev/idal > Thanks again Chris... -Joe > --- Chris de Vidal <[EMAIL PROTECTED]> wrote: > > To the list: We've been having some off-list > > conversation and I wanted to clue you in here. Our > > thread might be useful for posterity's (Google's?) > > sake. > > > > /dev/idal > > > > --- Joe Gerkman <[EMAIL PROTECTED]> wrote: > > > We're using the following command (from a shell > > > script): > > > > First (this isn't your fix but a nicety), it's > > easier > > when this is in /etc/fstab instead of with a script. > > > > It can be done automatically at boot (RedHat > > recognizes smbfs types and waits til network is > > started) or manually with the noauto option. Then, > > you can just run > > mount /blahblah/Data > > > > If you put your password in a credentials file (see > > below), you can protect your password. > > > > Again, not a fix for your issue but I thought you'd > > like to know that. > > > > > mount -f -t smbfs -o > > > > Second, I had to look up -f. man mount: > > -f Causes everything to be done except for the > > actual system call; if it's not obvious, this > > ``fakes'' mount-ing the file system. This option > > is useful in conjunction with the -v flag to > > determine > > what the mount command is trying to do. It can also > > be > > used to add entries for devices that were mounted > > earlier with the -n option. > > > > I have little confidence this will fix your problem, > > but please try it without that flag anyway. > > > > It's just a shot in the dark... > > > > > > > > username=xxx,password=xxx,uid=xxx,gid=x,fmask=770,dmask=770 > > > //blahblah/Data /blahblah/Data > > > > Another nicety; use this option with mount or in > > your > > fstab: > > credentials=/some/file/chown/root.root/chmod/600 > > with > > username = someuser > > password = somepassword > > inside that file. I like to put mine in > > /etc/smb_passwd and I run chown 0.0/chmod 600 > > against > > it. > > > > This lets you avoid putting the password in the > > (world-readable) fstab. Just a suggestion. > > > > > Same command we've been using for a while now (>1 > > > year)...but then > > > again, maybe one of the options could have been > > > deprecated > > > > > > Also, we installed Samba via the RPMs from > > > samba.org...but I've also > > > tried building from source (both SRPMs and plain > > > source)...neither > > > changed anything... > > > > > > Thanks again for your help Chris > > > > Don't thank me until I can confirm or deny it from a > > RH 7.3 and 8.0 box to an NT and 2000 Pro (no > > Server/Advanced) share (: > > > > /dev/idal > > > > > > > > > On Thu, 2003-01-30 at 17:45, Chris de Vidal wrote: > > > > Whoa, really strange. Might be something you're > > > > doing, but I'll post my results to you and the > > > list > > > > tomorrow and we can see if it's a consistent > > > problem > > > > with RedHat 7+ and 2000. > > > > > > > > You are using smbmount or mount smbfs in fstab, > > > > correct? > > > > > > > > Also, how did you install Samba? I got an RPM > > > from > > > > Samba.org (well, an SRPM so I could tweak the > > > > ./configure line). > > > > > > > > /dev/idal > > > > > > > > --- Joe Gerkman <[EMAIL PROTECTED]> wrote
[Samba] Re: Can't see all of the directories in a share with 2.2.7a-1& RH8...but older version/kernel can
Here's an update from the problem end :-) On Thu, 2003-01-30 at 18:56, Chris de Vidal wrote: > To the list: We've been having some off-list > conversation and I wanted to clue you in here. Our > thread might be useful for posterity's (Google's?) > sake. > > /dev/idal > > --- Joe Gerkman <[EMAIL PROTECTED]> wrote: > > We're using the following command (from a shell > > script): > > First (this isn't your fix but a nicety), it's easier > when this is in /etc/fstab instead of with a script. > It can be done automatically at boot (RedHat > recognizes smbfs types and waits til network is > started) or manually with the noauto option. Then, > you can just run > mount /blahblah/Data > > If you put your password in a credentials file (see > below), you can protect your password. > Again, not a fix for your issue but I thought you'd > like to know that. Thanks Chris, we were aware of that...but alas, this is one of those things that was set in place before I got here, and something we just left in place. Fortunately, the user account used in this case is properly sandboxed. > > mount -f -t smbfs -o > > Second, I had to look up -f. man mount: > -f Causes everything to be done except for the > actual system call; if it's not obvious, this > ``fakes'' mount-ing the file system. This option > is useful in conjunction with the -v flag to determine > what the mount command is trying to do. It can also be > used to add entries for devices that were mounted > earlier with the -n option. > > I have little confidence this will fix your problem, > but please try it without that flag anyway. > > It's just a shot in the dark... Tried it with no flags and with reduced options, e.g. mount -t smbfs -o username=xxx,password=xxx //blahblah/Data /blahblah/data No change... > > > > username=xxx,password=xxx,uid=xxx,gid=x,fmask=770,dmask=770 > > //blahblah/Data /blahblah/Data > > Another nicety; use this option with mount or in your > fstab: > credentials=/some/file/chown/root.root/chmod/600 > with > username = someuser > password = somepassword > inside that file. I like to put mine in > /etc/smb_passwd and I run chown 0.0/chmod 600 against > it. > > This lets you avoid putting the password in the > (world-readable) fstab. Just a suggestion. > > > Same command we've been using for a while now (>1 > > year)...but then > > again, maybe one of the options could have been > > deprecated > > > > Also, we installed Samba via the RPMs from > > samba.org...but I've also > > tried building from source (both SRPMs and plain > > source)...neither > > changed anything... > > > > Thanks again for your help Chris > > Don't thank me until I can confirm or deny it from a > RH 7.3 and 8.0 box to an NT and 2000 Pro (no > Server/Advanced) share (: > Let me know if you find anything new...and thanks again (everyone, especially Chris and Kurt for your suggestions and assistance...very much appreciated). -Joe > /dev/idal > > > > > On Thu, 2003-01-30 at 17:45, Chris de Vidal wrote: > > > Whoa, really strange. Might be something you're > > > doing, but I'll post my results to you and the > > list > > > tomorrow and we can see if it's a consistent > > problem > > > with RedHat 7+ and 2000. > > > > > > You are using smbmount or mount smbfs in fstab, > > > correct? > > > > > > Also, how did you install Samba? I got an RPM > > from > > > Samba.org (well, an SRPM so I could tweak the > > > ./configure line). > > > > > > /dev/idal > > > > > > --- Joe Gerkman <[EMAIL PROTECTED]> wrote: > > > > Update... > > > > > > > > See 554 files on rh8.0/2.2.7a machine, 627 on > > the > > > > rh6.2/2.0.6-9 machine > > > > (the latter being the true number). > > > > > > > > Tried copying over the same smb.conf file (which > > I > > > > thought I'd done > > > > before)...no change/luck. Also tried the same > > > > version of samba on a 7.3 > > > > as well as a 7.1 box (same smb.conf file > > too)...no > > > > luck there > > > > either...oh, all had 2.4.x kernel, well except > > for > > > > the working machine > > > > (if that matters). > > > > > > > > On Thu, 2003-01-30 at 14:05, Chris de Vidal > > wrote: > > > > > You're using smbmount, right? Sounds like > > you're > > > > > seeing only 512 files.. do ls | wc -l. 512 is > > a > > > > nice > > > > > round binary number and is probably what > > you're > > > > > seeing. > > > > > > > > > > I don't have a direct answer, but I'm under > > the > > > > > impression that there are many broken things > > in > > > > RedHat > > > > > 8.0 (RedHat 7.0 also had many broken things.. > > > > > cooincidence??). I wrote earlier this week > > about > > > > a > > > > > RedHat 8-specific problem "cannot find name > > for > > > > group > > > > > ID X". Others with RedHat 8 have shared > > > > similar > > > > > stories, and I'm having no issues with the > > same > > > > exact > > > > > version of Samba on a RedHat 7.3 box. I've > > been > > > > u
[Samba] samba3.0alpha21 PDC
Hello all, First Thank you everyone(especially the samba team) for helping to make this GREAT file/print/auth MS-RPC service. :) Environment: I've migrated my 2.2.7a PDC (clients XP & 98SE)configuration to the 3.0 alpha21 PDC and all is wonderful except for one thing. Problem: When signing in to the domain HTTPS is not allowed. I tried using gpedit.msc policy editor and received access denied using one of the Domain Admins accounts. I also tried using the Administrator account. I was able to use gpedit.msc when signing in to the local machine Administrator account but was not able to locate the key for this setting nor how to propagate to the domain policy :(. If there's any docs that anyone could refer me to resolve this please link me :) Any and all help is appreciated. TIA Jesse P.S. I've recently decided to migrate the PDC to an OpenLDAP back end but would like to resolve this first. Any tips/pointers in this regard is greatly appreciated as well. :) -- Jesse Jacobs, R.H.C.T. (a.k.a. Supa' Nube, BeeHive Freak) Ajax,ON Canada -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] How to find out, if samba has SSL/LDAP support or not ?
Hi, I'm the developer of KSambaPlugin. Is there a way to find out if samba was compiled with SSL / LDAP support or not ? I want to disable the options in the case that samba doesn't support them. Thanks, Jan Schäfer -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] help Error with Cli_spoolss_notify.c in CUPS
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 29 Jan 2003, Karl Banasky wrote: > Hello, I am getting this error when Win XP machines print to my SAMBA > server. I think it is a compile issue, if so how do I recompile or get > it in place. I used RPM to 'install' SAMBA. Anyone have any suggestions? > I am using SAMBA 2.2.6a with CUPS 1.1.8 on Caldera OpenLINUX 3.1.1 > > Error: > connect_to_client: unable to connect to SMB server on machine CFO. >Error was : SUCCESS - 0. Can smbd resolve the name CFO<0x20>? Is teh File and Printer service for MS networks installed on the client? This is all for the prnit change notify code. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+OqERIR7qMdg1EfYRAnDOAJ9IOSbyB1ipyKAKBHOJj8adiQ/34gCeNF7J 4qckSzaodwSuhaJCqZhCVOw= =en4E -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Moterboard help Please
I meant to include Off topic in the subject line. There is not list for something like this that I know of and I have been a user of this mailing list for about 2 years and figured one of you out there might have this motherboard and be able to send me the bios for it. -Original Message- From: Gabriel D. Preston [mailto:[EMAIL PROTECTED]] Sent: Friday, January 31, 2003 11:09 AM To: Elijah Savage III Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Samba] Moterboard help Please Elijah, I believe you have the wrong mail list for this type of problem, but maybe my brain just isn't working today and I'm wrong. -Gabriel Elijah Savage III wrote: >All, > >I have been terribly pleased with openbsd 3.2 I was using it as a >mail/samba server with postifx on a pentium pro 200 with 1 gig of >memory. Well I wanted to add a larger harddrive than what I have in it >now only 6.4 gig. Well the machine would not see it and for some reason >after hours and hours of trying I can't get a tekram 395UW and a 18gig >scsi to be the boot drive and having failed I was stuck with IDE. I >finally got tired of it being this way and decided to flash the >motherboard which is a Micronics Invader ATX m8s-fin motherboard. Well >dumb me I flashed it with the wrong bios. And I can't find the original >bios on the net anywhere do any of you all have this motherboard and can >send me the bios for it or possibly know where I can find it. Any of >your help would be greatly appreciated. And before I flashed it, it did >not ask me to backup the prior bios. >I would just hate to trash this setup. The machine still works but with >this current bios only the first pci slot works which means I can't use >a nic card or anything in it. > >Thank you >Elijah >http://www.digitalrage.org/ >For your technical news and HowTo's >Stop by and vote in the latest poll about >Mr. Spam King. > > > > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Moterboard help Please
Elijah, I believe you have the wrong mail list for this type of problem, but maybe my brain just isn't working today and I'm wrong. -Gabriel Elijah Savage III wrote: All, I have been terribly pleased with openbsd 3.2 I was using it as a mail/samba server with postifx on a pentium pro 200 with 1 gig of memory. Well I wanted to add a larger harddrive than what I have in it now only 6.4 gig. Well the machine would not see it and for some reason after hours and hours of trying I can't get a tekram 395UW and a 18gig scsi to be the boot drive and having failed I was stuck with IDE. I finally got tired of it being this way and decided to flash the motherboard which is a Micronics Invader ATX m8s-fin motherboard. Well dumb me I flashed it with the wrong bios. And I can't find the original bios on the net anywhere do any of you all have this motherboard and can send me the bios for it or possibly know where I can find it. Any of your help would be greatly appreciated. And before I flashed it, it did not ask me to backup the prior bios. I would just hate to trash this setup. The machine still works but with this current bios only the first pci slot works which means I can't use a nic card or anything in it. Thank you Elijah http://www.digitalrage.org/ For your technical news and HowTo's Stop by and vote in the latest poll about Mr. Spam King. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: linux server completely hangs copying files with samba
Davide Cavaleri wrote: > final experiments; > after realizing that unloading the usb-ohci module (non even the > usbcore) system was fine, i compiled the kernel without modules support > and without usb. the machine crashed and actually i was really angry, > becuase i thought i had found the problem; but finally i discovered that > if usb is not loaded the machine crashes, but if i load it and unload it > (going back to the same situation) it doesn't crash. obviously if i > disale usb from bios everything in ok. maybe is something about irq, so > if it is enabled in bios the ira (11 for me) is used. loading and > unloading the module will do something strange to the irq handles. cat > /proc/interrupts gives 0 on usb. > at this point i'm curios to find out why this happens; since i've red of > many people having this problem maybe someone (not you, as you told me) > had a similar situation. > don't know if it's relevant, but only once the keyboard was blocked, i > had to unplag and plug it back (ps/2 keyb) and it was ok, checking the > interrupts they had jumped from 1500 to about 3000 in few seconds. > going to work, nice day I forget how recent your hardware is, but have you tried booting with: lilo: linux noapic ? Buchan -- |--Another happy Mandrake Club member--| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba printing on Solaris 7
Hi all, I'm running Solaris 7 with samba 2.2.7a and would like to have samba printing in place so that PC client can print from existing print queue "its_simx_local" on solaris (created via jetadmin). The print queue is visible in Windows Explorer. Using Windows "Add Printer Wizard", I installed the HP printer onto the PC client. However, there was no output on the printer when I sent a print job from the PC client. Rather the job is stuck in the path ("/usr/spool/samba" - mode 1777) that I defined in the [printers] folder in smb.conf: woodstock:/usr/spool/samba% file * smbprn.09.EZaOOL: ascii text Here are the print related entries in smb.conf: [global] load printers = yes printcap name = /usr/local/samba/lib/printcap printing = sysv print command = /bin/lp -c -d%p %s [printers] comment = All Printers path = /usr/spool/samba browseable = yes guest ok = no writable = no printable = yes And the contents of /usr/local/samba/lib/printcap: # cat /usr/local/samba/lib/printcap its_simx_local:\ :bsdaddr=woodstock,its_simx_local,Solaris: Any quick response would be highly appreciated. Many thanks, Hong -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [found something] Problems making use of 2K PDC
On Fri, 31 Jan 2003, Andreas Hasenack wrote: > Em Fri, Jan 31, 2003 at 03:01:30PM +, John H Terpstra escreveu: > > > And, since the w2k server is on a different subnet, I don't think I can make it > > > the logon server for my clients, or can I? I mean, broadcasts mean a lot in a > > > MS network... > > > > You must use WINS to avoid broadcast traffic. With WINS the important UDP > > traffic will be unicast. WINS can reduce UDP broadcast traffic by up to > > 95%. Using WINS, you clients will readilly locate the logon server. I > > would recommend not using file and print shares over the WAN link though. > > But how does the windows client find out who the domain controller is for > a specific domain? Does WINS advertise that info too? > When I make a windows client join a domain, it never asks me for the name > of the domain controller... Just the name of the domain. Firstly, when you use WINS you configure one machine as your WINS server. Then ALL SMB clients (Samba as well as MS Windows) get configured (part of the TCP/IP stack configuration) to use that WINS server. Now when the client starts up it registers with the WINS server. As it starts it's networking services it registers various name types with the WINS server also. The Domain Controllers that are providing the NETLOGON services do this also. The MS Windows client will then ask the WINS server for the IP address of machines that have registered for their domain name (let's call it MYDOMTHING) MYDOMTHING<1c> - the <1c> type means it runs the netlogon service. The client then connects to one of the addresses it obtained from thr WINS server to commence the logon proceesses. WINS is you best friend - DNS does NOT allow name type lookups that are particular to NetBIOS networking over TCP/IP. Please read the documentation - all of this is explained in the Entire-HOWTO-Collection for which there is a link on the SWAT home page. > > > Should I then just make the clients authenticate against the remote w2k machine > > > anyway? I know, in both scenarios, the w2k server will be contacted anyway, >either > > > by the samba server or by the linux client. > > > > Correct. That's my recommendation. > > What about using security = server, point the password server at the w2k > machine and set domain logons = yes? Should this work? Yes, it will work. However, be aware that SERVER mode security does a few very nasty things. Because the machine is NOT a trusted domain member it needs to step around some old bugs. SERVER mode security causes samba to send a bogus username/password pair before trying the real username/password pair. It needs to do this so that an old bug that was present in some MS Windows systems does not inadvertently allow a user with a wrong set of credentials (username/password pair) to gain system access. If we did not do this then it could be used as a potential root exploit So what does this mean? Well, if your Win2K adminsitrator has set a lockout threashold on the number of bad logins for a user, then this may be triggered, Alternatively, the Event log on the Win2K machine will record errors for each authentication attempt. The undesirability applies only to use of MS WIndows NT4/2K authentication servers, with samba<->samba authentication this poses no issues and is how we can achieve a BDC type role. My clear preference is to make the samba server a full Win2K domain member. Of course the Win2K needs to be running either in NT4 domain security mode _or_ Active Directory in mixed mode. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba drive acces through VB6
have you mapped the drives or does your script contain user and pass? or do you have security = share ? [EMAIL PROTECTED] writes: >** High Priority ** > >I have a PC running Win XP. I can map to a samba folder on an AIX Unix >server. I can copy files to this folder update these files all through >Win XP. My problem comes when I try to access these same files using >Visual Basic 6. The dir() command in VB6 does not see the files or the >folder. I have tried the same on a Win 95 PC with the same results. > >Any suggestions? > >Thanks, >John Seiler Kyle Loree Rendek Communications [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Use client driver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 30 Jan 2003, Darin Bawden wrote: > Good day everyone, Just a quick question. When using Samba 2.2.7a and > Cups 1.17 or 1.18, is it good or bad to use "Use client driver" as a > share setting on the Printers share? I used it with LPD, but I'm not > real sure it's necessary with cups. "use client driver" should only be used when you want to share some printer drivers using RPC to Windows NT+ clients and allow other printers to have clients install the driver locally. It is a horrible (but apparently necessary) hack. Generally only use it on printers that really needit and never use when trying to serve printer drivers to Windows NT+ clients. It has no effect on Windows 9x clients. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+Op4fIR7qMdg1EfYRAnqSAJ952CP+YFWxKy43MWDM6TjWljLdAwCcDiww KwLAY+dptQ/Ha0bJ4PaqDqc= =JncC -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Moterboard help Please
All, I have been terribly pleased with openbsd 3.2 I was using it as a mail/samba server with postifx on a pentium pro 200 with 1 gig of memory. Well I wanted to add a larger harddrive than what I have in it now only 6.4 gig. Well the machine would not see it and for some reason after hours and hours of trying I can't get a tekram 395UW and a 18gig scsi to be the boot drive and having failed I was stuck with IDE. I finally got tired of it being this way and decided to flash the motherboard which is a Micronics Invader ATX m8s-fin motherboard. Well dumb me I flashed it with the wrong bios. And I can't find the original bios on the net anywhere do any of you all have this motherboard and can send me the bios for it or possibly know where I can find it. Any of your help would be greatly appreciated. And before I flashed it, it did not ask me to backup the prior bios. I would just hate to trash this setup. The machine still works but with this current bios only the first pci slot works which means I can't use a nic card or anything in it. Thank you Elijah http://www.digitalrage.org/ For your technical news and HowTo's Stop by and vote in the latest poll about Mr. Spam King. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] PAM Module for SMB-LDAP
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 30 Jan 2003, Buchan Milne wrote: > "This module authenticates a local smbpasswd user database. If you require > support for authenticating against a remote SMB server, or if you're > concerned about the presence of suid root binaries on your system, it is > recommended that you use one of the other two following modules" > > I have already determined from Andrew Bartlett that there is ambiguity > in 'smbpasswd user database', as it should be 'samba passdb backend', to > be more clear that LDAP etc is supported in 2.2.7a on the DC. Yup. It should support changes for sambaAccounts if it was compiled with --with-ldapsam. If Bradley is wrong on this one, I'll be surprised. I'm working on theory here because I haven't tested it lately. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+Op04IR7qMdg1EfYRAiJDAKCqlnyJOUQeK/vD2slUfcnnfzBmeACgmlCr B4whlmshx3idhNYjtMIDP0E= =0Nex -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba drive acces through VB6
** High Priority ** I have a PC running Win XP. I can map to a samba folder on an AIX Unix server. I can copy files to this folder update these files all through Win XP. My problem comes when I try to access these same files using Visual Basic 6. The dir() command in VB6 does not see the files or the folder. I have tried the same on a Win 95 PC with the same results. Any suggestions? Thanks, John Seiler -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help
Hi, Miles, Actually on HP-UX, you will need to add the word 'debug' at the end of each of the lines in you /etc/pam.conf file, to enable more debugging to go into the /var/adm/syslog/syslog.log file. One thing that I have seen something like this happen on is if the /etc/shells file is corrupt, or if the shell that is defined for the user (since they don't have a /etc/passwd entry, this would be whatever you put in template in the smb.conf) does not exactly match one of the lines in /etc/shells, or the defaults, if this file does not exist. The defaults for 11.0 are: /sbin/sh /usr/bin/sh /usr/bin/rsh /usr/bin/ksh /usr/bin/rksh /usr/bin/csh /usr/bin/keysh Hope this helps, Don > -Original Message- > From: John H Terpstra [mailto:[EMAIL PROTECTED]] > Sent: Friday, January 31, 2003 1:36 > To: Miles Roper > Cc: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'; Esh, > Andrew; Ronan Waide; STEFFENS,MICHAEL (HP-Germany,ex1); 'MCCALL,DON > (HP-USA,ex1)'; 'Richard Sharpe' > Subject: RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, Please Help > > > On Fri, 31 Jan 2003, Miles Roper wrote: > > > Hi Everyone, > > > > I'm forgetting about the password one at the moment, thanks > for all your > > input :o) > > > > I still don't have a clue how to solve my main problem. > I'm assuming that > > its not actually winbind related now, as I've recently > tried pam_smb and get > > the same basic problem. > > > > Basically, when I log into the UNIX box, the > username/password of a NT user > > is being authenticated, but doesn't actually log in. It > doesn't get past > > the password line. I know it accepts the password. Its > almost as if it > > can't find the shell. But the template variable is set > within the smb.conf > > file. Permissions are fine. I have exactly the same > problem with the > > pam_smb module. > > So what does PAM report into your /var/log files? > > Have you tried adding to each line in your /etc/pam.d/login > (after the .so > file name) the word 'audit' - this will increase the volume > of debugging > info spit out into /var/log/messages, or wherever PAM send > this on your > distro. > > - John T. > > > > > If there is any further information I can send let me know. > > > > Ideas? > > > > Thanks > > > > Miles > > > > > > -Original Message- > > From: MCCALL,DON (HP-USA,ex1) [mailto:[EMAIL PROTECTED]] > > Sent: Friday, 31 January 2003 07:06 a.m. > > To: STEFFENS,MICHAEL (HP-Germany,ex1); Ronan Waide > > Cc: '[EMAIL PROTECTED]'; Esh, Andrew; Miles Roper; > > '[EMAIL PROTECTED]'; 'Richard Sharpe' > > Subject: RE: [Samba] RE: Winbind on HPUX11, Totally Stuck, > Please Help > > > > > > Hi Everyone, > > This whole problem with the password command not working > when winbind > > is included as a method in the nsswitch.conf can probably > be worked around > > by simply using the -r files (or -r nis or -r nisplus) > switch. Take a look > > at the man page for passwd on HP-UX 11.x and see if this > won't help you > > out. > > Hope this helps, > > Don > > > > > -Original Message- > > > From: Michael Steffens [mailto:[EMAIL PROTECTED]] > > > Sent: Tuesday, January 28, 2003 11:52 > > > To: Ronan Waide > > > Cc: '[EMAIL PROTECTED]'; Esh, Andrew; Miles Roper; > > > '[EMAIL PROTECTED]'; 'Richard Sharpe' > > > Subject: Re: [Samba] RE: Winbind on HPUX11, Totally > Stuck, Please Help > > > > > > > > > Ronan Waide wrote: > > > > On January 28, [EMAIL PROTECTED] said: > > > > > > > >>I don't have HPUX, so I don't know what to suggest for > > > that. I just know > > > >>getent won't work without winbindd in nsswitch.conf on Linux. > > > > > > > > > > > > I think the point that was being made is that NSS support > > > on HPUX only > > > > supports a few known types, of which one is LDAP. The > discussion was > > > > basically about faking out the system so that what it > thinks is LDAP > > > > is actually winbind. > > > > > > Yep. It's a HP-UX specific workaround. Please ignore it > > > everywhere else. > > > > > > Michael > > > > > > > > > > -- > John H Terpstra > Email: [EMAIL PROTECTED] > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba File Sharing- Some Doubts?
Thank you very much John, your response really cleared many of my doubts. But I am still unable to share my files using Samba. I configured samba on my Linux box, but the linux system is not visible from the windows machine in the particular domain I want it to appear. I donot know where I made mistake. I am sending u the smb.conf below, please tell me how to get it work. "My smb.conf FILE" * [global] log file = /var/log/samba/%m.log smb passwd file = /etc/samba/smbpasswd load printers = yes socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 obey pam restrictions = yes encrypt passwords = yes dns proxy = no server string = Pradeep's Samba writeable = yes printing = lprng default = printers unix password sync = Yes workgroup = AMERICA ### This is my Windows Domain security = user preferred master = no max log size = 0 pam password change = yes [Linux Pradeep] path = /home/pradeep comment = Pradeep Home Dir Samba Share valid users = %S public = yes create mode = 0664 directory mode = 0775 # This one is useful for people to share files [tmp] comment = Temporary file space path = /tmp read only = no public = yes *** Thanks, Pradeep -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 30, 2003 3:06 PM To: Sadanapalli, Pradeep Kumar (MED, TCS) Subject: Re: [Samba] Samba File Sharing- Some Doubts? >My issues are : Before addressing the specifics of your questions: you need to decide what approach to security you want to use. This is one of the most complex parts of Samba, primarily because Samba acts as a bridge between two very dissimilar systems. Samba provides a wide variety of choices, because there is no "one size fits all" solution that will satisfy everyone. >1. Do I need to join the domain for sharing my files with them? No. The primary reason for having a Samba server join an Windows domain is to allow the Windows domain controller to do user authentication, rather than maintaining a separate password file on the Samba server. It's your choice. >2. Do I need to have a login account for my linux machine on windows >domain? While this is not normally visible to users, this is just how domain membership works. The domain member computer has a special "machine account" on the domain controller - during authentication, the domain member system presents it's account password to prove to the domain controller that it really is the computer that it's name suggests that it is. This is not normally visible when using the Microsoft domain tools, but it IS how it works underneath. When using Samba as a domain controller, the underlying mechanisms of implementing domain membership are more visible, which is why the "machine account" stuff appears in the Samba documentation. >3. If a windows domain member needs to view my files, does he/she need >to have > account on my machine or his domain account is enough? You have some more choices here. You need to decide what Unix userid will be used for accessing files on the Samba server. If you want all connections to use the same Unix userid, then you should use the "guest" facility of Samba to specify the account that will be used by all windows users connecting to Samba. If you want to use different Unix userids for different Windows users, then you need to define how the accounts map to each other. The default is to map accounts by name: in other words, you need a Unix account to match each Windows account name. When the Windows user connects, all operations done on his behalf will be done using the matching Unix account. Note that this is independent of how you've configured passwords/authentication. You can have Samba automatically create a unix account on the fly for each Windows account that successfully authenticates by using the "add user script" facility. Alternatively, you can explicitly define a mapping of Windows account names to Unix account names using the samba "username map" facility. On systems that support it, you can use winbindd (which isn't strictly part of Samba) to map Windows domain accounts and groups onto your Unix/Linux system. This approach tightly binds your Unix/Samba environment to a Windows domain. >4. Who will authenticate the users for file sharing, my linux box or >windows domain controller? If so, how should > I configure samba? Again, you can choose to configure it either way. If you have your linux system join the domain (or use the domain controller as a password server), then it will be the windows domain controller doing authentication. If not, it will be the linux system (probably). There are other possible authentication approaches involving LDAP et. al. >I
[Samba] Re: Can't see all of the directories in a share with 2.2.7a-1& RH8...but older version/kernel can
Update: >From a RedHat 8 box with Samba 2.2.7a from a Samba.org RPM, I could see 1000 directories on a Windows 2000 Pro share. >From a RedHat 7.3 box with Samba 2.2.7a from a Samba.org SRPM tweaked to include ACL support, I could see 1000 directories on a Windows 2000 Pro share. I created them with a for loop from my smbmount, not from within Windows, in case it matters. Someone shared that the permissions were possibly incorrect, but that would only seem to apply to a Samba server, not smbmount. And you're not using a umask, so the default umask is the one from the system, which is 0022, making permissions for folders and files 755. The only thing I can offer now is possibly ensuring that the username you access from the 6.2 box is the same you use on the 7.x+ boxen. If the usernames were different, perhaps permissions on Windows hide those directories from view (but obviously not from cd). Oh, and check the DOS permissions on those directories.. make sure they're not hidden. I don't know if smbmount obeys that, but it's worth a shot. /dev/idal --- Chris de Vidal <[EMAIL PROTECTED]> wrote: > To the list: We've been having some off-list > conversation and I wanted to clue you in here. Our > thread might be useful for posterity's (Google's?) > sake. > > /dev/idal > > --- Joe Gerkman <[EMAIL PROTECTED]> wrote: > > We're using the following command (from a shell > > script): > > First (this isn't your fix but a nicety), it's > easier > when this is in /etc/fstab instead of with a script. > > It can be done automatically at boot (RedHat > recognizes smbfs types and waits til network is > started) or manually with the noauto option. Then, > you can just run > mount /blahblah/Data > > If you put your password in a credentials file (see > below), you can protect your password. > > Again, not a fix for your issue but I thought you'd > like to know that. > > > mount -f -t smbfs -o > > Second, I had to look up -f. man mount: > -f Causes everything to be done except for the > actual system call; if it's not obvious, this > ``fakes'' mount-ing the file system. This option > is useful in conjunction with the -v flag to > determine > what the mount command is trying to do. It can also > be > used to add entries for devices that were mounted > earlier with the -n option. > > I have little confidence this will fix your problem, > but please try it without that flag anyway. > > It's just a shot in the dark... > > > > username=xxx,password=xxx,uid=xxx,gid=x,fmask=770,dmask=770 > > //blahblah/Data /blahblah/Data > > Another nicety; use this option with mount or in > your > fstab: > credentials=/some/file/chown/root.root/chmod/600 > with > username = someuser > password = somepassword > inside that file. I like to put mine in > /etc/smb_passwd and I run chown 0.0/chmod 600 > against > it. > > This lets you avoid putting the password in the > (world-readable) fstab. Just a suggestion. > > > Same command we've been using for a while now (>1 > > year)...but then > > again, maybe one of the options could have been > > deprecated > > > > Also, we installed Samba via the RPMs from > > samba.org...but I've also > > tried building from source (both SRPMs and plain > > source)...neither > > changed anything... > > > > Thanks again for your help Chris > > Don't thank me until I can confirm or deny it from a > RH 7.3 and 8.0 box to an NT and 2000 Pro (no > Server/Advanced) share (: > > /dev/idal > > > > > On Thu, 2003-01-30 at 17:45, Chris de Vidal wrote: > > > Whoa, really strange. Might be something you're > > > doing, but I'll post my results to you and the > > list > > > tomorrow and we can see if it's a consistent > > problem > > > with RedHat 7+ and 2000. > > > > > > You are using smbmount or mount smbfs in fstab, > > > correct? > > > > > > Also, how did you install Samba? I got an RPM > > from > > > Samba.org (well, an SRPM so I could tweak the > > > ./configure line). > > > > > > /dev/idal > > > > > > --- Joe Gerkman <[EMAIL PROTECTED]> wrote: > > > > Update... > > > > > > > > See 554 files on rh8.0/2.2.7a machine, 627 on > > the > > > > rh6.2/2.0.6-9 machine > > > > (the latter being the true number). > > > > > > > > Tried copying over the same smb.conf file > (which > > I > > > > thought I'd done > > > > before)...no change/luck. Also tried the same > > > > version of samba on a 7.3 > > > > as well as a 7.1 box (same smb.conf file > > too)...no > > > > luck there > > > > either...oh, all had 2.4.x kernel, well except > > for > > > > the working machine > > > > (if that matters). > > > > > > > > On Thu, 2003-01-30 at 14:05, Chris de Vidal > > wrote: > > > > > You're using smbmount, right? Sounds like > > you're > > > > > seeing only 512 files.. do ls | wc -l. 512 > is > > a > > > > nice > > > > > round binary number and is probably what > > you're > > > > > seeing. > > > > > > > > > > I don't have a direct answer, but I'm under > > the > > > > >
Re: [Samba] [found something] Problems making use of 2K PDC
Em Fri, Jan 31, 2003 at 03:01:30PM +, John H Terpstra escreveu: > > And, since the w2k server is on a different subnet, I don't think I can make it > > the logon server for my clients, or can I? I mean, broadcasts mean a lot in a > > MS network... > > You must use WINS to avoid broadcast traffic. With WINS the important UDP > traffic will be unicast. WINS can reduce UDP broadcast traffic by up to > 95%. Using WINS, you clients will readilly locate the logon server. I > would recommend not using file and print shares over the WAN link though. But how does the windows client find out who the domain controller is for a specific domain? Does WINS advertise that info too? When I make a windows client join a domain, it never asks me for the name of the domain controller... Just the name of the domain. > > Should I then just make the clients authenticate against the remote w2k machine > > anyway? I know, in both scenarios, the w2k server will be contacted anyway, either > > by the samba server or by the linux client. > > Correct. That's my recommendation. What about using security = server, point the password server at the w2k machine and set domain logons = yes? Should this work? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] passwd: Authentication token manipulation error
Hi, I am trying to add a new user to my RedHat 8.0 System running samba 2.2.7-1a This is the error I get. --- [root@localhost named]# useradd -g users mandy [root@localhost named]# passwd mandy Changing password for user mandy. New password: BAD PASSWORD: it is too short Retype new password: Failed to find entry for user mandy. passwd: Authentication token manipulation error - This error is only when I am creating a new user. Password sync happens if there is an existing user. if after using useradd -g users mandy I do a smbpassword -a mandy then everything is fine What could be the problem... Regards, Keith "The linuX Files -- The Source is Out There." -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [found something] Problems making use of 2K PDC
On Fri, 31 Jan 2003, Andreas Hasenack wrote: > Em Thu, Jan 30, 2003 at 10:14:47PM +, John H Terpstra escreveu: > > If your Win2K DC is your authentication server for your domain, then DO > > NOT set "domain logons = Yes" on samba - it can cripple your Win2K DC! > > > > Instead, in your smb.conf [globals] you want: > > security = domain > > password server = * > > > > Then join the domain by: > > smbpasswd -r 'PDC_name' -j 'Domain_Name' > > > > This way your MS Windows clients should be domain members and will log > > onto the Win2K DC and will be able to seemlessly access your samba server. > > The win2k machine is on the other side of a WAN link, a different > subnet, but the windows clients will be accessing shares on the local samba server. > Users will be created and managed in the win2k machine, that's why I need the > samba server to check passwords against the remote win2k machine. I would try to NOT use Samba for logon services atthei time. There are not big issues with doing this over a WAN link so long as there are not too many clients _and_ you have sufficient bandwidth. > > And, since the w2k server is on a different subnet, I don't think I can make it > the logon server for my clients, or can I? I mean, broadcasts mean a lot in a > MS network... You must use WINS to avoid broadcast traffic. With WINS the important UDP traffic will be unicast. WINS can reduce UDP broadcast traffic by up to 95%. Using WINS, you clients will readilly locate the logon server. I would recommend not using file and print shares over the WAN link though. > > Should I then just make the clients authenticate against the remote w2k machine > anyway? I know, in both scenarios, the w2k server will be contacted anyway, either > by the samba server or by the linux client. Correct. That's my recommendation. - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] So SAMBA no longer supports print driver downloads
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 29 Jan 2003, Robert M. Martel wrote: > So SAMBA no longer supports print driver downloads. That is about the > only conclusion that I can come to at this point. I've not been able to > get Windows printer driver downloads to work right since Samba 2.2.2. > > No one but printer admins displays the correct settings for printers, > everyone else gets the original printer defaults that they cannot > change. Did you initialize the driver bound to the printer? > Does anyone *REALLY* have downloading printer drivers to Windows 2000 > clients working properly? Has anyone documented the steps as the ones > in the available documentation DON'T work? Works fine here (on a daily basis). Not sure what to tell you with more information. If you want to tell me exactly how you do it, I'll be glad to review the process. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+Oo8nIR7qMdg1EfYRArmwAKDZKX7DRABQiQ62+Jz8i7sv0UJ7GgCaAoFr sFGMdunZezKx8fBLhCCWoUQ= =vovw -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] SAMBA ===== I have problem.
> > I have a WinNT Domain, a Samba Server and some users WinNT. > > > > I need to available a directory structure in the Samba Server. > > > > I need to know if I really need to have a Unix user for > each WinNT user that > > access the structure directory in the Samba Server? Look in the docs for winbind. Winbind allows you to have windows domain users on the unix system without creating "real" unix accounts. In addition to the windows domain users being able to access files that are globally readable on the unix system, you can set user/group ownership of the files to the windows domain users and restrict permissions appropriately. ~ Daniel --- This message is the property of Time Inc. or its affiliates. It may be legally privileged and/or confidential and is intended only for the use of the addressee(s). No addressee should forward, print, copy, or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as a recipient. If the reader of this message is not the intended recipient, you are hereby notified that any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is strictly prohibited. If you have received this communication in error, please immediately notify the sender and delete this message. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba PDC does not properly synchronise registry
Hello, I have a big problem with our Samba Primary Domain Controller. It synchronises user names and passwords without any problems. But there are some problems with the windows registry on the win2000 clients, namely some programs cannot access the registry. What can I do? Best regards Tobias -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Dumb ? question abount Name Resolution on a full SambaDomain
I don't know why the Samba documentation suggests not using Wins Support. It is by far a more reliable mechanism that broadcasts for Windows networks to find hosts, and is relatively painless to set up. You only need 1 computer with the Wins support on, the others would all have a Wins Server = Ip address of the computer with Wins Support. On Fri, 31 Jan 2003, Pierre Lebrun wrote: I wonder how to configure the name resolution on the Windows network. I am puzzled by the "Wins Support" section of the smb.conf man page: " You should not set this to yes unless you have a multi-subnetted network and you wish a particular nmbd to be your WINS server " Does that mean that on my subnet, broadcast is as performant as direct acces to the Name Server, even if Samba is the PDC and WINS Server ? If the use of a name server is better, what should I use: DNS, WINS, both ? Thanks for your comments. Pierre -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] WinXP Printing Issue
Greetings! I'm running Samba 2.2.5 on HP-UX 10.20. I've recently started adding WinXP clients to my network. Here's my issue: I installed a WinXP machine on the network. I was able to add a bunch of samba-networked printers to the Xp machine. I recently added 2 new printers to the network. I added the printer names to my samba "printcap" file. I'm able to add these printers to any Win98, 95 machines. But my WinXP machine doesn't see them. Even if I don't "browse" for it, and just type it in manually "\\Server\printer" it errors: "Windows cannot connect to the printer. Either the printer name was typed incorrectly, or the specified printer has lost its connection to the server." I even removed a printer from my network, removed its printer name from the "printcap" file.This printer STILL shows up in WinXP. It even lets me install it. Is there some sort of "Cache" or something that stores this information on WinXP machines? Does anyone have any ideas? It sure would be "Handy" to be able to add printer to my network... Thanks! Ron --- Ron Bombard, Network Administrator Meddle not in the affairs of dragons... for you are crunchy, and taste like chicken. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win98 clients accessing Samba file server.
The home directory in win98 should be taken care of by the 'home\\server\dir\dir ' parameter in the [global] section, and another section called [homes] where you put the comment, browsable, readonly, etc.. Browsing the server using win98 should show you a dir called 'homes' that gives you access to the home dir of the username you are logged in with. I use this for a mixed win98/win2k/winxp network without any problems. Bart. ---Original Message--- From: Bill Merry Date: 29 ianuarie 2003 08:54:51 To: [EMAIL PROTECTED] Subject: [Samba] Win98 clients accessing Samba file server. HI All I'm in the process of setting up my first Linux box at work, a basic file server for all 20+ Win clients (I'm sick of paying M$ CAL) all have a 'home' directory and all share a 'shared' directory. What my problem is, everything is working OK with WinXP/2000 I can see the shared directory and our own home directory on the Samba box. With Win98 I can only see and access the shared directory. I can see and access the home directory only if I set up a 'share' for them and give the directory read/write access for everyone, not what I really desire. I have gone though all the doc's that I can find and I can't find any answers. As it's working for the WinXP/2000 I figured it probably a Win98 problem? but they are all set up according the HOW TO from Samba, as far as I can tell. Using RH8 & Samba 2.2.7a, have WinNT4 server as PDC and the network is purely TCP/IP. All and any help will be greatly appreciated. This an entry from a client log Denied connection from 192.168.0.44 (192.168.0.44) [2003/01/29 14:42:38, 0] rpc_client/cli_netlogon.c:cli_net_sam_logon_internal(406) cli_net_sam_logon_internal: NT_STATUS_WRONG_PASSWORD [2003/01/29 14:42:38, 0] smbd/password.c:domain_client_validate(1619) domain_client_validate: unable to validate password for user DIMI in domain MELB to Domain controller *. Error was NT_STATUS_WRONG_PASSWORD. My smb.conf # Samba config file created using SWAT # from samba.melb (127.0.0.1) # Date: 2003/01/29 09:51:17 # Global parameters [global] workgroup = MELB server string = Samba Server security = DOMAIN encrypt passwords = Yes password server = * log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY SO_RCVBUF92 SO_SNDBUF92 dns proxy = No username map = /system/samba/username_map [homes] comment = Home Directories read only = No # guest ok = Yes browseable = No valid users = %S create mode = Yes directort mode = 775 [Shared] comment = Everybody's S:\ Drive path = /home/Shared read only = No guest ok = Yes Bill -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Windows access problems
Can you send smb.conf please ? Pierre Dan Perik wrote: Hello, I had the pleasure of installing a new Linux(RH8.0)/Samba(2.2.7a) server (as a PDC) at one of our locations this week. They previously were accessing a shared drive from a Win2k Pro. machine. The migration did not go very smooth. Most things have been resolved, but we have some strange issues that are still causing problems, which I was hoping someone out there would have some insight on. 1. A day or two after the server was installed, one of the 98 machines started locking up when opening files, or when left idle for a long period of time. (I know this could just be an instability of Windows 98, but being that it started just after the new server installation is peculiar). 2. A different 98 machine can't open a particular Access 97 database. It can open other Access 97 files, but on this particular one, it pretty much hangs the machine. This same Access 97 database can be opened just fine from another machine (a Win 95 machine in particular). I have veto oplocks files = /*.mbd/*.ldb/*.dbf/*.idx/*.cdx/ (I also included their upper case variants for good measure.) in the smb.conf file to avoid the oplock problems. The credibility of the new server (and Linux/Samba) and myself are not faring well in the minds of these pleasant users, so help would be very much appreciated. Thank you, Dan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Dumb ? question abount Name Resolution on a full Samba Domain
I wonder how to configure the name resolution on the Windows network. I am puzzled by the "Wins Support" section of the smb.conf man page: " You should not set this to yes unless you have a multi-subnetted network and you wish a particular nmbd to be your WINS server " Does that mean that on my subnet, broadcast is as performant as direct acces to the Name Server, even if Samba is the PDC and WINS Server ? If the use of a name server is better, what should I use: DNS, WINS, both ? Thanks for your comments. Pierre -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: linux server completely hangs copying files with samba
final experiments; after realizing that unloading the usb-ohci module (non even the usbcore) system was fine, i compiled the kernel without modules support and without usb. the machine crashed and actually i was really angry, becuase i thought i had found the problem; but finally i discovered that if usb is not loaded the machine crashes, but if i load it and unload it (going back to the same situation) it doesn't crash. obviously if i disale usb from bios everything in ok. maybe is something about irq, so if it is enabled in bios the ira (11 for me) is used. loading and unloading the module will do something strange to the irq handles. cat /proc/interrupts gives 0 on usb. at this point i'm curios to find out why this happens; since i've red of many people having this problem maybe someone (not you, as you told me) had a similar situation. don't know if it's relevant, but only once the keyboard was blocked, i had to unplag and plug it back (ps/2 keyb) and it was ok, checking the interrupts they had jumped from 1500 to about 3000 in few seconds. going to work, nice day david -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba.src.rpm(RedHat site) VS samba.src.rpm(Samba site)
Hi, I have been checking the samba site and found a src rpm for RedHat 8.0. (2.2.7) After checking the RedHat 8.0 updates site I found that they had a src rpm for samba.(2.2.7) After looking at the spec files of both, I found that pam_smbpass was hashed in RedHat and unhased in the one I found at the samba site. I need this for the smbpassword / passwd sync Why would RedHat do this? Also when I unhased the lines related to pam_smbpass I found that the RedHat src rpm gave some build errors. Samba's src rpm didnt give any errors. Any comments on the two src rpms. Which one should I go in for. I am using RedHat 8.0 as my OS. Regards, Keith "The linuX Files -- The Source is Out There." -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] [found something] Problems making use of 2K PDC
Em Thu, Jan 30, 2003 at 10:14:47PM +, John H Terpstra escreveu: > If your Win2K DC is your authentication server for your domain, then DO > NOT set "domain logons = Yes" on samba - it can cripple your Win2K DC! > > Instead, in your smb.conf [globals] you want: > security = domain > password server = * > > Then join the domain by: > smbpasswd -r 'PDC_name' -j 'Domain_Name' > > This way your MS Windows clients should be domain members and will log > onto the Win2K DC and will be able to seemlessly access your samba server. The win2k machine is on the other side of a WAN link, a different subnet, but the windows clients will be accessing shares on the local samba server. Users will be created and managed in the win2k machine, that's why I need the samba server to check passwords against the remote win2k machine. And, since the w2k server is on a different subnet, I don't think I can make it the logon server for my clients, or can I? I mean, broadcasts mean a lot in a MS network... Should I then just make the clients authenticate against the remote w2k machine anyway? I know, in both scenarios, the w2k server will be contacted anyway, either by the samba server or by the linux client. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Auth PPTP X SAMBA
On Fri, 2003-01-31 at 00:17, EU wrote: > Good Morning, > > My doubt and the following one: I have a server with SuSE 8,0 using > VPN PPTP, would like to know as I can make with that the users if > Authentication for the samba. It's been on my todo list for a while - in particular to allow a Samba member server to do MSCHAPv2 authentication against a NT4 or AD domain. Unfortunately I don't know of any patches at present (MSCHAPv1 is possible with current infrastructure) - and I havn't had a chance to make the mods to Samba needed for the MSCHAPv2 part. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Mandrake 9.0: rpcclient problem exporting printers tosamba for windows
> Date: Thu, 30 Jan 2003 17:00:21 -0600 > From: David Woodyard <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subject: [Samba] > Mandrake 9.0: rpcclient problem exporting printers to samba for windows > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; > charset="us-ascii" > MIME-Version: 1.0 > Content-Transfer-Encoding: 7bit > Precedence: list > Reply-To: [EMAIL PROTECTED] > Message: 2 > > I am new to CUPS, after working for 4 days to get printing from WinNT to > Mandrake 9.0, I give up. Here is the problem: > the /etc/samba/smb.conf is setup with [printers] and [print$]. I copy the > postscript drivers from adobe. I then tried to export a printer to samba with > the following command > cupsaddsmb -v -U dwoody canon > > It did all of the commands successfully except for the last one. which was: > rpcclient localhost -N -Udwoody%password -c 'setdriver canon canon' > > It failed with NT_STATUS_UNSUCCESSFUL. > I ran the same rpcclient standalone with debug and I got several error > messages. They are > 1) connection refused on localhost:445 (it then used port 139 - should it?) > 2) WERR_ACCESS_DENIED (this was near the end of the output) > 3) NT_STATUS_UNSUCCESSFUL > > I have not been able to fix the first two errors. BTW, the drive shares are > working correctly. 1)Is the user dwoody in the list of "printer admin"s 2)Does the user dwoody have write access to the print$ share 3)Does the user dwoody have write access to the directories in the print$ share (ie /var/lib/samba/printers/*) If in doubt, please send the entire defintions of your print$ and printers shares, and the following output: $ grep print /etc/samba/smb.conf|egrep -v [\;\#] BTW, using the adobe postscript drivers is really only recommended for postscript printers, you should upload the windows native drivers from a windows machine if you have non-postscript printers. But, the same issues would apply. Buchan -- |--Another happy Mandrake Club member--| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba