[Samba] Not able to login to Samba PDC.
Hello All, I have put this in my smb.conf file [netlogon] comment = Network Logon Service path = /usr/local/samba/lib/netlogon writable = yes As the path was default, and I was getting this in my log file. [2003/02/01 13:18:51, 0] smbd/service.c:make_connection(614) iwave-123 (192.168.2.157) Can't change directory to /usr/local/samba/profiles (No such file or directory) So I created the directory /usr/local/samba/profiles, but when I try to logon to my Samba PDC these is the error that is being logged. [2003/02/01 13:53:08, 0] smbd/service.c:make_connection(252) iwave-123 (192.168.2.157) couldn't find service profiles Any help on this highly appreciated. TIA Manjunath H N DISCLAIMER: This e-mail and any attachment (s) is for authorised use by the intended recipient (s) only. It may contain proprietary material, confidential information and/or be subject to the legal privilege of iWave Systems Technologies Private Limited. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from retaining, using, copying, alerting or disclosing the content of this message. Thank you for your co-operation. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] passwd: Authentication token manipulation error
Hi Can anyone tell me what this error is. Thanks. Regards, Keith The linuX Files -- The Source is Out There. - Original Message - From: Keith Fernandez [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, January 31, 2003 8:34 PM Subject: [Samba] passwd: Authentication token manipulation error Hi, I am trying to add a new user to my RedHat 8.0 System running samba 2.2.7-1a This is the error I get. --- [root@localhost named]# useradd -g users mandy [root@localhost named]# passwd mandy Changing password for user mandy. New password: BAD PASSWORD: it is too short Retype new password: Failed to find entry for user mandy. passwd: Authentication token manipulation error - This error is only when I am creating a new user. Password sync happens if there is an existing user. if after using useradd -g users mandy I do a smbpassword -a mandy then everything is fine What could be the problem... Regards, Keith The linuX Files -- The Source is Out There. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winxppro/nt4 cant find my samba pdc
hi all i tryed to add winxppro/nt4 machines to my samba domain pinguin.local dns is configured and wins lookup works authentification per user works fine but when i try to join my win boxes to the domain pinguin.local the nt4 box cant find the domaincontroller and winxp starts to search for the dns service record of the domaincrontroller. hans-peter #rh 80, samba-2.2.5 #/etc/samba/smb.conf [global] workgroup = PINGUIN.LOCAL server string = Samba Server printcap name = /etc/printcap printing = lprng log file = /var/log/samba/%m.log max log size = 0 security = DOMAIN encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd unix password sync = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* pam password change = yes username map = /etc/samba/smbusers obey pam restrictions = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master = yes os level = 64 domain master = yes preferred master = yes domain logons = yes wins support = yes wins support = yes dns proxy = no add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u [homes] comment = Home Directories browseable = no writable = yes valid users = %S create mode = 0664 directory mode = 0775 [netlogon] comment = Network Logon Service path = /export/smb/netlogon guest ok = yes writable = no share modes = no [files] comment = test share path = /export/smb/files public = yes writeable = yes #END /etc/samba/smb.conf #named START $TTL 86400 @ IN SOA samba01.pinguin.local. office.pinguin.local. ( 2003013101 ; serial 28800 ; refresh 7200 ; retry 604800 ; expire 86400 ; ttl ) NS samba01 MX 10 samba01 samba01 A 192.168.0.4 ;the samba server test01 A 192.168.0.101 ;the nt4 client #named END -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] So SAMBA no longer supports print driver downloads
Hi, could it be a problem with the operating system, samba runs on? On Solaris 2.8 I have the same problems, decribed above, but not on linux (both running samba 2.2.7a and cups-1.1.18). Another difference is, that our solaris samba printer server is a member server of a NT4.0 controlled domain. The linux samba printer server acts as a PDC itself. I don't know, but maybe this information helps.. Greetings Hansjörg Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 29 Jan 2003, Robert M. Martel wrote: So SAMBA no longer supports print driver downloads. That is about the only conclusion that I can come to at this point. I've not been able to get Windows printer driver downloads to work right since Samba 2.2.2. No one but printer admins displays the correct settings for printers, everyone else gets the original printer defaults that they cannot change. Did you initialize the driver bound to the printer? Does anyone *REALLY* have downloading printer drivers to Windows 2000 clients working properly? Has anyone documented the steps as the ones in the available documentation DON'T work? Works fine here (on a daily basis). Not sure what to tell you with more information. If you want to tell me exactly how you do it, I'll be glad to review the process. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc You can never go home again, Oatman, but I guess you can shop there. --John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+Oo8nIR7qMdg1EfYRArmwAKDZKX7DRABQiQ62+Jz8i7sv0UJ7GgCaAoFr sFGMdunZezKx8fBLhCCWoUQ= =vovw -END PGP SIGNATURE- -- Dr. Hansjörg Maurer itsystems Deutschland AG Linprunstr. 10 D-80335 München Ph/Fax +49 89 52 04 68-41/-59 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] So SAMBA no longer supports print driver downloads
Dr. Hansjoerg Maurer wrote: Hi, could it be a problem with the operating system, samba runs on? On Solaris 2.8 I have the same problems, decribed above, but not on linux (both running samba 2.2.7a and cups-1.1.18). Another difference is, that our solaris samba printer server is a member server of a NT4.0 controlled domain. The linux samba printer server acts as a PDC itself. I don't know, but maybe this information helps.. I also noticed some dependencies with the printer model concerned... With a HP laserjet 2100 it worked, with a HP Deskjet 895 CXi it didnt. Also noticed differences in behaviour depending on server OS as well (in my case, linux x86 vs. HP/UX) bye, [MH] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Not able to login to Samba PDC.
Please have a look here: http://us1.samba.org/samba/docs/Samba-HOWTO-Collection.html On Sat, 2003-02-01 at 03:36, Manjunath H N wrote: Hello All, I have put this in my smb.conf file [netlogon] comment = Network Logon Service path = /usr/local/samba/lib/netlogon writable = yes As the path was default, and I was getting this in my log file. [2003/02/01 13:18:51, 0] smbd/service.c:make_connection(614) iwave-123 (192.168.2.157) Can't change directory to /usr/local/samba/profiles (No such file or directory) So I created the directory /usr/local/samba/profiles, but when I try to logon to my Samba PDC these is the error that is being logged. [2003/02/01 13:53:08, 0] smbd/service.c:make_connection(252) iwave-123 (192.168.2.157) couldn't find service profiles Any help on this highly appreciated. TIA Manjunath H N DISCLAIMER: This e-mail and any attachment (s) is for authorised use by the intended recipient (s) only. It may contain proprietary material, confidential information and/or be subject to the legal privilege of iWave Systems Technologies Private Limited. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from retaining, using, copying, alerting or disclosing the content of this message. Thank you for your co-operation. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Printing.
Hi. Is this the right place to ask for printing in samba ?. -- mvh Erik Jakobsen. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Account Lockout using Security=Server
That was just what I was looking for. Thanks! -Original Message- From: Andreas Hasenack [mailto:[EMAIL PROTECTED]] Sent: Friday, January 31, 2003 7:06 PM To: Evans Chris - cevans Cc: '[EMAIL PROTECTED]' Subject: Re: [Samba] Account Lockout using Security=Server Em Fri, Jan 31, 2003 at 04:28:50PM -0600, Evans Chris - cevans escreveu: I was wondering if any of you could help me out. I am not a Samba user although we have several instances of Samba running in our organization. We are running into a problem with Samba machines locking out user accounts in our Windows 2000 domain. I have found a little information about this but nothing in depth. The Samba servers are configured to use security=server and are using our domain controllers as password servers. Every time a user accesses one of the samba boxes 2 incorrect password attempts is logged on This is expected and is a drawback in this security mode. Check: http://us1.samba.org/samba/docs/Samba-HOWTO-Collection.html#AEN393 ** The information contained in this communication is confidential, is intended only for the use of the recipient named above, and may be legally privileged. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please re-send this communication to the sender and delete the original message or any copy of it from your computer system. Thank You. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba - winXP lookup
Hi! On Fri, 31 Jan 2003, Jens Pettersson wrote: [...] from time to time I get a ~30 second lockup. During that time, the Samba shares are unresponsive from that computer (other computers work fine). I imagine this is probably an XP bug [...] Is there a solution to this or do we have to live with it...hopefully not ;) I have seen this with some XP machines also. Send me your smb.conf and I'll see what help can be brought to bare. I'm having the same problem as Jens. I'm running samba-2.2.7a-1 on a RedHat 6.2 box (kernel 2.2.22). I've fought a lot against my smb.conf to solve this problem, so maybe it's not a clean one, however here it is: [global] workgroup = MACONDO netbios name = SUPERPIPPO server string = Samba v%v (Logon Server) interfaces = eth0 log level = 1 log file = /var/log/samba/log.%m max log size = 50 mangle case = Yes socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384 SO_KEEPALIVE max xmit = 65535 password level = 0 encrypt passwords = Yes unix password sync = yes null passwords = Yes username map = /etc/samba/smbusers guest account = smbguest add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u dns proxy = No wins support = Yes time server = Yes print command = lpr -b -r -P%p %s load printers = No domain master = Yes local master = Yes preferred master = Yes os level = 65 security = user deadtime = 0 keepalive = 300 domain logons = Yes logon drive = h: logon path = \\%n\%u\.profile logon home = \\%n\%u logon script = logon.cmd level2 oplocks = Yes read raw = Yes write raw = Yes oplocks = Yes getwd cache = Yes wide links = no hosts allow = 192.168.1.0/24 127.0.0.0/8 [netlogon] comment = Logon scripts and policies path = /home/samba/netlogon writeable = no write list = bilo,root [profiles] comment = Roaming profiles directory path = /home/samba/profiles writeable = Yes create mask = 0600 directory mask = 0700 [homes] comment = Home Directories writeable = Yes browseable = Yes ... -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Extra sheet after printing a job.
At the end of a printerjob in my HP-DJ895Cxi and HP-1100A in my samba-server (SuSE Linux 8.1) an extra -blank- sheet is comming out of the printers. From the server if printing direct there's no extra paper sheet. I know the problem has been on the list before, and can also see how to solve it, but there's a problem. From default the SuSE 8.1 is installed with cups, and I wanted to install it with LPRng. The printers are printing ok from the server, and via samba my printers are also printing fine. But here's the problem. I print from a Fujitsu/Siemens C6155 Lifebook computer, and whether I print via samba to either of the 2 printers, they always stop a job by sending out an extra sheet. In the archives there stands: Uncommenting #PRINT_RAW_SUPPRESS_FORMFEED=yes in /etc/apsfilterrc. But due to my install of LPRng, I cannot find the apsfilterrc. What can I get rid of the problem ?. -- mvh Erik Jakobsen. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba on OSX
Hi all, new to the list but have read the archives. I am trying to get my OSX box to be a PDC with win2k clients, but am having trouble. I can't seem to find any documentation on this, nor have I seen anyone with experience doing this. Can someone point me to some resources I could RTFM before I start asking questions to the list? Thanks! __ Do you Yahoo!? Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 3122 People Experience
Dad' cock was so big I could feel him hit the back of my pussy. He was so rough and hard with me that I began to moan ...he had to put his hand over my mouth to muffle the screams. He just kept going harder and harder until finally I came spilling my jucies all over my table. There is a lot of examples of INCEST on our site http://go4teenz.com/incest/ Want to see some real examples of what incest actually IS and to read about experiences of people involved? We have GIGA-BYTES of highest-quality images, real-life photos, videos and stories in our MEMBERS AREA. Free Tour Join http://go4teenz.com/incest/ -BEGIN PGP SIGNATURE- Version: 2.1.2 oQDqYkBj7Btxj2Q8Xv4BHD1JO118HaEm3H2iepeYo80PM/9utHjmqTdyjNJEB/+m 8=+A1N+P/fA6dDJsLXQUg37d0oRqBFJJthmneog2S4cmnBQlYTpJ485yCkEBh5Oo 98BgpF2gd46n3NRg7LB8QkGjmAohjkkoGDOFkllH86I1sNfhYR+Nk9wgj4B3OD9l yDqOu4PoqkYXBih65sSpkevBE/4NBHByT -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Using working devmode from windows clients on sambaserver?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 31 Jan 2003 [EMAIL PROTECTED] wrote: Samba 2.2.7a (built from samba RPM's) with LPRng print subsystem. I've been having troubles with some print drivers which fail to work properly when uploaded to the samba server whether devmode gets left as null or a default devmode is used. Some drivers do not leave you in a position where you can tickle the driver to generate a devmode with page orientation etc before things start misbehaving. Stuff usually works when the client installs their own drivers locally. Is there any way to grab the devmode generated by the windows clients and inject it some place in samba's files to get a working devmode so driver downloads with spools can work with these drivers? Not without writing some win32 code. Effectively what you could do is to create a local printer and then use GetPrinter() to grab the devmode of the local printer. Then run GetPrinter() on the remote Samba printer to get the current properties and issue a SetPrinter() with the new devmode. If you have problems with this I can code it up in a few minutes. Let me know. I should have done this a long time ago probably. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc You can never go home again, Oatman, but I guess you can shop there. --John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+O/yKIR7qMdg1EfYRAuu1AKCvoR6fqqXpDHBynqFCFFVb//n3kACfTgea Shrgka7wOBzo+2XjW8qYWxI= =RGTN -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] So SAMBA no longer supports print driver downloads
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, 1 Feb 2003, Dr. Hansjoerg Maurer wrote: Hi, could it be a problem with the operating system, samba runs on? On Solaris 2.8 I have the same problems, decribed above, but not on linux (both running samba 2.2.7a and cups-1.1.18). Could be. I don't have a Solaris box locally to run regular tests. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc You can never go home again, Oatman, but I guess you can shop there. --John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+O/0VIR7qMdg1EfYRAtdoAJ0aFwIl6kVgM/f7m2267DBEF5W25ACdEIPj g4WKDM/lYmPziv+Da3+Y/OM= =HR2i -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] windows2linux help please
here is a copy of my smb.conf file [Stealth@Nooblesse Stealth]$ cat /etc/samba/smb.conf [global] workgroup = Tightwork server string = samba server hosts allow = all log level = 2 log file = /usr/local/samba/var/samba.log security = share # encrypt passwords = yes ## some printer settings printcap name = /etc/printcap load printers = yes # printer driver file = /usr/local/samba/printers.def printing = lprng # log file log file = /var/log/samba/%m.log max log size = 0 security = user ## ## Passwords And Users # ## # unix password sync = true passwd chat = *new password* %n\n *new password* %n\n *changed* passwd chat debug = false passwd program = /bin/passwd %u update encrypted = no encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd username map = /etc/samba/smbusers pam password change = yes ## Go Go Go! fast socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 ### just making sure the propagation is set right # interfaces = 192.168.1.101 ##linux is king, master browser local master = yes os level = 33 ##no proxies at all.. dns proxy = no #= Share Definitions = == = [homes] comment = Home Directories browseable = yes public = yes #path = /home writeable = yes valid users = %S create mode = 0664 directory mode = 0775 ### printers [print$] printer = Printer comment = All Printers #path = /var/spool/samba/ browseable = yes # security... guest ok = yes writable = no printable = yes [Stealth] path = /home/Stealth browseable = yes guest ok = yes read only = yes valid users = Stealth [Administrator$] path=/home/Administrator browseable = yes guest ok = no read only = yes --- this used to work, till i reinstaled windows, yes on windows i do have the same users/passwords/workgroup, the shares are displayed but, it will ask me for user name, but it just wont display files or 'work' heh, please help -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Adding printer to default profile
Hello! I'm running Samba 2.2 as pdc. Now I'd like to add a Network-Printer (wich is a spooler for itself) to the All Users profile. Could someone tell me, how to do that? (I cannot even add a printer to any profile at all. they're just added to the single Computer) Thanks alot in advance! Rudolf -- Rudolf Weeber Mühlrain 9 70180 Stuttgart / Germany Tel: 0711 62009381 Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba - winXP lookup
On Sat, 1 Feb 2003, Gabriele Carioli wrote: Gebriele, Your smb.conf looks fine. Suggest that you use ethereal to capture traffic between the mis-behaving workstation and the server and check out what is happening over the wire. This could be a situation where there is no traffic and we are dealing with misbehaviour on the XP machine itself. Have you checked the Event Viewer on the XP machine to see what it is reporting? - John T. Hi! On Fri, 31 Jan 2003, Jens Pettersson wrote: [...] from time to time I get a ~30 second lockup. During that time, the Samba shares are unresponsive from that computer (other computers work fine). I imagine this is probably an XP bug [...] Is there a solution to this or do we have to live with it...hopefully not ;) I have seen this with some XP machines also. Send me your smb.conf and I'll see what help can be brought to bare. I'm having the same problem as Jens. I'm running samba-2.2.7a-1 on a RedHat 6.2 box (kernel 2.2.22). I've fought a lot against my smb.conf to solve this problem, so maybe it's not a clean one, however here it is: [global] workgroup = MACONDO netbios name = SUPERPIPPO server string = Samba v%v (Logon Server) interfaces = eth0 log level = 1 log file = /var/log/samba/log.%m max log size = 50 mangle case = Yes socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384 SO_KEEPALIVE max xmit = 65535 password level = 0 encrypt passwords = Yes unix password sync = yes null passwords = Yes username map = /etc/samba/smbusers guest account = smbguest add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u dns proxy = No wins support = Yes time server = Yes print command = lpr -b -r -P%p %s load printers = No domain master = Yes local master = Yes preferred master = Yes os level = 65 security = user deadtime = 0 keepalive = 300 domain logons = Yes logon drive = h: logon path = \\%n\%u\.profile logon home = \\%n\%u logon script = logon.cmd level2 oplocks = Yes read raw = Yes write raw = Yes oplocks = Yes getwd cache = Yes wide links = no hosts allow = 192.168.1.0/24 127.0.0.0/8 [netlogon] comment = Logon scripts and policies path = /home/samba/netlogon writeable = no write list = bilo,root [profiles] comment = Roaming profiles directory path = /home/samba/profiles writeable = Yes create mask = 0600 directory mask = 0700 [homes] comment = Home Directories writeable = Yes browseable = Yes ... -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] passwd: Authentication token manipulation error
On Sat, 1 Feb 2003, Keith Fernandez wrote: Hi Can anyone tell me what this error is. Firstly, it's NOT a samba question. Secondly, it means the password you tried to use is too short. Your RH8 system has a PAM configuration that insists on a password being longer than a certain number of characters. I think that if you do: grep /etc/passwd mandy you will find that the account was added, but it now has NO password. You really DO want to enter a system password, or use Red Hat's method for locking the Linux system account for mandy. smbpasswd will add any user who has an entry in the /etc/passwd file. SMB passwords are independant of the system password. - John T. Thanks. Regards, Keith The linuX Files -- The Source is Out There. - Original Message - From: Keith Fernandez [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, January 31, 2003 8:34 PM Subject: [Samba] passwd: Authentication token manipulation error Hi, I am trying to add a new user to my RedHat 8.0 System running samba 2.2.7-1a This is the error I get. --- [root@localhost named]# useradd -g users mandy [root@localhost named]# passwd mandy Changing password for user mandy. New password: BAD PASSWORD: it is too short Retype new password: Failed to find entry for user mandy. passwd: Authentication token manipulation error - This error is only when I am creating a new user. Password sync happens if there is an existing user. if after using useradd -g users mandy I do a smbpassword -a mandy then everything is fine What could be the problem... Regards, Keith The linuX Files -- The Source is Out There. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] winxppro/nt4 cant find my samba pdc
On Sat, 1 Feb 2003, earthtirol wrote: hi all i tryed to add winxppro/nt4 machines to my samba domain pinguin.local Putting a '.' in a Windows domain name is a bad karma thing to do! Suggest you keep the domain name to plain text and NO spaces either. dns is configured and wins lookup works authentification per user works fine but when i try to join my win boxes to the domain pinguin.local the nt4 box cant find the domaincontroller and winxp starts to search for the dns service record of the domaincrontroller. hans-peter #rh 80, samba-2.2.5 #/etc/samba/smb.conf [global] workgroup = PINGUIN.LOCAL server string = Samba Server printcap name = /etc/printcap printing = lprng log file = /var/log/samba/%m.log max log size = 0 security = DOMAIN ^ Ok. So this box is a member of a domain called 'PINGUIN.LOCAL' for which the domain controller is another machine. That is what this means! If you want this machine to BE the domain controller you need: security = USER You also need: domain logons = Yes os level = 32(actually 32 or higher) encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd unix password sync = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* pam password change = yes username map = /etc/samba/smbusers obey pam restrictions = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master = yes os level = 64 domain master = yes preferred master = yes domain logons = yes wins support = yes wins support = yes dns proxy = no add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u [homes] comment = Home Directories browseable = no writable = yes valid users = %S create mode = 0664 directory mode = 0775 [netlogon] comment = Network Logon Service path = /export/smb/netlogon guest ok = yes writable = no share modes = no [files] comment = test share path = /export/smb/files public = yes writeable = yes #END /etc/samba/smb.conf #named START $TTL 86400 @ IN SOA samba01.pinguin.local. office.pinguin.local. ( 2003013101 ; serial 28800 ; refresh 7200 ; retry 604800 ; expire 86400 ; ttl ) NS samba01 MX 10 samba01 samba01 A 192.168.0.4 ;the samba server test01A 192.168.0.101 ;the nt4 client #named END Suggest you read the Entire-HOWTO-Collection link off the samba SWAT home page. SWAT can be contacted on your local system (if it is installed and enable), using a web browser pointed at: http://localhost:901 - John T. -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [despammed] [Samba] Samba - winXP lookup
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, 1 Feb 2003, Gabriele Carioli wrote: Hi from time to time I get a ~30 second lockup Same for me! Rumour has is that you should make sure that XP's web dave client is disabled. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc You can never go home again, Oatman, but I guess you can shop there. --John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+PBmfIR7qMdg1EfYRApHMAKC8nlnR/p9AGAqpgkwMZrz/s9C+5gCg1hB4 LTQWkfNwLKd3oxmIGFrSGvM= =nnfa -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] passwd: Authentication token manipulation error
I think it is a samba question, I did try to use more than 8 characters in the password and it still gave the same error. I got this error when I tried to add a new user to the unix system and change his password. This is ONLY when I used the pam_smbpass option to samba. So I think it is a samba question. the only workaround is what I had given below. If you have got the pam_smbpass option to sync unixpassword with smbpassword for NEW users, Please let me know. You say smbpassword adds any user present in /etc/password, TRUE... But my question is why cant I add a unix password to the user which will sync it with smbpassword the 1st time I create a user.. Once I create my smbpassword and then I change my unix password then it sync's it with smbpassword and no error, why cant it do it the first time. Here is my error again using 8 characters in my password . --- [root@localhost named]# useradd -g users keith [root@localhost named]# passwd keith Changing password for user keith. New password: Retype new password: Failed to find entry for user keith. passwd: Authentication token manipulation error - NOW IF I HAD DONE THIS [root@localhost named]# useradd -g users keith [root@localhost named]# smbpasswd -a keith New SMB password: Retype new SMB password: Added user keith. Password changed for user keith. [root@localhost named]# passwd keith Changing password for user keith. New password: Retype new password: passwd: all authentication tokens updated successfully -- Added this line to my /etc/pam.d/system-auth to get it to work after the pam_cracklib.so line password required /lib/security/pam_smbpass.so nullok use_authtok try_first_pass Regards, Keith The linuX Files -- The Source is Out There. - Original Message - From: John H Terpstra [EMAIL PROTECTED] To: Keith Fernandez [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Saturday, February 01, 2003 11:46 PM Subject: Re: [Samba] passwd: Authentication token manipulation error On Sat, 1 Feb 2003, Keith Fernandez wrote: Hi Can anyone tell me what this error is. Firstly, it's NOT a samba question. Secondly, it means the password you tried to use is too short. Your RH8 system has a PAM configuration that insists on a password being longer than a certain number of characters. I think that if you do: grep /etc/passwd mandy you will find that the account was added, but it now has NO password. You really DO want to enter a system password, or use Red Hat's method for locking the Linux system account for mandy. smbpasswd will add any user who has an entry in the /etc/passwd file. SMB passwords are independant of the system password. - John T. Thanks. Regards, Keith The linuX Files -- The Source is Out There. - Original Message - From: Keith Fernandez [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, January 31, 2003 8:34 PM Subject: [Samba] passwd: Authentication token manipulation error Hi, I am trying to add a new user to my RedHat 8.0 System running samba 2.2.7-1a This is the error I get. --- [root@localhost named]# useradd -g users mandy [root@localhost named]# passwd mandy Changing password for user mandy. New password: BAD PASSWORD: it is too short Retype new password: Failed to find entry for user mandy. passwd: Authentication token manipulation error - This error is only when I am creating a new user. Password sync happens if there is an existing user. if after using useradd -g users mandy I do a smbpassword -a mandy then everything is fine What could be the problem... Regards, Keith The linuX Files -- The Source is Out There. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- John H Terpstra Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba wins problem
hello gil. [ nmbd/nmbd_browsesync.c:find_domain_master_name_query_fail(358) find_domain_master_name_query_fail: Unable to find the Domain Master Browser name WGNAME1b for the workgroup WGNAME. Unable to sync browse lists in this workgroup. ] pardon me if i'm not perfectly correct here, but my impression is that it might be needed to add the following settings to the [global] of smb.conf: netbios name = SERVERNAME domain master = yes if i'm assuming correctly, it would look like you don't have a netbios name set... the error saying unable to find the DMB name WGNAME1b for the workgroup WGNAME might be saying that it can't find the DMB for the workgroup because the samba server doesn't have a netbios name ( to go by ) set? - 'domain master' will make it so that it can assemble browsing lists ( nethood ) for WORKGROUPs, in despite of being on different subnets. that seems to be at least a quasi-accurate interpretation of the manpage.. ? so those are a few things to look for -- unless you've already tried them.. jared. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] passwd: Authentication token manipulation error
On Sun, 2 Feb 2003, Keith Fernandez wrote: Whoa Keith! Nowhere in your first email did you explain that you had already changed your Linux PAM configuration _AND_ are trying to use pam_smbpass.so. The smbpasswd utilitiy only changes the password in /etc/samba/smbpasswd. It does NOT use PAM at all. The system tool 'passwd' (/bin/passwd or /usr/bin/passwd) will use PAM. Whatever you configure PAM to do it will follow. Firstly, pam_smbpass.so does NOT do unix system password changing! It can be added to your PAM configuration to update the /etc/samba/smbpasswd file. If you want to update both /etc/passwd (/etc/shadow) entries as well as /etc/samba/smbpasswd then the following recommendation is included in the source code by the author: #%PAM-1.0 # password-sync # # A sample PAM configuration that shows the use of pam_smbpass to make # sure private/smbpasswd is kept in sync when /etc/passwd (/etc/shadow) # is changed. Useful when an expired password might be changed by an # application (such as ssh). auth requisitepam_nologin.so auth required pam_unix.so accountrequired pam_unix.so password requisitepam_cracklib.so retry=3 password requisitepam_unix.so shadow md5 use_authtok try_first_pass password required pam_smbpass.so nullok use_authtok try_first_pass sessionrequired pam_unix.so And that is from the documentation in ~samba/source/pam_smbpass/samples. Your RH8 machine may use pam_pwdb.so, or pam_unix2.so, or similar for system account password changing. I think it is a samba question, I did try to use more than 8 characters in the password and it still gave the same error. If you do not have the pam_pwdb.so or pam_unix.so module in your PAM configuration then you have a hosed up PAM. I got this error when I tried to add a new user to the unix system and change his password. This is ONLY when I used the pam_smbpass option to samba. Wait a moment. You added pam_smbpass.so to PAM - NOT to samba! So I think it is a samba question. Whatever! the only workaround is what I had given below. If you have got the pam_smbpass option to sync unixpassword with smbpassword for NEW users, Please let me know. You say smbpassword adds any user present in /etc/password, TRUE... But my question is why cant I add a unix password to the user which will sync it with smbpassword the 1st time I create a user.. Explained above. Once I create my smbpassword and then I change my unix password then it sync's it with smbpassword and no error, why cant it do it the first time. Fix you PAM configuration. Here is my error again using 8 characters in my password . --- [root@localhost named]# useradd -g users keith [root@localhost named]# passwd keith Changing password for user keith. New password: Retype new password: Failed to find entry for user keith. passwd: Authentication token manipulation error - Right. Did you add the 'debug' or 'audit' options to the pam_smbpass.so line in your PAM configuration and then check /var/log/messages or /var/log/security for error messages? NOW IF I HAD DONE THIS [root@localhost named]# useradd -g users keith [root@localhost named]# smbpasswd -a keith New SMB password: Retype new SMB password: Added user keith. Password changed for user keith. Of course it worked! It just changes /etc/samba/smbpasswd entries. You added the account (with the -a option), so now pam_smbpass.so can change the password. The account entry in /etc/samba/smbpasswd has to exist first. [root@localhost named]# passwd keith Changing password for user keith. New password: Retype new password: passwd: all authentication tokens updated successfully -- Added this line to my /etc/pam.d/system-auth to get it to work after the pam_cracklib.so line password required /lib/security/pam_smbpass.so nullok use_authtok try_first_pass Try: password required /lib/security/pam_smbpass.so nullok use_authtok try_first_pass audit migrate Cheers, John T. Regards, Keith The linuX Files -- The Source is Out There. - Original Message - From: John H Terpstra [EMAIL PROTECTED] To: Keith Fernandez [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Saturday, February 01, 2003 11:46 PM Subject: Re: [Samba] passwd: Authentication token manipulation error On Sat, 1 Feb 2003, Keith Fernandez wrote: Hi Can anyone tell me what this error is. Firstly, it's NOT a samba question. Secondly, it means the password you tried to use is too short. Your RH8 system has a PAM configuration that insists on a password being longer than a certain number of characters. I think that if you do: grep /etc/passwd mandy you will find that the account was added, but it now has NO password. You really DO
[Samba] Mount at boot - and a bug - where to report?
I have been having problems trying to get my samba mounted windows (XP) shares to mount at boot time on my Redhat 8 machine. I have tried changing the start order of things, but it didn't seem to help. Here is the interesting bits from the boot.log Feb 1 11:17:46 vortex-550 network: Setting network parameters: succeeded Feb 1 11:17:46 vortex-550 network: Bringing up loopback interface: succeeded Feb 1 11:17:49 vortex-550 network: Bringing up interface eth0: succeeded Feb 1 11:17:57 vortex-550 mount: 572: session request to 192.168.0.4 failed (Called name not present) Feb 1 11:17:57 vortex-550 mount: 572: session request to 192 failed (Called name not present) Feb 1 11:17:57 vortex-550 mount: 572: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) Feb 1 11:17:57 vortex-550 mount: SMB connection failed Feb 1 11:17:58 vortex-550 mount: 573: session request to 192.168.0.4 failed (Called name not present) Feb 1 11:17:58 vortex-550 mount: 573: session request to 192 failed (Called name not present) Feb 1 11:17:58 vortex-550 mount: 573: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) Feb 1 11:17:58 vortex-550 mount: SMB connection failed Feb 1 11:17:59 vortex-550 mount: 574: session request to 192.168.0.4 failed (Called name not present) Feb 1 11:17:59 vortex-550 mount: 574: session request to 192 failed (Called name not present) Feb 1 11:17:59 vortex-550 mount: 574: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) Feb 1 11:17:59 vortex-550 mount: SMB connection failed Feb 1 11:18:00 vortex-550 mount: 575: session request to 192.168.0.4 failed (Called name not present) Feb 1 11:18:00 vortex-550 mount: 575: session request to 192 failed (Called name not present) Feb 1 11:18:00 vortex-550 mount: 575: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) Feb 1 11:18:00 vortex-550 mount: SMB connection failed Feb 1 11:18:00 vortex-550 netfs: Mounting SMB filesystems: failed Feb 1 11:18:01 vortex-550 netfs: Mounting other filesystems: succeeded Feb 1 11:18:01 vortex-550 autofs: automount startup succeeded Feb 1 11:18:01 vortex-550 sshd: Starting sshd: Feb 1 11:18:01 vortex-550 sshd: succeeded Feb 1 11:18:02 vortex-550 sshd: Feb 1 11:18:02 vortex-550 rc: Starting sshd: succeeded Feb 1 11:18:05 vortex-550 xinetd: xinetd startup succeeded Feb 1 11:18:06 vortex-550 ntpd: succeeded Feb 1 11:18:06 vortex-550 ntpd: ntpd startup succeeded Feb 1 11:18:09 vortex-550 lpd: lpd startup succeeded Here is what happens when I run mount -a after it has finished booting: vortex-550== ~mount -a 996: session request to 192.168.0.4 failed (Called name not present) 996: session request to 192 failed (Called name not present) 1000: session request to 192.168.0.4 failed (Called name not present) 1000: session request to 192 failed (Called name not present) 1003: session request to 192.168.0.4 failed (Called name not present) 1003: session request to 192 failed (Called name not present) 1006: session request to 192.168.0.4 failed (Called name not present) 1006: session request to 192 failed (Called name not present) vortex-550== ~ But the mounts do work. I looked into the Called name not present message, and it appears that there is a bug somewhere. I don't know if it is in samba, or in the mount code. The bug is that it does not properly deal with ip addresses. This is what part of my fstab looks like: //192.168.0.4/Media /mnt/vortex2533/Media smbfs auto,guest,r //192.168.0.4/Public/mnt/vortex2533/Public smbfs auto,guest,rw //192.168.0.4/MP3s /mnt/vortex2533/MP3ssmbfs auto,guest,r When I defined 192.168.0.4 in my host file as a named machine, and then used that name instead of the ip address in the fstab, the messages about Called name not present went away. Where should I report this (minor) bug? So now, when I run mount -a, It mounts all the shares with no messages. But in my boot.log, I still get one of these for each attempted mount: Feb 1 11:18:00 vortex-550 mount: 575: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) Can anyone give me a clue why these mounts fail at boot time? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Mount at boot - and a bug - where to report?
After doing a lot of searching in the archive, I discovered that someone else had the same problem over a year ago. Here are the workarounds that he posted: paste For comparison/archive purposes, here's an /etc/fstab entry which works as expected after boot but not before: //w2kbox/share /mnt/thing smbfs guest,ro 0 0 I have come up with 2 workarounds for the problem inspired by your response. Workaround #1: -- //w2kbox/share /mnt/thing smbfs username=guest,guest,ro 0 0 Workaround#2: - //w2kbox/share /mnt/thing smbfs username=guest,password=,ro 0 0 I noticed that it is a little inconsistent with regard to tolerance of presence/absence quotes in the argument list (actually it seems to accept anything but username not quoted password quoted), but that's not a big deal. /paste I tried workaround #1, and found it to work perfectly. My mounts now come up at boot time. James, thanks for the pointer to autofs - I'm still kind of a newbie... I tend to learn things as I need them. Can you (or someone else) give a brief explanation as to why I would want to use autofs instead of putting auto in the fstab? Not because I'm challenging it, I just would like to know. Thanks, Dan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] So SAMBA no longer supports print driver downloads
Would you mind pointing us to a howto that works? In my case, I'd like samba to download native win98 drivers to Win98 clients Gerald (Jerry) Carter ([EMAIL PROTECTED]) wrote*: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 29 Jan 2003, Robert M. Martel wrote: So SAMBA no longer supports print driver downloads. That is about the only conclusion that I can come to at this point. I've not been able to get Windows printer driver downloads to work right since Samba 2.2.2. No one but printer admins displays the correct settings for printers, everyone else gets the original printer defaults that they cannot change. Did you initialize the driver bound to the printer? Does anyone *REALLY* have downloading printer drivers to Windows 2000 clients working properly? Has anyone documented the steps as the ones in the available documentation DON'T work? Works fine here (on a daily basis). Not sure what to tell you with more information. If you want to tell me exactly how you do it, I'll be glad to review the process. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc You can never go home again, Oatman, but I guess you can shop there. --John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE+Oo8nIR7qMdg1EfYRArmwAKDZKX7DRABQiQ62+Jz8i7sv0UJ7GgCaAoFr sFGMdunZezKx8fBLhCCWoUQ= =vovw -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Status of docs merge to 3.0
I've been doing a few doc updates in HEAD, and was about to merge them to 3.0 - but I'm not quite sure what the status is, given we seem to have a slightly different syntax in HEAD (XML compliant?) So, should I just merge my text changes, or wait for the lot to be merged or? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part
Re: Status of docs merge to 3.0
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Saturday 01 February 2003 09:07, Andrew Bartlett wrote: I've been doing a few doc updates in HEAD, and was about to merge them to 3.0 - but I'm not quite sure what the status is, given we seem to have a slightly different syntax in HEAD (XML compliant?) So, should I just merge my text changes, or wait for the lot to be merged or? Yeah, both should be in sync - I'll make sure the XML changes make it into the 3.0 branch. Jelmer - -- Jelmer Vernooij [EMAIL PROTECTED] Pending (unfinished) patches http://samba.org/~jelmer/diffs.php -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE+O6YyPa9Uoh7vUnYRAov9AJ9FuVF5theOAlEBepnhT+OnnweXbQCdF3hy wiAIPyMyVcWbOA10vzn5OfM= =g73i -END PGP SIGNATURE-
heimdal didn't have AP_OPTS_USE_SUBKEY
Hi Jeremy, the latest HEAD didn't not compile with heimdal on SuSE8.1 because AP_OPTS_USE_SUBKEY is not defined in the heimdal/krb5.h only in the MIT krb5.h :-( is it possible to fix samba that it finally compiles fine? metze - Stefan metze Metzmacher [EMAIL PROTECTED]
Printing in Samba.
Hi. Please tell if this is the list to ask questions about printing samba. -- mvh Erik Jakobsen.
RE: Finding group members - fix to winbindd_ads.c
Andrew et al: On further reflection, you may want to reconsider my original patch. Currently, if you do WINBINDD_GETGRNAM to an NT domain, you get *all* the members of a group, whether primary or supplemental. The same call to an AD just returns supplemental members. My patch causes the call to either an NT domain or AD to return the same thing. It seems like they should be consistent. Ken -Original Message- From: Andrew Bartlett [mailto:[EMAIL PROTECTED]] Sent: Friday, January 31, 2003 5:47 PM To: Ken Cross Cc: 'Andrew Bartlett' Subject: RE: Finding group members - fix to winbindd_ads.c On Sat, 2003-02-01 at 09:15, Ken Cross wrote: Thanks, Andrew, will do. We're definitely abusing Samba 3.0 to its limits and beyond. It's called innovation :-) The change below was necessary because we have a GUI that lets you select things like all users who belong to groups starting with A. So we needed to know all the members of groups starting with A. The existing code didn't give them. The most obvious is Domain Users. If you do WINBINDD_GETGRGID or WINBINDD_GETGRNAM you only get users whose primary group is *not* Domain Users. Given that, it might be worth adding a seperate winbind call that had the desired semantics. In particular, it should return the user's in 'NT' from - say a record with separate domain, username and SID. If you want to come up with a patch that does something like that, I'll certainly give it a serious look. Be aware that we change the winbind pipe interface occasionally, and we are trying to move away from having external projects dependent on it's layout. (Probably not too much of an issue inside a NAS device however). Also, you should try to keep your replies to the list, so that others can comment. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net
Re: Printing in Samba.
On Sat, 2003-02-01 at 07:43, Erik Jakobsen wrote: Hi. Please tell if this is the list to ask questions about printing samba. nope - ask at [EMAIL PROTECTED] brad
Re: file change notification issues
Jeremy, [EMAIL PROTECTED] wrote: Great detective work ! Actaully this is a bug in IIS. The protocol states that STATUS_NOTIFY_ENUM_DIR is a valid return, if too many files were changed (hmmm. define too many :-). It would be possible to cause this to break on Windows 2000 servers also, but I imagine that under 'normal' circumstances few enough files have changed that this doesn't cause a problem for IIS. well it looks like Matlab, the application I'm having trouble with, also doesn't like STATUS_NOTIFY_ENUM_DIR as return value. It starts polling its working directory like crazy, which is quite annyoing (you can change the program configuration, but this is the default for me). Older versions of Matlab behave better, I checked this some time ago. I hacked a patch to have Samba behave like W2K and deliver the name of the changed file and it looks quite good. No more endless file stat polling, so I'm all for adding this functionality to Samba :-) The most difficult part is getting a file name from Linux without reimplementing the change notification interface. I don't like fam or dazuko or the other stuff that is available as an alternative to the kernel dnotify support, it's too much bloat. For now I simply added a fcntl to the Linux kernel to return the desired file name. This requires only minor changes in Samba and Linux, however it has most likely races in it and will probably only work for my most simple case... ...Juergen Btw. my original problem from my posts last week was different. It seems like the behaviour I was describing only happens when running Samba in a VMware session. Testing on several real machines doesn't show the problem. Odd... I can still send you traces, but I think it's not that interesting.
AW: Random problem with file locking
every now and then I find in the logfiles the following messages from samba (v2.2.7): [2003/01/05 15:02:35, 0] tdb/tdbutil.c:tdb_log(531) tdb(/var/lock/samba/locks/locking.tdb): tdb_oob len -2320 beyond eof at 8192 [2003/01/05 15:02:35, 0] tdb/tdbutil.c:tdb_log(531) tdb(/var/lock/samba/locks/locking.tdb): tdb_free: left read failed at 4294964952 (4096) This seems not to be related to the current v2.2.7, this problem resides for quite while in the code... Looks like a LFS thing if I were to wager a guess. Have you tried 2.2.7a (since it fixed the LFS bugs in 2.2.7). It's still reproducable with WinXP running in VMWare when shutting down XP. At the end of this session I get the lines you see above. Cu Hans-Joerg smime.p7s Description: application/pkcs7-signature
Re: NBT length parameter larger than necessary in session request
Michael B. Allen wrote: Hi guys, Ever notice smbclient sends an NBT session request with an NBT length field that is 4 bytes longer than necessary? No harm, but is there a reason for this? Yes. It was a bug. The header length was being added to the total length. It didn't cause any trouble, but I fixed it (somewhere around 2.2.6, I think). I'm using 2.2.1a shipped with RH connecting to the same version of Samba over loopback. Good catch. Newer versions should not have this bug. Chris -)- -- Samba Team -- http://www.samba.org/ -)- Christopher R. Hertel jCIFS Team -- http://jcifs.samba.org/ -)- ubiqx development, uninq. ubiqx Team -- http://www.ubiqx.org/ -)- [EMAIL PROTECTED] OnLineBook -- http://ubiqx.org/cifs/-)- [EMAIL PROTECTED]
Re: heimdal didn't have AP_OPTS_USE_SUBKEY
Please try the following patch (attached).
This patch also includes a few other things, so edit as
appropriate:
- support for the DCE NP funnel (available from
http://www.padl.com/~lukeh/XAD/dce_funnel.tar.gz)
- support for using the keytab instead of the secrets
database
- support for using RC4 Kerberos session keys as named pipe
session keys (have not tested with MIT)
You probably won't want any of these things except perhaps for
the latter, but I'm including them to meet our obligations under
the GPL.
cheers,
-- Luke
Index: Makefile.in
===
RCS file: /cvsroot/samba/source/Makefile.in,v
retrieving revision 1.606
diff -u -r1.606 Makefile.in
--- Makefile.in 1 Feb 2003 06:26:16 - 1.606
+++ Makefile.in 2 Feb 2003 00:00:36 -
@@ -228,7 +228,7 @@
RPC_SPOOLSS_OBJ = rpc_server/srv_spoolss.o rpc_server/srv_spoolss_nt.o
RPC_PIPE_OBJ = rpc_server/srv_pipe_hnd.o rpc_server/srv_util.o \
- rpc_server/srv_pipe.o rpc_server/srv_lsa_hnd.o
+ rpc_server/srv_pipe.o rpc_server/srv_lsa_hnd.o
+rpc_server/srv_dce_funnel.o
# These are like they are to avoid a dependency on GNU MAKE
@LSA_DYNAMIC_YES@RPC_MODULES1 = bin/librpc_lsarpc.@SHLIBEXT@
Index: configure.in
===
RCS file: /cvsroot/samba/source/configure.in,v
retrieving revision 1.397
diff -u -r1.397 configure.in
--- configure.in1 Feb 2003 11:00:39 - 1.397
+++ configure.in2 Feb 2003 00:00:40 -
@@ -2165,6 +2165,9 @@
AC_CHECK_LIB(krb5, krb5_auth_con_setkey,
[AC_DEFINE(HAVE_KRB5_AUTH_CON_SETKEY,1,[Whether krb5_auth_con_setkey is available])])
AC_CHECK_LIB(krb5, krb5_auth_con_setuseruserkey,
[AC_DEFINE(HAVE_KRB5_AUTH_CON_SETUSERUSERKEY,1,[Whether krb5_auth_con_setuseruserkey
is available])])
AC_CHECK_LIB(krb5, krb5_locate_kdc, [AC_DEFINE(HAVE_KRB5_LOCATE_KDC,1,[Whether
krb5_locate_kdc is available])])
+ AC_CHECK_LIB(krb5, krb5_get_permitted_enctypes,
+[AC_DEFINE(HAVE_KRB5_GET_PERMITTED_ENCTYPES,1,[Whether krb5_get_permitted_enctypes is
+available])])
+ AC_CHECK_LIB(krb5, krb5_free_ktypes, [AC_DEFINE(HAVE_KRB5_FREE_KTYPES,1,[Whether
+krb5_free_ktypes is available])])
+ AC_CHECK_LIB(krb5, krb5_get_default_in_tkt_etypes,
+[AC_DEFINE(HAVE_KRB5_GET_DEFAULT_IN_TKT_ETYPES,1,[Whether
+krb5_get_default_in_tkt_etypes is available])])
AC_CACHE_CHECK([for addrtype in krb5_address],samba_cv_HAVE_ADDRTYPE_IN_KRB5_ADDRESS,[
AC_TRY_COMPILE([#include krb5.h],
@@ -2198,6 +2201,8 @@
# now see if we can find the gssapi libs in standard paths
+ AC_CHECK_LIB(gssapi, gss_display_status, [LIBS=$LIBS -lgssapi;
+ AC_DEFINE(HAVE_GSSAPI,1,[Whether GSSAPI is available])])
AC_CHECK_LIB(gssapi_krb5, gss_display_status, [LIBS=$LIBS -lgssapi_krb5;
AC_DEFINE(HAVE_GSSAPI,1,[Whether GSSAPI is available])])
Index: include/includes.h
===
RCS file: /cvsroot/samba/source/include/includes.h,v
retrieving revision 1.295
diff -u -r1.295 includes.h
--- include/includes.h 30 Jan 2003 20:36:59 - 1.295
+++ include/includes.h 2 Feb 2003 00:00:41 -
void get_auth_data_from_tkt(DATA_BLOB *auth_data, krb5_ticket *tkt);
krb5_const_principal get_principal_from_tkt(krb5_ticket *tkt);
krb5_error_code krb5_locate_kdc(krb5_context ctx, const krb5_data *realm, struct
sockaddr **addr_pp, int *naddrs, int get_masters);
+krb5_error_code krb5_get_permitted_enctypes(krb5_context context, krb5_enctype
+**enctypes);
+void krb5_free_ktypes(krb5_context context, krb5_enctype *enctypes);
#endif /* HAVE_KRB5 */
Index: libads/kerberos_verify.c
===
RCS file: /cvsroot/samba/source/libads/kerberos_verify.c,v
retrieving revision 1.5
diff -u -r1.5 kerberos_verify.c
--- libads/kerberos_verify.c11 Jan 2003 03:29:31 - 1.5
+++ libads/kerberos_verify.c2 Feb 2003 00:00:41 -
@@ -3,7 +3,7 @@
kerberos utility library
Copyright (C) Andrew Tridgell 2001
Copyright (C) Remus Koos 2001
-
+ Copyright (C) Luke Howard 2003
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
@@ -29,15 +29,14 @@
authorization_data if available
*/
NTSTATUS ads_verify_ticket(ADS_STRUCT *ads, const DATA_BLOB *ticket,
- char **principal, DATA_BLOB *auth_data)
+ char **principal, DATA_BLOB *auth_data,
+ uint8 session_key[16])
{
krb5_context context;
krb5_auth_context auth_context = NULL;
krb5_keytab keytab = NULL;
krb5_data packet;
krb5_ticket *tkt = NULL;
- krb5_data salt;
- krb5_encrypt_block eblock;
int ret, i;
krb5_keyblock *
CVS update: samba/source
Date: Sat Feb 1 11:00:40 2003 Author: jelmer Update of /home/cvs/samba/source In directory dp.samba.org:/tmp/cvs-serv4253 Modified Files: configure.in configure Log Message: NetBSD also supports dynamic libs Revisions: configure.in1.396 = 1.397 http://www.samba.org/cgi-bin/cvsweb/samba/source/configure.in?r1=1.396r2=1.397 configure 1.374 = 1.375 http://www.samba.org/cgi-bin/cvsweb/samba/source/configure?r1=1.374r2=1.375
CVS update: samba/source
Date: Sat Feb 1 12:18:37 2003 Author: jelmer Update of /home/cvs/samba/source In directory dp.samba.org:/tmp/cvs-serv8564 Modified Files: Tag: SAMBA_3_0 configure configure.in Log Message: Merge from HEAD: netbsd supports dynamic libs Revisions: configure 1.282.2.37 = 1.282.2.38 http://www.samba.org/cgi-bin/cvsweb/samba/source/configure?r1=1.282.2.37r2=1.282.2.38 configure.in1.300.2.38 = 1.300.2.39 http://www.samba.org/cgi-bin/cvsweb/samba/source/configure.in?r1=1.300.2.38r2=1.300.2.39
CVS update: samba/source/include
Date: Sat Feb 1 12:18:37 2003 Author: jelmer Update of /home/cvs/samba/source/include In directory dp.samba.org:/tmp/cvs-serv8564/include Modified Files: Tag: SAMBA_3_0 config.h.in Log Message: Merge from HEAD: netbsd supports dynamic libs Revisions: config.h.in 1.166.2.21 = 1.166.2.22 http://www.samba.org/cgi-bin/cvsweb/samba/source/include/config.h.in?r1=1.166.2.21r2=1.166.2.22
CVS update: samba/source/param
Date: Sat Feb 1 13:01:30 2003 Author: abartlet Update of /data/cvs/samba/source/param In directory dp.samba.org:/tmp/cvs-serv10377/param Modified Files: loadparm.c Log Message: We now have client-side SMB signing support! This checking allows us to connect to Microsoft servers the use SMB signing, within a few restrictions: - I've not get the NTLMSSP stuff going - it appears to work, but if you break the sig - say by writing a zero in it - it still passes... - We don't currently verfiy the server's reply - It works against one of my test servers, but not the other... However, it provides an excellent basis to work from. Enable it with 'client signing' in your smb.conf. Doc to come (tomorrow) and this is not for 3.0, till we get it complete. The CIFS Spec is misleading - the session key (for NTLMv1 at least) is the standard session key, ie MD4(NT#). Thanks to jra for the early work on this. Andrew Bartlett Revisions: loadparm.c 1.475 = 1.476 http://www.samba.org/cgi-bin/cvsweb/samba/source/param/loadparm.c?r1=1.475r2=1.476
CVS update: samba/source/include
Date: Sat Feb 1 13:01:31 2003 Author: abartlet Update of /data/cvs/samba/source/include In directory dp.samba.org:/tmp/cvs-serv10377/include Modified Files: client.h Log Message: We now have client-side SMB signing support! This checking allows us to connect to Microsoft servers the use SMB signing, within a few restrictions: - I've not get the NTLMSSP stuff going - it appears to work, but if you break the sig - say by writing a zero in it - it still passes... - We don't currently verfiy the server's reply - It works against one of my test servers, but not the other... However, it provides an excellent basis to work from. Enable it with 'client signing' in your smb.conf. Doc to come (tomorrow) and this is not for 3.0, till we get it complete. The CIFS Spec is misleading - the session key (for NTLMv1 at least) is the standard session key, ie MD4(NT#). Thanks to jra for the early work on this. Andrew Bartlett Revisions: client.h1.55 = 1.56 http://www.samba.org/cgi-bin/cvsweb/samba/source/include/client.h?r1=1.55r2=1.56
CVS update: samba/docs
Date: Sat Feb 1 17:43:45 2003 Author: jerry Update of /data/cvs/samba/docs In directory dp.samba.org:/tmp/cvs-serv26589 Modified Files: Tag: SAMBA_2_2 Samba-HOWTO-Collection.pdf Log Message: fix a few syntax errors in smbpasswd.8.sgml and generate docs Revisions: Samba-HOWTO-Collection.pdf 1.1.2.48 = 1.1.2.49 http://www.samba.org/cgi-bin/cvsweb/samba/docs/Samba-HOWTO-Collection.pdf?r1=1.1.2.48r2=1.1.2.49
CVS update: samba/docs/docbook/manpages
Date: Sat Feb 1 17:43:45 2003 Author: jerry Update of /data/cvs/samba/docs/docbook/manpages In directory dp.samba.org:/tmp/cvs-serv26589/docbook/manpages Modified Files: Tag: SAMBA_2_2 smbpasswd.8.sgml Log Message: fix a few syntax errors in smbpasswd.8.sgml and generate docs Revisions: smbpasswd.8.sgml1.2.2.15 = 1.2.2.16 http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/manpages/smbpasswd.8.sgml?r1=1.2.2.15r2=1.2.2.16
CVS update: samba/docs/docbook/devdoc
Date: Sat Feb 1 19:30:03 2003 Author: jelmer Update of /home/cvs/samba/docs/docbook/devdoc In directory dp.samba.org:/tmp/cvs-serv529 Modified Files: dev-doc.sgml Added Files: rpc_plugin.sgml Log Message: Convert Anthony's RPC doc to SGML/XML Revisions: rpc_plugin.sgml NONE = 1.1 http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/devdoc/rpc_plugin.sgml?rev=1.1 dev-doc.sgml1.9 = 1.10 http://www.samba.org/cgi-bin/cvsweb/samba/docs/docbook/devdoc/dev-doc.sgml?r1=1.9r2=1.10
CVS update: samba/docs/textdocs
Date: Sat Feb 1 19:32:42 2003 Author: jelmer Update of /home/cvs/samba/docs/textdocs In directory dp.samba.org:/tmp/cvs-serv692 Removed Files: RPC_PLUGIN.txt Log Message: Remove textfile from CVS - it's available in SGML now Revisions: RPC_PLUGIN.txt 1.1 = NONE http://www.samba.org/cgi-bin/cvsweb/samba/docs/textdocs/RPC_PLUGIN.txt?rev=1.1
CVS update: samba/source/client
Date: Sun Feb 2 00:11:12 2003 Author: abartlet Update of /data/cvs/samba/source/client In directory dp.samba.org:/tmp/cvs-serv18115/client Modified Files: smbmount.c Log Message: More signing updates - start checking that the server isn't being spoofed. Andrew Bartlett Revisions: smbmount.c 1.60 = 1.61 http://www.samba.org/cgi-bin/cvsweb/samba/source/client/smbmount.c?r1=1.60r2=1.61
CVS update: samba/source/libsmb
Date: Sun Feb 2 00:11:12 2003 Author: abartlet Update of /data/cvs/samba/source/libsmb In directory dp.samba.org:/tmp/cvs-serv18115/libsmb Modified Files: clientgen.c smbencrypt.c Log Message: More signing updates - start checking that the server isn't being spoofed. Andrew Bartlett Revisions: clientgen.c 1.210 = 1.211 http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/clientgen.c?r1=1.210r2=1.211 smbencrypt.c1.83 = 1.84 http://www.samba.org/cgi-bin/cvsweb/samba/source/libsmb/smbencrypt.c?r1=1.83r2=1.84
CVS update: samba/source/rpc_server
Date: Sun Feb 2 05:10:26 2003 Author: abartlet Update of /data/cvs/samba/source/rpc_server In directory dp.samba.org:/tmp/cvs-serv9884/rpc_server Modified Files: srv_netlog_nt.c Log Message: Send the user's session key in the SAMLOGON reply, so that a member server can use smb signing. Andrew Bartlett Revisions: srv_netlog_nt.c 1.69 = 1.70 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_server/srv_netlog_nt.c?r1=1.69r2=1.70
CVS update: samba/source/rpc_parse
Date: Sun Feb 2 05:10:26 2003 Author: abartlet Update of /data/cvs/samba/source/rpc_parse In directory dp.samba.org:/tmp/cvs-serv9884/rpc_parse Modified Files: parse_net.c Log Message: Send the user's session key in the SAMLOGON reply, so that a member server can use smb signing. Andrew Bartlett Revisions: parse_net.c 1.100 = 1.101 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_parse/parse_net.c?r1=1.100r2=1.101
CVS update: samba/source/rpc_parse
Date: Sun Feb 2 05:22:37 2003 Author: abartlet Update of /home/cvs/samba/source/rpc_parse In directory dp.samba.org:/tmp/cvs-serv11260/rpc_parse Modified Files: Tag: SAMBA_3_0 parse_net.c Log Message: Merge from HEAD: Send the session key to the client, allowing it to perform SMB signing. Andrew Bartlett Revisions: parse_net.c 1.85.2.5 = 1.85.2.6 http://www.samba.org/cgi-bin/cvsweb/samba/source/rpc_parse/parse_net.c?r1=1.85.2.5r2=1.85.2.6
