Re: [Samba] samba 3.0, excel 2000, read-only problem
On Thu, Oct 02, 2003 at 09:32:54AM +0500, Dmitry Melekhov wrote: > > Ok, here is a quick patch for the problem of not opening > > Excel file read-only. I'll tidy this up somewhat for 3.0.1 > > but it should tide you over with 3.0.0. > > > > Hello! > > Unfortunately this patch doesn't help with samba 3.0.0. :-( > I'll try to download code from CVS and inform you about results. H. Are you sure ? It fixes it for me (although I need to do some re-working of it). Jeremy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba 3.0, excel 2000, read-only problem
Ok, here is a quick patch for the problem of not opening Excel file read-only. I'll tidy this up somewhat for 3.0.1 but it should tide you over with 3.0.0. Hello! Unfortunately this patch doesn't help with samba 3.0.0. :-( I'll try to download code from CVS and inform you about results. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba-3.0.0 & FreeBSD 5.1 not cooperating
I don't think this made it to the list the first time I sent it... if it did and I missed it, I apologize. Greetings, I think I may be having a slight configuration problem with Samba and FreeBSD-5.1. I'm trying to use FreeBSD's mount_smbfs(8) to mount a remote Samba share onto my local FreeBSD filesystem. With the configuration below, I can read all (almost; explained below) files and directories just fine. All permissions are correct. But whenever I try to write to the share, the write fails and an error is returned, "no such file or directory". If I try to replace a file on the share that already exists I get "permission denied". Windows XP has no problem reading, writing, or otherwise accessing the share, and smbfs has no problem whatsoever with mounting a Windows XP share either. Nothing particularly helpful showed up in a google search. Perhaps a more detailed explanation is in order. The remote server is Samba 3.0.0rc4. The local machine is FreeBSD 5.1-RELEASE. Samba is using the following smb.conf (which I realize isn't very secure, it's just for testing at the moment. Also, testparm doesn't complain about it.): [global] netbios name = POWERFACE workgroup = EILNET security = share log file = /usr/local/samba/var/log.samba socket options = \ TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 encrypt passwords = yes wins support = yes [smbshare] path = /nfs/share guest ok = yes writeable = yes I then added a user with smbpasswd named eil. Now on the FreeBSD machine, I made sure to enable the correct options in the kernel config file and rebuilt whatever needed rebuilding followed by a reboot. I created the following /root/.nsmbrc so that FreeBSD could mount the share at runtime without it prompting for a password. [default] nbns=192.168.0.3 workgroup=EILNET [powerface:eil:smbshare] addr=192.168.0.3 password= Next I added the line for /etc/fstab: //[EMAIL PROTECTED]/smbshare /home/eil/share smbfs rw,noauto 0 0 Finally, I took smbfs.sh.sample and copied it to /usr/local/etc/rc.d/smbfs.sh and rebooted. FreeBSD mounts the share in the proper location automatically and I can read every file and directory. But when I try to copy, move, or otherwise write a file to the share I get: [apex:~]$ cp .profile share/ cp: share/.profile: No such file or directory And when I try to copy or otherwise write to a file that already exists on the share, I get a different error: [apex:~]$ cp share/code/tcl/dbtest.tcl temp/ [apex:~]$ cp temp/dbtest.tcl share/code/tcl/ cp: share/code/tcl/dbtest.tcl: Permission denied Mainly I just want to know if there's any chance that the smb.conf pasted above could be causing the problem in some way. I've already asked in freebsd-questions and got no help except for one person who had the same exact problem, but worked around it with a script. If I can't get anywhere on this soon, I'm going to send in a FreeBSD PR and hope I don't get screamed at. Since I originally wrote most of this, I upgraded to 3.0.0 (no rc) and the problem persists. I also tried fiddling with the UID for the username (eil) to make them the same between the two machines and that didn't help either. Anybody have any suggestions? Thanks in advance if you do! P.S. There is an additional problem with smbfs not listing the contents of some directories. However, I believe this to be a problem with smbfs and I also haven't narrowed it down to a specific test case. C. Ulrich -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbmount not exiting
Well, smbmount is a process that runs until you umount the share. This seems like normal behavior. Joel On Thu, Oct 02, 2003 at 04:01:16AM +0200, Zenon Panoussis wrote: > > The obvious suspect is exit trapping between smbmount and smbmnt, but > that's a suspicion that won't hold in court; it's sheer speculation. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Tuning Linux/Samba for low latency w/ high i/o
On Thu, Oct 02, 2003 at 10:06:50AM +0800, Ow Mun Heng wrote: > >>stream pause for 5 seconds and then continue. > > How can you tell from the vmstat output? how do you read it? I do note that > the bi & b0 values are _much_ higher when you upload some stuffs. (esp your > b0 values) I am watching the video stream and ftp upload on a separate PC, with a console running vmstat on another. > >>server seems to buffer arround 100MB with no problem, > What is buffering around 100MB? is this the bi value? When I do the FTP upload, the ftp server is buffering arround 100MB (the total isn't reflected in vmstat). -Max -- Max Clark -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbmount not exiting
I find when calling a program from a bash script, the bash script always waits for the called program to return. This is normal behavior as I understand it. You have to use the & option to get the bash script to continue after calling the program without the program exiting first. eg. !#/bin/bash /bin/mount etc & more statements. Now, this won't return the exit code of your mount attempt You may have to capture the output of the mount command with /bin/mount etc > outputmessages 2>&1 & and then examine the contents of outputmessages to see if you are mounted. This could be a nuisance. You could also capture the output with: output=`/bin/mount/etc &` and then examine the variable $output for strings suggesting success or failure of the mount attempt. Or, you could launch a daemon before you run the mount command. The daemon would be a program which would run each second (sleep works fine here) which checks for the mount and reports success, eg. !#/bin/bash while [ 1 -eq 1 ] do sleep 1 mount | grep \/mount\/dir [ $? -eq 0 ] && { echo Mounted successfully exit } done If you call this checker, this might work: !#/bin/bash checker & mount etc I am a big fan of simple scripts to solve simple problems. Joel On Thu, Oct 02, 2003 at 12:46:11AM +0200, Karin Spaink wrote: > > The following scriptlet, containing a wrong password among the > mount options, > > #!/bin/bash > /bin/mount -t smbfs -o \ > "netbiosname=mymachine,workgroup=group,username=user, \ > password=wrongpasswd,ro,debug=4" //machine/c /mnt/dir > /bin/echo "Exit $?" > > returns invariably > > mount.smbfs started (version 2.2.7a-security-rollup-fix) > added interface ip=192.168.0.53 bcast=192.168.0.255 nmask=255.255.255.0 > resolve_lmhosts: Attempting lmhosts lookup for name machine<0x20> > getlmhostsent: lmhost entry: 127.0.0.1 localhost > resolve_hosts: Attempting host lookup for name machine<0x20> > Connecting to 192.168.0.50 at port 139 > 3457: session request ok > 3457: session setup failed: ERRDOS - ERRnoaccess (Access denied.) > SMB connection failed > Exit 1 > > However, the exact same code containing the right password > hangs at the end of the line and doesn't return any exit code > at all: > > #!/bin/bash > /bin/mount -t smbfs -o \ > "netbiosname=mymachine,workgroup=group,username=user, \ > password=rightpasswd,ro,debug=4" //machine/c /mnt/dir > /bin/echo "Exit $?" > > reports > > mount.smbfs started (version 2.2.7a-security-rollup-fix) > added interface ip=192.168.0.53 bcast=192.168.0.255 nmask=255.255.255.0 > resolve_lmhosts: Attempting lmhosts lookup for name machine<0x20> > getlmhostsent: lmhost entry: 127.0.0.1 localhost > resolve_hosts: Attempting host lookup for name machine<0x20> > Connecting to 192.168.0.50 at port 139 > 3472: session request ok > 3472: session setup ok > 3472: tconx ok > > That's all. The share is correctly mounted and accessible, but > the script hangs forever waiting for mount/smbmount to exit. > > Substituting smbmount //machine/c /mnt/dir -o [same options] > for the mount command makes absolutely no difference. Increasing > the debug level to 10 gives no additional information after > "tconx ok". The log contains entries like > > [2003/10/02 02:27:34, 0] client/smbmount.c:send_fs_socket(383) > mount.smbfs: entering daemon mode for service \\machine\c, pid=3487 > > and nothing else. > > Running mount with strace -v -f -s 128 gives the following: > > > > [pid 3493] open("/mnt/machine", O_RDONLY|O_LARGEFILE) = 6 > [pid 3493] ioctl(6, SMB_IOC_NEWCONN, 0xbfffd080) = 0 > [pid 3493] setsid()= 3493 > [pid 3493] kill(3492, SIGTERM) = 0 > [pid 3493] close(6)= 0 > [pid 3493] brk(0) = 0x811e000 > [pid 3493] brk(0) = 0x811e000 > [pid 3493] brk(0x80fe000) = 0x80fe000 > [pid 3493] brk(0) = 0x80fe000 > [pid 3493] close(3)= 0 > [pid 3493] open("/dev/null", O_WRONLY|O_LARGEFILE) = 3 > [pid 3493] getrlimit(0x7, 0xbfffd000) = 0 > [pid 3493] close(0)= 0 > [pid 3493] close(1)= 0 > [pid 3493] close(2)= 0 > [pid 3493] close(4)= 0 > [pid 3493] close(5)= 0 > [pid 3493] close(6)= -1 EBADF (Bad file descriptor) > [pid 3493] close(7)= -1 EBADF (Bad file descriptor) > [pid 3493] close(8)= -1 EBADF (Bad file descriptor) > [pid 3493] close(9)= -1 EBADF (Bad file descriptor) > > > > [pid 3493] close(1021) = -1 EBADF (Bad file descriptor) > [pid 3493] close(1022) = -1 EBADF (Bad file descriptor) > [pid 3493] close(1023)
Re: FW: [Samba] Samba 3.0.0 rpms
The error on samba-3.0.0-1.i386.rpm on RH9 $ rpm -Fhv samba-3.0.0-1.i386.rpm warning: samba-3.0.0-1.i386.rpm: V3 DSA signature: NOKEY, key ID 2f87af6f I haven't tried -2 yet regards Stephen Collier -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba 3.0, excel 2000, read-only problem
On Wed, Oct 01, 2003 at 10:33:12AM +0500, Dmitry Melekhov wrote: > Jeremy Allison wrote: > > On Wed, Oct 01, 2003 at 08:11:54AM +0500, Dmitry Melekhov wrote: > > > >>Hello! > >> > >>I just tried to move one of our servers to samba 3.0 and found that it > >>has problems with read-only excel files. > >>Excel simply can't open them. > >>On 2.2.8a Excel successefully opens read-only files. > >> > >>Server is Suse 8.1, kernel 2.4.20. > > > > > > What version of Excel please ? > > > Oops! Sorry! > Excel 2000. 9.0.4402 SR-1 Ok, here is a quick patch for the problem of not opening Excel file read-only. I'll tidy this up somewhat for 3.0.1 but it should tide you over with 3.0.0. Thanks for the report. Jeremy. Index: smbd/error.c === RCS file: /data/cvs/samba/source/smbd/error.c,v retrieving revision 1.16.2.1 diff -u -r1.16.2.1 error.c --- smbd/error.c5 Nov 2002 21:47:03 - 1.16.2.1 +++ smbd/error.c2 Oct 2003 00:52:33 - @@ -61,9 +61,6 @@ eclass = unix_ERR_class; ecode = unix_ERR_code; ntstatus = unix_ERR_ntstatus; - unix_ERR_class = SMB_SUCCESS; - unix_ERR_code = 0; - unix_ERR_ntstatus = NT_STATUS_OK; } else { while (unix_dos_nt_errmap[i].dos_class != 0) { if (unix_dos_nt_errmap[i].unix_error == errno) { @@ -93,6 +90,10 @@ if (errno != 0) DEBUG(3,("error string = %s\n",strerror(errno))); + unix_ERR_class = SMB_SUCCESS; + unix_ERR_code = 0; + unix_ERR_ntstatus = NT_STATUS_OK; + /* * We can explicitly force 32 bit error codes even when the * parameter "nt status" is set to no by pre-setting the -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Sessions
Hi Stefan, From: "Stefan G. Weichinger" > >> Sorry, I mean constantly increase of memory not decrease. The problem is >> that there are too many Samba sessions opened and eventually drives my >> server to a complete halt. It seems to me some used sessions are not >> killed or freed from memory. Is there a way to fix this? I have been running >> Samba happily for the last 6 months. For the last couple of days I'm forced >> to reboot the server 4 to 5 times 8( Please help. > > What do your log files look like? ** /var/log/samba/log.nmbd ** [2003/10/01 17:21:16, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(235) find_response_record: response packet id 28291 received with no matching record. ** /var/log/samba/log.smbd ** [2003/10/01 17:21:12, 0] smbd/server.c:main(707) smbd version 2.2.7a-security-rollup-fix started. Copyright Andrew Tridgell and the Samba Team 1992-2002 ** /var/log/samba/log.winbindd ** [2003/10/01 17:21:13, 0] nsswitch/winbindd.c:process_loop(626) process_loop: Invalid request size (1701996389) sent, should be (1304) Could you see anything strange behavior in this? I'm seeing as memory got filled up, one of the samba volume got dismounted. I can't be sure if it is memory error or disk error. But BIOS memory check and fsck doesn't seem to find any errors. I'm running XFS. Would you have other recommendations that I can check? Regards, Norman -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] V. 3 and SuSE
Hey guys, any word on when the SuSE RPMs will be released? I've got a SuSE 8.0 test box at home that I'm kinda dying to get running with the new version. I've got 2.2.8a running on it now... it's much more stable than 2.2.3 was. It's a very small test domain, running WINS and as a PDC. Thanks, and have a great weekend! Jared -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
FW: [Samba] Samba 3.0.0 rpms
-Original Message- From: Stephen Collier Sent: Thursday, 2 October 2003 10:26 AM To: 'Gerald (Jerry) Carter' Subject: RE: [Samba] Samba 3.0.0 rpms Jerry, Thanks for the prompt reply. I obtained them from us1.samba.org and au1.samba.org I tried from both sites. It seems so strange as rc2, rc3 and rc4 installed perfectly. We were getting problems with them with current (up2date server) but that is a bit irrelevent. I'll download the 3.0.0-2 and see let you know the results. regards Stephen Collier -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0 and SSL/TLS
Hi all, We want to use the ldap backend with Samba 3.0. Can anyone direct us to some comprehensive documentation on setting up Samba 3.0 with SSL? The Samba-collection-howto gives some general info. The OpenSSL website has little documentation. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Password Expiration on Samba 3.0Beta2+RC4 on Debian Testing
Team: I was running Samba3.0Beta2 and had the 2 week password expiration date issue. I just dist-upgraded my Debian Testing system to Samba 3.0Beta2+RC4 having seen that one could fix the password expiration by then deleting /var/lib/samba/account-policy.tdb. Did that, it didn't work. How do I set and change the password expiration in Samba 3.0? pdbedit -r -u username -P "Password must change" -C 9 doesn't work. madmac -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Win2k Profile Push Error?????
Hi all, I'm currently having issues with my PDC saving a win2k profile to the server. Details:- OS RedHat 9 SMB 2.2.7a (installed from the RPM's on the install disk) I have included a copy of my smb.con file at the bottom of this message, and copies of the machine logs as attachments (thought they would be too big to include here) The problem I'm getting is that my WinXP machines seem to be logging in and out fine, saving the roaming profile without error. The trouble comes when I'm trying to log in with win2k. It bound the PDC without error, logged in for the first time with out error.But when I log out 2K complains about not being able to write to the profile directory, with a detail note of "inefficient resources". I only have the 1 2K machine at present,so I'm not sure if it is a client config issue or if it's the PDC. (win2k sp2, installed sp2 to see if it resolved the issue, but it didn't) Can anyone help or point me in the right direction. TIA Steve smb.conf : - # Global parameters [global] workgroup = TELETEQ.MINE.NU netbios name = AZTEQ-FS-WINS1 server string = Samba Server encrypt passwords = Yes obey pam restrictions = Yes pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* unix password sync = Yes log level = 3 log file = /var/log/samba/%m.log socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 domain logons = Yes dns proxy = No printing = cups add user script = /usr/sbin/useradd -d /dev/null -g 100 \ -s /bin/false -M %u [homes] comment = Home Directories valid users = %S read only = No create mask = 0664 directory mask = 0775 browseable = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [netlogon] path = /netlogon browseable = No -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbmount not exiting
The following scriptlet, containing a wrong password among the mount options, #!/bin/bash /bin/mount -t smbfs -o \ "netbiosname=mymachine,workgroup=group,username=user, \ password=wrongpasswd,ro,debug=4" //machine/c /mnt/dir /bin/echo "Exit $?" returns invariably mount.smbfs started (version 2.2.7a-security-rollup-fix) added interface ip=192.168.0.53 bcast=192.168.0.255 nmask=255.255.255.0 resolve_lmhosts: Attempting lmhosts lookup for name machine<0x20> getlmhostsent: lmhost entry: 127.0.0.1 localhost resolve_hosts: Attempting host lookup for name machine<0x20> Connecting to 192.168.0.50 at port 139 3457: session request ok 3457: session setup failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed Exit 1 However, the exact same code containing the right password hangs at the end of the line and doesn't return any exit code at all: #!/bin/bash /bin/mount -t smbfs -o \ "netbiosname=mymachine,workgroup=group,username=user, \ password=rightpasswd,ro,debug=4" //machine/c /mnt/dir /bin/echo "Exit $?" reports mount.smbfs started (version 2.2.7a-security-rollup-fix) added interface ip=192.168.0.53 bcast=192.168.0.255 nmask=255.255.255.0 resolve_lmhosts: Attempting lmhosts lookup for name machine<0x20> getlmhostsent: lmhost entry: 127.0.0.1 localhost resolve_hosts: Attempting host lookup for name machine<0x20> Connecting to 192.168.0.50 at port 139 3472: session request ok 3472: session setup ok 3472: tconx ok That's all. The share is correctly mounted and accessible, but the script hangs forever waiting for mount/smbmount to exit. Substituting smbmount //machine/c /mnt/dir -o [same options] for the mount command makes absolutely no difference. Increasing the debug level to 10 gives no additional information after "tconx ok". The log contains entries like [2003/10/02 02:27:34, 0] client/smbmount.c:send_fs_socket(383) mount.smbfs: entering daemon mode for service \\machine\c, pid=3487 and nothing else. Running mount with strace -v -f -s 128 gives the following: [pid 3493] open("/mnt/machine", O_RDONLY|O_LARGEFILE) = 6 [pid 3493] ioctl(6, SMB_IOC_NEWCONN, 0xbfffd080) = 0 [pid 3493] setsid()= 3493 [pid 3493] kill(3492, SIGTERM) = 0 [pid 3493] close(6)= 0 [pid 3493] brk(0) = 0x811e000 [pid 3493] brk(0) = 0x811e000 [pid 3493] brk(0x80fe000) = 0x80fe000 [pid 3493] brk(0) = 0x80fe000 [pid 3493] close(3)= 0 [pid 3493] open("/dev/null", O_WRONLY|O_LARGEFILE) = 3 [pid 3493] getrlimit(0x7, 0xbfffd000) = 0 [pid 3493] close(0)= 0 [pid 3493] close(1)= 0 [pid 3493] close(2)= 0 [pid 3493] close(4)= 0 [pid 3493] close(5)= 0 [pid 3493] close(6)= -1 EBADF (Bad file descriptor) [pid 3493] close(7)= -1 EBADF (Bad file descriptor) [pid 3493] close(8)= -1 EBADF (Bad file descriptor) [pid 3493] close(9)= -1 EBADF (Bad file descriptor) [pid 3493] close(1021) = -1 EBADF (Bad file descriptor) [pid 3493] close(1022) = -1 EBADF (Bad file descriptor) [pid 3493] close(1023) = -1 EBADF (Bad file descriptor) [pid 3493] dup2(3, 1) = 1 [pid 3493] dup2(3, 2) = 2 [pid 3493] close(3)= 0 [pid 3493] umask(022) = 022 [pid 3493] open("/var/log/samba/smbmount.log", O_WRONLY|O_APPEND|O_CREAT|O_LARGEFILE, 0666) = 0 [pid 3493] fstat64(0, {st_dev=makedev(3, 2), st_ino=32770, st_mode=S_IFREG|0644, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=8, st_size=3221, st_atime=2003/10/02-02:28:44, st_mtime=2003/10/02-02:27:34, st_ctime=2003/10/02-02:27:34}) = 0 [pid 3493] mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40018000 [pid 3493] fstat64(0, {st_dev=makedev(3, 2), st_ino=32770, st_mode=S_IFREG|0644, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=8, st_size=3221, st_atime=2003/10/02-02:28:44, st_mtime=2003/10/02-02:27:34, st_ctime=2003/10/02-02:27:34}) = 0 [pid 3493] _llseek(0, 3221, [3221], SEEK_SET) = 0 [pid 3493] munmap(0x40018000, 4096)= 0 [pid 3493] umask(022) = 022 [pid 3493] time(NULL) = 1065054607 [pid 3493] geteuid32() = 0 [pid 3493] write(0, "[2003/10/02 02:30:07, 0] client/smbmount.c:send_fs_socket(383)\n", 63) = 63 [pid 3493] getpid()= 3493 [pid 3493] geteuid32() = 0 [pid 3493] write(0, " mount.smbfs: entering daemon mode for service machine\\c, pid=3493\n", 69) = 69 [pid 3493] rt_sigaction(SIGUSR1, {0x804b150, [USR1], SA_RES
Re: [Samba] Samba Sessions
Hi, Norman Zhang, am Mittwoch, 01. Oktober 2003 um 20:52 schrieben Sie: NZ> Sorry, I mean constantly increase of memory not decrease. The problem is NZ> that there are too many Samba sessions opened and eventually drives my NZ> server to a complete halt. It seems to me some used sessions are not NZ> killed or freed from memory. Is there a way to fix this? I have been running NZ> Samba happily for the last 6 months. For the last couple of days I'm forced NZ> to reboot the server 4 to 5 times 8( Please help. What do your log files look like? From what you tell us they should be pretty active ... If there are none, set your "log level"-parameter up to 1 or 2 for a beginning. And think about if anything has changed in your IT environment, it always seems as if "nothing has been changed" as long as you haven´t found the reason of the problem ... Have you changed your smb.conf? New clients in? More clients? Rebooting servers is something that should be avoided - it´s not cool ;-) Best regards, Stefan G. Weichinger mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] New RedHat binaries posted
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Just a heads up I've posted new 3.0.0 packages (3.0.0-2) for RedHat 7.3, 8.0, & 9.0. The only fix included was to ensure that the /lib/libnss_winbind.so.2 link is created. The packages are located at ~ http://download.samba.org/samba/ftp/Binary_Packages/RedHat/ The mirrors will update shortly. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/e04SIR7qMdg1EfYRAoGfAJ9HnHaJKbRksfmDGS86RnWvr2qBNACg6GMn 1cu5F1LzrnBWWyveHg63YlA= =ROHg -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Puzzling - File transfer speed variances
You wrote: w> Please has anyone had similiar problems!! there were 2 replies to your questions yesterday. Please look at them in your mailing-list-account´s inbox or an archive of the samba-list. Stefan G. Weichinger mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] username/group not being preserved
When I connect to a share on my samba server using either smbclient or a windows box and I create a file, the new file comes up with * for owner and nobody for group. How do I get it to set the uid/gid of the file to the user/group of the user that created the file? Mathew Granzow [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Using SAMBA to print PDF files
Hello, We currently use SAMBA to print from our Sun server to NT printers. This configuration is also able to print PostScript files w/o problems. However, I am not able to get PDF files to print correctly. The HP printer just prints the PDF commands w/o interpreting them. Am I missing a switch or setting when sending the PDF file to SAMBA or do I need an extra driver or something or is it not possible at all? Right now, I am thinking of converting the PDF to PS and then printing it but it is causing a problem with remote printing (on a printer in Brazil). Can you help? Please email me directly at [EMAIL PROTECTED] Thanks in advance and best regards, Bipul. [EMAIL PROTECTED] PS: I am just an Oracle developer and have not been involved with Samba installation or administration. So, I apologize in advance if I am not providing sufficient information. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 3.0.0, winbind issues
I just upgraded our system here to 3.0.0 from RC4 last night. As usual I built an RPM from the source RPM after adding --with-acl-support to the specfile. I found that unlike previous RCs, RPM would not upgrade to 3.0.0 using -Fvh. In the end I removed RC4 and then installed 3.0.0 in the normal way (backing up and restoring /etc/samba and /var/cache/samba). However, the real issue is that we're still having problems with winbind. It appears that sometimes for whatever reason winbind can't contact the domain controller, and then without trying to contact one of the other DCs stops being able to look up domain groups/users. Here is an excerpt from log.winbindd: --- snip [2003/10/02 04:49:00, 3] libads/ldap.c:ads_connect(218) Connected to LDAP server 192.168.55.6 [2003/10/02 04:49:00, 3] libads/ldap.c:ads_server_info(1886) got ldap server name [EMAIL PROTECTED], using bind path: dc=CJNTECH [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(184) got OID=1 2 840 48018 1 2 2 [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(184) got OID=1 2 840 113554 1 2 2 [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(184) got OID=1 2 840 113554 1 2 2 3 [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(184) got OID=1 3 6 1 4 1 311 2 2 10 [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(191) got [EMAIL PROTECTED] [2003/10/02 04:49:00, 3] libads/ldap.c:ads_do_paged_search(451) ldap_search_ext_s((objectCategory=group)) -> Can't contact LDAP server [2003/10/02 04:49:00, 3] libads/ldap_utils.c:ads_do_search_retry(60) Reopening ads connection to realm 'CJNTECH' after error Can't contact LDAP server [2003/10/02 04:49:00, 3] libads/ldap.c:ads_connect(218) Connected to LDAP server 192.168.55.6 [2003/10/02 04:49:00, 3] libads/ldap.c:ads_server_info(1886) got ldap server name [EMAIL PROTECTED], using bind path: dc=CJNTECH [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(184) got OID=1 2 840 48018 1 2 2 [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(184) got OID=1 2 840 113554 1 2 2 [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(184) got OID=1 2 840 113554 1 2 2 3 [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(184) got OID=1 3 6 1 4 1 311 2 2 10 [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(191) got [EMAIL PROTECTED] [2003/10/02 04:49:00, 3] libads/ldap.c:ads_do_paged_search(451) ldap_search_ext_s((objectCategory=group)) -> Can't contact LDAP server [2003/10/02 04:49:00, 3] libads/ldap_utils.c:ads_do_search_retry(60) Reopening ads connection to realm 'CJNTECH' after error Can't contact LDAP server [2003/10/02 04:49:00, 3] libads/ldap.c:ads_connect(218) Connected to LDAP server 192.168.55.6 [2003/10/02 04:49:00, 3] libads/ldap.c:ads_server_info(1886) got ldap server name [EMAIL PROTECTED], using bind path: dc=CJNTECH [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(184) got OID=1 2 840 48018 1 2 2 [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(184) got OID=1 2 840 113554 1 2 2 [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(184) got OID=1 2 840 113554 1 2 2 3 [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(184) got OID=1 3 6 1 4 1 311 2 2 10 [2003/10/02 04:49:00, 3] libads/sasl.c:ads_sasl_spnego_bind(191) got [EMAIL PROTECTED] [2003/10/02 04:49:00, 1] nsswitch/winbindd_ads.c:enum_dom_groups(218) enum_dom_groups ads_search: Success [2003/10/02 04:49:00, 3] nsswitch/winbindd_group.c:get_sam_group_entries(526) get_sam_group_entries: could not enumerate domain groups! Error: NT_STATUS_UNSUCCESSFUL --- snip In the smb.conf, "password server" is set to *, so I would have expected winbind upon failing the connection to one DC to switch to one of the other DCs in our domain (of which there are 3). On the other hand, maybe it is getting half-way through the connection and then being cut off, in which case it just tries the same one again. The odd thing is this mostly seems to be happening at strange hours when nobody would be using the Samba server, though there probably would have been some users logged in via Citrix to the DC which is being contacted above. BTW, I haven't yet seen any more outright crashes of winbind as described in my "winbind RC4 crash" post, but I am still monitoring. Winbind has basically been flaky ever since we started using the 3.0 betas, and we really need to sort out why. We are also having problems with roaming profiles randomly failing to copy and folder redirection failing since we went to RC2, although I haven't been able to find any supporting log entries - Windows is claiming "the security ID cannot be assigned as the owner of this object" or "access denied". Cheers, Paul -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba-3.0.0-1 tdb_fetch failed
I had this issue when using the Adobe Windows NT/2K/XP dlls as described in the CUPS-HOWTO section on installing drivers on the server. You should replace these files with the cups-samba drivers. There are probably newer ones, but the URL I've got is here: ftp://ftp.easysw.com/pub/cups/winnt Good Luck! Chris On Wed, 2003-10-01 at 10:57, Gerald (Jerry) Carter wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > [EMAIL PROTECTED] wrote:ftp://ftp.easysw.com/pub/cups/winnt > | RH9 on intel, with samba-built RH9 samba 3 rpm freshly installed. > | > | I have a raw cups printer which samba picks up, but when a client > | connects (root) and selects the host's "printers" folder, a right click > | on the printer and properties causes a small delay and then the msgbox: > | "Printer Properties could not be displayed, operation could not be > | completed." > > > Can you send me a level 10 log file off line? > Also, have you tried setting "default devmode = yes"? > > > > > > cheers, jerry > ~ -- > ~ Hewlett-Packard- http://www.hp.com > ~ SAMBA Team -- http://www.samba.org > ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc > ~ "You can never go home again, Oatman, but I guess you can shop there." > ~--John Cusack - "Grosse Point Blank" (1997) > > -BEGIN PGP SIGNATURE- > Version: GnuPG v1.2.1 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQE/evlsIR7qMdg1EfYRAvknAJ99UFzOYxo4g42RtMOgh7c4keBKrQCgjlvH > RDC0uaUxn48Pv/0WYKuu9iQ= > =QLbg > -END PGP SIGNATURE- -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Another bug?
On Sun, Sep 28, 2003 at 10:57:12AM +0200, MaXxX wrote: > # smbpasswd > New SMB password: ^D > Retype new SMB password: ^D > Segmentation fault > > > Note that I tried ^D because ^C didn't work. Am I right that it > _should_ terminate the program, and ^D should _not_ result in a > segfault..? Yep. fixed in SAMBA_3_0 CVS. Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Introduction, and Samba-3 HOWTO and Reference Guide
Hi All, I am the editor at Prentice Hall PTR working with John Terpstra and Jelmer Vernooij on the publication of The Official Samba-3 HOWTO and Reference Guide. I have been lurking on the list, interested in seeing the comments regarding the release of Samba-3, and wanted to introduce myself. Also, since we have received so many queries regarding the book, John asked me to let you know the status. The book is at the printer's right now. It will be in our warehouse Oct 21 with availability through all retail outlets about 10 days later, including overseas outlets soon after that. You can preorder the book right now through Amazon. I promise not to be commercial in future posts, but would be happy to answer any questions. I hope you will find the book useful, and look forward to receiving any comments you may have on it. Thanks in advance. Jill Jill Harry Executive Editor Prentice Hall PTR 5585 Bear Creek Drive Cathey's Valley, CA 95306 209-374-3402 209-374-3406 fax www.phptr.com This email may contain confidential material. If you were not an intended recipient, please notify the sender and delete all copies. We may monitor email to and from our network. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Size of locking.tdb?
Hi Gerald. Date sent: Wed, 01 Oct 2003 13:41:22 -0500 From: "Gerald (Jerry) Carter" <[EMAIL PROTECTED]> To: Alexey Lobanov <[EMAIL PROTECTED]> Copies to: [EMAIL PROTECTED] Subject:Re: [Samba] Size of locking.tdb? > we never pack TDB's. You can safely remove the > tdb after shutdown though. What size are you seeing? Great. I know wtf. Linux 2.4.any, Samba 2.2.any. When TDB's reside on "async" mounted ext2 partition, locking.tdb size FOLLOWS the number of records. From 25 kilobytes to hundreeds of kilobytes, and back. When /var is mounted "sync", the database really stays at maximum size (now 548864 bytes after >3000 records at peak). "use mmap" does not affect this behavior. It is difficult for me to say where is the exact bug resides: in Samba or in Linux 2.4 kernel. But the name of bug seems to be "non-coherent access". It is also difficult to say now if "sync" mounting is a sufficient workaround. At least, it is not fatal for performance if /var/spool and /var/log are mounted separately. And it is funny that this TDB "packing" which definitely happens at async Linux filesystem is not necessary fatal for locking database contents. Looks like in this case Samba dies in quite rare set of conditions. Maybe, when the number of records falls very quickly from 2000 to 50, "accounting team go home". Maybe not. Thank you! Alexey -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba - other mysql errors
Hi There... I guess i got a simmilar problem as Collen. I configured my samba3 with mysql as PDC. I can add users and connect with them to the shares. Even the Workstation account is created automaticaly. But if i try to logon to this domain Win2k tells me: "The system can't logon to the domain the Workstationaccount is missing in the domain or the password for the workstationaccount (??) is incorect" the smb logfile (loglevel = 2 auth:2): [2003/10/01 20:42:04, 2] passdb/pdb_interface.c:make_pdb_methods_name(437) No builtin backend found, trying to load plugin [2003/10/01 20:42:04, 2] lib/module.c:do_smb_load_module(64) Module '/usr/lib/samba/pdb/mysql.so' loaded [2003/10/01 20:42:04, 1] passdb/pdb_mysql.c:mysqlsam_init(922) Connecting to database server, host: localhost, user: samba, password: bullshit, database: tux_net, port: 3306 [2003/10/01 20:42:04, 2] passdb/pdb_interface.c:make_pdb_methods_name(437) No builtin backend found, trying to load plugin [2003/10/01 20:42:04, 2] lib/module.c:do_smb_load_module(64) Module '/usr/lib/samba/pdb/mysql.so' loaded [2003/10/01 20:42:04, 1] passdb/pdb_mysql.c:mysqlsam_init(922) Connecting to database server, host: localhost, user: samba, password: bullshit, database: tux_net, port: 3306 [2003/10/01 20:42:04, 2] smbd/reply.c:reply_special(93) netbios connect: name1=WAVE-MASTER name2=BINEO [2003/10/01 20:42:04, 2] smbd/reply.c:reply_special(100) netbios connect: local=wave-master remote=bineo, name type = 0 [2003/10/01 20:42:04, 0] lib/util_sock.c:get_socket_addr(919) getpeername failed. Error was Der Socket ist nicht verbunden [2003/10/01 20:42:04, 0] lib/util_sock.c:write_socket_data(388) write_socket_data: write failure. Error = Die Verbindung wurde vom Kommunikationspartner zurückgesetzt [2003/10/01 20:42:04, 0] lib/util_sock.c:write_socket(413) write_socket: Error writing 4 bytes to socket 18: ERRNO = Die Verbindung wurde vom Kommunikationspartner zurückgesetzt [2003/10/01 20:42:04, 0] lib/util_sock.c:send_smb(585) Error writing 4 bytes to client. -1. (Die Verbindung wurde vom Kommunikationspartner zurückgesetzt) [2003/10/01 20:42:04, 2] smbd/server.c:exit_server(558) Closing connections what's going on here? thanks Marco -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Sessions
Hi, Sorry, I mean constantly increase of memory not decrease. The problem is that there are too many Samba sessions opened and eventually drives my server to a complete halt. It seems to me some used sessions are not killed or freed from memory. Is there a way to fix this? I have been running Samba happily for the last 6 months. For the last couple of days I'm forced to reboot the server 4 to 5 times 8( Please help. Regards, Norman "Ow Mun Heng" wrote in message >>I noticed that memory is constantly decreasing when I typed free. I'm no expert but I think samba takes up like 2-3 MB per connection. (I'm not sure about overheads) SO.. I think this is normal Cheers, Mun Heng, Ow -Original Message- From: Norman Zhang Sent: Wednesday, October 01, 2003 7:59 AM Hi, I have a Linux box with 512MB RAM and running Samba 2.2.7. I noticed that memory is constantly decreasing when I typed free. If I run ps aux, I see that more and more samba sessions are opened, some by root and some by users. Is this normal? Won't Samba close unused sessions before opening new sessions? Or is this a memory leak somewhere. Regards, Norman -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Confusion over case sensitivity
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, I have a little confusion over one of Samba's configuration options and I'd like a little clarification over what it does and also what it's intended to do, if those two are different! In my smb.conf I have 'case sensitive = yes', along with a couple of the other options that refer to case. The smb.conf man page says: case sensitive = yes/no ~ controls whether filenames are case sensitive. If they aren't then ~ Samba must do a filename search and match on passed names However, if I cd to a mounted samba share I get the following results from a shell: [EMAIL PROTECTED] $ touch test [EMAIL PROTECTED] $ file test test: empty [EMAIL PROTECTED] $ file Test Test: empty [EMAIL PROTECTED] $ file test2 test2: Can't stat `test2' (No such file or directory) IMHO, the correct outcome would be for 'file Test' to have yeilded the 'Can't stat...' message too, as i(n a case sensitive environment) the file 'Test' does not exist, only 'test' does. Is this what I should be seeing? If it is, can someone give me a better illustration of what 'case sensitive = yes' actually does? Many thanks, Andy Arbon -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/eyIsX3TTUvZURBERAortAKChbuEWa2awKJaThjFW7UKbRUKS7gCgo3qK eRqXS/EqMwVTh0A0HOXtff8= =6DAt -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Size of locking.tdb?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alexey Lobanov wrote: | Hi folks. | | I continue to fight with regular locking database damage in | Linux box. See Bugzilla Bug 370. | | The current question to gurus: what is the RIGHT | behavoir of locking.tdb size? Should it decrease when | the number of records decreases? Or, it should stay at | maximal reached capacity? we never pack TDB's. You can safely remove the tdb after shutdown though. What size are you seeing? cheers, jerry - -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/ex/SIR7qMdg1EfYRAkP1AJ0Xb5yi0yH4r8ajZbhzHNgObty50ACgm9+B zf/5syr5SYvt3X6kEQj71eA= =Rgdf -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Size of locking.tdb?
Hi folks. I continue to fight with regular locking database damage in Linux box. See Bugzilla Bug 370. The current question to gurus: what is the RIGHT behavoir of locking.tdb size? Should it decrease when the number of records decreases? Or, it should stay at maximal reached capacity? Alexey -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Include= is being ignored
I have the following Problem, include doesn't seem to work very well, its VERY intermitantly. The files are attached below along with an smbclient output. Basically I am setting up a PUBLIC share, that if I connect to will give me admin access. It contains service packs and fixes, so when I install someones system, they can just click and connect, without being prompted for a password. However, it should in theory give me username: sjr access to that as admin. That would allow me to write, and to delete files there. I attached a %u to the comment, and it shows the correct user name, and the file exists, I've checked and rechecked. I tried both %U and %u. If I set the file to be included forcefully and statically it works otherwise no. Basically the comment should tell me that its working perfectly it should change, but it doesn't. I'm using Samba 3.0 Final, from Debian Packages. Any idea. smb.conf== [data] browseable = yes path = /data public = yes writeable = no force create mode = 644 force directory mode = 755 force user = pub guest ok = yes guest account = pub force group = pub comment = Public Data Drive %U include = /etc/samba/%U ==/etc/samba/sjr = force user = sjr writeable = yes comment = Adminstrative Access: Public Data Drive = smbclient output === fermat:/home/sjr# smbclient -L 192.168.0.5 -U sjr added interface ip=192.168.0.2 bcast=192.168.0.255 nmask=255.255.255.0 Password:password Domain=[SJRX.NET] OS=[Unix] Server=[Samba 3.0.0-Debian] Sharename Type Comment - --- data Disk Public Data Drive sjr IPC$ IPC IPC Service (Duron 900, 512 MB RAM, 100 Mb/s Connegction, Running Debian UNstable 3.0r1 and Samba: 3.0.0-Debian) ADMIN$ IPC IPC Service (Duron 900, 512 MB RAM, 100 Mb/s Connegction, Running Debian UNstable 3.0r1 and Samba: 3.0.0-Debian) sjrDisk Home Directories Server Comment ---- GAUSS TURING Duron 900, 512 MB RAM, 100 Mb/s Connegction, Run WorkgroupMaster ---- SJRX.NET GAUSS -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbmount issues
Samba List: I am running samba-client 2.2.7-5.8.0 and am trying to use the smbmount command to mount a windows share to my RH8.0 Linux box. Here is the command I have tried using: smbmount "server.hood.edu\\share" mntpoint -o username=domain\username password=mypass When I do this, I get a failed error message and it prompts me for the password session request to server.hood.edu failed (Called name not present) Password: Using smbmount "server\\share" mntpoint -o username=domain\username password=mypass I get session setup failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed My purpose is to be able to script mounting a windows share to copy some files to my linux directory so I need to be able to mount and dismount this share through my script. So far it is not working by feeding the password on the commandline. When it prompts me for a password if I enter it the mount is successful. I have also tried feeding the username and password using credentials=pass.txt where I have username=bruce and password=mypass on separate lines but I get the same errors. My windows server uses NT4 domain authenication for attaching to this share. Has anyone been able to get this to work or any ideas on how I can fix this? Bruce Embrey Bruce Edward Embrey : Linux Systems Manager Campus Email Admin : UNIX / Linux Administrator Hood College : [EMAIL PROTECTED] : Phone (301)696-392 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba-3.0.0 & FreeBSD 5.1 not cooperating
Greetings, I think I may be having a slight configuration problem with Samba and FreeBSD-5.1. I'm trying to use FreeBSD's mount_smbfs(8) to mount a remote Samba share onto my local FreeBSD filesystem. With the configuration below, I can read all (almost; explained below) files and directories just fine. All permissions are correct. But whenever I try to write to the share, the write fails and an error is returned, "no such file or directory". If I try to replace a file on the share that already exists I get "permission denied". Windows XP has no problem reading, writing, or otherwise accessing the share, and smbfs has no problem whatsoever with mounting a Windows XP share either. Nothing particularly helpful showed up in a google search. Perhaps a more detailed explanation is in order. The remote server is Samba 3.0.0rc4. The local machine is FreeBSD 5.1-RELEASE. Samba is using the following smb.conf (which I realize isn't very secure, it's just for testing at the moment. Also, testparm doesn't complain about it.): [global] netbios name = POWERFACE workgroup = EILNET security = share log file = /usr/local/samba/var/log.samba socket options = \ TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 encrypt passwords = yes wins support = yes [smbshare] path = /nfs/share guest ok = yes writeable = yes I then added a user with smbpasswd named eil. Now on the FreeBSD machine, I made sure to enable the correct options in the kernel config file and rebuilt whatever needed rebuilding followed by a reboot. I created the following /root/.nsmbrc so that FreeBSD could mount the share at runtime without it prompting for a password. [default] nbns=192.168.0.3 workgroup=EILNET [powerface:eil:smbshare] addr=192.168.0.3 password= Next I added the line for /etc/fstab: //[EMAIL PROTECTED]/smbshare /home/eil/share smbfs rw,noauto 0 0 Finally, I took smbfs.sh.sample and copied it to /usr/local/etc/rc.d/smbfs.sh and rebooted. FreeBSD mounts the share in the proper location automatically and I can read every file and directory. But when I try to copy, move, or otherwise write a file to the share I get: [apex:~]$ cp .profile share/ cp: share/.profile: No such file or directory And when I try to copy or otherwise write to a file that already exists on the share, I get a different error: [apex:~]$ cp share/code/tcl/dbtest.tcl temp/ [apex:~]$ cp temp/dbtest.tcl share/code/tcl/ cp: share/code/tcl/dbtest.tcl: Permission denied Mainly I just want to know if there's any chance that the smb.conf pasted above could be causing the problem in some way. I've already asked in freebsd-questions and got no help except for one person who had the same exact problem, but worked around it with a script. If I can't get anywhere on this soon, I'm going to send in a FreeBSD PR and hope I don't get screamed at. Since I originally wrote most of this, I upgraded to 3.0.0 (no rc) and the problem persists. I also tried fiddling with the UID for the username (eil) to make them the same between the two machines and that didn't help either. Anybody have any suggestions? Thanks in advance if you do! P.S. There is an additional problem with smbfs not listing the contents of some directories. However, I believe this to be a problem with smbfs and I also haven't narrowed it down to a specific test case. C. Ulrich -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Tuning Linux/Samba for low latency w/ high i/o
Hi all, I am attempting to tune a (RedHat 7.3) Linux box running samba 2.2.8a. This application is serving files to PC clients via samba, and the PC clients are uploading files to the server via ftp. Now for the specifics... These files are mpeg2 encoded video with bit rates ranging from 3Mbit/s - 20Mbit/s. When there is zero write activity against the disks I can kick off multiple concurrent streams (wrong terminology, but what the office refers to opening a mpeg over the network) to different PCs and the video plays without issue. (I forgot to mention that minimum file size is 500MB.) If I start an upload via samba/ftp while I am watching a stream the server seems to buffer arround 100MB with no problem, at that point data is written to disk and both the ftp upload and the stream pause for 5 seconds and then continue. (This is output from vmstat streaming a video) procs memoryswap io systemcpu r b w swpd free buff cache si sobibo incs us sy id 0 0 0 0 59804 215000 691484 0 0 0 0 1110 226 0 1 99 0 0 0 0 58776 215000 692512 0 0 1028 0 1158 234 1 0 100 0 0 0 0 58776 215000 692512 0 0 0 0 1116 226 0 1 99 0 0 0 0 57748 215000 693540 0 0 1028 0 1134 230 0 9 91 0 0 0 0 57748 215000 693540 0 0 0 0 1134 228 0 1 99 0 0 0 0 56720 215000 694568 0 0 1028 0 1126 224 0 0 100 (These two are examples of pauses) 0 0 0 0 8588 215096 740216 0 0 0 188 4222 4848 0 4 96 1 1 1 0 8568 215100 737652 0 0 0 23916 4175 4810 0 5 96 0 0 0 0 9580 215100 739964 0 0 1028 732 2825 2753 0 16 84 0 0 0 0 9584 215104 740092 0 0 0 220 5036 5036 0 4 96 0 0 0 0 404192 215460 345348 0 0 0 188 4205 4811 0 3 97 0 1 0 0 393496 215468 348440 0 0 1032 11968 3463 3183 1 6 94 1 0 0 0 397652 215468 351916 0 0 1028 2132 4247 3678 0 5 95 0 0 0 0 394508 215472 355064 0 0 0 188 4516 4674 0 5 95 This box is a 2.4GHz Xeon w/ 1GB of RAM. There are two 36GB SCSI disks with an MD Raid 1 mirror across them for OS and Swap. The main storage system is 8 Western Digital 200GB IDE disks connected to a 3ware 7508 Raid controller configured in Raid5. How do I approach tuning this configuration. I can sacrifice upload speed, but I absolutely have to eliminate stalls in the video streams. Thanks in advance, Max -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with Active Connections
Hi, We are using Samba Web Administration Tool. The number of Active Connections keep on adding up, even when the client is not using it anymore. When there are too many active connections, it slows down the file transfer from the server to a client. After manually clicking on "Restart smbd", it clears up the Active Connections and the server is ok again. Please suggest what needs to be done. Thanks. Raj -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] WINS problems, samba 2.2.8a
I have a network with several WORKGROUPS(lets call them X,Y and Z) in it and a samba server which is in one of the WORKGROUPS(X). I have enabled WINS support in samba and all client machines has WINS server IP configured that points to the samba server. Problem: When a browsning the network from a client I can only see a some nodes(or none at all) in WORKGROUPS Y and Z. Usally it takes 10-20 seconds to update the screen when I refresh. When I look in the wins.dat database I see lots nodes there that don't belong to WORKGROUP X. Is this normal behaviour? If not, how can I fix it? Jocke -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Puzzling - File transfer speed variances
Please has anyone had similiar problems!! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] FW: Samba 2.2.8a / Winbind and Domains
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Petty, Robert wrote: | 1) Can I override and prohibit the querying of trusted domains and limit the | queries to the domain which winbind is a member of? I would need to see the winbindd log file to understand why it is contacting the other domains. Can you send me a level 10 debug log for winbindd off list? | 2) Can I increase the time that a challenge is valid? Right now, if I | remain inactive for around ten seconds, the next access to any shares | requires a revalidation via winbind. This is time consuming and very | frusterating. Try ~ winbind cache time = 600 | [global] | workgroup = DEN1 | netbios name = classfs | interface = classfs | interfaces = classfs/255.255.255.0 | bind interfaces only = Yes | security = domain | encrypt passwords = Yes | password server = * | server string = Samba (%v) domain (%h) | template homedir = /usr/local/samba/home/%D/%U | lock dir = /dna/samba/locks | pid directory = /dna/samba/var/locks | log file = /var/opt/samba/smb.log | wins server = 10.39.9.1 10.39.10.1 2.2.x will only work correctly with one wins server. 3.0 support multiple WINS servers. | winbind uid = 19000-21000 | winbind gid = 19000-19000 | winbind enum users = yes | winbind enum groups = yes | winbind use default domain = true | allow trusted domains = no | keepalive = 300 ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/ev1JIR7qMdg1EfYRAvCIAJ0Z0iVLmpfB6ydoIELIpZF92/70gACglyMt iGAW+GMvGU3CwlUooxsYZKc= =prsB -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.0 & LDAP: multiple domains logon
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 werner maes wrote: | At 10:44 1/10/2003, Gerald (Jerry) Carter wrote: | |> -BEGIN PGP SIGNED MESSAGE- |> Hash: SHA1 |> |> werner maes wrote: |> | |> | Hello, |> | |> | If you use samba 3.0.0 with LDAP authentication, samba uses an ldap |> | attribute "sambaSID" in which the domain SID is stored. When somebody |> | does a domain logon (2000/XP) this attribute is checked. But suppose I |> | would like to login to another domain? Can I define multiples |> sambaSID's |> | or is this attribute unique? If it's unique, how can I login to |> multiple |> | domains? |> |> You can't. This was one of the drawbacks of moving to SID's |> as opposed to RID's. However, you can setup truated Samba |> domains thus grouping users but still being able to logon to |> clients in other domains. | | | What do you mean by "truated Samba domains"? | Could you explain some more? Arghh...my typing skills strike again. I mean to say "trusted" samba domains. In other words, setup different Samba domains for groups of users (students, accounting, sales, etc...) and then establish trust relationships between the DC's. Or you can setup a single domain with multiple Samba BDC's. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/evrgIR7qMdg1EfYRAq/KAKDzFrKAw2dpwkwPQthvEaYVl8ulyQCg1yKB 0D+jflDSaDvZNPghpbvbeNY= =GIYr -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] problems accessing samba server from Pocket PC with Windows Mobil e 2003
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Isenhardt, Torsten wrote: | So, I tried accessing a samba server version 3.0.0 from a Pocket PC with | Windows Mobile | 2003, but I always got the error message: | | "Cannot find file '\\' (or one of its components). | Check to ensure the path and filename are correct and | that all required libraries are available." | | I tried to connect to '\\hostname' or '\\hostname\path' but it is alway | replaced with '\\'. | When I tried '//hostname' or '//hostname/path' the same error message | appears with | '//hostname' or '//hostname/path' instead of '\\'. | With Pocket PC 2002 or W2K a connection to samba server version 3.0.0 is | established | without any problems. I would suggest getting a nertwork trace and see what the client is actually sending. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/evneIR7qMdg1EfYRAso0AKCKHu8OVLV7kmL+ijYk+1bkDH3ehwCgyyS7 JaLta7qDj1b1wmrJaUOgY9Y= =Pdrh -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba-3.0.0-1 tdb_fetch failed
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | RH9 on intel, with samba-built RH9 samba 3 rpm freshly installed. | | I have a raw cups printer which samba picks up, but when a client | connects (root) and selects the host's "printers" folder, a right click | on the printer and properties causes a small delay and then the msgbox: | "Printer Properties could not be displayed, operation could not be | completed." Can you send me a level 10 log file off line? Also, have you tried setting "default devmode = yes"? cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/evlsIR7qMdg1EfYRAvknAJ99UFzOYxo4g42RtMOgh7c4keBKrQCgjlvH RDC0uaUxn48Pv/0WYKuu9iQ= =QLbg -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.0 & LDAP: multiple domains logon
At 10:44 1/10/2003, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 werner maes wrote: | | Hello, | | If you use samba 3.0.0 with LDAP authentication, samba uses an ldap | attribute "sambaSID" in which the domain SID is stored. When somebody | does a domain logon (2000/XP) this attribute is checked. But suppose I | would like to login to another domain? Can I define multiples sambaSID's | or is this attribute unique? If it's unique, how can I login to multiple | domains? You can't. This was one of the drawbacks of moving to SID's as opposed to RID's. However, you can setup truated Samba domains thus grouping users but still being able to logon to clients in other domains. What do you mean by "truated Samba domains"? Could you explain some more? Thanks, Werner -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.0 & LDAP: multiple domains logon
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 werner maes wrote: | | Hello, | | If you use samba 3.0.0 with LDAP authentication, samba uses an ldap | attribute "sambaSID" in which the domain SID is stored. When somebody | does a domain logon (2000/XP) this attribute is checked. But suppose I | would like to login to another domain? Can I define multiples sambaSID's | or is this attribute unique? If it's unique, how can I login to multiple | domains? You can't. This was one of the drawbacks of moving to SID's as opposed to RID's. However, you can setup truated Samba domains thus grouping users but still being able to logon to clients in other domains. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/evZoIR7qMdg1EfYRAmBuAKDqfSOb/BUGDEDZtlpDUAEOFrgxKwCfeypo dGPwe9oxoAtPb+i5BtTCAvo= =WnyP -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Win XP on Samba3
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Peet Nel wrote: | Hi, | I have eventually got my Server to work, win2000 is happy and loads | profiles., win98 is ok., BUT winXP recons "Cannot log you on.: "the | procedure number is out of range" please try..." This happens | irrespective of username/passwd entered or not. Does anyone know what | is going on? Or how to fix it? I could not find this in FAQ's. Please try the patch attached to this bug report. ~ https://bugzilla.samba.org/show_bug.cgi?id=167 cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/evXaIR7qMdg1EfYRArW/AJ9p/phv8fxvqyR5GawUurT7FqfPTwCeLOL+ 7zMgGFhpQkKnupQA21NHqkE= =rs+U -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0 Stable Release - Bug in net rpc vampire ?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Gasch wrote: | hi there | | after successfully joining an NT domain i tried | | net rpc vampire -S ntpdc | | and get: | | Fetching DOMAIN database | SAM_DELTA_DOMAIN_INFO not handled | net: decode.c:634: ber_scanf: Assertation | `((ber)->ber_opts.lbo_valid==0x2)` failed. | Aborted | | samba compiled perfectly on my suse 8.2 box | with rc1 and beta1 i had no problems with net rpc vampire The ldap libraries are choking on something. Any chance of running net in gdb and getting a backtrace? cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/evWFIR7qMdg1EfYRAo5CAKDP1COZyuOtvPwt1vWK4bNss/dcwwCfRXh9 kCaZYFyEpVVn0EBVwElWE2w= =9okE -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba3.0 final + LDAP -> bug in SWAT???
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ralph Bergmann wrote: | Hallo!!! | | I use samba 3.0 final with debian unstable. I have configured the | smb.conf with "swat". | | ldap suffix: dc=dasralph,dc=home | ldap machine suffix: ou=machines | ldap user suffix: ou=people | ldap group suffix: ou=groups | ldap idmap suffix: ou=idmap | ldap admin dn: cn=admin,dc=dasralph,dc=home | | at the next run of "swat" it has changed as follows: | ldap suffix: dc=dasralph,dc=home | ldap machine suffix: ou=machines,dc=dasralph,dc=home | ldap user suffix: ou=people,dc=dasralph,dc=home | ldap group suffix: ou=groups,dc=dasralph,dc=home | ldap idmap suffix: ou=idmap,dc=dasralph,dc=home | ldap admin dn: cn=admin,dc=dasralph,dc=home | | at the next run of "swat" it has changed as follows: | ldap suffix: dc=dasralph,dc=home | ldap machine suffix: ou=machines,dc=dasralph,dc=home,dc=dasr... | ldap user suffix: ou=people,dc=dasralph,dc=home,dc=home,dc=dasr... | ldap group suffix: ou=groups,dc=dasralph,dc=home,dc=home,dc=dasr... | ldap idmap suffix: ou=idmap,dc=dasralph,dc=home,dc=home,dc=dasr... | ldap admin dn: cn=admin,dc=dasralph,dc=home,dc=home,dc=dasr... | | and so on... Yes. See ~ https://bugzilla.samba.org/show_bug.cgi?id=328 cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/evU8IR7qMdg1EfYRApNJAKDV1gYcTElkB6awzs93QtL6QOndGgCfe9ar tqiON3gpuxhu7pDexLUaqsA= =Of8w -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Modifying password expiry dates
Thus spake Andrew Bartlett ([EMAIL PROTECTED]) [01/10/03 06:18]: > > I've just found out that Samba (rather correctly) implements a nice and low > > password expiry date through the tdbsam backend, and I believe the "maximum > > password age" value. > > > > However, I can't, for the life of me, actually /set/ this thing. I've tried > > this: > > > > # pdbedit -u -r -P "maximum password age" -C 100 > > If you got the syntax right, this would set the maximum password age > 'policy' to 100 seconds. There is no way to set the 'expiry time' for > a particular password. Unfortunately, I didn't have the syntax right. I was approaching it from the per-user perspective, when it's actually the per-site perspective. So we dropped the '-u ', and all is fine. As well, the documentation led me to believe that the password age policy was measured in days, not seconds. Which would explain the very odd consequences of setting it to 100... > > We're running Samba 3.0b3, if that makes a difference. > > It does - if you upgrade to 3.0.0 release, and delete the > account_policy.tdb, you will get no password expiry by default. Then > you can reset the policy to whatever you like (hint: pdbedit -P "maximum > password age -C 100 ), and then change all the password that are now > expiring. > > For the timebeing, the ldapsam backend remains the best for allowing > arbitary control of these details. Unfortunately, until I can cleanly import our userbase into LDAP (I'm an LDAP weenie still), I can't do it. I've tried a couple of times now, and been about 95% successful, so I'll try again next time I get the chance. That's why we're using TDB. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Couldnt create posix account info
Dear all I set up Samba 3 first official release on Redhat Linux 7.3, configured it(I believe) as per documentation and tried net rpc vampire from an NT4 PDC and the output I got, was that it appeared to be creating UNIX user groups, without any complaints, but when it got down to migrating user accounts, it gave the same error on all user accounts, "Couldnt create posix account for user ..." I tried searching the archives and the documentation but failed. Also, on migration, the documentation says that it is strongly recommended that you create Samba3 groups corresponding to the Windows NT user groups first. But I was unable to find documentation on how to create groups in Samba3. So my first question is can some help me figure out why samba3 couldnt create posix account info? Second, can groups be created in Samba? Or is it a mistake in the docs and it actually means Unix accounts? Appreciate all help. Regards Saqib Muhammad Saqib Ilyas Assisant Professor NED University of Engineering and Technology, Karachi - Do you Yahoo!? The New Yahoo! Shopping - with improved product search -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Group mapping, among other problems
Hopefully I can write this out so someone understands it. We are currently running a number of Solaris servers, to which windows computers need to connect. Currently they connect via NFS using hummingbird's NFS client. This requires them to have a separate unix account along with their windows account. Our idea is to implement samba 3.0.0 to eliminate that NFS client. My current problems are: #1, when I mount my share (in either windows or unix using smbclient), I am not getting the proper permissions. We have a group (lets call it happy) in both unix, and in our windows domain. with winbind, the domain\happy group obviously isn't getting the same GID as the unix happy group. the share we are working on is 0775, so I can't write to it when I connect using my domain acct. in net groupmap a mapping for the group domain\happy = happy, and in my username.map file, I have * = domain\*. What else do I need to setup to get this working? using getent group I only get one group in my domain, but when I run wbinfo -g I get the full list. getent passwd gets me all the users in the domain, so I don't understand what is so broken about groups. #2, when I have something mounted, and I run smbstatus (or click status from swat), it will just hang where it is finding who is connected. Here is a copy of my smb.conf file. hopefully it will help someone figure this out. yes winbind is running, and it has a computer account in the domain. wbinfo works. ntlm_auth works. So I know I'm close, but I just can't figure out this last part. and yes, I do need that many uid's if I have to use winbind enum users = yes [global] workgroup = ourdomain netbios name = BOXEN server string = Samba %v on %L security = DOMAIN password server = pdc username map = /usr/local/samba/lib/username.map username level = 2 log file = /var/log/samba/samba.%m max open files = 2 load printers = No preferred master = No local master = No domain master = No kernel oplocks = No ldap ssl = no idmap uid = 1-45000 idmap gid = 1-2 winbind enum users = yes winbind enum groups = yes create mask = 0775 directory mask = 0775 mangled names = No oplocks = No level2 oplocks = No [smbview] comment = viewstorage path = /smbview read only = No writable = yes /smbview is 0775 and so are all the files in it. All i need to do is get users that authenticate via samba to get the proper group assigned when they connect. Thanks for any help! Mathew Granzow -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] user nobody
When my windoze 2K client tries to open some files, i get the following message in smdb log: [2003/10/01 16:00:42, 0] smbd/oplock.c:oplock_break(843) oplock_break: client failure in oplock break in file projects/avin/wieland/806 [2003/10/01 16:00:42, 0] smbd/reply.c:reply_lockingX(4393) reply_lockingX: Error : oplock break from client for fnum = 13277 and no oploc [2003/10/01 16:00:42, 0] smbd/password.c:authorise_login(915) authorise_login: rejected invalid user nobody [2003/10/01 16:02:54, 0] smbd/password.c:authorise_login(915) authorise_login: rejected invalid user nobody [2003/10/01 16:02:57, 0] smbd/password.c:authorise_login(915) authorise_login: rejected invalid user nobody [2003/10/01 16:06:16, 0] smbd/password.c:authorise_login(915) authorise_login: rejected invalid user nobody /var/log/samba/log.smbd lines 33065-33087/33087 (END) This results in a file taking 15+ seconds to open, does any one know why windoze tries to connect as user nobody - especially when the share is already connected and mapped as a drive with username / password and what does oplock break mean? thanks Rob Carter -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3.0 and Windows Files
Kevin, I am trying to accomplish just what you have described here. Unfortunatelly I am new to Samba and linux. Do you have any references to documentation I can use to setup Samba 3 as AD member with XFS, libattr and libacl? Thank You Sebastian Kevin P. Fleming wrote: Laurent Thiers wrote: Hello, I would like to propose a Linux/Samba Filer for people operating a Windows PDC + a bunch of W2K and Linux clients so far. OK. Request is create a new NAS storage pool under Linux/Samba 3.0 and to be able to keep existing NTFS file security settings (per user). OK. That means that people would progressively move their data to the Linux / Samba NAS, these data would be migrated to tape, but we need to maintain the current NTFS settings of the files. You mean the people would move their own files to the NAS? Linux / Samba NAS would use existing Active Directory data for user registration. OK. Is this possible with Samba ? How to format the NAS to do so ? (EXT3 & XFS would "wipe out" current NTFS file settings ?) I just set up a server using XFS, libattr and libacl support and Samba configured to use all of that. With Samba joined to ADS, and using winbindd on the Samba server to get users and groups from ADS, the use of the Samba server is pretty much invisible to the users (other than it's faster and more stable than their old server :-), and it fully supports NTFS security and other attributes. If you want to copy the data in bulk over to the Samba server, check out the robocopy tool that is included in the Windows 2000/2003 Resource Kit. It knows how to copy files and also copy over the NTFS security settings. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Upgrade from Samba 2.2.8a to 3.0.0 - Printing problem
I upgraded samba from 2.2.8a to 3.0.0 following the chapter of upgrading from 2.2.x in the samba-howto. I installed RPMS that I built from source using makerpms.sh script. Almost everything works, but the printer connections from W2k SP4 clients. There are two problems that can be related: 1) On the clients, from the clients' APW, I cannot browse the network printers on Samba 3.0.0 server. I am able to browse a Samba 2.2.8a server printers, but not Samba 3.0.0. I can connect them specifying \\server\printer instead of browsing. 2) The printers that are connected in this way do not respect "Printing Defaults" that I set on the server and different options that are installed and I specified them, unless I give the "Domain Users" group the "Manage Printers" privileges. And even then, applications as OpenOffice.org do not recognize the "Printing Defaults" and use the options that the driver has by default. I thing that there is something I did not understand. Can anybody give me a hint? My system is RedHat 7.2, printing is LPRng, printers are owned by "DOMAIN\root", "Domain Admins" group has all rights on the printers and "Domain Users" have (normally) only "Print". The clients are W2K SP4 joints in the DOMAIN. Everything worked very well with Samba 2.2.X Thanks in advance for your help Fridrich Strba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problems with w2k and iis
Hello all, I am having a problem with a win2k (server) domain member, it is running iis with authentication for domain users, but from time to time, several times a day, it looks that it looses his connection to the domain and I have to restart either the samba PDC server or the win2k box. What am I doing wrong? The win2k box is a standard "Windows 2000 server" install with service pack 4 and with iis. The Samba PDC is a Red Hat Linux 9.0 box with samba ver 2.2.8 (recompiled with acl and ldap support) and gets the user and group information out of a ldap, i think it is ldap version 2.0.2x, tree. Could somebody give me hints/tips for solving the problem? Sindcerely, Hilbert Mostert -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re-setting the Archive Bit
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrew Butler wrote: | Hello, | | I am using Brighstor to backup my Linux machines using shares at the moment | as I cannot get the agents to work (neither can CA). This would work fine if | the Backup program could re-set the archive bit (Linux file owner execute | setting). The problem is that, when accessing the share from a Windows | machine, I cannot re-set the archive bit under any combination of | permissions, unless the client that is logged onto the share is also the | owner of the file. Try 'dos filemodes = yes' cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/euXLIR7qMdg1EfYRAoTjAJ0ZS6M+r5sh2FjXDc4hZTCGCRJIHgCgiFeP JUXQ4em+j/ibFB9gnPjwCNQ= =HdvG -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.0 & LDAP: multiple domains logon
Hello, If you use samba 3.0.0 with LDAP authentication, samba uses an ldap attribute "sambaSID" in which the domain SID is stored. When somebody does a domain logon (2000/XP) this attribute is checked. But suppose I would like to login to another domain? Can I define multiples sambaSID's or is this attribute unique? If it's unique, how can I login to multiple domains? Werner -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] error smbadduser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] wrote: | i try to instal samba be pdc and evrry add user i get error like this : | [EMAIL PROTECTED] sambaconf]# ./smbadduser | | Enter the [Login name] for new samba user : | [EMAIL PROTECTED] sambaconf]# ./smbadduser testuser | Here we go! | | smbldap_search_suffix: Problem during the LDAP search: (unknown) (Invalid | credentials) | Failed to add entry for user testuser. | Failed to modify password entry for user testuser | [EMAIL PROTECTED] sambaconf] | | and here my smb.conf ( please chek it if i wrong ) | | [global] | netbios name = pim | workgroup = pim-net | log level = 2 | log file = /usr/local/samba/var/sambapdc.log | security = share | invalid users = root | interfaces = 172.18.20.0/32 | security = user | server string = %h server (PDC %v) | syslog only = no | Sounds like you compiled --with-ldapsam possibly but did not specify the ldap parameters in smb.conf. If you did not mean to use an LDAP backend, then try setting passdb backend = smbpasswd or passdb backend = tdbsam cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/euMAIR7qMdg1EfYRAmMlAKDfHw6u4nZ581pK/6hFLj6W/Ze+NQCgk9Uk EwzTS3v3Z2yX9/os7Tup+o0= =/+tE -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Cached credentials not working
Hello all, I'm setting up a domain using Samba 3.0 as PDC, with WinXP clients. One of these clients is a laptop, which should be able to use cached profiles of the domain users. Online logon is working fine, however when the domain server is not available it cannot logon, whereas it should be able to use cached credentials to access the cached profile. Windows says it cannot log on because the domain is unavailable. The policy setting controlling the number of cached credentials is set to 10 (which is the default), so that shouldn't be the problem. I'm using Windows XP with the latest updates, and Samba 3.0 on a fresh installation of Debian unstable. I've also tested Windows 2000 as a client: same problem. I've tested Windows NT Server as a domain controller: it works fine, so the problem appears to be something samba-related. I don't know if it's related, but the following message keeps appearing in the logs when I log off a domain user: get_domain_user_groups: primary gid of user [roel] is not a Domain group get_domain_user_groups: You should fix it, NT doesn't like that The UNIX user roel is a member of users (gid 100), and I've set up the group mapping as follows (using net groupmap): System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Users (S-1-5-21-3779735966-2028519041-1045582398-513) -> users Power Users (S-1-5-32-547) -> -1 Print Operators (S-1-5-32-550) -> -1 Administrators (S-1-5-32-544) -> -1 Account Operators (S-1-5-32-548) -> -1 Domain Admins (S-1-5-21-3779735966-2028519041-1045582398-512) -> ntadmin Domain Guests (S-1-5-21-3779735966-2028519041-1045582398-514) -> nogroup Backup Operators (S-1-5-32-551) -> -1 Users (S-1-5-32-545) -> users Can anyone help me with these problems? I've searched the archives and the web, and found no indication that anyone is having similar problems. Thanks in advance, Roel van Os. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3.0.0 compilation errors under Unixware 7.1.1
Next time call SCO for help with UnixWare! Peter Kess wrote: Its me once again... i have found a workaround... I installed gawk and now it seems to work but i alreade get a lot of warning "vfs.h macro error" or something like this. Bit the compilkation works. Greetz Peter Kess "Peter Kess" <[EMAIL PROTECTED]> schrieb im Newsbeitrag news:[EMAIL PROTECTED] Hello, I tried to build the latest samba source package with errors, it seems there is a problem with the compatibility from the awk script mkbuildoptions.awk. With older version 2.2.8a there was no problem compiling the sources. With 3.0.0 i got the following error: ### ... ... configure: creating ./config.status config.status: creating include/stamp-h config.status: creating Makefile config.status: creating script/findsmb config.status: creating smbadduser config.status: creating script/gen-8bit-gap.sh config.status: creating include/config.h config.status: include/config.h is unchanged # make Using FLAGS = -g -I./popt -Iinclude -I/u2/smbbuild/samba-3.0.0/source/include - I/u2/smbbuild/samba-3.0.0/source/ubiqx -I/u2/smbbuild/samba-3.0.0/source/smb wrap per -I. -I/u2/smbbuild/samba-3.0.0/source LIBS = -lgen -lresolv -lsocket -lnsl LDSHFLAGS = -G LDFLAGS = Generating smbd/build_options.c UX:nawk: ERROR: Error in RE `^\/\* (.*?)\*\/': invalid *, +, ?, \{\} or {} opera tor UX:nawk: INFO: Source line number 117 UX:nawk: INFO: Context is /^\/\* >>> (.*?)\*\// <<< { *** Error code 2 (bu21) UX:make: ERROR: fatal error. # ### The Machine is a UW7 UnixWare scotty 5 7.1.1 i386 x86at SCO UNIX_SVR5 It seems the error comes from the script ./script/mkbuildoptions.awk We want to build our own samba package because its more suitable for our customers. Any help is very welcome. You can also mail to [EMAIL PROTECTED] Best Regards Peter Kess -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] $ in domain name, Samba 2.2.8a
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andrew Bartlett wrote: | Yes, we are stripping it out for security reasons. The problem is when | people use %U and %D macros in their smb.conf - particularly for | logfiles - we got bitten when %m was allowed to contain ../../, and | cracked down on it. | | I think Samba 3.0 allows this again, as I've gone over the codepaths, | and am happy with our verification (against the known list of trusted | domains etc). Colin, Here's a patch that should fix things for you. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/euJvIR7qMdg1EfYRAlK3AKCZ109swBqp6AEZpRcoI//xioSj+QCcCAfm 9c1jU/BMANtfFdPLRPjjFLY= =graX -END PGP SIGNATURE- Index: smbd/reply.c === RCS file: /data/cvs/samba/source/smbd/reply.c,v retrieving revision 1.240.2.133 diff -u -r1.240.2.133 reply.c --- smbd/reply.c9 May 2003 21:31:23 - 1.240.2.133 +++ smbd/reply.c1 Oct 2003 14:17:37 - @@ -881,8 +881,8 @@ } /* don't allow strange characters in usernames or domains */ - alpha_strcpy(user, user, ". _-$", sizeof(user)); - alpha_strcpy(domain, domain, ". _-@", sizeof(domain)); + alpha_strcpy(user, user, ". ~`#$%^&{}-_!()'", sizeof(user)); + alpha_strcpy(domain, domain, "@. ~`$%^{}-_!()'", sizeof(domain)); if (strstr(user, "..") || strstr(domain,"..")) { return ERROR_BOTH(NT_STATUS_LOGON_FAILURE,ERRSRV,ERRbadpw); } -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.0 rpms
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stephen Collier wrote: | A few notes: | | The RPMS for 3.0.0 for RH9 do not seem to have a valid signature, rpm | complains. They were OK for rc2, rc3 and rc4. I created a rpm from the src | rpm which was OK. I just checked on th main samba.org server: $ rpm --checksig ./RPMS/i386/7.3/samba-3.0.0-1.i386.rpm \ ~ ./RPMS/i386/8.0/samba-3.0.0-1.i386.rpm \ ~ ./RPMS/i386/9.0/samba-3.0.0-1.i386.rpm \ ~ ./SRPMS/samba-3.0.0-1.src.rpm ./RPMS/i386/7.3/samba-3.0.0-1.i386.rpm: md5 gpg OK ./RPMS/i386/8.0/samba-3.0.0-1.i386.rpm: md5 gpg OK ./RPMS/i386/9.0/samba-3.0.0-1.i386.rpm: md5 gpg OK ./SRPMS/samba-3.0.0-1.src.rpm: md5 gpg OK What server did you get the packages from? cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/euFWIR7qMdg1EfYRAgqFAKCpE2CcLMl3lxJE2bJp/cB2E7vk9QCg7iEr Oed9rlbWp3oF2xzZAHTUZJE= =+FnR -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem with samba 3.0.0 installation
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 María Isabel López Sánchez-Huete wrote: | Installing bin/CP437.so as /usr/local/samba/lib/charset/CP437.so | ./install-sh -c bin/libsmbclient.so /usr/local/samba/lib | mksh: Fatal error: Cannot load command `./install-sh': Bad file number | Current working directory /tmp/samba-3.0.0/source | *** Error code 1 (ignored) | : bin/libsmbclient.a /usr/local/samba/lib | ./install-sh -c /tmp/samba-3.0.0/source/include/libsmbclient.h | /usr/local/samba/include | mksh: Fatal error: Cannot load command `./install-sh': Bad file number | Current working directory /tmp/samba-3.0.0/source | *** Error code 1 (ignored) | | Any ideas? I expect this time somebody can answer to me. `chmod 755 source.install-sh` It was a packaging error in the tarball. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "You can never go home again, Oatman, but I guess you can shop there." ~--John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/euAYIR7qMdg1EfYRAl2eAKDrOvVQma1l7Zt94bRQwjZvY8p5zgCg5JQI MGtHPTKBuYzyNmmIzyACbyA= =s5nI -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re-setting the Archive Bit
Hello, I am using Brighstor to backup my Linux machines using shares at the moment as I cannot get the agents to work (neither can CA). This would work fine if the Backup program could re-set the archive bit (Linux file owner execute setting). The problem is that, when accessing the share from a Windows machine, I cannot re-set the archive bit under any combination of permissions, unless the client that is logged onto the share is also the owner of the file. However, if I "force user" to be root, then I can re-set the archive bitno problem. So, I say to myself, if I set myself as the "admin user" for the share then the same should apply, i.e. the admin user should have root privalages on the share. However, this does not work. If it did, I would be sorted. Can anybody tell me why "force user" as root allows me to re-set the archive bit, but "admin user" does not. Below is a copy of the smb.conf file with the global and share settings. Thanks for your help, Andrew Butler. password server = * wins server = 192.0.2.11 winbind uid = 5000-6000 winbind gid = 5000-6000 template homedir = /home/%U winbind separator = + winbind use default domain = Yes guest account = create mask = 0770 force create mode = 0770 directory mask = 0770 force directory mode = 0770 [IT] path = /usr/shares/IT admin users = butlerandrew force group = 5003 read only = No inherit permissions = Yes inherit acls = Yes Legal Disclaimer: Any views expressed by the sender of this message are not necessarily those of Connaught Electronics Ltd. Information in this e-mail may be confidential and is for the use of the intended recipient only, no mistake in transmission is intended to waive or compromise such privilege. Please advise the sender if you receive this e-mail by mistake. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba - mysql errors
G'day.. just trying to make it all work as a pdc-bdc with mysql as backend basicly samba runs now with mysql 3.2XXX the prob are when i tried to connect with usermanager from a wind*s box i get an error "The Stub Received Bad Data" if i switch to tdbsam, no worry it works.. no probs when i make a user from linux box or let a machine join da domain. they pop up in the mysql database. but i'm not able to log in as 1 of those users... ?? the log's don't report anything strainge.. sugestions ?? Collen - MLHJ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Secondary groups
I have backups of user home directories that I've shared out via samba so that my non-linux level 1 guy can restore files using the drag-n-drop. Problem is, all directories are owned by their respective user and are set 700. In order for the admin users to access these directories, I've set admin [EMAIL PROTECTED] for the share in smb.conf. The problem is, al the admin users have domain users as their primary group, and superadmins as a secondary. Access to the homes folder fails for all but user Administrator. If I switch my primary group to SuperAdmins, I am allowed access. I would rather not run with SuperAdmins as my primary group. How can I get Samba to see my list of secondaries when determining access permission? I am running Debian testing with the stable samba 3.0 packages from samba.org. Authentication is through winbind feeding off an NT4 pdc. Thankis -- -Ron + God's got a heaven for coutnry trash -- Johnny Cash -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Win2k Profile Push Error?????
Hi all, I'm currently having issues with my PDC saving a win2k profile to the server. Details:- OS RedHat 9 SMB 2.2.7a (installed from the RPM's on the install disk) I have included a copy of my smb.con file at the bottom of this message, and copies of the machine logs as attachments (thought they would be too big to include here) The problem I'm getting is that my WinXP machines seem to be logging in and out fine, saving the roaming profile without error. The trouble comes when I'm trying to log in with win2k. It bound the PDC without error, logged in for the first time with out error.But when I log out 2K complains about not being able to write to the profile directory, with a detail note of "inefficient resources". I only have the 1 2K machine at present,so I'm not sure if it is a client config issue or if it's the PDC. (win2k sp2, installed sp2 to see if it resolved the issue, but it didn't) Can anyone help or point me in the right direction. TIA Steve smb.conf : - # Global parameters [global] workgroup = TELETEQ.MINE.NU netbios name = AZTEQ-FS-WINS1 server string = Samba Server encrypt passwords = Yes obey pam restrictions = Yes pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* unix password sync = Yes log level = 3 log file = /var/log/samba/%m.log socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 domain logons = Yes dns proxy = No printing = cups add user script = /usr/sbin/useradd -d /dev/null -g 100 \ -s /bin/false -M %u [homes] comment = Home Directories valid users = %S read only = No create mask = 0664 directory mask = 0775 browseable = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [netlogon] path = /netlogon browseable = No -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0 and LDAP as a PDC
Sapan.Ganguly <[EMAIL PROTECTED]> wrote: > Hello all, > > I hope this is an easy one, I've read all the howtos but I'm still > very hazy on how to do this. What I want to do is replace my NT4 PDC > with a Samba 3.0 PDC with an LDAP backend. > > I've got my OpenLDAP up and running with the basic People, Computers > and Groups ou's. > I've put the builtin NT groups in too. > I have Samba 3.0 functioning as a BDC > > The trouble is that the 'net rpc vampire' command isn't working for > me, probably because I haven't defined the smbldap scripts right in > smb.conf. I've put all the relavent bits in smbldap_conf.pm. If > anyone has done this already please may I see a copy of your smb.conf? > > 'net rpc samdump' works, I guess the output from that could be used to > populate the the LDAP, is there a script for that? > > I've also tried the smbldap-migrate-accounts.pl script, to import all > the information from a pwdump of my PDC, this sort of worked but it > only created posix accounts, is this right? Also pwdump.exe does not > seem to dump groups so what are you supposed to use > smbldap-migrate-groups.pl with? > > I think I might be able to work this out if I can just get a look at > someone else's smb.conf. Sapan, I'm looking to do a similar thing, specifically, I want to create a PDC with all user information in LDAP. I am in a green field situation, ie. I have no exisiting PDC and I am working on a new, non-production server. I too would be interested in a How-To describing what steps are necessary to get this working, with any gotchas along the way. I'll write sometihng up describing how I get on... R. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.522 / Virus Database: 320 - Release Date: 29/09/2003 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Can't mount Windows shares!
Hello everyone, I have a Windows Server 2003 box and a RedHat 9.0 box. I installed the RH9 rpm, samba-3.0.0-1.i386.rpm Whenever I try and run this command; mount -t smbfs //machine/share /root/smb_mnt -o username=administrator,password=mypass I get this error; cli_negprot: SMB signing is mandatory and we have disabled it. 26595: protocol negotiation failed SMB connection failed I have tried everything and I can't seem to get a single Windows share to mount. I can login and connect to share via; smbclient //dh1/lance -UAdministrator Any help would be greatly appreciated! Cheers, -- Travis Bell Hosting. Simplified. www.datahive.ca -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0 and LDAP as a PDC
Hello all, I hope this is an easy one, I've read all the howtos but I'm still very hazy on how to do this. What I want to do is replace my NT4 PDC with a Samba 3.0 PDC with an LDAP backend. I've got my OpenLDAP up and running with the basic People, Computers and Groups ou's. I've put the builtin NT groups in too. I have Samba 3.0 functioning as a BDC The trouble is that the 'net rpc vampire' command isn't working for me, probably because I haven't defined the smbldap scripts right in smb.conf. I've put all the relavent bits in smbldap_conf.pm. If anyone has done this already please may I see a copy of your smb.conf? 'net rpc samdump' works, I guess the output from that could be used to populate the the LDAP, is there a script for that? I've also tried the smbldap-migrate-accounts.pl script, to import all the information from a pwdump of my PDC, this sort of worked but it only created posix accounts, is this right? Also pwdump.exe does not seem to dump groups so what are you supposed to use smbldap-migrate-groups.pl with? I think I might be able to work this out if I can just get a look at someone else's smb.conf. Sapan Ganguly Thales Research -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Problem with samba 3.0.0 installation
> -Original Message- > From: María Isabel López Sánchez-Huete [mailto:[EMAIL PROTECTED] > Sent: mercredi 1 octobre 2003 12:33 > To: [EMAIL PROTECTED] > Subject: [Samba] Problem with samba 3.0.0 installation > > >Hi. > >I have found some problems installing the new version of samba. > >My enviroment is: > Solaris 8 (sparc) > gcc 3.1 > GNU make 3.80 > >Currently samba 2.2.8a is running. When I try install the version > 3.0.0, after executing 'configure' and 'make' without > problem, I execute > 'make install' and it finish with the error: > > (...) > Installing bin/CP437.so as /usr/local/samba/lib/charset/CP437.so > ./install-sh -c bin/libsmbclient.so /usr/local/samba/lib > mksh: Fatal error: Cannot load command `./install-sh': Bad file number > Current working directory /tmp/samba-3.0.0/source > *** Error code 1 (ignored) > : bin/libsmbclient.a /usr/local/samba/lib > ./install-sh -c /tmp/samba-3.0.0/source/include/libsmbclient.h > /usr/local/samba/include > mksh: Fatal error: Cannot load command `./install-sh': Bad file number > Current working directory /tmp/samba-3.0.0/source > *** Error code 1 (ignored) What says 'df -k /usr/local' ? Samba 3.0.0 has debugging information enabled in binaries, whatever you specify to configure. This leads to Samba crunching a huge set of disk space due to +50MB binaries. After configure, edit Makefile and remove the '-g' in CFLAGS. Recompile, and reinstall. Or strip all actual binaries. Regards, Jérôme ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. LogicaCMG ** -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba 3.0.0 compilation errors under Unixware 7.1.1
Its me once again... i have found a workaround... I installed gawk and now it seems to work but i alreade get a lot of warning "vfs.h macro error" or something like this. Bit the compilkation works. Greetz Peter Kess "Peter Kess" <[EMAIL PROTECTED]> schrieb im Newsbeitrag news:[EMAIL PROTECTED] > Hello, > > I tried to build the latest samba source package with errors, it seems there > is a problem with the compatibility from the awk script mkbuildoptions.awk. > > With older version 2.2.8a there was no problem compiling the sources. With > 3.0.0 i got the following error: > > ### > ... > ... > configure: creating ./config.status > config.status: creating include/stamp-h > config.status: creating Makefile > config.status: creating script/findsmb > config.status: creating smbadduser > config.status: creating script/gen-8bit-gap.sh > config.status: creating include/config.h > config.status: include/config.h is unchanged > # make > Using FLAGS > = -g -I./popt -Iinclude -I/u2/smbbuild/samba-3.0.0/source/include - > I/u2/smbbuild/samba-3.0.0/source/ubiqx -I/u2/smbbuild/samba-3.0.0/source/smb > wrap > per -I. -I/u2/smbbuild/samba-3.0.0/source > LIBS = -lgen -lresolv -lsocket -lnsl > LDSHFLAGS = -G > LDFLAGS = > Generating smbd/build_options.c > UX:nawk: ERROR: Error in RE `^\/\* (.*?)\*\/': invalid *, +, ?, \{\} or {} > opera > tor > UX:nawk: INFO: Source line number 117 > UX:nawk: INFO: Context is > /^\/\* >>> (.*?)\*\// <<< { > *** Error code 2 (bu21) > UX:make: ERROR: fatal error. > # > ### > > The Machine is a UW7 > UnixWare scotty 5 7.1.1 i386 x86at SCO UNIX_SVR5 > > It seems the error comes from the script > > ./script/mkbuildoptions.awk > > We want to build our own samba package because its more suitable for our > customers. > > Any help is very welcome. > > You can also mail to [EMAIL PROTECTED] > > Best Regards > Peter Kess > > > > > > > > > > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with samba 3.0.0 installation
Hi. I have found some problems installing the new version of samba. My enviroment is: Solaris 8 (sparc) gcc 3.1 GNU make 3.80 Currently samba 2.2.8a is running. When I try install the version 3.0.0, after executing 'configure' and 'make' without problem, I execute 'make install' and it finish with the error: (...) Installing bin/CP437.so as /usr/local/samba/lib/charset/CP437.so ./install-sh -c bin/libsmbclient.so /usr/local/samba/lib mksh: Fatal error: Cannot load command `./install-sh': Bad file number Current working directory /tmp/samba-3.0.0/source *** Error code 1 (ignored) : bin/libsmbclient.a /usr/local/samba/lib ./install-sh -c /tmp/samba-3.0.0/source/include/libsmbclient.h /usr/local/samba/include mksh: Fatal error: Cannot load command `./install-sh': Bad file number Current working directory /tmp/samba-3.0.0/source *** Error code 1 (ignored) Any ideas? I expect this time somebody can answer to me. Thanks in advance! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Modifying password expiry dates
On Wed, 2003-10-01 at 00:58, Damian Gerow wrote: > I've just found out that Samba (rather correctly) implements a nice and low > password expiry date through the tdbsam backend, and I believe the "maximum > password age" value. > > However, I can't, for the life of me, actually /set/ this thing. I've tried > this: > > # pdbedit -u -r -P "maximum password age" -C 100 If you got the syntax right, this would set the maximum password age 'policy' to 100 seconds. There is no way to set the 'expiry time' for a particular password. > We're running Samba 3.0b3, if that makes a difference. It does - if you upgrade to 3.0.0 release, and delete the account_policy.tdb, you will get no password expiry by default. Then you can reset the policy to whatever you like (hint: pdbedit -P "maximum password age -C 100 ), and then change all the password that are now expiring. For the timebeing, the ldapsam backend remains the best for allowing arbitary control of these details. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Trouble with 'NET ADS JOIN'
On Tue, 2003-09-30 at 10:56, John H Terpstra wrote: > On Tue, 30 Sep 2003 [EMAIL PROTECTED] wrote: > > > Hi All, > > > > Any clues as to what is causing this? I have seen similar questions asked > > before in regards to joining ADS domain but have not been able to find a > > solution to my problem. > > > > The domain is a Native mode ADS on win2k3 with signing required. Please let me > > know if additional info or logs are required to diagnose the problem. > > > > I did a 'net ads join ADSDOM -U [EMAIL PROTECTED] -d10' I was > > asked for my password and I entered it. The last bit of the result is shown > > below.. > > Are you using Samba-3.0.0? > > What are your smb.conf entries for: > netbios name > workgroup > realm > password server > > And what is the domain name of your Win2K3 server? > Where is the DNS server? > What is the Computer name of the Win2K3 ADS server/Domain Controller? Also (but probably not in your particular case). What version of Keberos are you running locally (MIT 1.3.1 is suggested, if possible, or a very recent Heimdal), and have you ever changed the password for 'admin' since the domain was created/upgraded to ADS? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] help
I have just installed samba 3.0 on RH 9, when I try to access swat I get an error "The Connection was refused when attempting to connect to contact 127.0.0.1:901. I have set up the swat 901/tcp in /etc/services and the swat file in xinetd.d I have also restarted xinetd. I don't know what else to do. Here is my swat file in xinetd.d service swat. { socket_type = stream wait = no protocol = tcp only_from = 127.0.0.1 user = root log_on_failure+= USERID server= /usr/local/samba/sbin/swat port = 901 disable = no } Thanks all -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Using WINBIND and the latest samba 3
You might want to look again - I see a symlink for libnss_wins, but not winbind. Don't worry, I worked for a couple of hours on a similar problem and it turned out I had typed "winbindd" instead of "winbind" in /etc/nsswitch.conf. :) Jeremy On Tue, 30 Sep 2003 13:41:55 -0500 (CDT), you wrote: > >That is already in place... any other ideas? > >[EMAIL PROTECTED] lib]# ls libnss_win* -la >-rwxr-xr-x1 root root13828 Sep 24 21:01 libnss_winbind.so >-rwxr-xr-x1 root root 706072 Sep 24 21:01 libnss_wins.so >lrwxrwxrwx1 root root 14 Sep 30 08:55 libnss_wins.so.2 >-> libnss_wins.so > >Gabriel > >On Tue, 30 Sep 2003, Jeremy Courter wrote: > >! >! Did you create a symbolic link for libnss_winbind.so.2 -> >! libnss_winbind.so in /lib? If not, create one and issue an ldconfig >! -v |grep winbind and verify that it shows in the output. Once you've >! done that, try your getent command again. >! >! Jeremy >! >! On Tue, 30 Sep 2003 09:01:19 -0500 (CDT), you wrote: >! >! > >! >I've been tooling with this for a while, and I need some help... please!! >! >:) >! > >! >Here's what I'm trying to do. I want a samba server to work with winbind, >! >so that when I type 'getent passwd' it shows a list of local users, as >! >well as my domain user list. I want a user to be able to ssh into the >! >machine using their NT 4 domain username, like domain\username. That's >! >pretty much it. >! > >! >! >! > >Gabriel Matthews >Network Support >Cinergy Communications > >"No. I am your father." > -Darth Vader, leader, devoted parent, > and friend to all. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Modifying password expiry dates
I've just found out that Samba (rather correctly) implements a nice and low password expiry date through the tdbsam backend, and I believe the "maximum password age" value. However, I can't, for the life of me, actually /set/ this thing. I've tried this: # pdbedit -u -r -P "maximum password age" -C 100 And without the -r, and with various other flags. But every time, it spits back this error to me: Incompatible or insufficient options on command line! I've searched Google, and there's very little, and there's not much in the man page by way of modifying the password age. Can anyone point me as to how to actually do this? We're running Samba 3.0b3, if that makes a difference. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba 3.0, excel 2000, read-only problem
> > I just tried to move one of our servers to samba 3.0 and found that it > > has problems with read-only excel files. > > Excel simply can't open them. > > On 2.2.8a Excel successefully opens read-only files. > What version of Excel please ? I have a same problem with samba CVS 3.0.1pre1 on FreeBSD 5.1 (sparc64 and i386). ls -l /home/all/ total 40 -r--r--r-- 1 root users 11776 Oct 1 13:17 excel.xls -r--r--r-- 1 root users 19456 Oct 1 13:29 file.doc I use Word and Excel from Office 2000sp3. Word open file file.doc, Excel cannot open file excel.xls with error "Cannot find excel.xls". On samba 2.2.8a Excel successfully open read-only files. Thanks! -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] problems accessing samba server from Pocket PC with Windows Mobil e 2003
Hi all, when accessing a samba server version 2.2.8a from a Pocket PC with Windows Mobile 2003 you can give a password and tell the Pocket PC to remember it. But, if you switch off the device or remove the LAN-card the stored password is lost (or send in a different way as Pocket PC 2002). Maybe the procedure of sending the stored password has been changed, because Pocket PC 2002 works fine with samba, and accessing a W2K works also fine with Windows Mobile 2003... So, I tried accessing a samba server version 3.0.0 from a Pocket PC with Windows Mobile 2003, but I always got the error message: "Cannot find file '\\' (or one of its components). Check to ensure the path and filename are correct and that all required libraries are available." I tried to connect to '\\hostname' or '\\hostname\path' but it is alway replaced with '\\'. When I tried '//hostname' or '//hostname/path' the same error message appears with '//hostname' or '//hostname/path' instead of '\\'. With Pocket PC 2002 or W2K a connection to samba server version 3.0.0 is established without any problems. Any ideas how to manage this? Torsten -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Mounting Windows Shares from Linux
>>What does 'smbclient -L //129.253.110.160' say? smbclient -L 129.253.110.160 is OK if I use a username/password combo.. If I use anonymous (meaning I just press enter whem prompted for a password) I get Anonymous login successful Domain=[MY] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] Sharename Type Comment - --- Error returning browse list: NT_STATUS_ACCESS_DENIED Oh..BTW if I do a [EMAIL PROTECTED] Dump]$ sudo mount -t smbfs //129.253.110.160/Dump $HOME/Dump -o username=,password= 914: session request to 129.253.110.160 failed (Called name not present) 914: session request to 129 failed (Called name not present) It connects OK but still got the error messages.. Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168 -Original Message- From: John Snowdon [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 01, 2003 4:29 PM To: [EMAIL PROTECTED] Subject: RE: [Samba] Mounting Windows Shares from Linux What does 'smbclient -L //129.253.110.160' say? -John John Snowdon - IT Support Specialist -==- Faculty of Medical Sciences Computing Dept School of Medical Education Development University of Newcastle Phone : 0191 245 4230 Email : [EMAIL PROTECTED] -Original Message- From: Ow Mun Heng [mailto:[EMAIL PROTECTED] Sent: 01 October 2003 09:19 To: [EMAIL PROTECTED] Subject: RE: [Samba] Mounting Windows Shares from Linux >>Have you tried using backslashes '\' instead of forwards slashes '/' for >>the server and share name part of the mount command? Can't do it that way. It's not within the mount command options.. Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] roaming profile, w2k and chjaracter sets - PLEASE HELP URGENTLY!
On Wed, 2003-10-01 at 18:24, Hendrik wrote: > Hi, > > Within Samba 3.0 it doesn't support charsets like in Samba 2.x.x. > > Try this in your smb.conf GLOBAL: > > [global] > unix charset = CP850 Long-term, consider migrating to UTF8 on the server. This basicly involves renaming every file, using iconv for the conversion. I think such a script has been posted to the list in the past. > Perhaps this too: > > unicode = Yes That is a default. > I think this should help. > > > On Wed, 1 Oct 2003, Andre de Koning wrote: > > > I've been running verious version of samba 2.2.x up to last night. > > I now converted all my server so 3.0 with ldapsam. > > > > All my w2k roaming profiles now refuse to load, complaining about not being > > able to load various files in the profile dir containing special chars. > > > > Things like Sendto\3>> floppy... or 3?floppy or 3||!!|floppy is displayed > > where it should be 3floppy. > > > > On my linux boxes it also displays it differently on different boxes in > > variuos locations. > > > > I obviously need to use the same char set for linux/samba/w2k - does anybody > > know what this should be set to and how you set it? What has changes > > between 2.2.x (eg. 2.2.5) and 3.0? > > > > I have the problem that about 500 users can't log in today and only get > > temporary profiles. If anybody is even able to help me at a fee I'm > > prepared to pay! > > > > thanks in advance, > > Andr de Koning > > IT Manager > > Softline VIP Payroll > > Tel: +27 12 420 7000 > > [EMAIL PROTECTED] > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba version 2.2.8a compatibility with Active Directory on W2003
On Fri, 2003-09-26 at 01:58, [EMAIL PROTECTED] wrote: > Hi, > > We are currently running Samba v2.2.8a on Solaris 9. We are hoping to > migrate to W2003 with Active Directory. Are there any incompatibilty > issues? A number. If you can, migrate to Samba 3.0 before you migrate to Win2k3. The problem is that Samba 2.2 does not support SMB signing, and often has 'restrict anonymous' set, which gets in the way of winbind and some parts of domain authentication. Samba 3.0 is able to overcome this. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Mounting Windows Shares from Linux
What does 'smbclient -L //129.253.110.160' say? -John John Snowdon - IT Support Specialist -==- Faculty of Medical Sciences Computing Dept School of Medical Education Development University of Newcastle Phone : 0191 245 4230 Email : [EMAIL PROTECTED] -Original Message- From: Ow Mun Heng [mailto:[EMAIL PROTECTED] Sent: 01 October 2003 09:19 To: [EMAIL PROTECTED] Subject: RE: [Samba] Mounting Windows Shares from Linux >>Have you tried using backslashes '\' instead of forwards slashes '/' for >>the server and share name part of the mount command? Can't do it that way. It's not within the mount command options.. Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] $ in domain name, Samba 2.2.8a
On Sat, 2003-09-27 at 02:05, Stuckless, Colin 709 778-3815 wrote: > Hi > > I recently upgraded samba to 2.2.8a on a Solaris 8 server. Previously we > were running an older version on Solaris 2.6. I am using domain security to > authenticate users to an NT based PDC, and have a username map for matching > Windows usernames to Unix usernames. > > The problem I'm having is that users in the same domain as the Solaris > server are authenticating fine, but users in a domain trusted by that domain > are not authenticating. For example, if the local domain is DOMB and the > trusted domain with the dollar sign is $DOMA, in my smb log I see: > > domain_client_validate: unable to validate password for user FOO in domain > _DOMA to Domain controller *. Error was NT_STATUS_NO_SUCH_USER. > > It looks to me like the $ in $DOMA is being mapped to an underscore > ("_DOMA"), and I'm guessing that the PDC is being asked to validate a user > in a domain "_DOMA" that it knows nothing about. Or perhaps this is a red > herring, and the $ is preserved in the smb communication but just not in my > log file. > > I didn't have this problem under the older samba version I was running (also > using domain security and our NT based PDC). Any ideas? Yes, we are stripping it out for security reasons. The problem is when people use %U and %D macros in their smb.conf - particularly for logfiles - we got bitten when %m was allowed to contain ../../, and cracked down on it. I think Samba 3.0 allows this again, as I've gone over the codepaths, and am happy with our verification (against the known list of trusted domains etc). Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] roaming profile, w2k and chjaracter sets - PLEASE HELP URGENTLY!
Hi, Within Samba 3.0 it doesn't support charsets like in Samba 2.x.x. Try this in your smb.conf GLOBAL: [global] unix charset = CP850 Perhaps this too: unicode = Yes I think this should help. On Wed, 1 Oct 2003, Andre de Koning wrote: > I've been running verious version of samba 2.2.x up to last night. > I now converted all my server so 3.0 with ldapsam. > > All my w2k roaming profiles now refuse to load, complaining about not being > able to load various files in the profile dir containing special chars. > > Things like Sendto\3>> floppy... or 3?floppy or 3||!!|floppy is displayed > where it should be 3floppy. > > On my linux boxes it also displays it differently on different boxes in > variuos locations. > > I obviously need to use the same char set for linux/samba/w2k - does anybody > know what this should be set to and how you set it? What has changes > between 2.2.x (eg. 2.2.5) and 3.0? > > I have the problem that about 500 users can't log in today and only get > temporary profiles. If anybody is even able to help me at a fee I'm > prepared to pay! > > thanks in advance, > André de Koning > IT Manager > Softline VIP Payroll > Tel: +27 12 420 7000 > [EMAIL PROTECTED] > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.0 compilation errors under Unixware 7.1.1
Hello, I tried to build the latest samba source package with errors, it seems there is a problem with the compatibility from the awk script mkbuildoptions.awk. With older version 2.2.8a there was no problem compiling the sources. With 3.0.0 i got the following error: ### ... ... configure: creating ./config.status config.status: creating include/stamp-h config.status: creating Makefile config.status: creating script/findsmb config.status: creating smbadduser config.status: creating script/gen-8bit-gap.sh config.status: creating include/config.h config.status: include/config.h is unchanged # make Using FLAGS = -g -I./popt -Iinclude -I/u2/smbbuild/samba-3.0.0/source/include - I/u2/smbbuild/samba-3.0.0/source/ubiqx -I/u2/smbbuild/samba-3.0.0/source/smb wrap per -I. -I/u2/smbbuild/samba-3.0.0/source LIBS = -lgen -lresolv -lsocket -lnsl LDSHFLAGS = -G LDFLAGS = Generating smbd/build_options.c UX:nawk: ERROR: Error in RE `^\/\* (.*?)\*\/': invalid *, +, ?, \{\} or {} opera tor UX:nawk: INFO: Source line number 117 UX:nawk: INFO: Context is /^\/\* >>> (.*?)\*\// <<< { *** Error code 2 (bu21) UX:make: ERROR: fatal error. # ### The Machine is a UW7 UnixWare scotty 5 7.1.1 i386 x86at SCO UNIX_SVR5 It seems the error comes from the script ./script/mkbuildoptions.awk We want to build our own samba package because its more suitable for our customers. Any help is very welcome. You can also mail to [EMAIL PROTECTED] Best Regards Peter Kess -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Mounting Windows Shares from Linux
>>Have you tried using backslashes '\' instead of forwards slashes '/' for >>the server and share name part of the mount command? Can't do it that way. It's not within the mount command options.. Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Mounting Windows Shares from Linux
Have you tried using backslashes '\' instead of forwards slashes '/' for the server and share name part of the mount command? -John John Snowdon - IT Support Specialist -==- Faculty of Medical Sciences Computing Dept School of Medical Education Development University of Newcastle -Original Message- From: Ow Mun Heng [mailto:[EMAIL PROTECTED] Sent: 01 October 2003 09:00 To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [Samba] Mounting Windows Shares from Linux Hi All, I'm sure this has been discussed many times but since I do not have a internet connection, I have to ask this question.. [EMAIL PROTECTED] Dump]$ sudo mount -t smbfs //129.253.110.160/Dump $HOME/Dump 708: session request to 129.253.110.160 failed (Called name not present) 708: session request to 129 failed (Called name not present) Password: Anonymous login successful 708: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168 -Original Message- From: Tarang Mittal [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 01, 2003 3:12 PM To: [EMAIL PROTECTED] Subject: mouting windows XP shares Hey I am trying to mount a shared folder from a windows XP box onto my linux box. I did the following and got the following error % mount -t smbfs //windows_computer_name/shared_foler /mnt/mnt_folder/ Password: Anonymous login successful 4170: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed The folder shared on the windows box has given "Everyone" the read permission. what do you suggest I do? thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] unable to save share permissions changes with 3.0
I've tried using the MMC on a W2K system to edit the permissions. I was logged in as a domain admin account, which is mapped to a local user on the samba box and is entered in as an admin user on the share. The system itself is a member server in a resource domain, while the accounts I'm trying to add come from a trusted domain, if that makes a difference. Cheers, Eamonn On Tue, 2003-09-30 at 23:22, Gerald (Jerry) Carter wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Eamonn Hamilton wrote: > | No, I don't have ACLs enabled on the filesystem. > | > | However, I thought the share level permissions were coded in > | share_info.tdb, and didn't rely on the filesystem ACL capabilities? > > You are correct. How are you accessing the share acls? > This code didn't really change between 2.2 and 3.0. > > > > cheers, jerry > ~ -- > ~ Hewlett-Packard- http://www.hp.com > ~ SAMBA Team -- http://www.samba.org > ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc > ~ "You can never go home again, Oatman, but I guess you can shop there." > ~--John Cusack - "Grosse Point Blank" (1997) > > -BEGIN PGP SIGNATURE- > Version: GnuPG v1.2.1 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQE/egI+IR7qMdg1EfYRAjvpAKDo6xzWXgwupUERwjGeql+yimAAhwCggQyq > 0vnoOAUEOkU2LpM4aIp+gJk= > =52mb > -END PGP SIGNATURE- -- Eamonn Hamilton Senior Technical Designer Technical Projects and Design (North) Tel : +44 (0) 1224 333833 Fax : +44 (0) 1224 840032 Email [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Unified logins
Hi Samba users, I posted a couple of messages to the list over the last week about my problems with winbind, getent and large group entries under Solaris with no responses/fix on the issue. My only option is to approach the problem differently. Some background. The company I work for has approx 900 users defined within an NT Domain. There is a large project at the moment migrating this to active/Windows 2003. A large number of these users will need access to a terminal based application running on a couple of unix hosts and I would like to build some sort of infrastructure that would allow the Unix hosts to authenticate against the NT environment. We have close to 20 Sun servers and would like to have most of these servers authenticating against NT. How would people suggest I best do this? I am guessing that LDAP authentication into active directory may be the best option (if this actually works). Cheers Phil -- Phil Wild Sealcorp Holdings Ltd Tel: 08 9415 5595 Mob: 0400 466 952 Email: [EMAIL PROTECTED] IMPORTANT INFORMATION This message and any files transmitted with it are confidential and should be read only by those persons to whom it is addressed. If you have received this message in error, please notify us immediately by way of reply. Please also destroy and delete the message from your computer. Any unauthorised form of reproduction of this message is strictly prohibited. It is the duty of the recipient to virus scan and otherwise test the information provided before loading onto any computer system. SEALCORP does not warrant that the information is free of a virus or any other defect or error. SEALCORP is not liable for the proper and complete transmission of the information contained in this communication, nor for any delay in its receipt. Any views expressed in this message are those of the individual sender, except where the sender specifically states them to be the views of SEALCORP. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Mounting Windows Shares from Linux
Hi All, I'm sure this has been discussed many times but since I do not have a internet connection, I have to ask this question.. [EMAIL PROTECTED] Dump]$ sudo mount -t smbfs //129.253.110.160/Dump $HOME/Dump 708: session request to 129.253.110.160 failed (Called name not present) 708: session request to 129 failed (Called name not present) Password: Anonymous login successful 708: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed Cheers, Mun Heng, Ow H/M Engineering Western Digital M'sia DID : 03-7870 5168 -Original Message- From: Tarang Mittal [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 01, 2003 3:12 PM To: [EMAIL PROTECTED] Subject: mouting windows XP shares Hey I am trying to mount a shared folder from a windows XP box onto my linux box. I did the following and got the following error % mount -t smbfs //windows_computer_name/shared_foler /mnt/mnt_folder/ Password: Anonymous login successful 4170: tree connect failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed The folder shared on the windows box has given "Everyone" the read permission. what do you suggest I do? thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] roaming profile, w2k and chjaracter sets - PLEASE HELP URGENTLY!
I've been running verious version of samba 2.2.x up to last night. I now converted all my server so 3.0 with ldapsam. All my w2k roaming profiles now refuse to load, complaining about not being able to load various files in the profile dir containing special chars. Things like Sendto\3>> floppy... or 3?floppy or 3||!!|floppy is displayed where it should be 3floppy. On my linux boxes it also displays it differently on different boxes in variuos locations. I obviously need to use the same char set for linux/samba/w2k - does anybody know what this should be set to and how you set it? What has changes between 2.2.x (eg. 2.2.5) and 3.0? I have the problem that about 500 users can't log in today and only get temporary profiles. If anybody is even able to help me at a fee I'm prepared to pay! thanks in advance, André de Koning IT Manager Softline VIP Payroll Tel: +27 12 420 7000 [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba PDC Win2K server.{G}
Got a problem I have a number of Windows 2000 server that can't join my domain hosted by my samba server. The windows 2000 server gives the following error when try to set it up to join the domain "The account used is a computer account. Use your global user account or local user account to access this server.". I have tried setting up a number of different uses on the windows 200 server but with no sucsess. Many thanks Gregory Machin -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.0 rpms
A few notes: The RPMS for 3.0.0 for RH9 do not seem to have a valid signature, rpm complains. They were OK for rc2, rc3 and rc4. I created a rpm from the src rpm which was OK. Installation over rc4 was fine but installation over 2.2.7a(RH version) did not create a link from libnss_winbind.so to libnss_winbind.so.2 and hence nsswitch did not do any winbind auth. Force group does not appear to work if the group is a winbind group ie force group = @PANAVISION+"Domain Admins" causes the client (Win98) to get an "Unknown error 31" message. removing the force group line from the conf fixed the problem. Congratulations to all for a fine job. regards Stephen Collier Panavision Australia -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba