[Samba] Compiling error?

2004-01-15 Thread Klaus Frederiksen
Hi all,

I am running RH 9 and samba 3.0.2pre1
When I try to access my samba server I cannot access 
(\\server is not accessible  The server service is not started)
And this pops up in my log:

[2004/01/15 09:19:59, 0] lib/util.c:smb_xmalloc(2055)
  smb_xmalloc() failed to allocate 1108514342 bytes
[2004/01/15 09:19:59, 0] lib/util.c:smb_panic(1400)
  PANIC: smb_xmalloc: malloc fail.
  
[2004/01/15 09:19:59, 0] lib/util.c:smb_panic(1408)
  BACKTRACE: 15 stack frames:
   #0 smbd(smb_panic+0x181) [0x8186755]
   #1 smbd(smb_xmalloc+0x83) [0x8187c6b]
   #2 smbd(data_blob+0x59) [0x8184322]
   #3 smbd [0x811ed38]
   #4 smbd(open_rpc_pipe_p+0x2c2) [0x811e803]
   #5 smbd [0x8091ed8]
   #6 smbd [0x8091f99]
   #7 smbd(reply_ntcreate_and_X+0x112) [0x8092151]
   #8 smbd [0x80bb734]
   #9 smbd [0x80bb7be]
   #10 smbd(process_smb+0x1b9) [0x80bbab9]
   #11 smbd(smbd_process+0x153) [0x80bc514]
   #12 smbd(main+0x6ec) [0x81dfc93]
   #13 /lib/tls/libc.so.6(__libc_start_main+0xe4) [0x42015574]
   #14 smbd(chroot+0x31) [0x80768a1]
[2004/01/15 09:28:10, 0] lib/util.c:smb_xmalloc(2055)
  smb_xmalloc() failed to allocate 3221215832 bytes
[2004/01/15 09:28:10, 0] lib/util.c:smb_panic(1400)
  PANIC: smb_xmalloc: malloc fail.

I configured using: --with-automount --with-configdir=/etc/samba
--prefix=/usr

Any ideas anyone?

Regards
Klaus Frederiksen
Aalborg University

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Migrate Samba 2.2 to 3.0

2004-01-15 Thread pago
Hello List,

i have plans to migrate a samba 2.2 PDC (with LDAP backend) to samba 3.0. I'm using a 
software that uses the SID to authenticate users to let the users use this. When i 
install samba 3.0, how about the SID. Can i migrate the existing SID's too? I read 
about the RID, thats existing in the LDAP schema of samba 2.2. One documentation said, 
that this will be replaced with the ntSid. Is this right? What will be the best way to 
take the actual SID's?


Greets

pago
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Auto printer dirver install for windows client

2004-01-15 Thread Lewis Shobbrook
Hi Nandish,
 
> We have HP Laserjet 4000 / 4050 printer, I made Redhat Linux 
> as my print server, I was not able to auto install the 
> printer dirver to windows client machine, I tried various 
> option make driver auto install, now print job is come to the 
> queue but it's not printing.
> 
I've just set up an HP4000 on a Debian system.  I used the latest
foomatic drivers from  linuxprinting.org a recent CUPS system, samba
3.0.1-2, the cups-samba drivers for windows from http://www.cups.org/
(CUPS Driver for Windows 5.0rc30) and the samba-client tools which
include the cupsaddsmb utility.  If you follow the documentation for
samba 3 from the samba web site, it should work for you.

Set-up the printer through cups use the APPsocket/HP JetDirect and enter
the printers IP connection(print test page from windows box to find it
if unkown) socket://192.168.0.39:9100/  and print a test page. If that
works then proceed to use the cupsaddsmb -A -v, as described in the
documentation.

Cheers,

Lewis Shobbrook

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Auto printer dirver install for windows client

2004-01-15 Thread Nandish
Dear Sir,

We have HP Laserjet 4000 / 4050 printer, I made Redhat Linux as my print 
server, I was not able to auto install the printer dirver to windows 
client machine, I tried various option make driver auto install, now 
print job is come to the queue but it's not printing.

If any solutions for this problem, pls. mail me.

Thanks in advance

Nandish

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba 3.0 pdc and winxp

2004-01-15 Thread Richard Houston
Hi,

I am trying to get an xp machine to join a samba 3.0 pdc domain.
I keep getting the following error below. I can view the pdc shares with
no problem. Can anyone point me in the correct direction on getting this
fixed. Any help would be greatly appreciated.



The domain name homenet might be a NetBIOS domain name.  If this is the
case, verify that the domain name is properly registered with WINS.

If you are certain that the name is not a NetBIOS domain name, then the
following information can help you troubleshoot your DNS configuration.

The following error occurred when DNS was queried for the service location
(SRV) resource record used to locate a domain controller for domain
homenet:

The error was: "DNS name does not exist."

(error code 0x232B RCODE_NAME_ERROR)

The query was for the SRV record for _ldap._tcp.dc._msdcs.homenet

Common causes of this error include the following:

- The DNS SRV record is not registered in DNS.

- One or more of the following zones do not include delegation to its
child zone:

homenet
. (the root zone)

For information about correcting this problem, click Help.



Regards,
+--+
| Richard Houston  .^. |
| R.L.H.  Consulting   /V\ |
| E-Mail  <[EMAIL PROTECTED]>/(   )\   |
| WWW   ^^-^^|
+--+


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Re: Good News, ou=computer works! :-)

2004-01-15 Thread Vegeta
Andrew Bartlett wrote:

> On Thu, Jan 15, 2004 at 09:42:53AM -0400, Vegeta wrote:
>> Beast wrote:
>> 
>> > 
>> > I'm just storing machine accounts under
>> > ou=computer,ou=site,dc=domain,dc=com and it works.
>> > 
>> > Tested with W2K sp2 and W2K sp3, recreating from fresh ldif 2 times
>> > were never failed. Im sure it is 'stable' right now :-)
>> > 
>> > 'works' means it was able to add machine trust on-the-fly, or using
>> > manual creation with smbpasswd command.
>> > 
>> > The key is in not to use 'objectclass=sambaSamAccount' in ldap filter.
>> > 
>> > Tks to everybody who helps...
>> > 
>> > --beast
>> > 
>> I did not use 'objectclass=sambaSamAccount' and 3.0.2pre1 still doesn't
>> work for me using ou=computers
> 
> All LDAP searche (for account objects, anyway) are done under the
> 'ldap suffix'.  If you have that set so that it can 'see' both
> ou=People and ou=Computers, it really should 'just work'.  The 'ldap
> user suffix' and 'ldap machine suffix' was meant to control where
> users and machines get put, if they don't already exist.  Due to
> current requirments, you pretty much always have to run an add user
> script, so more important issetting this in the ldap tools.
> 
> Andrew Bartlett

No, the key is not the smb.conf file but the ldap.conf file. Samba seems to
look for machine accounts among users returned by the Name Service Switch
(what you get when you run the command 'getent passwd').

Most people has the "nss_base_passwd" property in ldap.conf set as 
"ou=People, dc=domain,dc=com" and the "scope" property set as "one".
If ldap.conf is configured this way NSS only returns entries in the
ou=People subtree.

If "scope" is set to "sub" and "nss_base_passwd" is set to
"dc=domain,dc=com" then NSS switch will return as users all entries in
subtrees of "dc=domain,dc=com", including both the ou=Computers and the
ou=People subtree.

Vegeta




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Share Unavailable

2004-01-15 Thread Norman Zhang
Hi,

I have files rsync'd from an old samba server. When I try to run 
testparam I see the following notice. Samba is running on the new 
server. Does anyone know what I'm doing wrong?

Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
NOTE: Service homes is flagged unavailable.
Processing section "[transfer]"
NOTE: Service transfer is flagged unavailable.
Loaded services file OK.
Press enter to see a dump of your service definitions
[homes]
comment = Home Directories
path = %H
read only = No
[transfer]
comment = Temporary Storage
path = /usrswap/transfer
read only = No
create mask = 0777
directory mask = 0777
Regards,
Norman
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Mapping a drive letter to a Samba share

2004-01-15 Thread Panko, Kevin
The backslash is not a valid character for a share name.  You might be able
to have a share named "C$" and set the path = /foo, then create a symlink
named /foo/inetpub/mailroot/Pickup which points to /pickup.

Doing it that way would mean that \\server\C$\inetpub\mailroot\Pickup is
actually the same as \\server\pickup.

HTH.

-Original Message-
From: Brian Spiegel [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 15, 2004 6:12 PM

[C$\inetpub\mailroot\Pickup]
comment = Other Pickup, Same Target Directory
path = /pickup
read only = No
guest ok = Yes
guest only = Yes
 
Now, C$ is standard UNC for the root directory on Windows ( C: ).  The
"Pickup" share works great.  However, the share with "C$" in the title gives
me a "Network name could not be found" error dialog.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Mapping a drive letter to a Samba share

2004-01-15 Thread Brian Spiegel
Hey guys,
 
I'm in kind of a crunch right now.  Due to a poorly written script that I
don't have control over, I need to be able to map a drive letter to a Samba
share so that it works seamlessly with UNC (i.e \\server\Share
 ).
 
Basically, I need a way for a share name with a $ in it to be recognized as
a valid network name.  My current setup is like so:
 
[Pickup]
comment = Pickup
path = /pickup
read only = No
guest ok = Yes
guest only = Yes
 
[C$\inetpub\mailroot\Pickup]
comment = Other Pickup, Same Target Directory
path = /pickup
read only = No
guest ok = Yes
guest only = Yes
 
Now, C$ is standard UNC for the root directory on Windows ( C: ).  The
"Pickup" share works great.  However, the share with "C$" in the title gives
me a "Network name could not be found" error dialog.
 
Has anyone had to do this before?  How can it be done?  I'm in a serious
time crunch at this point and the owner of the application that uses this
access method is not going to have time to change it.
 
Any help or guidance on how this could be done would be greatly appreciated.
Time is running short.
 
Thanks,
Brian
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] wbinfo looking for hostname as domain

2004-01-15 Thread Andrew Bartlett
On Thu, Jan 15, 2004 at 04:37:54PM -0500, Matt McParland wrote:
> On Thu, 15 Jan 2004, Andrew Bartlett wrote:
> 
> > > Anyone know why it would be looking for the hostname as the domain instead
> > > of the domain I joined it to?
> >
> > This was fixed shortly after the release of 3.0.2pre1.
> 
> Does that mean another release is coming? :)

There is

> Does the CVS version typically compile or does it too bleeding edge?

It *should* always compile and run as expected.  Most failure to
compile issues are just missing checkins, not anything deliberate.
We really do try to test that it works before we checkin, but there is
a reason jerry is busy preparing the rc releases - we need outside
confirmation.

Andrew Barltett
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] long print times

2004-01-15 Thread David Bear
we have two machines/users that experience extremely long wait times
when printing documents to samba servers. Both machines are Windows
XP.  We have also noted that both were running personal firewalls, one
was micrisofts, the other was kerio.  We also noted that when turning
these firewalls OFF, the wait times vanished and the systems behaved
normally.

Has anyone else seen this behavior? Any suggestions for a fix?

-- 
David Bear
phone:  480-965-8257
fax:480-965-9189
College of Public Programs/ASU
Wilson Hall 232
Tempe, AZ 85287-0803
 "Beware the IP portfolio, everyone will be suspect of trespassing"
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] FreeBSD Winbind and Symlinks

2004-01-15 Thread IT Smith
Hello,

I believe their are some files I need to copy and then
symlink to get Winbind working on FreeBSD 5.2 with
nsswitch and LDAP, but am not quite sure which one
because I have seen conflicting results. 

The following files are in my samba-3.01 work
directory but do not appear to get installed when I
build via the ports collection.   Do I need to copy
them manually, if so where do they need to go?  Do
they need to be in /user/local/lib or /usr/lib?

libnss_winbind.so, libnss_wins.so,pam_winbind.so

I have seen a reference to symlinking with regards to
samba bug #797 which has been fixed which says you
need the following symlinks

root# *ln -s /usr/lib/libnss_winbind.so
/usr/lib/libnss_winbind.so.1*
root# *ln -s /usr/lib/libnss_winbind.so
/usr/lib/nss_winbind.so.1*
root# *ln -s /usr/lib/libnss_winbind.so
/usr/lib/nss_winbind.so.2*

Do theses symlinks need to be done?

Any help would be appreciated.



__
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] wbinfo looking for hostname as domain

2004-01-15 Thread Matt McParland
On Thu, 15 Jan 2004, Andrew Bartlett wrote:

> > Anyone know why it would be looking for the hostname as the domain instead
> > of the domain I joined it to?
>
> This was fixed shortly after the release of 3.0.2pre1.

Does that mean another release is coming? :)

Does the CVS version typically compile or does it too bleeding edge?

-- 
Matt McParland
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Good News, ou=computer works! :-)

2004-01-15 Thread Andrew Bartlett
On Thu, Jan 15, 2004 at 09:42:53AM -0400, Vegeta wrote:
> Beast wrote:
> 
> > 
> > I'm just storing machine accounts under
> > ou=computer,ou=site,dc=domain,dc=com and it works.
> > 
> > Tested with W2K sp2 and W2K sp3, recreating from fresh ldif 2 times were
> > never failed. Im sure it is 'stable' right now :-)
> > 
> > 'works' means it was able to add machine trust on-the-fly, or using manual
> > creation with smbpasswd command.
> > 
> > The key is in not to use 'objectclass=sambaSamAccount' in ldap filter.
> > 
> > Tks to everybody who helps...
> > 
> > --beast
> > 
> I did not use 'objectclass=sambaSamAccount' and 3.0.2pre1 still doesn't work
> for me using ou=computers

All LDAP searche (for account objects, anyway) are done under the
'ldap suffix'.  If you have that set so that it can 'see' both
ou=People and ou=Computers, it really should 'just work'.  The 'ldap
user suffix' and 'ldap machine suffix' was meant to control where
users and machines get put, if they don't already exist.  Due to
current requirments, you pretty much always have to run an add user
script, so more important issetting this in the ldap tools.

Andrew Bartlett
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Sometimes unable to browse w2k shares

2004-01-15 Thread Jerome Borsboom
We had the same problems, but solved it by this patch.

http://lists.samba.org/archive/samba/2004-January/078084.html
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] wbinfo looking for hostname as domain

2004-01-15 Thread Andrew Bartlett
On Thu, Jan 15, 2004 at 02:02:49PM -0600, Trevor Thorsteinson wrote:
> i have samba 3.0.2pre1 installed on a SuSE 9 machine that I am trying to get
> to authenticate on an NT4 domain.  After joining the machine to the domain,
> setting up smb.conf and nsswitch.conf to use winbind I start the services
> and try wbinfo -u to test the connection and I get the following error:
> 
> Error looking up domain users
> 
> tail /var/log/messages shows the following:
> 
> nsswitch/winbindd_group.c:winbindd_getgroups(952)
> could not find domain entry for domain ~hostname~
> 
> Anyone know why it would be looking for the hostname as the domain instead
> of the domain I joined it to?

This was fixed shortly after the release of 3.0.2pre1.  

Andrew Bartlett
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Rsync with smbfs filesystem and character s like é - updated from version on RSync List

2004-01-15 Thread Nic Colledge
Unfortunately that didn’t work for me!
 
I think there may be a bug somewhere although its possible that I have
done something wrong somewhere.
 
My reason for saying this is everything works perfectly when the windows
machine is "uploading" the files but not when rsync is copying them.
 
Regards
Nic Colledge
[EMAIL PROTECTED]
[EMAIL PROTECTED]
 
 
-Original Message-
From: Charles Hamel [mailto:[EMAIL PROTECTED] 
Sent: 15 January 2004 19:10
To: Nic Colledge
Subject: Re: [Samba] Rsync with smbfs filesystem and character s like é
- updated from version on RSync List
 
Hi, I had the same problem 2 days ago,
 
try adding unicode to the smbmount command, like this :
$MOUNT -t smbfs -o
username=XXX,password=XXX,codepage=CP850,iocharset=ISO8859-1,unicode
 
That did the trick for me :)
 
HTH 
 
 
On Thu, 15 Jan 2004 18:43:26 -, Nic Colledge wrote
> Hello,
> 
> I’m using samba version 3.0.1-Debian
> rsync version 2.6.0 protocol version 27
> And mount version 2.12
> With kernel 2.4.22
> 
> As far as in aware these are the latest versions in Debian unstable.
> 
> The problem im having is when mirroring my mp3 collection file names 
> with characters like é Ï Ê etc. are not displayed in the linux 
> filesystem and then when browsing to the directory through samba using

> a windows machine they are displayed as “” “ for example “02 R”yksopp 
> - Eple.mp3”.
> 
> Originally they would be displayed as “02 R” on the 
> windows machine until I added “dos charset = CP850” and “unix charset 
> = ISO8859-16” to the smb.conf file.
> 
> This problem only occours when using the linux machine to copy from 
> the windows machine to the linux machine. If the windows machine 
> “uploads” to the linux machine everything works fine and filenames 
> appear correct on both the windows and linux machines. Unix charset 
> ISO8859-1 didn’t work as well for me, as in the filenames were not 
> written correctly on the linux machine when doing an upload but 
> appeared fine when using the windows machine to browse the directory 
> through samba.
> 
> Any help in resolving this problem would be much appreciated.
> 
> The script I use for the mirroring operation is as follows:
> 
> ## START SCRIPT
> #!/bin/bash
> # This is a simple script to mirror the MP3 Directory from the RAID to

> this machine
> 
> #COMMANDS USED
> MOUNT=/bin/mount;
> RSYNC=/usr/bin/rsync;
> UMOUNT=/bin/umount;
> ECHO=/bin/echo;
> ID=/usr/bin/id;
> DATE=/bin/date;
> 
> # ACTUAL SCRIPT
> $ECHO " ";
> $ECHO "MP3 Mirroring Script Start";
> $DATE;
> # make sure we're running as root
> if (( `$ID -u` != 0 )); then { $ECHO "Sorry, must be root.  
> Exiting..."; exit; } fi
> 
> $MOUNT -t smbfs -o 
> username=XXX,password=XXX,codepage=CP850,iocharset=ISO8859-1
> //beast-mk2/RAID /beast-RAID ;
> if (( $? )); then
> {
> $ECHO "Could not mount RAID on beast-mk2 - Exiting";
> $DATE;
> exit;
> }
> fi;
> 
> $RSYNC -a -v --delete-after --modify-window=2 /beast-RAID/Mp3/ 
> /Mp3-Mirror/ ;
> 
> $UMOUNT /beast-RAID ;
> if (( $? )); then
> {
> $ECHO "WARNING: Could not UNMOUNT beast-RAID";
> $DATE;
> }
> fi;
> $ECHO "MP3 Mirroring Script Finished";
> $DATE;
> 
> ## END SCRIPT
> 
> Thanks in advance.
> 
> Regards
> Nic Colledge
> [EMAIL PROTECTED]
> [EMAIL PROTECTED]
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
 
 
--
Open WebMail Project (http://openwebmail.org  )
 
 
 
Regards
Nic Colledge
[EMAIL PROTECTED]
[EMAIL PROTECTED]
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Can't connect from Windows

2004-01-15 Thread Wm. Dean Dufresne
Is there a reason nobody responded this message?


On 1/6/04 10:58 PM, "Wm. Dean Dufresne" <[EMAIL PROTECTED]> wrote:

> I am setting up my first 3.0.1 installation.  I am using Slackware 9.1, I am
> trying to connect to a Windows 2000 Server.  I do not need active directory
> support (as far as I know).  The server's function is a file server.  So
> Users need seamless authentication... of course.  I do not have LDAP
> installed.  It's a plain server besides the 3ware RAID.
> 
> 
> I compiled and installed samba 3.0.1, standard paths.  I followed the howto
> on the samba site.
> 
> It is %99 working.  Smbd, nmbd, winbindd are all running.
> 
> #wbinfo -t
> checking the trust secret via RPC calls succeeded
> 
> # wbinfo -p
> Ping to winbindd succeeded on fd 4
> 
> Getent passwd, getent group works fine.
> 
> I can assign permissions to domain users like "chown domain+user file"
> 
> However when I try to connect from the PDC to the linux box with a domain
> user account, it won't let me in.
> 
> The name of the PDC is "w2ksrv1", and linux box is "macfiles".  The domain
> is "mac".
> 
> I was able to add a local user "testuser" and add it through smbpasswd, and
> authenticate. And view shares, and go into the "tmp" share.
> 
> Conf file:
> 
>  UW PICO(tm) 4.6 
> File: /usr/local/samba/lib/smb.conf
> 
> [global]
>  
> workgroup = MAC  
> winbind separator = +
> idmap uid = 1-2
> idmap gid = 1-2
> winbind enum users = yes
> winbind enum groups = yes
> template homedir = /home/winnt/%D/%U
> template shell = /bin/false
> server string = Samba Server
> hosts allow = 192.168.1. 127.
> load printers = yes
> log file = /var/log/samba.%m
> max log size = 50
> security = user  
> password server = *
> encrypt passwords = yes
> socket options = TCP_NODELAY
>  
> ;   interfaces = 192.168.12.2/24 192.168.13.2/24
>  
> dns proxy = no 
> # Share Definitions
> ==
> [homes]  
>  comment = Home Directories
>  browseable = no 
>  writable = yes  
>  
> # This one is useful for people to share files
> [tmp]
>  comment = Temporary file space
>  path = /tmp 
>  read only = no  
>  public = yes
> 
> 
> File Attributes:
> 
> 
> # ls -la /lib/libnss_winbind.so*
> -rwxr-xr-x1 root root19511 Jan  2 14:29
> /lib/libnss_winbind.so*
> lrwxrwxrwx1 root root   22 Jan  2 14:30
> /lib/libnss_winbind.so.2 -> /lib/libnss_winbind.so*
> 
> Was not able to configure SAMBA with the "--with-pam" switch.
> 
> 
> Also I have no /etc/pam.d directory. ( is that bad?)
> 
> Winbind output:
> 
> /usr/local/samba/sbin/winbindd -i -d3
> winbindd version 3.0.1 started.
> Copyright The Samba Team 2000-2003
> lp_load: refreshing parameters
> Initialising global parameters
> params.c:pm_process() - Processing configuration file
> "/usr/local/samba/lib/smb.conf"
> Processing section "[global]"
> Processing section "[homes]"
> Processing section "[tmp]"
> adding IPC service
> adding IPC service
> added interface ip=192.168.1.20 bcast=192.168.1.255 nmask=255.255.255.0
> added interface ip=192.168.1.20 bcast=192.168.1.255 nmask=255.255.255.0
> Registered MSG_REQ_POOL_USAGE
> Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
> resolve_lmhosts: Attempting lmhosts lookup for name MAC<0x1c>
> resolve_wins: Attempting wins lookup for name MAC<0x1c>
> resolve_wins: WINS server resolution selected and no WINS servers listed.
> resolve_hosts: Attempting host lookup for name MAC<0x20>
> rpc_dc_name: Returning DC W2KSRV1 (192.168.1.10) for domain MAC
> IPC$ connections done by user MAC\
> Connecting to host=W2KSRV1
> Connecting to 192.168.1.10 at port 445
> Doing spnego session setup (blob length=112)
> got OID=1 2 840 48018 1 2 2
> got OID=1 2 840 113554 1 2 2
> got OID=1 2 840 113554 1 2 2 3
> got OID=1 3 6 1 4 1 311 2 2 10
> got principal=w2ksrv1$@
> Got challenge flags:
> Got NTLMSSP neg_flags=0x60890215
> NTLMSSP: Set final flags:
> Got NTLMSSP neg_flags=0x60080215
> NTLMSSP Sign/Seal - Initialising with flags:
> Got NTLMSSP neg_flags=0x60080215
> add_trusted_domain: MAC is a native mode domain
> Added domain MAC 
> scanning trusted domain list
> rpc: trusted_domains
> rpc_dc_name: Returning DC W2KSRV1 (192.168.1.10) for domain MAC
> IPC$ connections done by user MAC\
> Connecting to host=W2KSRV1
> Connecting to 192.168.1.10 at port 445
> Doing spnego session setup (blob length=112)
> got OID=1 2 840 48018 1 2 2
> got OID=1 2 840 113554 1 2 2
> got OID=1 2 840 113554 1 2 2 3
> got OID=1 3 6 1 4 1 311 2 2 10
> got principal=w2ksrv1$@
> Got challenge flags:
> Got NTLMSSP neg_flags=0x60890215
> NTLMSSP: Set final flags:
> Got NTLMSSP neg_flags=0x60080215
> NTLMSSP Sign/Seal - Initialising with flags:
> Got NTLMSSP neg_flags=0x60080215
> scanning trusted domain list
> rpc: trusted_domains
> 
> 
> The Win2k active directory domain name is actually a SUB domain so,
> mac.fulldomain.com.  Which is non-standard I 

RE: [Samba] Queries regarding domain groups

2004-01-15 Thread Ross Saad
Anyone?

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> Behalf Of Ross Saad
> Sent: Thursday, 15 January 2004 9:29 AM
> To: [EMAIL PROTECTED]
> Subject: [Samba] Queries regarding domain groups
>
>
> Hi,
>
> I'm trying to understand the way Samba maps groups to Windows.
>
> Linux version 2.4.17 (gcc version 2.96 2731 (Red Hat Linux
> 7.1 2.96-98))
> Samba Version 2.2.7a
>
> Basically, what I'm trying to do involves setting up certain groups on the
> Windows domain and assigning them to users.
> Using VB and ADSI, I can get a list of all groups and all users on the
> domain. However, it doesn't seem possible to create groups on the
> domain or
> to retrieve a user's groups.
>
> I understand that groups and group info on the server are stored in
> /etc/group. Some of these groups are in the list that I can retrieve,
> together with some Windows groups, eg. Print Operators. Where do
> the Windows
> groups come from?
>
> In /etc/group it seems as though users have been assigned to groups, but I
> can't retrieve a user's group(s) from Windows. Also, I notice that our
> smb.conf doesn't have a section for domain admin group or domain guest
> group. Would it help my cause from Windows to add these in? How
> can I assign
> domain administrator that will be recognised through Windows and will this
> administrator be able to perform my intent?
>
> Is it possible to achieve any of this given the system over here?
> I've read
> that Samba 3 has new support for Windows group mapping, although I'm not
> sure if group creation and administration will be possible
> through Windows.
>
> Any help is much appreciated.
>
> Thanks,
> Ross
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] ADS and Winbind ... Can't access with Samba host name ...

2004-01-15 Thread Matt McParland
I saw the same symptoms using Samba 3.0.1 and a Win2k ADS.

Entering the IP address in Start -> Run works, but browsing NN
or entering the FQDN would not.   That brings up the shares on the Samba
server but still can't access any of those shares.

It has taken a LONG time just to get to this point.

On Fri, 19 Dec 2003, Gerald (Jerry) Carter wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Lee,
>
> please file a bug for me and we'll work on
> getting this resolved.  This is the 3rd report
> of the same symptoms.   Thanks.
>
>
>
> cheers, jerry
>
>
>
>
> C.Lee Taylor wrote:
> | Greetings ...
> |
> |It seems I have really got myself confused ...
> |
> |I have a Win2K3 ADS domain, I have two FedoraCore systems, one with
> | Samba 3.0.0 and the other with Samba 3.0.1.  Both give me the same
> problem.
> |
> |If I try access the Samba shares from Win2K3 using the host number, I
> | get prompted for a username and password, and no matter what I type in,
> | I can't get in.
> |
> |If I use the Samba server IP address, I am able to get into shares
> | without been prompted for user details, but Point'nPrint don't work, it
> | too requests user details.
> |
> |I do seem to be getting two errors in my logs ... First in smbd.log
> |
> | [2003/12/18 13:50:19, 0] lib/util_sock.c:get_peer_addr(948)
> |  getpeername failed. Error was Transport endpoint is not connected
> | [2003/12/18 16:18:07, 0] lib/util_sock.c:get_peer_addr(948)
> |  getpeername failed. Error was Transport endpoint is not connected
> |
> |And the other in the machine log with the IP address eg ...
> |10.1.1.20.log
> | [2003/12/18 14:51:23, 1] smbd/sesssetup.c:reply_spnego_kerberos(172)
> |  Failed to verify incoming ticket!
> | [2003/12/18 14:51:23, 1] smbd/sesssetup.c:reply_spnego_kerberos(172)
> |  Failed to verify incoming ticket!
> |
> |But in the machine log with the hostname, I am getting normal
> | messages ...
> |
> |I have tried to make changes in /etc/krb5.conf, but I don't get any
> | further ...
> |
> |I have tried a few status checks with net, all hosts work fine ...
> |
> | [EMAIL PROTECTED] samba]# net lookup ldap
> | 10.1.1.16:389
> | 10.1.1.17:389
> |
> | [EMAIL PROTECTED] samba]# net lookup dc
> | 10.1.1.16
> | 10.1.1.17
> |
> |But net lookup kdc, master domain don't return any thing, so I don't
> | know what else to look for ...
> |
> | Thanks
> | Mailed
> | Lee
> |
> |
>
>
> - --
> ~ --
> ~ Hewlett-Packard- http://www.hp.com
> ~ SAMBA Team -- http://www.samba.org
> ~ GnuPG Key   http://www.plainjoe.org/gpg_public.asc
> ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.2.1 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQE/4pbCIR7qMdg1EfYRAuOxAJ9BHqjtY7mVCO4JSi57j1e999e1JQCfX5yg
> 72ROuACLvNWcSmZbLpF2gdQ=
> =+J2Y
> -END PGP SIGNATURE-
>
>

-- 
Matt McParland
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] client use spnego

2004-01-15 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, 15 Jan 2004, Fran Fabrizio wrote:

> 
> In the course of debugging my still-unsolved "smbclient tar starts
> throwing SMB signature errors after 750MB of data or so" error, I came
> across this apparent inconsistency...
> 
> >From the smb.conf man page:
> 
> "client use spnego (G)
> 
> This variable controls controls whether samba clients will try to use
> Simple and Protected NEGOciation (as specified by rfc2478) with
> WindowsXP and Windows2000 servers to agree upon an authentication
> mechanism. SPNEGO client support for SMB Signing is currently broken, so
> you might want to turn this option off when operating with Windows 2003
> domain controllers in particular."

This is old.  I'll make sure the man page gets updated.  Thanks.






cheers, jerry
 --
 Hewlett-Packard- http://www.hp.com
 SAMBA Team -- http://www.samba.org
 GnuPG Key   http://www.plainjoe.org/gpg_public.asc
 "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFABvtWIR7qMdg1EfYRAmnOAKDRMJPCFdhsE4Vh56C64zfJRm/OIwCfRrdw
A/sN1LEt2YuwXj+RiEcTRs4=
=LLju
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] I am unable to access my shares: Incorrect password orInvalid user name

2004-01-15 Thread Abdul-Azeez
Hi Jason,
Thanks for your assistance but the problem still pesists.
I have modified my conf file thus:

# from 128.1.100.67 (128.1.100.67)
# Date: 2004/01/15 17:33:15

# Global parameters
[global]
workgroup = IMSD
netbios name = SAMBA
log level = 3
ldap ssl = no
security = user
encrypt passwords = yes
smb passwd file = /usr/local/samba/private/smbpasswd


[share1]
comment = test share
path = /var/log
read only = No

[globus]
comment = globus image directory
path = /var/globus-image
read only = No

I ran "testparm " command to test my conf file and I got the following
error:


Load smb config files from /usr/local/samba/lib/smb.conf
Unknown parameter encountered: "ldap ssl"
Ignoring unknown parameter "ldap ssl"
Processing section "[share1]"
Processing section "[globus]"
Loaded services file OK.
ERROR: pid directory /var/run/samba does not exist
Press enter to see a dump of your service definitions



PLEASE HELP

abdul
- Original Message - 
From: "Jason Balicki" <[EMAIL PROTECTED]>
To: "'Abdul-Azeez'" <[EMAIL PROTECTED]>
Sent: Thursday, January 15, 2004 6:19 PM
Subject: RE: [Samba] I am unable to access my shares: Incorrect password
orInvalid user name


>
> Your [global] section is missing a few lines.  See below.
>
> >when I issue : "smbclient //host/share" from the Linux machine
> >, it prompts me for password and afterwards it displays the
> >following message:
> >
> >session setup failed: NT_STATUS_LOGON_FAILURE
> >
> >A copy of my smb client file is :
> >
> ># Samba config file created using SWAT
> ># from 128.1.100.67 (128.1.100.67)
> ># Date: 2004/01/15 17:33:15
> >
> ># Global parameters
> >[global]
> >workgroup = IMSD
> >netbios name = SAMBA
> >log level = 3
> >ldap ssl = no
> Add:
>
> security = user
> encrypt password=yes
> smb passwd file = /path/to/your/smbpasswd
>
> explanation:
>
> Your client machines are sending encrypted passwords, and you
> need to interpet them, hence the "encrypt passwords" directive.
>
> Also, you need to tell samba where to find your smbpasswd file
> or it won't know where to find authentication information.
>
> HTH,
>
> --J(K)
>
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Missing Macros

2004-01-15 Thread Gémes Géza
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Charles Hamel írta:
| I read the smb.conf manual but I can't find what I want, is there any
way to
| get the secondary group of a user using a macro ? I want to use a perl
script
| to create logon script depending on the groups of the users using the root
| preexec parameter in smb.conf, but they the primary group is always
"Domain
| users" so my script cant make the difference.
|
| Is there any way to fix this ? Thank you
|
Hi,
Check Unix group membership instead. For example with bash I'm doing
something like this:
if [ `groups $USERNAME | grep the_group_you_are_interested_in | wc -l`
- -gt 0 ]; then
...
else
...
fi
Good Luck!

Geza
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFABvOD/PxuIn+i1pIRAvMVAKCUzI68uf9nsCzLqgynwVVj5cvZawCgjXbe
7IHyeHi80xHmInACVs9XH/Q=
=uPcp
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] QUOTA Testing

2004-01-15 Thread Gémes Géza
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Stefan (metze) Metzmacher írta:
| Hi,
|
| is there anyone using samba3 on linux with quotas?
|
| can please everyone send me a note with (maybe off list):
|
| kernel version
| samba version
| filesystem
| quota format
|
| that would help me a lot to make quotas on linux more stable!
|
| NOTE:
| in 3.0.2pre1 there's a known XFS bug, that means xfs quotas are not
| anabled. But this is fixed in CVS and will be in the 3.0.2rc1
|
|
OS: Mandrake Linux 9.1
uname -r: 2.4.19-37mdksecure
smbd3 -V: 3.0.1pre1
mount (only partitions with samba shares):
/dev/sda8 on /home type xfs
(rw,noexec,nosuid,nodev,noatime,usrquota,grpquota)
/dev/sda7 on /var type xfs (rw,nosuid,nodev,noatime)
Quota is XFS's internal format, and it is working very well, users are
seeing in Windows at their drives properties mapped from the home share
the quota settings guverned sizes.
Regards

Geza

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFABvDn/PxuIn+i1pIRAt/YAJ4smAvYu7ZyQrTtr9kZA7c+qDvPKQCggGBm
pXHnBMb8Cglu//SO5TKTd2c=
=Vr4s
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] wbinfo looking for hostname as domain

2004-01-15 Thread Trevor Thorsteinson
i have samba 3.0.2pre1 installed on a SuSE 9 machine that I am trying to get
to authenticate on an NT4 domain.  After joining the machine to the domain,
setting up smb.conf and nsswitch.conf to use winbind I start the services
and try wbinfo -u to test the connection and I get the following error:

Error looking up domain users

tail /var/log/messages shows the following:

nsswitch/winbindd_group.c:winbindd_getgroups(952)
could not find domain entry for domain ~hostname~

Anyone know why it would be looking for the hostname as the domain instead
of the domain I joined it to?

Thanks for any help


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba configuration question

2004-01-15 Thread Helen Nulty
We have a central campus kerberos server.  We have a local
Active Directory domain which is a member of the main campus
forest.  We have 2 samba 3.0 servers currently configured:
security = domain
password server = SPHDC0 SPHDC1
where SPHDC0 is the primary domain controller, SPHDC1 is
backup domain controller and neither of which runs in native
mode.

We want everyone, for both domain and samba services, to
authenticate to the main campus kerberos server.  Say we get
over the hurdle of having our domain logins authenticated by
the main campus kerberos server.  Can we keep our existing
samba configuration and in a transitive manner effectively
authenticate to the main campus kerberos server as well for
our samba connections?

If not, how can we do this?

We will appreciate any insights anyone has to offer.  We're
willing to share what we learn.

Thank you,

Helen Nulty
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] smbmount and smb.conf

2004-01-15 Thread Joe Polk
I'm using fstab to mount smb shares from a W2K server. I don't have, 
therefore, Samba server running, rather mount is calling smbmount to make the 
connection. I am getting very slow transfers on large files ( >1gb ) and need 
to try some things. However, I am confused. Would smbmount use any settings 
in smb.conf? I've read that some changes to [global] in smb.conf may help and 
want to implement them. Thanks!

<>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] copying from Win to Linux

2004-01-15 Thread Brian Spiegel
Thanks, Rashkae.

I have ReiserFS installed on two 18GB SCSI 10k drives with RAID 1.  I think
this should be sufficient.  But if there's a performance improvement on the
networking end between Samba 2.x and 3.x, I'd like to consider it.

And yes, the files will potentially be in the tens of thousands at any given
time (it's basically a large-scale email solution).

Thanks,
Brian

-Original Message-
From: Rashkae [mailto:[EMAIL PROTECTED] 
Sent: Thursday, January 15, 2004 10:51 AM
To: Brian Spiegel
Subject: Re: [Samba] copying from Win to Linux

If there are a large number of these small files (in the thousands),
you'll most deffinately want a ReiserFS filesystem.  A well tuned FS
will make more of a performance difference.  I haven't tested JFS or
XFS in this scenario, but EXT just can't handle writing a large number
of small files in a single directory.

On Thu, Jan 15, 2004 at 10:22:41AM -0800, Brian Spiegel wrote:
> As a related follow-up to Tarjei's question:
> 
> I too am going to be copying large amounts of files from a Windows
2000/2003
> server to a Linux box running Samba.  The files range from 2K to 30K
> (sometimes upwards of 50K).  The files are being copied basically as fast
as
> they can be generated (by separate applications) and transferred over the
> wire.
> 
> I currently have a Samba 2.2.3a-12.3 (the Debian stable package)
installed,
> but I'm considering installing 3.0.0 or 3.0.1.  I've heard that Samba 3.0
> and above have definite advantages in speed over 2.x.x.
> 
> My question is this:  Can anyone discuss the performance difference
between
> Samba 3 and 2 in quantitative terms or point me to web sources that do?
> Specifically in a situation where files (averaging around 30K in size) are
> being copied across the network from a Windows 200x machine to a Linux
box.
> The files, once written, will be read by a single Linux process only.  No
> Windows server will be accessing the files once they're copied over.
> 
> Any information would be greatly appreciated.  I need to make a decision
> today.
> 
> Thanks,
> Brian
> 
> -Original Message-
> From: Tarjei Huse [mailto:[EMAIL PROTECTED] 
> Sent: Thursday, January 15, 2004 4:14 AM
> To: [EMAIL PROTECTED]
> Subject: [Samba] copying from Win to Linux
> 
> Hi, I'm about to migrate a lot of files from a windows server to a new, 
> shiny samba-server.
> 
> I just got a small problem : What is the best way to do this?
> 
> I'e tried rsync, but it croaks on some files with names like "somethign 
> :some.eml" the same does cp.
> 
> What I'm wondering about, is has anyone else had these problems, and if 
> so, how did you solve them? Do you have a script for cleaning out 
> characters like this one?
> 
> Tarjei
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba PDC and Automatic Printer Install

2004-01-15 Thread Michael Aldrich
ok, I am no longer getting the 'Unable to print file to HP2300 -
client-error-document-format-not-supported' error. I edited the mime.* files
in /etc/cups/...

I am now seeing:
[2004/01/15 13:46:13, 0] printing/print_cups.c:cups_queue_get(898)
  Unable to get jobs for ipp://localhost/printers/HP2300 -
client-error-not-found

and in /var/log/cups/error_log:
E [15/Jan/2004:13:30:12 -0500] get_jobs: resource name '/printers/HP2300' no
good!
E [15/Jan/2004:13:30:12 -0500] get_printer_attrs: resource name
'/printers/::{2227a280-3aea-1069-a2de-08002b30309d}' no good!
E [15/Jan/2004:13:30:17 -0500] print_job: resource name '/printers/HP2300'
no good!
E [15/Jan/2004:13:36:09 -0500] get_jobs: resource name '/printers/HP2300' no
good!
E [15/Jan/2004:13:46:13 -0500] get_jobs: resource name '/printers/HP2300' no
good!

Thanks
Mike

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf
Of Michael Aldrich
Sent: Thursday, January 15, 2004 1:19 PM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: RE: [Samba] Samba PDC and Automatic Printer Install


Thank you very much. I can now see the network printer in 'Ready' status.
Although, from my /var/log/samba/log., I get:

 Unable to print file to HP2300 - client-error-document-format-not-supported

when trying to print a test page...

Also, will the 'load printers' option in smb.conf be enough to load the
drivers when a new user logs into the domain? Or do I need to have something
special in /homedir/netlogon/username.bat ?
Thanks again.

Mike

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 15, 2004 12:38 PM
To: Michael Aldrich
Cc: [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: RE: [Samba] Samba PDC and Automatic Printer Install







The problem is the error "error msg: 'spool queue for 'hp2300' does not
exist on server".  Samba, or some particular user might not have permission
to /var/spool/samba.  Also, depending on how you set up the printer, it
could bee that it is looking for a different spool directory.  Did you set
these printers up in /etc/printcap, or in CUPS?  If you set up an
/etc/printcap, it may be looking for the print spool specified there.

I am using a very similar setup to yourself, and I have these additional
directives under [global]

[global]
  load printers = yes
  printing = cups
  printcap = cups

I think this will cause CUPS to over-write the old /etc/printcap file.

Alex Laslavic
Havertys Tech Services

"Michael Aldrich" <[EMAIL PROTECTED]> wrote on 01/15/2004 12:00:38 PM:

> Thanks.
> I made the change and was able to add the driver. Although, I still
cannot
> print..
> The printers are in 'error' status.
>
> rpcclient $> getprinter HP2300
> flags:[0x80]
> name:[\\mercury\HP2300]
> description:[\\mercury\HP2300,HP LaserJet 2300 Series PCL
6,HP2300]
> comment:[HP2300]
>
> In my log.:
>
> maldrich logged in as admin user (root privileges)
> [2004/01/15 11:57:52, 1] smbd/service.c:make_connection_snum(705)
>   tdube (192.168.0.61) connect to service print$ initially as user
maldrich
> (uid=0, gid=100) (pid 23819)
> Status Information:
>  sending job '[EMAIL PROTECTED]' to [EMAIL PROTECTED]
>  connecting to 'localhost', attempt 1
>  connected to 'localhost'
>  requesting printer [EMAIL PROTECTED]
>  job '[EMAIL PROTECTED]' transfer to [EMAIL PROTECTED] failed
>   error 'NONZERO RFC1179 ERROR CODE FROM SERVER' with ack 'ACK_FAIL'
>   sending str '^BHP2300' to [EMAIL PROTECTED]
>  error msg: 'spool queue for 'hp2300' does not exist on server
> mercury.i-centrix.com'
>  error msg: '   non-existent printer or you need to run 'checkpc -f''
>
> This is when I try and print a Test Page...
> Thanks
> Mike
>
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, January 14, 2004 4:03 PM
> To: Michael Aldrich
> Cc: [EMAIL PROTECTED];
> [EMAIL PROTECTED]
> Subject: Re: [Samba] Samba PDC and Automatic Printer Install
>
>
>
>
>
>
>
> In your smb.conf, you have the option "use client driver" set to "yes".
> When it is "yes", it will not allow you to set the driver.  You need to
> delete the "use client driver" line, reload samba and it should work.
>
> Alex Laslavic
> Havertys Tech Services
>
> [EMAIL PROTECTED] wrote on 01/14/2004
> 10:35:11 AM:
>
> > Hello,
> > I am trying to install automatic printer driver download and install.
> > I am running Samba 3, as a PDC, on RedHat 7.3.
> >
> > It seems everything is setup correctly, although I cannot get the
> rpcclient
> > to 'see' my printer.
> > Please notice these two printers listed below ar the same (lp &
HP2300).
> >
> >
> > [EMAIL PROTECTED] log]# rpcclient -U=root localhost
> > Password:
> >
> > rpcclient $> enumprinters
> > flags:[0x80]
> > name:[\\mercury\HP2300]
> > description:[\\mercury\HP2300,,HP2300]
> > comment:[HP2300]
> >
> > flags:[0x80]
> > name:

Re: [Samba] BUGS

2004-01-15 Thread Wade Bowlin


Ovidio A. Morales wrote:

Hi, Every day samba kills itself .. I don`t know why.. this is the logs...

INTERNAL ERROR: Signal 11 in pid 29393 (2.2.5)
  Please read the file BUGS.txt in the distribution
[2004/01/15 00:08:22, 0] lib/fault.c:fault_report(41)
  ===
[2004/01/15 00:08:22, 0] lib/util.c:smb_panic(1092)
  PANIC: internal error
  
Have you a patch for it?
Thanx 


You wouldn't happen to be running RedHat Enterprise 3 would you?

Wade
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Rsync with smbfs filesystem and characters like é - updated from version on RSync List

2004-01-15 Thread Nic Colledge
Hello,
 
I’m using samba version 3.0.1-Debian
rsync version 2.6.0 protocol version 27
And mount version 2.12
With kernel 2.4.22
 
As far as in aware these are the latest versions in Debian unstable.
 
The problem im having is when mirroring my mp3 collection file names
with characters like é Ï Ê etc. are not displayed in the linux
filesystem and then when browsing to the directory through samba using a
windows machine they are displayed as “” “ for example “02 R”yksopp -
Eple.mp3”.
 
Originally they would be displayed as “02 R” on the
windows machine until I added “dos charset = CP850” and “unix charset =
ISO8859-16” to the smb.conf file.
 
This problem only occours when using the linux machine to copy from the
windows machine to the linux machine. If the windows machine “uploads”
to the linux machine everything works fine and filenames appear correct
on both the windows and linux machines. Unix charset ISO8859-1 didn’t
work as well for me, as in the filenames were not written correctly on
the linux machine when doing an upload but appeared fine when using the
windows machine to browse the directory through samba.
 
Any help in resolving this problem would be much appreciated.
 
The script I use for the mirroring operation is as follows:
 
## START SCRIPT
#!/bin/bash
# This is a simple script to mirror the MP3 Directory from the RAID to
this machine
 
#COMMANDS USED
MOUNT=/bin/mount;
RSYNC=/usr/bin/rsync;
UMOUNT=/bin/umount;
ECHO=/bin/echo;
ID=/usr/bin/id;
DATE=/bin/date;
 
# ACTUAL SCRIPT
$ECHO " ";
$ECHO "MP3 Mirroring Script Start";
$DATE;
# make sure we're running as root
if (( `$ID -u` != 0 )); then { $ECHO "Sorry, must be root.  Exiting...";
exit; } fi
 
$MOUNT -t smbfs -o
username=XXX,password=XXX,codepage=CP850,iocharset=ISO8859-1
//beast-mk2/RAID /beast-RAID ;
if (( $? )); then 
{
$ECHO "Could not mount RAID on beast-mk2 - Exiting";
$DATE;
exit;
}
fi;
 
$RSYNC -a -v --delete-after --modify-window=2 /beast-RAID/Mp3/
/Mp3-Mirror/ ;
 
$UMOUNT /beast-RAID ;
if (( $? )); then 
{
$ECHO "WARNING: Could not UNMOUNT beast-RAID";
$DATE;
}
fi;
$ECHO "MP3 Mirroring Script Finished";
$DATE;
 
## END SCRIPT
 
Thanks in advance.
 
Regards
Nic Colledge
[EMAIL PROTECTED]
[EMAIL PROTECTED]
 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Another problem with Win2k logins...

2004-01-15 Thread Jeff Gardiner
Hello Juanjo, 

I have a related problem I believe, and have similar errors showing up in my 
error logs - specifically the bit about:
[2004/01/15 13:19:54, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1371)
  failed to decode PDU
[2004/01/15 13:19:54, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
  process_request_pdu: failed to do schannel processing.
[2004/01/15 13:19:56, 1] smbd/service.c:make_connection_snum(705)

I compiled 3.0.2pre1 with the options:
./configure --with-ldap=no --with-winbind

In my case the users can login but never generate a profile, or the profile 
never gets saved back to the PDC.  Otherwise, they can also smbclient -L 
PDCname -U username.

I hope someone finds the source of these errors.

Cheers
Jeff

On Monday 12 January 2004 17:44, Juanjo Lull ONO wrote:
> Hi all,
> After recovering the former SID that I hadn't had in mind while changing
> the Linux distro (thanks to Thomas for his help), now I still have some
> problems. I can't still get any user to login but the ones that must be in
> cache in the clients (thanks again Thomas). So, I'll give you the logs to
> see if anybody detects something strange... The users can perform a
> 'smbclient -L PDCname -U username' but they cannot still login in their
> machines. As the network is not so big (4 computers x 20 users), I'd have
> to change around 100 registry entries if I don't find a solution, but I
> still would like to know what's going on... ###log.p3 (one
> of the clients)  #
> [2004/01/12 23:29:04, 1] smbd/service.c:close_cnum(880)
>   p3 (192.168.0.183) closed connection to service jlull
> [2004/01/12 23:29:10, 0]
> rpc_server/srv_pipe.c:api_pipe_netsec_process(1357) failed to decode PDU
> [2004/01/12 23:29:10, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
>   process_request_pdu: failed to do schannel processing.
> [2004/01/12 23:29:23, 1] smbd/service.c:make_connection_snum(698)
>   p3 (192.168.0.183) connect to service jlull initially as user jlull
> (uid=1006, gid=408) (pid 16244)
> [2004/01/12 23:29:33, 1] smbd/service.c:make_connection_snum(698)
>   p3 (192.168.0.183) connect to service jlull initially as user jlull
> (uid=1006, gid=408) (pid 16244)
> [2004/01/12 23:31:00, 1] smbd/service.c:close_cnum(880)
>   p3 (192.168.0.183) closed connection to service jlull
>
> ##log.nmbd ##
> [2004/01/12 23:37:53, 1] nmbd/nmbd_processlogon.c:process_logon_packet(95)
>   process_logon_packet: Logon from 192.168.0.13: code = 0x12
> [2004/01/12 23:43:51, 1] nmbd/nmbd_processlogon.c:process_logon_packet(95)
>   process_logon_packet: Logon from 192.168.0.13: code = 0x12
> [2004/01/12 23:43:51, 1] nmbd/nmbd_processlogon.c:process_logon_packet(95)
>   process_logon_packet: Logon from 192.168.0.13: code = 0x12
> [2004/01/12 23:44:23, 1] nmbd/nmbd_processlogon.c:process_logon_packet(95)
>   process_logon_packet: Logon from 192.168.0.14: code = 0x12
> [2004/01/12 23:44:23, 1] nmbd/nmbd_processlogon.c:process_logon_packet(95)
>   process_logon_packet: Logon from 192.168.0.14: code = 0x12
>
> Here 192.168.0.13 is the client from where I am logged (with a cached user)
> and 192.168.0.14 is another client that has generated that 0x12 code
> without anything more that being on (I mean, no user trying to log). It's
> all the time generating that code = 0x12... Any idea?

-- 
Jeff Gardiner [ [EMAIL PROTECTED] ]
System Administrator - Imaging Research Laboratories
Robarts Research Institute - London ON, Canada
519.663.5777 x34089

   ~~~
  Those who do not understand Unix are condemned to reinvent it, poorly.
-- Henry Spencer
~~

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] copying from Win to Linux

2004-01-15 Thread Brian Spiegel
As a related follow-up to Tarjei's question:

I too am going to be copying large amounts of files from a Windows 2000/2003
server to a Linux box running Samba.  The files range from 2K to 30K
(sometimes upwards of 50K).  The files are being copied basically as fast as
they can be generated (by separate applications) and transferred over the
wire.

I currently have a Samba 2.2.3a-12.3 (the Debian stable package) installed,
but I'm considering installing 3.0.0 or 3.0.1.  I've heard that Samba 3.0
and above have definite advantages in speed over 2.x.x.

My question is this:  Can anyone discuss the performance difference between
Samba 3 and 2 in quantitative terms or point me to web sources that do?
Specifically in a situation where files (averaging around 30K in size) are
being copied across the network from a Windows 200x machine to a Linux box.
The files, once written, will be read by a single Linux process only.  No
Windows server will be accessing the files once they're copied over.

Any information would be greatly appreciated.  I need to make a decision
today.

Thanks,
Brian

-Original Message-
From: Tarjei Huse [mailto:[EMAIL PROTECTED] 
Sent: Thursday, January 15, 2004 4:14 AM
To: [EMAIL PROTECTED]
Subject: [Samba] copying from Win to Linux

Hi, I'm about to migrate a lot of files from a windows server to a new, 
shiny samba-server.

I just got a small problem : What is the best way to do this?

I'e tried rsync, but it croaks on some files with names like "somethign 
:some.eml" the same does cp.

What I'm wondering about, is has anyone else had these problems, and if 
so, how did you solve them? Do you have a script for cleaning out 
characters like this one?

Tarjei
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba PDC and Automatic Printer Install

2004-01-15 Thread Michael Aldrich
Thank you very much. I can now see the network printer in 'Ready' status.
Although, from my /var/log/samba/log., I get:

 Unable to print file to HP2300 - client-error-document-format-not-supported

when trying to print a test page...

Also, will the 'load printers' option in smb.conf be enough to load the
drivers when a new user logs into the domain? Or do I need to have something
special in /homedir/netlogon/username.bat ?
Thanks again.

Mike

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 15, 2004 12:38 PM
To: Michael Aldrich
Cc: [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: RE: [Samba] Samba PDC and Automatic Printer Install







The problem is the error "error msg: 'spool queue for 'hp2300' does not
exist on server".  Samba, or some particular user might not have permission
to /var/spool/samba.  Also, depending on how you set up the printer, it
could bee that it is looking for a different spool directory.  Did you set
these printers up in /etc/printcap, or in CUPS?  If you set up an
/etc/printcap, it may be looking for the print spool specified there.

I am using a very similar setup to yourself, and I have these additional
directives under [global]

[global]
  load printers = yes
  printing = cups
  printcap = cups

I think this will cause CUPS to over-write the old /etc/printcap file.

Alex Laslavic
Havertys Tech Services

"Michael Aldrich" <[EMAIL PROTECTED]> wrote on 01/15/2004 12:00:38 PM:

> Thanks.
> I made the change and was able to add the driver. Although, I still
cannot
> print..
> The printers are in 'error' status.
>
> rpcclient $> getprinter HP2300
> flags:[0x80]
> name:[\\mercury\HP2300]
> description:[\\mercury\HP2300,HP LaserJet 2300 Series PCL
6,HP2300]
> comment:[HP2300]
>
> In my log.:
>
> maldrich logged in as admin user (root privileges)
> [2004/01/15 11:57:52, 1] smbd/service.c:make_connection_snum(705)
>   tdube (192.168.0.61) connect to service print$ initially as user
maldrich
> (uid=0, gid=100) (pid 23819)
> Status Information:
>  sending job '[EMAIL PROTECTED]' to [EMAIL PROTECTED]
>  connecting to 'localhost', attempt 1
>  connected to 'localhost'
>  requesting printer [EMAIL PROTECTED]
>  job '[EMAIL PROTECTED]' transfer to [EMAIL PROTECTED] failed
>   error 'NONZERO RFC1179 ERROR CODE FROM SERVER' with ack 'ACK_FAIL'
>   sending str '^BHP2300' to [EMAIL PROTECTED]
>  error msg: 'spool queue for 'hp2300' does not exist on server
> mercury.i-centrix.com'
>  error msg: '   non-existent printer or you need to run 'checkpc -f''
>
> This is when I try and print a Test Page...
> Thanks
> Mike
>
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, January 14, 2004 4:03 PM
> To: Michael Aldrich
> Cc: [EMAIL PROTECTED];
> [EMAIL PROTECTED]
> Subject: Re: [Samba] Samba PDC and Automatic Printer Install
>
>
>
>
>
>
>
> In your smb.conf, you have the option "use client driver" set to "yes".
> When it is "yes", it will not allow you to set the driver.  You need to
> delete the "use client driver" line, reload samba and it should work.
>
> Alex Laslavic
> Havertys Tech Services
>
> [EMAIL PROTECTED] wrote on 01/14/2004
> 10:35:11 AM:
>
> > Hello,
> > I am trying to install automatic printer driver download and install.
> > I am running Samba 3, as a PDC, on RedHat 7.3.
> >
> > It seems everything is setup correctly, although I cannot get the
> rpcclient
> > to 'see' my printer.
> > Please notice these two printers listed below ar the same (lp &
HP2300).
> >
> >
> > [EMAIL PROTECTED] log]# rpcclient -U=root localhost
> > Password:
> >
> > rpcclient $> enumprinters
> > flags:[0x80]
> > name:[\\mercury\HP2300]
> > description:[\\mercury\HP2300,,HP2300]
> > comment:[HP2300]
> >
> > flags:[0x80]
> > name:[\\mercury\lp]
> > description:[\\mercury\lp,,]
> > comment:[]
> >
> > rpcclient $> enumdrivers
> >
> >
> >
> > [Windows NT x86]
> > Printer Driver Info 1:
> > Driver Name: [HP LaserJet 2300 Series PCL 6]
> >
> >
> > [Windows NT x86]
> > Printer Driver Info 1:
> > Driver Name: [HP LaserJet 2300 Series PCL 6]
> >
> >
> > rpcclient $> setdriver "lp" "HP LaserJet 2300 Series PCL 6"
> > SetPrinter call failed!
> > result was WERR_ACCESS_DENIED
> > rpcclient $> setdriver "HP2300" "HP LaserJet 2300 Series PCL 6"
> > SetPrinter call failed!
> > result was WERR_ACCESS_DENIED
> > rpcclient $>
> >
> >
> > Snip from my smb.conf:
> > [printers]
> > comment = HP LaserJet
> > path = /var/spool/samba
> > printer admin = root
> > guest ok = Yes
> > printable = Yes
> > printing = cups
> > use client driver = Yes
> > browseable = No
> >
> > [print$]
> > comment = Printer Download
> > path = /var/spool/samba/W32X86/3
> > valid users = maldrich, root
> > admin users = maldrich, r

[Samba] Monitoring Samba on Solaris with snoop

2004-01-15 Thread James Kreuziger
I trying to diagnose why my PDC is consistantly
unavailabe on an intermitant basis.  I've started to
run snoop (a packet sniffer) on my Samba server in
order to see what is going on.  Question is, what
am I looking for?  I'm running 2.2.8a on a Solaris 8
box.

Before you ask, I've tried everything, including
swapping network cables.  My PDC has been pretty
much intermittant for a few months now, rendering
it useless.  All other network sevices on the machine
which runs Samba work.

-Jim

*
Jim Kreuziger
[EMAIL PROTECTED]
*


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba PDC and Automatic Printer Install

2004-01-15 Thread alaslavic





The problem is the error "error msg: 'spool queue for 'hp2300' does not
exist on server".  Samba, or some particular user might not have permission
to /var/spool/samba.  Also, depending on how you set up the printer, it
could bee that it is looking for a different spool directory.  Did you set
these printers up in /etc/printcap, or in CUPS?  If you set up an
/etc/printcap, it may be looking for the print spool specified there.

I am using a very similar setup to yourself, and I have these additional
directives under [global]

[global]
  load printers = yes
  printing = cups
  printcap = cups

I think this will cause CUPS to over-write the old /etc/printcap file.

Alex Laslavic
Havertys Tech Services

"Michael Aldrich" <[EMAIL PROTECTED]> wrote on 01/15/2004 12:00:38 PM:

> Thanks.
> I made the change and was able to add the driver. Although, I still
cannot
> print..
> The printers are in 'error' status.
>
> rpcclient $> getprinter HP2300
> flags:[0x80]
> name:[\\mercury\HP2300]
> description:[\\mercury\HP2300,HP LaserJet 2300 Series PCL
6,HP2300]
> comment:[HP2300]
>
> In my log.:
>
> maldrich logged in as admin user (root privileges)
> [2004/01/15 11:57:52, 1] smbd/service.c:make_connection_snum(705)
>   tdube (192.168.0.61) connect to service print$ initially as user
maldrich
> (uid=0, gid=100) (pid 23819)
> Status Information:
>  sending job '[EMAIL PROTECTED]' to [EMAIL PROTECTED]
>  connecting to 'localhost', attempt 1
>  connected to 'localhost'
>  requesting printer [EMAIL PROTECTED]
>  job '[EMAIL PROTECTED]' transfer to [EMAIL PROTECTED] failed
>   error 'NONZERO RFC1179 ERROR CODE FROM SERVER' with ack 'ACK_FAIL'
>   sending str '^BHP2300' to [EMAIL PROTECTED]
>  error msg: 'spool queue for 'hp2300' does not exist on server
> mercury.i-centrix.com'
>  error msg: '   non-existent printer or you need to run 'checkpc -f''
>
> This is when I try and print a Test Page...
> Thanks
> Mike
>
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, January 14, 2004 4:03 PM
> To: Michael Aldrich
> Cc: [EMAIL PROTECTED];
> [EMAIL PROTECTED]
> Subject: Re: [Samba] Samba PDC and Automatic Printer Install
>
>
>
>
>
>
>
> In your smb.conf, you have the option "use client driver" set to "yes".
> When it is "yes", it will not allow you to set the driver.  You need to
> delete the "use client driver" line, reload samba and it should work.
>
> Alex Laslavic
> Havertys Tech Services
>
> [EMAIL PROTECTED] wrote on 01/14/2004
> 10:35:11 AM:
>
> > Hello,
> > I am trying to install automatic printer driver download and install.
> > I am running Samba 3, as a PDC, on RedHat 7.3.
> >
> > It seems everything is setup correctly, although I cannot get the
> rpcclient
> > to 'see' my printer.
> > Please notice these two printers listed below ar the same (lp &
HP2300).
> >
> >
> > [EMAIL PROTECTED] log]# rpcclient -U=root localhost
> > Password:
> >
> > rpcclient $> enumprinters
> > flags:[0x80]
> > name:[\\mercury\HP2300]
> > description:[\\mercury\HP2300,,HP2300]
> > comment:[HP2300]
> >
> > flags:[0x80]
> > name:[\\mercury\lp]
> > description:[\\mercury\lp,,]
> > comment:[]
> >
> > rpcclient $> enumdrivers
> >
> >
> >
> > [Windows NT x86]
> > Printer Driver Info 1:
> > Driver Name: [HP LaserJet 2300 Series PCL 6]
> >
> >
> > [Windows NT x86]
> > Printer Driver Info 1:
> > Driver Name: [HP LaserJet 2300 Series PCL 6]
> >
> >
> > rpcclient $> setdriver "lp" "HP LaserJet 2300 Series PCL 6"
> > SetPrinter call failed!
> > result was WERR_ACCESS_DENIED
> > rpcclient $> setdriver "HP2300" "HP LaserJet 2300 Series PCL 6"
> > SetPrinter call failed!
> > result was WERR_ACCESS_DENIED
> > rpcclient $>
> >
> >
> > Snip from my smb.conf:
> > [printers]
> > comment = HP LaserJet
> > path = /var/spool/samba
> > printer admin = root
> > guest ok = Yes
> > printable = Yes
> > printing = cups
> > use client driver = Yes
> > browseable = No
> >
> > [print$]
> > comment = Printer Download
> > path = /var/spool/samba/W32X86/3
> > valid users = maldrich, root
> > admin users = maldrich, root
> > write list = root
> > read only = No
> > guest ok = Yes
> >
> > [lp]
> > path = /var/spool/samba
> > printer admin = root
> > read only = No
> > guest ok = Yes
> > printable = Yes
> > printer name = lp
> > use client driver = Yes
> > oplocks = No
> > share modes = Yes
> >
> > On the client side (Windows XP Pro), I can see both printers from
Network
> > Neighborhood,
> > , Printers & Faxes. Both of them are in 'Error' status.
> >
> > Does anyone have an idea why this operation is continuosly failing?
> >
> > Why do I get WERR_ACCESS_DENIED from SetPrinter?
> >
> > Thanks
> > Mike
> >

[Samba] Missing Macros

2004-01-15 Thread Charles Hamel
I read the smb.conf manual but I can't find what I want, is there any way to
get the secondary group of a user using a macro ? I want to use a perl script
to create logon script depending on the groups of the users using the root
preexec parameter in smb.conf, but they the primary group is always "Domain
users" so my script cant make the difference.

Is there any way to fix this ? Thank you

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] How do I get Winbind accounts in LDAP?

2004-01-15 Thread Ganguly, Sapan


If you're interested, Sun has told me that there is some kind of bug with
the way nsswitch.conf is dealt with in Solaris 9 but since nsswitch.conf is
not a pubic interface...blah blah blah they are still deciding whether they
should deal with it or not.  

In the mean time I'm still wondering how anyone else got this to work, this
bug can't only be affecting me?!

Does anyone have a working winbind pam.conf from Solaris 9 that I can look
at? 

Thanks,
Sap

-Original Message-
From: John H Terpstra [mailto:[EMAIL PROTECTED] 
Sent: 13 January 2004 16:39
To: Ganguly, Sapan 
Cc: '[EMAIL PROTECTED]'
Subject: RE: [Samba] How do I get Winbind accounts in LDAP?


On Tue, 13 Jan 2004, Ganguly, Sapan  wrote:

>
> John,
>
> Any ideas?  When I try to log in it seems to get past the PAM stuff 
> but then it just sits there, I don't get a prompt.  I've enabled debug 
> on all the modules in pam.conf, should I post the log files?

You should get rid of the "winbind uid" and "winbind gid" parameters as they
have been superceded by "idmap uid" and "idmap gid".

Did you install the libnss_winbind.so module you built (it's in the
~samba/sources/nsswitch directory) as /lib/nss_winbind.so and link it to the
appropriate version name?

Have you modified in /etc/nsswitch.conf the following:

passwd: files winbind
group: files winbind


Do you obtain correct domain account information from:

getent passwd

and

getent group

You will need to install the LDAP admin password into your Samba secrets.tdb
file. The command that does that is:

smbpasswd -w 'secret_password'

PAM provides authentication, NSS (name service switch) does Identity
resolution. It is the instrument that will permit the LDAP database to be
populated via winbind.

I hope this helps.

Cheers,
John T.

>
> Sapan
>
> -Original Message-
> From: Ganguly, Sapan
> Sent: 08 January 2004 17:39
> To: 'John H Terpstra'; Ganguly, Sapan
> Cc: '[EMAIL PROTECTED]'
> Subject: RE: [Samba] How do I get Winbind accounts in LDAP?
>
>
>
> John,
>
> Wbinfo -u lists all my NT user and wbinfo -g lists all my NT groups.
>
> Here is a copy of my smb.conf, I took it from a working Redhat 9.0 
> machine I built.
>
> [global]
>
> # LDAP stuff for the idmap backend
>
> ldap admin dn = cn=root,dc=uk,dc=trt,dc=thales
> ldap suffix = dc=uk,dc=trt,dc=thales
> ldap idmap suffix = ou=idmap
>
> # Winbind stuff
>
> winbind separator = -
> idmap uid = 1-2
> winbind uid = 1-2
> idmap gid = 1-2
> winbind gid = 1-2
> winbind enum users = yes
> winbind enum groups = yes
> winbind use default domain = yes
> #template homedir = /home/%D/%U
> #template homedir = /home/%U
> template homedir = /mnt/spare/%U
> template shell = /bin/bash
> idmap backend = ldap:ldap://lnxs001
>
> # workgroup = NT-Domain-Name or Workgroup-Name
>workgroup = DOMAIN
>
> # server string is the equivalent of the NT Description field
>server string = SUN001
>
> # if you want to automatically load your printer list rather # than 
> setting them up individually then you'll need this
>printcap name = /etc/printcap
>load printers = yes
>
> # this tells Samba to use a separate log file for each machine # that 
> connects
>log file = /var/log/samba/log.%m
>
> # Put a capping on the size of the log files (in Kb).
>max log size = 50
>
> # Security mode. Most people will want user level security. See # 
> security_level.txt for details.
>security = user
> # Use password server option only with security = server
> ;   password server = 
>
> # Most people will find that this option gives better performance. # 
> See speed.txt and the manual pages for details
>socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>
> # Browser Control Options:
> # set local master to no if you don't want Samba to become a master # 
> browser on your network. Otherwise the normal election rules apply
>local master = no
>
> # WINS Server - Tells the NMBD components of Samba to be a WINS Client
> # Note: Samba can be either a WINS Server, or a WINS Client, but NOT
> both
>wins server = 192.168.224.25
>
> # DNS Proxy - tells Samba whether or not to try to resolve NetBIOS 
> names # via DNS nslookups. The built-in default for versions 1.9.17 is 
> yes, # this has been changed in version 1.9.18 to no.
>dns proxy = no
>
>
>
> Thanks,
> Sapan
>
> -Original Message-
> From: John H Terpstra [mailto:[EMAIL PROTECTED]
> Sent: 08 January 2004 16:58
> To: Ganguly, Sapan
> Cc: '[EMAIL PROTECTED]'
> Subject: RE: [Samba] How do I get Winbind accounts in LDAP?
>
>
> Sapan,
>
> I recently installed Samba-3 on Solaris 9 and had no problem with PAM 
> and NSS functionality. Logons using domain users worked well. As I do 
> not have a Sun box it is a little difficult for me to help you 
> directly.
>
> What output do you get from:
>   wbinfo -u
>   wbinfo -g
>
> Please send me your smb.conf file so I can see what may be going on.
>
> - John T.
>

Réf. : [Samba] Samba Tuning

2004-01-15 Thread Xavier DRONIOU
I've the same problem on solaris 8 with samba 2.2.8a i've try many options
like theses:
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE SO_SNDBUF=16384 
SO_RCVBUF=16384
read raw = yes
write raw = yes
oplocks = no
getwd cache = yes

Add this on your global section and try to see if you get improvement

Envoyé par : [EMAIL PROTECTED]
Pour :  [EMAIL PROTECTED]
cc : (ccc : Xavier DRONIOU/RTE/GRT/FR)
Objet : [Samba] Samba Tuning


-BEGIN PGP SIGNED MESSAGE-


The contents of this email are intended exclusively for the
addressee. If you are not the addressee you must not read
use or disclose the email contents ; you should notify us
immediately [ by clicking "Reply" ] and delete this email.

Nationwide monitors e-mails to ensure its systems operate
effectively and to minimise the risk of viruses.  Whilst it has
taken reasonable steps to scan this email, it does not
accept liability for any virus that may be contained in it.


Following problems with samba performance on a Solaris 9 box I have traced
this to the number of files being accessed by an application... Seems when 
a
process is kicked off on the client it goes to a directory which has many
thousands of small files and does some processing on them, while this is
running samba performance drop dramatically.

It seems performance is fine when dealing with a small number of large 
files
but when dealing with many thousands of small files (4k or so) it's a
different story.

Is there any tuning I can do to improve the situation?

Samba Server: SunFire V880 running Solaris 9 (112233-08)
Samba Client: Compaq ProLient ML570 running W2K SP3

# Samba config file created using SWAT
# from pq04464.admin.nbsnet.co.uk (10.200.41.127)
# Date: 2004/01/09 12:33:30

# Global parameters
[global]
netbios name = UXHSMSVC01
server string =
encrypt passwords = Yes
username map = /etc/sfw/smbusers
log level = 1
log file = /var/samba/%m.log
show add printer wizard = No
socket address = 10.192.34.61
oplocks = No

[mfs_cell_1]
comment = File Scanning - Cell 1
path = /mfs/Scan_Cell_1/export
guest account =
valid users = mfssvc
read only = No

[nlife]
comment = Life
path = /nlife/export
guest account =
valid users = nlifesvc
read only = No

Have set oplocks = No as many processes my access the same files at the 
same
time and thaught we maybe spending a lot of time oplock processing. Made 
no
difference...

Logs are not showing errors (at log_level 3) but have a lot of activity...

Cheers,

Simon

Simon Harris
Nationwide Building Society
Technology Support
Enterprise Servers (SAN)
* +44(0)1793 654492
*  +44(0)7764 838021
*  [EMAIL PROTECTED]




-BEGIN PGP SIGNATURE-
Version: PGPsdk version 1.1.1 (C) 1997 Pretty Good Privacy, Inc.

iQEVAwUBQAZf424wJNdvwuyFAQHCfwgApEzeJdrs+XbT+ckdSkSwf5tSCVfwqM+e
2Q1+Kv5/M16ofwcU5+LTy2idYSg0ewDbjRkU/TRHmShx5j8TuagUNaCYaS94OrGo
XdafCPuHUPl6gRdOGZBTd5qYkmvf3i+1JGr8rqIRsJO5+nHm9txZbX3b3DE3YAzj
oshzIlwmsDk0moyqhS8W20mRt9jAnfvptI+ao7wakS2phbZLUf8BNgctZGCkC8Yw
Az8MwvX4JLVRwUa6gT1CFetU4WhoRjfYIY4CcnBaEpecbMWpQrI5+Eg+f1tK19Ll
dxX32+EpzAXJjrmEk2x4GSptMTJ6zE0TuPIjDI+EC3tOdFbchmtFOg==
=xej9
-END PGP SIGNATURE-

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Samba PDC and Automatic Printer Install

2004-01-15 Thread Michael Aldrich
Thanks.
I made the change and was able to add the driver. Although, I still cannot
print..
The printers are in 'error' status.

rpcclient $> getprinter HP2300
flags:[0x80]
name:[\\mercury\HP2300]
description:[\\mercury\HP2300,HP LaserJet 2300 Series PCL 6,HP2300]
comment:[HP2300]

In my log.:

maldrich logged in as admin user (root privileges)
[2004/01/15 11:57:52, 1] smbd/service.c:make_connection_snum(705)
  tdube (192.168.0.61) connect to service print$ initially as user maldrich
(uid=0, gid=100) (pid 23819)
Status Information:
 sending job '[EMAIL PROTECTED]' to [EMAIL PROTECTED]
 connecting to 'localhost', attempt 1
 connected to 'localhost'
 requesting printer [EMAIL PROTECTED]
 job '[EMAIL PROTECTED]' transfer to [EMAIL PROTECTED] failed
  error 'NONZERO RFC1179 ERROR CODE FROM SERVER' with ack 'ACK_FAIL'
  sending str '^BHP2300' to [EMAIL PROTECTED]
 error msg: 'spool queue for 'hp2300' does not exist on server
mercury.i-centrix.com'
 error msg: '   non-existent printer or you need to run 'checkpc -f''

This is when I try and print a Test Page...
Thanks
Mike


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 14, 2004 4:03 PM
To: Michael Aldrich
Cc: [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: Re: [Samba] Samba PDC and Automatic Printer Install







In your smb.conf, you have the option "use client driver" set to "yes".
When it is "yes", it will not allow you to set the driver.  You need to
delete the "use client driver" line, reload samba and it should work.

Alex Laslavic
Havertys Tech Services

[EMAIL PROTECTED] wrote on 01/14/2004
10:35:11 AM:

> Hello,
> I am trying to install automatic printer driver download and install.
> I am running Samba 3, as a PDC, on RedHat 7.3.
>
> It seems everything is setup correctly, although I cannot get the
rpcclient
> to 'see' my printer.
> Please notice these two printers listed below ar the same (lp & HP2300).
>
>
> [EMAIL PROTECTED] log]# rpcclient -U=root localhost
> Password:
>
> rpcclient $> enumprinters
> flags:[0x80]
> name:[\\mercury\HP2300]
> description:[\\mercury\HP2300,,HP2300]
> comment:[HP2300]
>
> flags:[0x80]
> name:[\\mercury\lp]
> description:[\\mercury\lp,,]
> comment:[]
>
> rpcclient $> enumdrivers
>
>
>
> [Windows NT x86]
> Printer Driver Info 1:
> Driver Name: [HP LaserJet 2300 Series PCL 6]
>
>
> [Windows NT x86]
> Printer Driver Info 1:
> Driver Name: [HP LaserJet 2300 Series PCL 6]
>
>
> rpcclient $> setdriver "lp" "HP LaserJet 2300 Series PCL 6"
> SetPrinter call failed!
> result was WERR_ACCESS_DENIED
> rpcclient $> setdriver "HP2300" "HP LaserJet 2300 Series PCL 6"
> SetPrinter call failed!
> result was WERR_ACCESS_DENIED
> rpcclient $>
>
>
> Snip from my smb.conf:
> [printers]
> comment = HP LaserJet
> path = /var/spool/samba
> printer admin = root
> guest ok = Yes
> printable = Yes
> printing = cups
> use client driver = Yes
> browseable = No
>
> [print$]
> comment = Printer Download
> path = /var/spool/samba/W32X86/3
> valid users = maldrich, root
> admin users = maldrich, root
> write list = root
> read only = No
> guest ok = Yes
>
> [lp]
> path = /var/spool/samba
> printer admin = root
> read only = No
> guest ok = Yes
> printable = Yes
> printer name = lp
> use client driver = Yes
> oplocks = No
> share modes = Yes
>
> On the client side (Windows XP Pro), I can see both printers from Network
> Neighborhood,
> , Printers & Faxes. Both of them are in 'Error' status.
>
> Does anyone have an idea why this operation is continuosly failing?
>
> Why do I get WERR_ACCESS_DENIED from SetPrinter?
>
> Thanks
> Mike
>
>
> And thanks to Kurt for getting me this far
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] I am unable to access my shares: Incorrect password or Invalid user name

2004-01-15 Thread Abdul-Azeez
SAMBER server=3.0.1, Linux server=8.0, Windows Client= win 2000 pro

I am a newbie facing problems with my shares. I get "Incorrect password or Invalid 
user name" after I enter my user name and password.
I have created the username on the my windows machine, my Linux machine and with 
smbpasswd with same password. 

when I issue : "smbclient //host/share" from the Linux machine , it prompts me for 
password and afterwards it displays the following message:

session setup failed: NT_STATUS_LOGON_FAILURE

A copy of my smb client file is :

# Samba config file created using SWAT
# from 128.1.100.67 (128.1.100.67)
# Date: 2004/01/15 17:33:15

# Global parameters
[global]
workgroup = IMSD
netbios name = SAMBA
log level = 3
ldap ssl = no

[share1]
comment = test share
path = /var/log
read only = No

[globus]
comment = globus image directory
path = /var/globus-image
read only = No

I can see the shares (without password) when I set "security = share" and "guest ok = 
yes".

I also noticed through the SWAT interface that smbd is always down even after 
restarting severally.

I also tried starting from the command prompt (nmbd 1st, then follwed by smbd) and I 
dont get any error message. But it displays not running (smbd only) from SWAT 
interface.

I am really confused.

Any help?
Abdul
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] PDC upgrade Fedora core 1 / Samba version 3.0.0-15

2004-01-15 Thread rmillisl
I just finished upgrading my PDC to Fedora core 1 with Samba version
3.0.0-15 and I am having a few problems.

I have done some googling and thus far have not found a solution to my
problem. Any help or comments would be appreciate.

I was getting the following errors from testparm:

-cut-
Ignoring unknown parameter "domain admin group"
Unknown parameter encountered: "vfs options"
Invalid combination of parameters for service profile.
Level II oplocks can only be set if oplocks are also set.
-cut-

I see from
http://www.samba.org/samba/docs/man/upgrading-to-3.0.html#id2969141 that
the "domain admin group" and "vfs options" were removed.

Is there functional replacements for these? I was using the wheel group
for administrative purposes and was also using the network recycle folder.

Even with these items commented out my roaming profiles have stopped
working and I am getting the "Invalid combination of parameters for
service profile. Level II oplocks can only be set if oplocks are also
set." error.

-cut-
# Global parameters
[global]
workgroup = MYGROUP
netbios name = MYSERVER
server string = File Server
encrypt passwords = Yes
log file = /var/log/samba/%m.log
max log size = 0
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 domain
admin group = @wheel
logon script = default.bat
logon path = \\fs2\profile\%U
logon drive = U:
logon home = \\fs2\%u
domain logons = Yes
os level = 99
preferred master = Yes
local master = No
domain master = Yes
dns proxy = No
wins support = Yes
admin users = root
security = user
share modes = No
# Printing
printcap name = /etc/printcap
load printers = Yes
printing = lprng
disable spoolss = yes
[profile]
comment = User Profiles
path = /home/profile
read only = No
create mask = 0600
directory mask = 0700
profile acls = yes
oplocks = No

[netlogon]
comment = Netlogon Share
path = /home/netlogon

[homes]
comment = Home Directories
path = /home/fs2/%u
read only = No
browseable = No
create mode = 0600
directory mode = 0700
vfs object = /usr/lib/samba/vfs/recycle.so
vfs options = /etc/samba/recycle.conf
oplocks = No
[tmp]
comment = Temp Space
path = /tmp
read only = No
browseable = Yes
create mode = 0600
directory mode = 0700

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No
guest ok = Yes
writeable = No
printer admin = @wheel
[apps]
comment = Software
path = /home/apps
admin users = admin
read only = No
[dist]
comment = Software & OS Distribution
path = /dist
admin users = admin
read only = No

[public]
comment = Public Shared Files
path = /home/public
read only = No

[programs]
comment = Programs
path = /home/programs
read only = No
[mp3]
comment = MP3 Music
path = /home/mp3
read only = No

[cdrom]
comment = Server CD-ROM drive
path = /mnt/cdrom
guest ok = Yes

;[cdrom1]
;   comment = Server CD-ROM drive
;   path = /mnt/cdrom1
;   guest ok = Yes

[admin]
path = /home
admin users = admin
force user = root
force group = root
read only = No
create mask = 0755
browseable = No
[atlas]
comment = Comptons Atlas CD Image
path = /home/cdimage/Atlas
guest ok = Yes

-cut-



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Sometimes unable to browse w2k shares

2004-01-15 Thread Andy Helms
We are also running into a problem similar to this.  We have a W2K
Workstation that is sharing a few folders, and sporadically, users cannot
connect to it.  We have a FC1 PDC, Samba 3.0.1, and the clients are Win98
and W2K.  The Win98 clients get an "Unknown Error 31", while the Win2K
Clients get either "The system cannot find message for message number 0x%1
in message file for %2.", or "Internal Windows 2000 error."  
 
The problem is only occurring on one W2k Workstation.  Sometimes, I am able
to run "w32tm /s" from the w2k cli, and SOMETIMES that provides a fix, but
not all of the time.  
 
 
 
 
- Original Message - 
From: "Markus Feldmann" http://lists.samba.org/mailman/listinfo/samba> >
To: http://lists.samba.org/mailman/listinfo/samba> >
Sent: Monday, January 05, 2004 2:49 PM
Subject: Re: [Samba] Sometimes unable to browse w2k shares
 
 
> Hallo rmi,
>
> it seems that some machine have got problems with his protokolls.
> Or maybe it has got to many protokolls.
> Check whether you have a Computer with 2 Nic(Networkcards).
> You should have got a Wins or DNS Server.
> The Wins Server is very easy.
> This could help.
>
> mfg Markus F.
>
> - Original Message - 
> From: "rmi" http://lists.samba.org/mailman/listinfo/samba> >
> To: http://lists.samba.org/mailman/listinfo/samba> >
> Sent: Monday, January 05, 2004 11:31 AM
> Subject: [Samba] Sometimes unable to browse w2k shares
>
>
> Lo folks,
>
> Plz i need some advice, im totally clueless at the moment where to look
and
> what to do.
> I have one samba 3.0.1 PDC and ten win 9x clients and two XP pro clients
and
> one w2k print server with some shares.
>
> It all worked good until i joined the w2k server into the domain. The
first
> couple of hours after joining all shares and all printer were available on
> the win2k server. But then all of a sudden i couldnt see any shares from
the
> w2k server on the netwerk.When i try to browse the w2k server shares via
9x
> clients i get a unknown error 31.
> Even the ./smbclient -L //w2k/share -U aap doesnt let me see shares.
>
> Sometimes after an hour orso the shares are again available, or else i
have
> to stop and start samba.
> What could be wrong, Does any1 have any suggestions?
>
> Thx in advance
>
> rmi
>
> ===
> smb.conf
> ==
> [global]
> workgroup = GENERAL
> netbios aliases = C001
> server string = Samba Server
> password server =
> passdb backend = tdbsam
> username map = /usr/local/samba/lib/username.map
> log level = 5
> log file = /var/log/samba/log.%m
> max log size = 50
> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> load printers = No
> show add printer wizard = No
> add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u
> logon path =
> domain logons = Yes
> os level = 40
> preferred master = Yes
> domain master = Yes
> dns proxy = No
> ldap ssl = no
> template homedir = /opt/oc/home/%D/%U
>
> [homes]
> comment = Home Directories
> read only = No
> veto files = /.??*/
> browseable = No
>
> [printers]
> comment = All Printers
> path = /var/spool/samba
> printable = Yes
> browseable = No
>
> [oc_data]
> comment = OCH Data
> path = /opt/oc/oc_data
> valid users = @oc_med
> admin users = @symas
> read list = @oc_med
> write list = @oc_med
> read only = No
> create mask = 0770
> security mask = 0770
> directory mask = 0770
> directory security mask = 0770
> veto files = /lost+found/
> hide files = /lost+found/
>
> [netlogon]
> path = /opt/oc/netlogon
> guest ok = Yes
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] FreeBSD 4.9 + Samba 3.0.0rc1 - 3.0.1 ASCII-US Issue

2004-01-15 Thread Jeff Royle
I have tried various versions of Samba 3.x.x on my FreeBSD 4.9 server 
without success. (Including the current port)

The install  goes smoothly however running testparm I encounter the 
following errors...

Error trying to resolve symbol 'init_module' in /usr/lib/charset/CP850.so: 
Cannot open "/usr/lib/charset/US-ASCII.so'
Conversion from UCS-2LE to CP850 not supported

This error repeats about 3 times for various symbols.

US-ASCII.so does not exist at all on the server.

I have updated libiconv to 1.9.2 was runing 1.8.x before without success.

How do I resolve this issue?   I am running out of idea's on what I can do 
to fix this issue.

Thanks

Jeff Royle

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.560 / Virus Database: 352 - Release Date: 08/01/2004
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] PDC - initial profile creation

2004-01-15 Thread Michael Aldrich
Hello,
I had the same problem. This is my current config:

[global]
  logon path = %U\profile
[netlogon]
comment = Network Logon Service
path = /home/netlogon
share modes = No

[profiles]
path = /home/%U/profile
browseable = No

I am able to logon to my domain without errors.

Mike

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf
Of Antony Gelberg
Sent: Thursday, January 15, 2004 10:22 AM
To: [EMAIL PROTECTED]
Subject: [Samba] PDC - initial profile creation


I can now login to my domain from an XP Pro client, as a normal user.  Only
problem is, I get this:

Windows cannot locate the server copy of your roaming profile and is
attempting to log you on with your local profile. Changes to the profile
will not be copied to the server when you logoff. Possible causes of this
error include network problems or insufficient security rights. If this
problem persists, contact your network administrator.

DETAIL - The network path was not found.

Here are the relevant snippets:

[profiles]
path = /home/samba/profiles
read only = no
create mask = 0600
directory mask = 0700
browseable = no
profile acls = yes

[netlogon]
   comment = Network Logon Service
   path = /home/samba/netlogon
   guest ok = yes
   writable = no
   share modes = no
   browseable = no

server:~# ls -l /home/samba
total 8
drwxr-sr-x2 root users4096 Jan 14 20:19 netlogon
drwxrwxrwt3 root users4096 Jan 15 23:03 profiles

/home/samba/profiles is empty.  Should the user subdirectory be created when
the user first logs in?

Is there any definitive guide to the minimum required permissions /
ownership for the above two directories?  Googling gives wildly differing
answers.

Antony


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] My story installing Samba-LDAP PDC (it has a happy ending)

2004-01-15 Thread Vegeta Saiyajin
On Thursday 15 January 2004 10:32, you wrote:
> Hello Vegeta,
>
> I've looked at your post at samba mailing list.
>
> Same as you are, I am having a nightmare making a windows 2000
> pro to logon to my domain.
>
> But unlike you, smbldap-tools worked fine-ish for me. They
> have populated the database with initial users,groups and
> created computer entry. The setup works fine for
> shares/workgroup. But I can't make it connect to my pdc. By
> the way, I am running Debian unstable with samba 3.0.1 and
> ldap 2.1.23.
>
> By following your experience, i've managed to resolve some of
> the issues while i was trying to logon to my domain.
>
> Initially, looking at the ldap logs, windows was trying to
> search for entries that where not found in the ldap. Like pid
> 501, which is ment to be a guest account, and few other
> things.
>
> But after correcting these issues, ldap finds all the entries,
> but still gives me Logon Failure: unknown username or bad
> password.

There are two solutions. 

One is to use
   ldap machine suffix = ou=People
instead of 
   ldap  machine suffix= ou=Computers
This will probably work.

A better solution that allows storing computer accounts in 
ou=Computers requires changing the ldap.conf file.
This is not a Samba file, but an OpenLdap file (I assume you are 
using OpenLDAP).

In the ldap.conf file of the LDAP server use:
scope sub
nss_base_passwd  dc=arhont,dc=com
nss_base_shadow  dc=arhont,dc=com

instead of the more traditional
scope one
nss_base_passwd  ou=People,dc=arhont,dc=com
nss_base_shadow  ou=People,dc=arhont,dc=com

The reason for the 
  "unknown username or bad password"
message is that Samba tries to find the machine as a "user" 
listed by NSS (as when you use "getent passwd").
When you have nss configured with "scope one"  and 
"nss_base_passwd ou=People,dc=arhont,dc=com" the only users samba 
sees are the accounts in ou=People (without looking any 
subtrees).

When you use "scope sub" and "nss_base_passwd dc=arhont,dc=com" 
samba can see all users in all subtrees of "dc=arhont,dc=com".

Regarding changes in the registry, they are not necessary in 
Samba 3.0.x. Some documentation I read talks about this, but 
only applies to Samba 2.2.x. I could join W2K machines to the 
domain without making any registry modifications.



>
> But looking at samba logs, I don't see any errors. This is the
> output of the slapd when I atempt to logon to domain:
>
> 
> Jan 15 14:07:23 whale slapd[24434]: conn=5 fd=19 ACCEPT from
> IP=192.168.77.7:38423 (IP=0.0.0.0:389)
> Jan 15 14:07:23 whale slapd[24434]: conn=5 op=0 BIND
> dn="cn=root,dc=arhont,dc=com" method=128
> Jan 15 14:07:23 whale slapd[24434]: conn=5 op=0 BIND
> dn="cn=root,dc=arhont,dc=com" mech=simple ssf=0
> Jan 15 14:07:23 whale slapd[24434]: conn=5 op=0 RESULT tag=97
> err=0 text= Jan 15 14:07:23 whale slapd[24434]: conn=5 op=1
> SRCH
> base="dc=arhont,dc=com" scope=2
> filter="(&(objectClass=sambaDomain)(sambaDomainName=ARHONT))"
> Jan 15 14:07:23 whale slapd[24434]: conn=5 op=1 SRCH
> attr=sambaDomainName sambaNextRid sambaNextUserRid
> sambaNextGroupRid sambaSID sambaAlgorithmicRidBase objectClass
> Jan 15 14:07:23 whale slapd[24434]: conn=5 op=1 SEARCH RESULT
> tag=101 err=0 nentries=1 text=
> Jan 15 14:07:23 whale slapd[24434]: conn=5 op=2 SRCH
> base="dc=arhont,dc=com" scope=2
> filter="(&(uid=root)(objectClass=sambaSamAccount))"
> Jan 15 14:07:23 whale slapd[24434]: conn=5 op=2 SRCH attr=uid
> uidNumber gidNumber homeDirectory sambaPwdLastSet
> sambaPwdCanChange sambaPwdMustChange sambaLogonTime
> sambaLogoffTime sambaKickoffTime cn displayName sambaHomeDrive
> sambaHomePath sambaLogonScript sambaProfilePath description
> sambaUserWorkstations sambaSID sambaPrimaryGroupSID
> sambaLMPassword sambaNTPassword sambaDomainName objectClass
> sambaAcctFlags sambaMungedDial
> Jan 15 14:07:23 whale slapd[24434]: conn=5 op=2 SEARCH RESULT
> tag=101 err=0 nentries=1 text=
> Jan 15 14:07:23 whale slapd[24434]: conn=5 fd=19 closed
>
> ---
>
> and this is the example of my smb.conf
>
> #LDAP Support for samba 3+
> passdb backend  = ldapsam:ldap://whale.core.arhont.com
> ldap admin dn   = "cn=root,dc=arhont,dc=com"
> idmap backend   = ldap:ldap://whale.core.arhont.com
> ldap suffix = dc=arhont,dc=com
> ldap machine suffix = ou=computers
> ldap user suffix= ou=users
>
> #ldap ssl   = off
> #ldap user suffix   = "ou=users,dc=arhont,dc=com"
>
> ##Default LDAP FILTER
> #ldap filter= "(&(uid=%u)(objectClass=SambaSamAccount))"
> ldap filter = "(uid=%u)"
>
> ldap delete dn  = no
> #ldap password sync = yes
>
>
> In addition, you have mentioned that the win2k registry has to
> be changed. I've looked at the registry key on my workstation,
> and it was already 0, from the default install. Is it normal,
> as i've read in few places that it has to be changed. but my
> one was already 0 from the initial installation.

>
> Do you have any suggestions, wh

[Samba] Solaris 8 x86 : Winbind compile error

2004-01-15 Thread Mathieu Nantel
Hello folks,

I'm having the following problem when compiling vanilla Samba 3.0.1 on a 
Solaris 8 X86 system:

creating /opt/src/samba-3.0.2pre1/source/utils/net_proto.h
Compiling dynconfig.c
In file included from nsswitch/winbind_nss_solaris.h:28,
 from nsswitch/winbind_nss.h:34,
 from nsswitch/winbind_nss_config.h:79,
 from nsswitch/winbind_client.h:1,
 from include/includes.h:836,
 from dynconfig.c:21:
/usr/include/nss_dbdefs.h:375: parse error before "projid_t"
/usr/include/nss_dbdefs.h:400: parse error before '}' token
/usr/include/nss_dbdefs.h:419: field `key' has incomplete type
*** Error code 1
make: Fatal error: Command failed for target `dynconfig.o'


Anyone has any idea what could be the source of this? I have tried compiling 
with "--with-winbind=no" to no avail.

Thanks,
Mat
-- 
===
Mathieu Nantel - RHCE from Hell  Ecopia BioSciences
Systems Manager (514) 336-2724 x434
[EMAIL PROTECTED]
===
[*] Please avoid sending me Word/Excel/PowerPoint attachments.
 `> See: http://www.fsf.org/philosophy/no-word-attachments.html
===

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Question again: winbindd and samba with "use default domain"

2004-01-15 Thread Ben Kim

I haven't heard from anyone about the above question and wanted to ask
again... 

Could someone have a look and tell me if there're any missing points in
the question ?



Regards,
Ben

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] permission bits clobbered

2004-01-15 Thread Panko, Kevin
The '>' creates a new file, but ONLY if the file did NOT exist before.  If
it does exist, the file's contents are replaced, but it still the same file.

This is the way it works on both Windows and Unix.
This command:
echo foobar > secretfile
Does not clobber the permissions (or NTFS ACLs) on Unix (or Windows).
But it does clobber them when Samba is involved.

It makes no sense to say that the act of editting a text file has any effect
on its security permissions.  (Whether it be in notepad.exe or on the
command line as I have shown.)

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 15, 2004 3:40 AM

Of course '>' is very different of '>>'. '>' creates a new file so THE 
NEW secretfile is created with the 644 mask.
'>>' appends in the file. 

> A file is chmod 600.  It gets opened on Windows, and it gets 
> changed to 644.
> This happens if the user does:
> N:\> echo foobar > secretfile
> But it does stay at chmod 600 if he does (append instead of truncate):
> N:\> echo foobar >> secretfile
> The "create mask" parameter is set to 644.  I do not think this 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: High load average and client timeouts

2004-01-15 Thread Daniel Johnson
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 14 Jan 2004 at 15:15, Dragan Krnic wrote:
> Basically
> I think your problem is that continuous writing to an 
> smb-share is rather fragile. If your backup problem 
> allows you to output data to stdout, then you might 
> attach it to an rsh or rexec filter with buffering 
> software on the Linux side. Read my comment.

It's actually a fake-Windows-app running in DOS.  Given its features
(and the mentality of my bosses) its not going to be dropped.  :-/
 
> I can speculate what a "real" server would do, but 
> I've been doing something like that for a long time 
> with a similar workstation, SuSE 8.2, P4/3G, 2GB RAM, 
> 480 GB 4-way IDE stripe and never bothered to look at 
> load numbers because it works so smoothly. 25 admin 
> shares are being backed up simultaneously every 
> workday but without affecting interactivity of
> remote sessions. The built-in Gbit NIC is using 
> up all 100 Mbps that the switch passes on to it 
> plus about 20 MB/s from a samba PDC via a Gbit 
> link, so there is an aggregate max speed of about 
> 32 MB/s. Never any aborts.

We've given thought to putting it on a 10/100 switch instead of the
current 100/1000, but with an NT5 system performing well on gig, we
wouldn't be able to justify using it.
 
> The trick is probably in the little buffering filter
> (xt) between the backup tool and the disk. This is 
> more efficient both because the reading part accepts 
> incoming data without delay and because the writing 
> part only writes data to disk once a high mark is 
> reached so when it starts writing it flushes data
> in one big chunk, which reduces fragmentation.

I would've thought that Samba and/or the kernel would implement a
similar buffer already.  Any gurus care to shed some light on this? 
Perhaps a relative lack of RAM is keeping the buffers from
functioning properly?

> The downside is that I'm using 32 MB RAM per backup
> session, so you need more memory. The buffer size 
> is settable to a multiple of 64 KB between 10 and 
> (SHMMAX/64KB - 3). 512 works fine for me but less 
> would probably work decently too.

With 4gb specd, 32mb each is no problem.  Heck, I could still get
half the office at once with RAM to spare.

> I use tar as backup tool. All shares are smbmount'd
> under /mnt so backing the data up is basically
>
>  for share in $(  do  cd /mnt/$share
>  ( tar cbf 64 - . | xt -n512 > /tars/$share ) &
>  done

...so the server is pulling from the clients, rather than the clients
pushing to the server.  Makes sense.

> I also use it to transfer backups to tape. It can read 
> from the stripe at about 130 MB/s and the tape can 
> accept about 80 MB/s, if no other I/O takes place, but 
> combining the two reduces the speed to about 35 MB/s so
> that on average only about 50 MB/s are obtained. A "real" 
> server not limited to 32-bit/33MHz PCI could probably 
> do a little better.

The Tyan mobo we want has an onboard Adaptec Ultra320 SCSI
controller.  Combined with a 64-bit 3ware RAID controller, I don't
think we'll have much I/O bottleneck there.

I wish I could use your method for our backups, but I'd start a riot
if I suggesting moving away from DeployCenter.  It's handling of
varying partition sizes, boot sectors, and such has saved our hides
on more occasions than I care to recall.

- -- 
Through the modem, off the server, over the T1, past the frame-relay,
< < NOTHIN' BUT NET > >
 
Daniel Johnson
[EMAIL PROTECTED]
http://dannyj.come.to/
Public PGP Keys & other info: http://dannyj.come.to/pgp/


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3 (MingW32) - GPGshell v2.95

iD8DBQFABrbi6vGcUBY+ge8RAqFAAJ45VAPut0YhR64AZRp+0lMWbrJ0lQCghgrx
XlMePwcYtUhH3/B2q7FdZnE=
=IQR+
-END PGP SIGNATURE-

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] logging messenger service in windows

2004-01-15 Thread Panko, Kevin
Look at the "message command" parameter in smb.conf.  You can write your own
program to handle the message, or just send it to the "logger" command to
send it to the system log.

-Original Message-
From: kent E. [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 15, 2004 6:35 AM

is there a way to log any communications using the windows 'net send'
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] My story installing Samba-LDAP PDC (it has a happy ending)

2004-01-15 Thread Andrei Mikhailovsky
Hello,

I've looked at your post at samba mailing list.

Same as you are, I am having a nightmare making a windows 2000 pro to
logon to my domain.
But unlike you, smbldap-tools worked fine-ish for me. They have
populated the database with initial users,groups and created computer
entry. The setup works fine for shares/workgroup. But I can't make it
connect to my pdc. By the way, I am running Debian unstable with samba
3.0.1 and ldap 2.1.23.
By following your experience, i've managed to resolve some of the issues
while i was trying to logon to my domain.
Initially, looking at the ldap logs, windows was trying to search for
entries that where not found in the ldap. Like pid 501, which is ment to
be a guest account, and few other things.
But after correcting these issues, ldap finds all the entries, but still
gives me Logon Failure: unknown username or bad password.
But looking at samba logs, I don't see any errors. This is the output of
the slapd when I atempt to logon to domain:

Jan 15 14:07:23 whale slapd[24434]: conn=5 fd=19 ACCEPT from
IP=192.168.77.7:38423 (IP=0.0.0.0:389)
Jan 15 14:07:23 whale slapd[24434]: conn=5 op=0 BIND
dn="cn=root,dc=arhont,dc=com" method=128
Jan 15 14:07:23 whale slapd[24434]: conn=5 op=0 BIND
dn="cn=root,dc=arhont,dc=com" mech=simple ssf=0
Jan 15 14:07:23 whale slapd[24434]: conn=5 op=0 RESULT tag=97 err=0 text=
Jan 15 14:07:23 whale slapd[24434]: conn=5 op=1 SRCH
base="dc=arhont,dc=com" scope=2
filter="(&(objectClass=sambaDomain)(sambaDomainName=ARHONT))"
Jan 15 14:07:23 whale slapd[24434]: conn=5 op=1 SRCH
attr=sambaDomainName sambaNextRid sambaNextUserRid sambaNextGroupRid
sambaSID sambaAlgorithmicRidBase objectClass
Jan 15 14:07:23 whale slapd[24434]: conn=5 op=1 SEARCH RESULT tag=101
err=0 nentries=1 text=
Jan 15 14:07:23 whale slapd[24434]: conn=5 op=2 SRCH
base="dc=arhont,dc=com" scope=2
filter="(&(uid=root)(objectClass=sambaSamAccount))"
Jan 15 14:07:23 whale slapd[24434]: conn=5 op=2 SRCH attr=uid uidNumber
gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange
sambaPwdMustChange sambaLogonTime sambaLogoffTime sambaKickoffTime cn
displayName sambaHomeDrive sambaHomePath sambaLogonScript
sambaProfilePath description sambaUserWorkstations sambaSID
sambaPrimaryGroupSID sambaLMPassword sambaNTPassword sambaDomainName
objectClass sambaAcctFlags sambaMungedDial
Jan 15 14:07:23 whale slapd[24434]: conn=5 op=2 SEARCH RESULT tag=101
err=0 nentries=1 text=
Jan 15 14:07:23 whale slapd[24434]: conn=5 fd=19 closed
---

and this is the example of my smb.conf

#LDAP Support for samba 3+
passdb backend  = ldapsam:ldap://whale.core.arhont.com
ldap admin dn   = "cn=root,dc=arhont,dc=com"
idmap backend   = ldap:ldap://whale.core.arhont.com
ldap suffix = dc=arhont,dc=com
ldap machine suffix = ou=computers
ldap user suffix= ou=users
#ldap ssl   = off
#ldap user suffix   = "ou=users,dc=arhont,dc=com"
##Default LDAP FILTER
#ldap filter= "(&(uid=%u)(objectClass=SambaSamAccount))"
ldap filter = "(uid=%u)"
ldap delete dn  = no
#ldap password sync = yes
In addition, you have mentioned that the win2k registry has to be
changed. I've looked at the registry key on my workstation, and it was
already 0, from the default install. Is it normal, as i've read in few
places that it has to be changed. but my one was already 0 from the
initial installation.
Do you have any suggestions, what might be going wrong? I am already at
my third day trying to integrate samba/ldap. What a nighmare!
Thanks in advance for any help )



--
Andrei Mikhailovsky
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] client use spnego

2004-01-15 Thread Fran Fabrizio

In the course of debugging my still-unsolved "smbclient tar starts
throwing SMB signature errors after 750MB of data or so" error, I came
across this apparent inconsistency...

>From the smb.conf man page:

"client use spnego (G)

This variable controls controls whether samba clients will try to use
Simple and Protected NEGOciation (as specified by rfc2478) with
WindowsXP and Windows2000 servers to agree upon an authentication
mechanism. SPNEGO client support for SMB Signing is currently broken, so
you might want to turn this option off when operating with Windows 2003
domain controllers in particular."

>From the Official Samba-3 HOWTO (Section 6.6.3, page 80):

"Windows 2003 requires SMB signing.  Client-side SMB signing has been
implemented in Samba 3.0.  Set client use spnego = yes when
communicating with a Windows 2003 server."   

Coincidentally, I've tried my problem with it set both ways, and it
still fails.  Is it thus safe to assume that the "client use spnego"
setting has no relation to the signing that's going on in relation to
the "Server packet had invalid SMB signature!" errors I'm getting?

Thanks,
Fran


-- 

Fran Fabrizio
Senior Systems Analyst
Department of Computer and Information Sciences
University of Alabama - Birmingham
[EMAIL PROTECTED]
(205) 934-0653

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] PDC - initial profile creation

2004-01-15 Thread Antony Gelberg
I can now login to my domain from an XP Pro client, as a normal user.  Only
problem is, I get this:

Windows cannot locate the server copy of your roaming profile and is
attempting to log you on with your local profile. Changes to the profile
will not be copied to the server when you logoff. Possible causes of this
error include network problems or insufficient security rights. If this
problem persists, contact your network administrator.

DETAIL - The network path was not found.

Here are the relevant snippets:

[profiles]
path = /home/samba/profiles
read only = no
create mask = 0600
directory mask = 0700
browseable = no
profile acls = yes

[netlogon]
   comment = Network Logon Service
   path = /home/samba/netlogon
   guest ok = yes
   writable = no
   share modes = no
   browseable = no

server:~# ls -l /home/samba
total 8
drwxr-sr-x2 root users4096 Jan 14 20:19 netlogon
drwxrwxrwt3 root users4096 Jan 15 23:03 profiles

/home/samba/profiles is empty.  Should the user subdirectory be created when
the user first logs in?

Is there any definitive guide to the minimum required permissions /
ownership for the above two directories?  Googling gives wildly differing
answers.

Antony


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Logging Detail

2004-01-15 Thread Panko, Kevin
I don't believe there is any way to do this short of going into the source
code and changing something there. Sorry.
I also think this would be a nice feature.

-Original Message-
From: Mike McMullen [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 14, 2004 6:37 PM

Is there a way to get customized logs so that I get an entry of the
form:

   
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] SWAT reporting wrong version?

2004-01-15 Thread beers
Ha all,

I recently am having lots of troubles (I wont go into those detail yet,
but it involves broken pipes, disconnected sockets)  using samba. We used
to run a OS supplied (I dare not name the OS..) 2.2.6 samba version,
located in /usr/lib/samba (which are symlinks to /opt/K/SCO/samba (damn I
gave it away, please do not hold it against us innocent users)

To see if 2.2.8a version would go better I located a for our OS compiled
binary, and installed it in /usr/local.

I then killed all the old deamons, and manually started smbd and nmbd.

When I now start SWAT it reports as version 2.2.6. it also displays old
open connections, and old open files information. Looks like it searches
at the wrong locks directory.

How does SWAT determine where the smbd is located to ask for version info?
I had expect it, to ask the running processes, but apparently it does not.

Many thanks for any hints,

Richard
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Installation Problem !!!

2004-01-15 Thread adityargupta
Hello there,


I encountered an error with Samba3.0 installation. I'm sending it as an 
attachment(i.e. whatever appeared at "konsole")


So, please help me out to install Samba3.0 on RedHat Linux 8.0


Waiting For reply !!!


Aditya R. Gupta
[Beta] HelpClick onthe image to chat with me
[EMAIL PROTECTED] root]# cd /home/untarred-samba/samba-3.0.0/source/
[EMAIL PROTECTED] source]# ./configure | tee mylog
checking for gcc... gcc
checking for C compiler default output... a.out
checking whether the C compiler works... yes
checking whether we are cross compiling... no
checking for suffix of executables...
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for a BSD-compatible install... /usr/bin/install -c
checking for gawk... gawk
checking for perl... /usr/bin/perl
checking if the linker (ld) is GNU ld... yes
checking for library containing strerror... none required
checking whether gcc and cc understand -c and -o together... yes
checking that the C compiler understands -Werror... yes
checking that the C compiler understands volatile... yes
checking uname -s... Linux
checking uname -r... 2.4.18-14
checking uname -m... i686
checking uname -p... i686
checking build system type... i686-pc-linux-gnu
checking host system type... i686-pc-linux-gnu
checking target system type... i686-pc-linux-gnu
checking config.cache system type... same
checking for LFS support... yes
checking for gcc option to accept ANSI C... none needed
checking for inline... inline
checking how to run the C preprocessor... gcc -E
checking for ANSI C header files... yes
checking for dirent.h that defines DIR... yes
checking for library containing opendir... none required
checking whether time.h and sys/time.h may both be included... yes
checking for sys/wait.h that is POSIX.1 compatible... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking arpa/inet.h usability... yes
checking arpa/inet.h presence... yes
checking for arpa/inet.h... yes
checking sys/fcntl.h usability... yes
checking sys/fcntl.h presence... yes
checking for sys/fcntl.h... yes
checking sys/select.h usability... yes
checking sys/select.h presence... yes
checking for sys/select.h... yes
checking fcntl.h usability... yes
checking fcntl.h presence... yes
checking for fcntl.h... yes
checking sys/time.h usability... yes
checking sys/time.h presence... yes
checking for sys/time.h... yes
checking sys/unistd.h usability... yes
checking sys/unistd.h presence... yes
checking for sys/unistd.h... yes
checking for unistd.h... (cached) yes
checking utime.h usability... yes
checking utime.h presence... yes
checking for utime.h... yes
checking grp.h usability... yes
checking grp.h presence... yes
checking for grp.h... yes
checking sys/id.h usability... no
checking sys/id.h presence... no
checking for sys/id.h... no
checking limits.h usability... yes
checking limits.h presence... yes
checking for limits.h... yes
checking for memory.h... (cached) yes
checking net/if.h usability... yes
checking net/if.h presence... yes
checking for net/if.h... yes
checking compat.h usability... no
checking compat.h presence... no
checking for compat.h... no
checking rpc/rpc.h usability... yes
checking rpc/rpc.h presence... yes
checking for rpc/rpc.h... yes
checking rpcsvc/nis.h usability... yes
checking rpcsvc/nis.h presence... yes
checking for rpcsvc/nis.h... yes
checking rpcsvc/yp_prot.h usability... yes
checking rpcsvc/yp_prot.h presence... yes
checking for rpcsvc/yp_prot.h... yes
checking rpcsvc/ypclnt.h usability... yes
checking rpcsvc/ypclnt.h presence... yes
checking for rpcsvc/ypclnt.h... yes
checking sys/param.h usability... yes
checking sys/param.h presence... yes
checking for sys/param.h... yes
checking ctype.h usability... yes
checking ctype.h presence... yes
checking for ctype.h... yes
checking for sys/wait.h... (cached) yes
checking sys/resource.h usability... yes
checking sys/resource.h presence... yes
checking for sys/resource.h... yes
checking sys/ioctl.h usability... yes
checking sys/ioctl.h presence... yes
checking for sys/ioctl.h... yes
checking sys/ipc.h usability... yes
checking sys/ipc.h presence... yes
checking for sys/ipc.h... yes
checking sys/mode.h usability... no
checking sys/mode.h presence... no
checking for sys/mode.h... no
checking sys/mman.h usability... yes
checking sys/mman.h presence... yes
checking for sys/mman.h... yes
checking sys/filio.h usability... no
checking sys/filio.h presence... no
checking for sys/filio.h... no
checking sys/priv.h usability... no
checking sys/priv.h presence... no
checking for sys/priv.h... no
checking sys/shm.h usability... yes
checking sys/shm.h presence... yes
checking for sys/shm.h... yes
checking for string.h... (cached) yes
check

[Samba] integrating active directory with samba 3.0

2004-01-15 Thread Adrain Spencer
Hi can some please help me integrate samba 3.0 with
active directory. I'm very confused about this process
so far my research led me to the following article
http://asia.cnet.com/itmanager/netadmin/0,39006400,39081966,00.htm.
However other research led me to the use of winbind
for this setup. The confusing thing is that the
article did not mention winbind. I would like to have
it where we maintain one set of user accounts that we
create in our active directory database we use both
windows 2000 and 2003 server. With this single login
users will be able to login to redhat Linux boxes with
there same login name that they use to login to there
windows workstations. This login will also give them
access to samba share on our redhat 9.0 server. Any
help with this would be much appreciated.



__
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] BUGS

2004-01-15 Thread Ovidio A. Morales
Hi, Every day samba kills itself .. I don`t know why.. this is the logs...

INTERNAL ERROR: Signal 11 in pid 29393 (2.2.5)
  Please read the file BUGS.txt in the distribution
[2004/01/15 00:08:22, 0] lib/fault.c:fault_report(41)
  ===
[2004/01/15 00:08:22, 0] lib/util.c:smb_panic(1092)
  PANIC: internal error
  
Have you a patch for it?
Thanx 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] W2k client using "synchronize" on a samba configured RH Linux 9 file server ...

2004-01-15 Thread Mogens Kjaer
Mogens Kjaer wrote:
Krister Ripstrand wrote on December 16, 2003:

... does not work.

I use the W2k  functionality "synchronize" on my laptop to have 
up2date synchronized copies of  my files both at the laptop and the 
file server.
The file server is a P 200 MHz running RH Linux 9.
When on-line the synchronization of files works, except for my swedish 
letters "åäö". However when off-line working with my files, then 
reconnecting to the network and issuing a synchronization it fails. 
The updating of the files on the server fails.

Am I doing something wrong here or is the SMB protocol used by samba 
not up2date to support this W2k functionality?
My samba version is 3.0.0-2


Did you ever find a solution to the problem of synchronization not
working?
I'm having the same problem here, with w2k clients and
a server running redhat 9 and rh's samba-2.2.7a-8.9.0.
The file system is ext3.

 From the logfile, it looks like W2K is creating a temporary
file for the file being synchronized, and it tries to
set some permissions for this file. This fails. Snip
from the logfile:

Is there any solution to this problem that doesn't involve
changing the file system or running samba-3 (we are not
quite ready for this yet)?


Hm, installing samba-2.2.7-3.7.3.i386.rpm from
the RedHat 7.3 updates on a RedHat 9 machine seems to fix this problem.
- I just wonder if this would break something else, before I put
this on our production server...
Mogens

--
Mogens Kjaer, Carlsberg A/S, Computer Department
Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark
Phone: +45 33 27 53 25, Fax: +45 33 27 47 08
Email: [EMAIL PROTECTED] Homepage: http://www.crc.dk
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Office 2003 Temporary Files

2004-01-15 Thread Thiago Lima


I'm using samba 3.0.1 as a file server for my windows XP
clients.

Office 2003 is creating and not deleting all .tmp files. Some
are deleted and some are not. 

There's any reason for that? Any tips? I really don't want those
.tmp files filling my disks.


regards
thiago lima.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Re: Good News, ou=computer works! :-)

2004-01-15 Thread Vegeta
Beast wrote:

> 
> I'm just storing machine accounts under
> ou=computer,ou=site,dc=domain,dc=com and it works.
> 
> Tested with W2K sp2 and W2K sp3, recreating from fresh ldif 2 times were
> never failed. Im sure it is 'stable' right now :-)
> 
> 'works' means it was able to add machine trust on-the-fly, or using manual
> creation with smbpasswd command.
> 
> The key is in not to use 'objectclass=sambaSamAccount' in ldap filter.
> 
> Tks to everybody who helps...
> 
> --beast
> 
I did not use 'objectclass=sambaSamAccount' and 3.0.2pre1 still doesn't work
for me using ou=computers
-- 
Fuera Chávez

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Winbind + Acl problem

2004-01-15 Thread PIGNOL, Christian
Just I another information ...

It seems that only the primary group of the windows account (as I can see
with the "smbstatus" command after the "net use" on the workstation) is used
to check write permissions on this share.

If I set a sufficient group as Primary Group for a windows user ...
Evrything is OK ... Access/write/update/delete and so on

Christian PIGNOL


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf
Of PIGNOL, Christian
Sent: jeudi 15 janvier 2004 11:32
To: [EMAIL PROTECTED]
Subject: [Samba] Winbind + Acl problem


Hello everybody
 
When I try to connect (net use) a samba share (Acl protected) from a windows
XP workstation I obtain the following message in the
"/var/log/samba/workstation_name.log" :
 
. . .
[2004/01/15 11:12:44, 0] smbd/sec_ctx.c:initialise_groups(244)
  Unable to initgroups. Error was Operation not permitted
. . .
 
The network connection to this share run sucessfully but when I try to
create or update a file located in this share, I receive an "Acess Denied"
message. The windows account I use is part of a global domain group included
in the ACL protecting the directory of this share. I don't have any problem
when I retry this operation with another Windows account also included in
the same global domain group !
 
Does anyone have an idea about this problem ?
 
Thanks a lot

Christian PIGNOL 
* (+33) 473 67 62 96 
*   (+33) 473 67 61 29 
*  [EMAIL PROTECTED] 

 


--
Notice:  This e-mail message, together with any attachments, contains
information of Merck & Co., Inc. (One Merck Drive, Whitehouse Station, New
Jersey, USA 08889), and/or its affiliates (which may be known outside the
United States as Merck Frosst, Merck Sharp & Dohme or MSD) that may be
confidential, proprietary copyrighted and/or legally privileged, and is
intended solely for the use of the individual or entity named on this
message.
If you are not the intended recipient, and have received this message in
error, please immediately return this by e-mail and then delete it.

--
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


--
Notice:  This e-mail message, together with any attachments, contains
information of Merck & Co., Inc. (One Merck Drive, Whitehouse Station, New
Jersey, USA 08889), and/or its affiliates (which may be known outside the
United States as Merck Frosst, Merck Sharp & Dohme or MSD) that may be
confidential, proprietary copyrighted and/or legally privileged, and is
intended solely for the use of the individual or entity named on this
message.
If you are not the intended recipient, and have received this message in
error, please immediately return this by e-mail and then delete it.

--


--
Notice:  This e-mail message, together with any attachments, contains
information of Merck & Co., Inc. (One Merck Drive, Whitehouse Station, New
Jersey, USA 08889), and/or its affiliates (which may be known outside the
United States as Merck Frosst, Merck Sharp & Dohme or MSD) that may be
confidential, proprietary copyrighted and/or legally privileged, and is
intended solely for the use of the individual or entity named on this message.
If you are not the intended recipient, and have received this message in
error, please immediately return this by e-mail and then delete it.
--
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] samba: problem in copying directories with many files

2004-01-15 Thread Mitch Crane
> On Thu, Jan 15, 2004 at 12:08:52AM -0500, Mitch Crane wrote:
> >
> > I see. I can also reproduce the symptoms, btw, with:
> > smbclient //some-server/some-share -U user%pass -c 'dir foo/*' | wc -l
> >
> > Though I see the missing entries less frequently (which is why I
> originally
> > thought smbclient was ok).
> 
> Does this happen using smbclient to smbd or does this only happen
> against a Windows server ?
> 
> Jeremy.

I don't know. I suspect it's just against a Windows server, and possibly
just 2000 and XP (maybe 2003). I've only seen it when accessing my Windows
XP machine, and all the reports I googled involved Windows based shares. I
run the one Linux web server which only uses the client to serve files which
reside on my XP box.



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] W2k client using "synchronize" on a samba configured RH Linux 9 file server ...

2004-01-15 Thread Mogens Kjaer
Krister Ripstrand wrote on December 16, 2003:
... does not work.

I use the W2k  functionality "synchronize" on my laptop to have up2date 
synchronized copies of  my files both at the laptop and the file server.
The file server is a P 200 MHz running RH Linux 9.
When on-line the synchronization of files works, except for my swedish 
letters "åäö". However when off-line working with my files, then 
reconnecting to the network and issuing a synchronization it fails. The 
updating of the files on the server fails.

Am I doing something wrong here or is the SMB protocol used by samba not 
up2date to support this W2k functionality?
My samba version is 3.0.0-2
Did you ever find a solution to the problem of synchronization not
working?
I'm having the same problem here, with w2k clients and
a server running redhat 9 and rh's samba-2.2.7a-8.9.0.
The file system is ext3.

From the logfile, it looks like W2K is creating a temporary
file for the file being synchronized, and it tries to
set some permissions for this file. This fails. Snip
from the logfile:
[2004/01/15 12:47:12, 10] smbd/posix_acls.c:print_canon_ace_list(146)
  print_canon_ace_list: file ace - before valid
  canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER 
perms ---
  canon_ace index 1. Type = allow SID = 
S-1-5-21-375135-3001849456-3904405318-2001 gid 500 (chem) 
SMB_ACL_GROUP_OBJ perms ---
  canon_ace index 2. Type = allow SID = 
S-1-5-21-375135-3001849456-3904405318-3002 uid 1001 (pdc1) 
SMB_ACL_USER_OBJ perms rw-
[2004/01/15 12:47:12, 10] smbd/posix_acls.c:print_canon_ace_list(146)
  print_canon_ace_list: dir ace - before valid
[2004/01/15 12:47:12, 3] smbd/dosmode.c:unix_mode(111)
  unix_mode(My Documents/8019) returning 0640
[2004/01/15 12:47:12, 10] smbd/posix_acls.c:print_canon_ace_list(146)
  print_canon_ace_list: file ace - return
  canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER 
perms ---
  canon_ace index 1. Type = allow SID = 
S-1-5-21-375135-3001849456-3904405318-2001 gid 500 (chem) 
SMB_ACL_GROUP_OBJ perms ---
  canon_ace index 2. Type = allow SID = 
S-1-5-21-375135-3001849456-3904405318-3002 uid 1001 (pdc1) 
SMB_ACL_USER_OBJ perms rw-
[2004/01/15 12:47:12, 10] smbd/posix_acls.c:print_canon_ace_list(146)
  print_canon_ace_list: dir ace - return
  canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER 
perms ---
  canon_ace index 1. Type = allow SID = 
S-1-5-21-375135-3001849456-3904405318-2001 gid 500 (chem) 
SMB_ACL_GROUP_OBJ perms r--
  canon_ace index 2. Type = allow SID = 
S-1-5-21-375135-3001849456-3904405318-3002 uid 1001 (pdc1) 
SMB_ACL_USER_OBJ perms rw-
[2004/01/15 12:47:12, 10] smbd/posix_acls.c:set_canon_ace_list(1706)
  canon_ace index 0. Type = allow SID = S-1-1-0 other SMB_ACL_OTHER 
perms ---
[2004/01/15 12:47:12, 10] smbd/posix_acls.c:set_canon_ace_list(1706)
  canon_ace index 1. Type = allow SID = 
S-1-5-21-375135-3001849456-3904405318-2001 gid 500 (chem) 
SMB_ACL_GROUP_OBJ perms ---
[2004/01/15 12:47:12, 10] smbd/posix_acls.c:set_canon_ace_list(1706)
  canon_ace index 2. Type = allow SID = 
S-1-5-21-375135-3001849456-3904405318-3002 uid 1001 (pdc1) 
SMB_ACL_USER_OBJ perms rw-
[2004/01/15 12:47:12, 2] smbd/posix_acls.c:set_canon_ace_list(1776)
  set_canon_ace_list: conn->vfs_ops.sys_acl_set_file failed for file My 
Documents/8019 (Operation not supported).
[2004/01/15 12:47:12, 3] smbd/posix_acls.c:set_nt_acl(2285)
  set_nt_acl: failed to set file acl on file My Documents/8019 
(Operation not supported).

Is there any solution to this problem that doesn't involve
changing the file system or running samba-3 (we are not
quite ready for this yet)?
Mogens

--
Mogens Kjaer, Carlsberg A/S, Computer Department
Gamle Carlsberg Vej 10, DK-2500 Valby, Denmark
Phone: +45 33 27 53 25, Fax: +45 33 27 47 08
Email: [EMAIL PROTECTED] Homepage: http://www.crc.dk
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba in 2003 ADS

2004-01-15 Thread Nic le Roux
Good Morning/Afternoon/Evening.

I'm a bit dejected at the moment as all my googleing / howto reading has 
brought me no joy,
Apparently there are people out there who have successfully set up Samba 
as member server in M$ 2003 ADS.

However I have miserably failed / given up.

What I want to do is have my people print to a PDF printer on Linux using 
cups after which they will be emailed the doc using a package called 
Alambic.
It works pretty well however I need a username to send the email to as the 
username is mapped to an email address in a config file.

Is there possibly another way of having my users connect to the Samba Box 
with their domain user name ?
The requirement is a single sign on to the domain where they will not be 
prompted to authenticate again to the Samba box.

Please any help will be appreciated,

Thanks
Nic

Ps. incase anyone is interested maybe I can still save the ADS project

I'm using Samba 3.0.2pre1
Kerberos 1.3.1

Here is Samba Config

[global]
workgroup = domain
realm = domain.co.za
security = ads
password server = 172.28.20.2
winbind use default domain = yes
client use spnego = yes
encrypt passwords = yes
server string = %L Print Server (%v)
winbind separator = +
idmap uid = 1-2
idmap gid = 1-2
winbind enum users = yes
winbind enum groups = yes
template homedir = /home/winnt/%D/%U
template shell = /bin/bash
printcap name = cups
load printers = yes
printing = cups
log file = /var/log/samba/log.%m
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
wins server = 172.28.20.2
dns proxy = yes

krb5.conf

[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
ticket_lifetime = 24000
default_realm = DOMAIN.CO.ZA
default_tgs_enctypes = des-cbc-md5 des-cbc-crc
default_tkt_enctypes = des-cbc-md5 des-cbc-crc
permitted_enctypes = des-cbc-md5 des-cbc-crc
kdc_req_checksum_type = 2
checksum_type = 2
ccache_type = 1
forwardable = true
proxiable = true
dns_lookup_realm = false
dns_lookup_kdc = false

[realms]
DOMAIN.CO.ZA = {
  kdc = server.domain.co.za
  admin_server = server.domain.co.za
  default_domain = DOMAIN.CO.ZA
 }

[domain_realm]
 .server.domain.co.za = DOMAIN.CO.ZA
 server.domain.co.za = DOMAIN.CO.ZA

Following received in Winbind log

[2004/01/15 14:02:00, 1] libads/ads_ldap.c:ads_name_to_sid(64)
  name_to_sid: root not found
[2004/01/15 14:02:00, 1] nsswitch/winbindd_group.c:winbindd_getgroups(960)
  user 'root' does not exist

Following in Cleint log
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] copying from Win to Linux

2004-01-15 Thread Tarjei Huse
Hi, I'm about to migrate a lot of files from a windows server to a new, 
shiny samba-server.

I just got a small problem : What is the best way to do this?

I'e tried rsync, but it croaks on some files with names like "somethign 
:some.eml" the same does cp.

What I'm wondering about, is has anyone else had these problems, and if 
so, how did you solve them? Do you have a script for cleaning out 
characters like this one?

Tarjei
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] logging messenger service in windows

2004-01-15 Thread kent E.
hi to all im not sure if i have the appropriate subject to put...

but anyways... we have windows workstations(mostly) and a samba3.0 on a
rh9... is there a way to log any communications using the windows 'net
send'

tia

kent

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smbmount problem

2004-01-15 Thread Gonzalo Aguilera
Hi,

I don't know why smbmount doesn't work. My samba version is 3.0.0.  Remote server 
(192.168.1.1) is running samba 3.0.0 too. Both are linux machines.

1) If I try to mount a existing share i get this

/usr/local/samba/bin/smbmount //192.168.1.1/PAVFN /monta
added interface ip=192.168.1.200 bcast=192.168.1.255 nmask=255.255.255.0
Password:
smbfs/init_mount: execv of smbmnt failed. Error was No such file or directory.smbmnt 
failed: 1

2) If I try to mount an unexisting share i get this:

/usr/local/samba/bin/smbmount //192.168.1.1/zzz /monta
added interface ip=192.168.1.200 bcast=192.168.1.255 nmask=255.255.255.0
Password:
12316: tree connect failed: ERRDOS - ERRnosuchshare (You specified an invalid share 
name)
SMB connection failed

3) If I try with a wrong password i get this:

 /usr/local/samba/bin/smbmount //192.168.1.1/PAVFN /monta
added interface ip=192.168.1.200 bcast=192.168.1.255 nmask=255.255.255.0
Password:
12204: session setup failed: ERRDOS - ERRnoaccess (Access denied.)
SMB connection failed

It looks like that samba answer consecuently, but doesn't mount existing shares.

Thanks for your help in advance.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] smbldap-tools 8.2 and sambaPrimaryGroupSID different that older version

2004-01-15 Thread stephane . purnelle
Hi!

In 0.7 version, the sambaprimaryGroupSID was composed with SID- uid * 2 +
1001, for example : 221*2+1001 = 1443.
Now, the smbldap-tools 8.2 (the latest version) create the
sambaprimaryGroupSID with group-SID of group.

Its' because I have a groupmapping of this group (Users -> Domain Users) ?
It's normal ?


Thank you for your help.

---
Stéphane PURNELLE [EMAIL PROTECTED]
Service Informatique   Corman S.A.   Tel : 00 32 087/342467

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Winbind + Acl problem

2004-01-15 Thread PIGNOL, Christian
Hello everybody
 
When I try to connect (net use) a samba share (Acl protected) from a windows
XP workstation I obtain the following message in the
"/var/log/samba/workstation_name.log" :
 
. . .
[2004/01/15 11:12:44, 0] smbd/sec_ctx.c:initialise_groups(244)
  Unable to initgroups. Error was Operation not permitted
. . .
 
The network connection to this share run sucessfully but when I try to
create or update a file located in this share, I receive an "Acess Denied"
message. The windows account I use is part of a global domain group included
in the ACL protecting the directory of this share. I don't have any problem
when I retry this operation with another Windows account also included in
the same global domain group !
 
Does anyone have an idea about this problem ?
 
Thanks a lot

Christian PIGNOL 
* (+33) 473 67 62 96 
*   (+33) 473 67 61 29 
*  [EMAIL PROTECTED] 

 

--
Notice:  This e-mail message, together with any attachments, contains
information of Merck & Co., Inc. (One Merck Drive, Whitehouse Station, New
Jersey, USA 08889), and/or its affiliates (which may be known outside the
United States as Merck Frosst, Merck Sharp & Dohme or MSD) that may be
confidential, proprietary copyrighted and/or legally privileged, and is
intended solely for the use of the individual or entity named on this message.
If you are not the intended recipient, and have received this message in
error, please immediately return this by e-mail and then delete it.
--
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Strange smbclient -L behaviour across WAN link

2004-01-15 Thread mitc company
Hello folks,

I hope somebody here can help shed light on this peculiar behaviour of 
smbclient.  When we execute:

smbclient -L 

and the host is across a VPN link traversing a WAN (DSL) link we get the 
following:

1.  is Windows 98SE: OK, smbclient completes
2.  is Windows XP or Samba 3.x: smbclient is able to retrieve the 
share list but hangs trying to get the Server browse list and the Workgroup 
list.
3.  is Samba 3.x that also terminates the VPN link (OpenVPN): OK, 
smbclient completes

When I do a packet capture using ethereal.  I see that the share list is 
retrieved by connecting over port 445.  The Server browse list and the 
Workgroup list are, however, retrieved over NETBIOS-SSN (139).  Further that 
the machine running smbclient -L is making multiple tries to connect to the 
remote machine's port 139 without getting an ACK in case #2 above.

Additional info:  all machines are in a workgroup that spans the WAN link.  
There is one WINS server on the local side of the VPN, however all machines 
including the remote ones are set to this single WINS server.

There are also other Windows XP machines on both side of the VPN link that 
does not seem to have any problems browsing shares and machines and even 
transfering files more than 10MB in size.

I would really appreciate any input on this.

_
Protect your PC - get McAfee.com VirusScan Online 
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] samba 2.2.8a PDC LDAP CTRL+ALT+DEL password change, not chaning Unix password

2004-01-15 Thread Jérôme Tournier
Le Wed, Jan 14, 2004 at 10:01:30AM -0500, Sundaram Ramasamy a ecrit:
> I am running samba 2.2.8a with ldap PDC. From windows machine If I change
> password by process CTL+ALT+DEL key its changing only windows password.
> from command line  smbldap-passwd.pl  script changing the both UNIX and
> samba password.
> any idea why its not changing UNIX password?

you can use the 'ldap passwd sync = Yes' in smb.conf
-- 
Jérôme
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Good News, ou=computer works! :-)

2004-01-15 Thread Beast
On Thu, 15 Jan 2004 16:43:10 +0700
Beast <[EMAIL PROTECTED]> wrote:

> 
> I'm just storing machine accounts under ou=computer,ou=site,dc=domain,dc=com and it 
> works.
> 
> Tested with W2K sp2 and W2K sp3, recreating from fresh ldif 2 times were never 
> failed. Im sure it is 'stable' right now :-)
> 
> 'works' means it was able to add machine trust on-the-fly, or using manual creation 
> with smbpasswd command.
> 
> The key is in not to use 'objectclass=sambaSamAccount' in ldap filter.
> 
> Tks to everybody who helps...

Forgot to mention, in case somebody wonder how to make samba work with ldap as pdc, 
mail me privately, I'll share ldif, smb.conf plus script to add machine and changing 
password. It should work out of the box :-)


--beast

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Samba Tuning

2004-01-15 Thread Simon . Harris
-BEGIN PGP SIGNED MESSAGE-


The contents of this email are intended exclusively for the
addressee. If you are not the addressee you must not read
use or disclose the email contents ; you should notify us
immediately [ by clicking "Reply" ] and delete this email.

Nationwide monitors e-mails to ensure its systems operate
effectively and to minimise the risk of viruses.  Whilst it has
taken reasonable steps to scan this email, it does not
accept liability for any virus that may be contained in it.


Following problems with samba performance on a Solaris 9 box I have traced
this to the number of files being accessed by an application... Seems when a
process is kicked off on the client it goes to a directory which has many
thousands of small files and does some processing on them, while this is
running samba performance drop dramatically.

It seems performance is fine when dealing with a small number of large files
but when dealing with many thousands of small files (4k or so) it's a
different story.

Is there any tuning I can do to improve the situation?

Samba Server: SunFire V880 running Solaris 9 (112233-08)
Samba Client: Compaq ProLient ML570 running W2K SP3

# Samba config file created using SWAT
# from pq04464.admin.nbsnet.co.uk (10.200.41.127)
# Date: 2004/01/09 12:33:30

# Global parameters
[global]
netbios name = UXHSMSVC01
server string =
encrypt passwords = Yes
username map = /etc/sfw/smbusers
log level = 1
log file = /var/samba/%m.log
show add printer wizard = No
socket address = 10.192.34.61
oplocks = No

[mfs_cell_1]
comment = File Scanning - Cell 1
path = /mfs/Scan_Cell_1/export
guest account =
valid users = mfssvc
read only = No

[nlife]
comment = Life
path = /nlife/export
guest account =
valid users = nlifesvc
read only = No

Have set oplocks = No as many processes my access the same files at the same
time and thaught we maybe spending a lot of time oplock processing. Made no
difference...

Logs are not showing errors (at log_level 3) but have a lot of activity...

Cheers,

Simon

Simon Harris
Nationwide Building Society
Technology Support
Enterprise Servers (SAN)
* +44(0)1793 654492
*  +44(0)7764 838021
*  [EMAIL PROTECTED]




-BEGIN PGP SIGNATURE-
Version: PGPsdk version 1.1.1 (C) 1997 Pretty Good Privacy, Inc.

iQEVAwUBQAZf424wJNdvwuyFAQHCfwgApEzeJdrs+XbT+ckdSkSwf5tSCVfwqM+e
2Q1+Kv5/M16ofwcU5+LTy2idYSg0ewDbjRkU/TRHmShx5j8TuagUNaCYaS94OrGo
XdafCPuHUPl6gRdOGZBTd5qYkmvf3i+1JGr8rqIRsJO5+nHm9txZbX3b3DE3YAzj
oshzIlwmsDk0moyqhS8W20mRt9jAnfvptI+ao7wakS2phbZLUf8BNgctZGCkC8Yw
Az8MwvX4JLVRwUa6gT1CFetU4WhoRjfYIY4CcnBaEpecbMWpQrI5+Eg+f1tK19Ll
dxX32+EpzAXJjrmEk2x4GSptMTJ6zE0TuPIjDI+EC3tOdFbchmtFOg==
=xej9
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: SAMBA + LDAP: can login to domain

2004-01-15 Thread Xavier Poinsard
Andrei Mikhailovsky wrote:
Hello,

I've tried to integrate samba 3.0.1 and LDAP 2.1.23 using the guide 
provided from http://www.hilinski.net/samba/. While the ldap+samba user 
authentication seems to work fine, I can't join the Domain from a 
Windows 2000 Client. The Domain is found and Name/Password Credentials 
are asked. I enter root and password and I get an error:

Login Failure: Unknow username or bad password
=> You should try to solve this problem first :
 - check presence of root account in LDAP : smbldap-usershow.pl root
 - re-enter root password : smbldap-passwd.pl
Can you tell me what am I doing wrong?

Thanks for any help )



--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Good News, ou=computer works! :-)

2004-01-15 Thread Beast

I'm just storing machine accounts under ou=computer,ou=site,dc=domain,dc=com and it 
works.

Tested with W2K sp2 and W2K sp3, recreating from fresh ldif 2 times were never failed. 
Im sure it is 'stable' right now :-)

'works' means it was able to add machine trust on-the-fly, or using manual creation 
with smbpasswd command.

The key is in not to use 'objectclass=sambaSamAccount' in ldap filter.

Tks to everybody who helps...

--beast

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] QUOTA Testing

2004-01-15 Thread Stefan (metze) Metzmacher
Hi,

is there anyone using samba3 on linux with quotas?

can please everyone send me a note with (maybe off list):

kernel version
samba version
filesystem
quota format
that would help me a lot to make quotas on linux more stable!

NOTE:
in 3.0.2pre1 there's a known XFS bug, that means xfs quotas are not 
anabled. But this is fixed in CVS and will be in the 3.0.2rc1

--
metze
Stefan Metzmacher  www.samba.org
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] QUOTA Testing

2004-01-15 Thread Stefan (metze) Metzmacher
Hi,

is there anyone using samba3 on linux with quotas?

can please everyone send me a note with (maybe off list):

kernel version
samba version
filesystem
quota format
that would help me a lot to make quotas on linux more stable!

NOTE:
in 3.0.2pre1 there's a known XFS bug, that means xfs quotas are not 
anabled. But this is fixed in CVS and will be in the 3.0.2rc1

--
metze
Stefan Metzmacher  www.samba.org
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] My story installing Samba-LDAP PDC (it has a happy ending)

2004-01-15 Thread Beast
On Wed, 14 Jan 2004 19:40:02 -0700
Craig White <[EMAIL PROTECTED]> wrote:

> The truth of the matter regarding machine accounts and LDAP (probably
> for the other backends as well) is that even with 2.x.x samba, machine
> accounts were located in the same data tree with the users. You
> certainly can tell smbldap-tools and samba and nsswitch.conf to put
> computer accounts in ou=Computers,dc=domain,dc=org but when it comes

If the filter is correct (and has correct acl), no matter where your record belongs, 
it will be founds, am I correct?

I know its not that simple in this samba case, but at least thats the theory, you can 
store the entries anywhere, ldap server will take care how to find it for you... 

> time that the OS needs to verify their existence/passwords/trust - they
> aren't gonna be found.

Who's OS? :-) aren't they rely on pam? If pam can found it, why "OS" can not?


--beast

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba Digest, Vol 13, Issue 24

2004-01-15 Thread petera
I will be out of the office starting from Dec 02 till Jan. 12th, 2004. If it is urgent 
please send e-mail to [EMAIL PROTECTED] and someone will assist you. Thanks.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] samba Digest, Vol 13, Issue 24

2004-01-15 Thread peter
I will be out of the office starting from Dec 02 till Jan. 12th, 2004. If it is urgent 
please send e-mail to [EMAIL PROTECTED] and someone will assist you. Thanks.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] permission bits clobbered

2004-01-15 Thread juanjo.carel
Of course '>' is very different of '>>'. '>' creates a new file so THE 
NEW secretfile is created with the 644 mask.
'>>' appends in the file. If you do this twice w/ '>>' you will see 
this:
foobar
foobar
But if you do the same twice but with '>':
foobar
Only once 'cause the file is created twice.
Cheers

> A file is chmod 600.  It gets opened on Windows, and it gets 
> changed to 644.
> This happens if the user does:
> N:\> echo foobar > secretfile
> But it does stay at chmod 600 if he does (append instead of truncate):
> N:\> echo foobar >> secretfile
> The "create mask" parameter is set to 644.  I do not think this 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Problem printing to share on member of samba 3.0.1 PDC

2004-01-15 Thread Andrew Howell
Hi,

Since upgrading from samba 2.2.3a to 3.0.1 clients have been having a
problem printing to printers hanging of win xp boxes.

They are getting an error like this.

"The system cannot find message test for the message number 0x%1 in the
message file for %2."

If you try browsing to the PC the printer is on you get a similiar
error.

Strangely it works sometimes though.

Any ideas?

Andrew

-- 
Andrew Howell
Director
Informed Technology
E-mail: [EMAIL PROTECTED]
Ph: 08 9380 4244  Fax: 08 9380 4354

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Question regarding user or group quantity limits

2004-01-15 Thread PIGNOL, Christian
Hello Brian,

For your information, I've found the solution ... For Redhat 9.0 I suppose !

In the "smb.conf" the "winbind uid" and "winbind gid" parameters indicates
respectvely the uid and gid range  dynamically allocated during remote
identifications ... By defaults winbind uid=1-2 and winbind
gid=1-2 ... This values explains than you don't retrieve all your
windows users and groups ! After uid (or gid) reach the upper limit of the
range (2) the getent command is stopped.

In another way, the "/etc/login.defs file" (redhat 9.0) contain some
parameters which are also importants in this situation ... like maximum uid
for the "useradd" command an maximum gid for the "groupadd" command. This
file is probably different on RH Enterprise 3.0 !

After increasing the "login.defs" parameters and the winbind uid and gid in
the "smb.conf", I'm now able (after a very very long time of course !) to
see all my windows domain users and groups with the "getent passwd" and
"getent group" commands.

Regards


Christian PIGNOL
* (+33) 473 67 62 96
*   (+33) 473 67 61 29
*  [EMAIL PROTECTED]


-Original Message-
From: Brian Otto [mailto:[EMAIL PROTECTED] 
Sent: mardi 13 janvier 2004 17:45
To: PIGNOL, Christian
Subject: RE: [Samba] Question regarding user or group quantity limits


The problem disappeared under redhat 3.0 enterprise

:(

So I never figured out how to fix it.  Sorry,

-Brian


On Tue, 2004-01-13 at 11:11, PIGNOL, Christian wrote:
> Well,
> 
> It seems that I have exactly the same problem with my Samba 2.2.7a-8.9.0
> (Redhat 9.0) !
> 
> I have ... around ... 6 users and 14 groups !
> 
> The "getent passwd" command don't show me all the existing users but
around
> 1 and the "getent group" command take a very long time but seems to be
> active ! When I redirect in a groups.txt file the result of the "getent
> group", the size of this file regularely grow ... But ... Very very slowly
!
> 
> Have you receive a respons to your question ? I'm very interrested.
> 
> Thanks a lot for your help.
> 
> Best regards
> 
> Christian PIGNOL
> 
> 
> -Original Message-
> From: Brian C Otto [mailto:[EMAIL PROTECTED] 
> Sent: mardi 2 septembre 2003 17:12
> To: [EMAIL PROTECTED]
> Subject: [Samba] Question regarding user or group quantity limits
> 
> 
> 
> Anyone know what the max # of domain users or groups samba will
> effectively support?
> 
> I'm running samba v3.0.0RC2, and authenticating it against an ADS
> server, and the domain has a massive number of users and groups (14000+
> and 4000+), when I run a 'getent group'   winbindd seems to die on me.
> 'getent passwd' doesn't seem to show all users, either.
> 
> Any ideas?  OS is SuSE enterprise 8.0.
> 
> -Brian Otto
> 
> --
> The opinions expressed herein are my own and do not necessarily reflect
> those of my employers
> 
> 




--
Notice:  This e-mail message, together with any attachments, contains
information of Merck & Co., Inc. (One Merck Drive, Whitehouse Station, New
Jersey, USA 08889), and/or its affiliates (which may be known outside the
United States as Merck Frosst, Merck Sharp & Dohme or MSD) that may be
confidential, proprietary copyrighted and/or legally privileged, and is
intended solely for the use of the individual or entity named on this message.
If you are not the intended recipient, and have received this message in
error, please immediately return this by e-mail and then delete it.
--
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] 2.2.8a as member server of Win2000?

2004-01-15 Thread Thomas Bork
Hi @all,

trying to join an Windows-2003-Domain with Samba 2.2.8a as member server.
Account on Win2003 was created allowing pre-2000 connections.

smbpasswd -D 5 -U Administrator%password -r papas-server -j computerservice
 
Initialising global parameters
params.c:pm_process() - Processing configuration file "/etc/smb.conf"
Processing section "[global]"
doing parameter workgroup = computerservice
doing parameter serverstring = 
doing parameter interfaces = 127.0.0.1/8 192.168.0.2/255.255.255.0
doing parameter bind interfaces only = yes
doing parameter security = domain
doing parameter encrypt passwords = yes
doing parameter update encrypted = yes
doing parameter min password length = 1
doing parameter password server = PAPAS-SERVER
doing parameter pam password change = yes
doing parameter passwd program = /usr/bin/passwd %u
doing parameter passwd chat = *Enter*new*UNIX*password:* %n\n 
*Retype*new*UNIX*password:* %n\n *passwd:*password*updated*successfully*
doing parameter username map = /etc/user.map
doing parameter username level = 2
doing parameter unix password sync = yes
doing parameter debug level = 0
doing parameter max log size = 1000
doing parameter nameresolveorder = wins lmhosts host bcast
doing parameter time server = yes
doing parameter deadtime = 60
doing parameter load printers = no
doing parameter mangling method = hash2
doing parameter character set = iso8859-1
load_unicode_map: loading unicode map for codepage ISO8859-1.
doing parameter client code page = 850
load_unicode_map: loading unicode map for codepage ISO8859-1.
load_client_codepage: loading codepage 850.
load_unicode_map: loading unicode map for codepage 850.
doing parameter domain logons = no
doing parameter add user script = 
/var/install/bin/samba-add-domain-auto-user %u
doing parameter os level = 0
doing parameter preferred master = no
doing parameter local master = no
doing parameter domain master = no
doing parameter wins support = no
doing parameter wins server = 192.168.0.1
wins_srv_load_list(): Building WINS server list:
192.168.0.1,
1 WINS server listed.
doing parameter wins proxy = yes
doing parameter kernel oplocks = no
doing parameter message command = /bin/mail -s 'message from %f on %m' 
root < %s; rm %s
doing parameter dfree command = /usr/local/bin/samba-dfree
doing parameter admin users = root
doing parameter printer admin = root
doing parameter hosts allow = 127.0.0. 192.168.0.0/255.255.255.0
doing parameter printing = lprng
doing parameter print command = chmod 666 %s;   
name="`echo '%J' | sed "s/^.*- //"`" ;   /usr/bin/lpr 
-P%p -J"$name" %s;   rm %s
doing parameter lpq command = /usr/bin/lpq -P%p -L
doing parameter lprm command = /usr/bin/lprm -P%p %j
doing parameter lppause command = /usr/sbin/lpc hold %p %j
doing parameter lpresume command = /usr/sbin/lpc release %p %j
doing parameter queuepause command = /usr/sbin/lpc stop %p
doing parameter queueresume command = /usr/sbin/lpc start %p
doing parameter dos filetimes = yes
doing parameter dos filetime resolution = yes
pm_process() returned Yes
added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
added interface ip=192.168.0.2 bcast=192.168.0.255 
nmask=255.255.255.0
cli_establish_connection: EIS-ONE<00> connecting to PAPAS-SERVER<20> 
(0.0.0.0) - administrator [COMPUTERSERVICE]
resolve_wins: Attempting wins lookup for name papas-server<0x20>
resolve_wins: WINS server == <192.168.0.1>
bind succeeded on port 0
Sending a packet of len 50 to (192.168.0.1) on port 137
Received a packet of len 62 from (192.168.0.1) port 137
nmb packet from 192.168.0.1(137) header: id=12883 opcode=Query(0) 
response=Yes
header: flags: bcast=No rec_avail=Yes rec_des=Yes trunc=No 
auth=Yes
header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0
answers: nmb_name=PAPAS-SERVER<20> rr_type=32 rr_class=1 
ttl=0
answers   0 char `.   hex 6000C0A80001
Got a positive name query response from 192.168.0.1 ( 192.168.0.1 )
Connecting to 192.168.0.1 at port 445
socket option SO_KEEPALIVE = 0
socket option SO_REUSEADDR = 0
socket option SO_BROADCAST = 0
socket option TCP_NODELAY = 1
socket option IPTOS_LOWDELAY = 0
socket option IPTOS_THROUGHPUT = 0
socket option SO_SNDBUF = 16384
socket option SO_RCVBUF = 87380
socket option SO_SNDLOWAT = 1
socket option SO_RCVLOWAT = 1
socket option SO_SNDTIMEO = 0
socket option SO_RCVTIMEO = 0
size=135
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=1
smb_tid=0
smb_pid=2122
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[0]=7 (0x7)
smb_vwv[1]=12815 (0x320F)
smb_vwv[2]=256 (0x100)
smb_vwv[3]=1024 (0x400)
smb_vwv[4]=65 (0x41)
smb_vwv[5]=0 (0x0)
smb_vwv[6]=256 (0x100)
smb_vwv[7]=0 (0x0)
smb_vwv[8]=0 (0x0)
smb_vwv[9]=64768 (0xFD00)
smb_vwv[10]=499 (0x1F3)
smb_vwv[11]=40960 (0xA000)
smb_vwv[12]=2690 (0xA82)
smb_vwv[13]=40221 (0x9D1D)
smb_vwv[14]=50138 (0xC3DA)
smb_vwv[15]=50177 (0xC401)
smb_vwv[16]=2303 (0x8FF)
smb_bcc=66
size=135
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0

Re: [Samba] samba: problem in copying directories with many files

2004-01-15 Thread Jeremy Allison
On Thu, Jan 15, 2004 at 12:08:52AM -0500, Mitch Crane wrote:
> 
> I see. I can also reproduce the symptoms, btw, with:
> smbclient //some-server/some-share -U user%pass -c 'dir foo/*' | wc -l
> 
> Though I see the missing entries less frequently (which is why I originally
> thought smbclient was ok).

Does this happen using smbclient to smbd or does this only happen
against a Windows server ?

Jeremy.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba