RE: [Samba] winbind and Solaris 9 with AD
Hi, I have attached a pam.conf file for Solaris 9. I had to re-create the file. It has been tested for telnet,rlogin and ftp using winbind for 3.0.1 as a W2003 Server member. /Patrik On Mon, 2004-01-19 at 15:45, Ganguly, Sapan wrote: > Patrik, > > Hello! I have been waiting for you to get back, you may be able to help me. > I am having trouble making winbind work with Solaris 9. I was wondering if > you could post a copy of your pam.conf again so that I can double check that > I have a correct copy of it? > > The problem I am having is that when I try to log in with an NT username and > password the login process hangs after I put the password in. I don't know > why this happens because getent works. I decided to log what is going on in > PAM, here is what I got - > > Jan 14 13:29:55 sun001 pam_winbind[15352]: [ID 571141 auth.debug] > libpam_winbind:pam_sm_close_sessio > n handler > Jan 14 13:29:59 sun001 login: [ID 634615 auth.debug] > pam_authtok_get:pam_sm_authenticate: flags = 0 Jan 14 13:30:05 sun001 login: > [ID 378613 auth.debug] pam_dhkeys: user ganguly not found Jan 14 13:30:05 > sun001 login: [ID 896952 auth.debug] pam_unix_auth: entering > pam_sm_authenticate() Jan 14 13:30:05 sun001 login: [ID 219349 auth.debug] > pam_unix_auth: user ganguly not found Jan 14 13:30:05 sun001 > pam_winbind[15369]: [ID 572310 auth.info] Verify user `ganguly' Jan 14 > 13:30:05 sun001 pam_winbind[15369]: [ID 614614 auth.notice] user 'ganguly' > granted acces Jan 14 13:30:05 sun001 login[15369]: [ID 509786 auth.debug] > roles pam_sm_authenticate, service = tel net user = ganguly ruser = not set > rhost = 192.168.224.90 > > Thanks for any help you can offer! > > Sapan > > -Original Message- > From: Patrik Gustavsson [mailto:[EMAIL PROTECTED] > Sent: 19 January 2004 14:39 > To: Unix Service (ANTS) > Cc: '[EMAIL PROTECTED]' > Subject: Re: [Samba] winbind and Solaris 9 with AD > > > Hi, > > I have the following libraries and links in /usr/lib and > it works: > > libnss_winbind.so > libnss_winbind.so.1 -> libnss_winbind.so > nss_winbind.so.1 -> libnss_winbind.so > > /Patrik > On Mon, 2004-01-19 at 13:13, Unix Service (ANTS) wrote: > > Hi > > > > have been trying to get winbind working on Solaris 9 but to no effect. > > > > version info: > > > > samba: 3.0.0 > > openldap: 2.1.23 > > kerberos: MIT 1.3.1 > > > > Have followed the instructions in every howto, usenet posting I could > > find: > > > > nscd not running > > created relevant links in /lib and /lib/security/sparcv9 applied patch > > for nsswitch as recommended > > > > kinit -e works > > net ads join works > > wbinfo -t works > > wbinfo -u gives list of all users in all trusted domains getent > > doesn't work samba authentication doesn't work - get the following in > > winbindd.log: > > > > [2004/01/19 10:59:27, 5] nsswitch/winbindd_pam.c:(379) > > NTLM CRAP authentication for user [DEV]\[test7] returned > > NT_STATUS_OK (PAM: 0) [2004/01/19 10:59:27, 3] > > nsswitch/winbindd_acct.c:(875) > > [ 3551]: create_user: user=>(test7), group=>() > > [2004/01/19 10:59:27, 5] nsswitch/winbindd_acct.c:(521) > > wb_getgrnam: Did not find group (nobody) > > > > my smb.conf is: > > > > workgroup = DEV > > #workgroup = DEV.ANTS.AD.ANPLC.CO.UK > > realm = DEV.ANTS.AD.ANPLC.CO.UK > > security = ADS > > password server = lonsd010.dev.ants.ad.anplc.co.uk > > dns proxy = no > > idmap gid = 7-8 > > idmap uid = 80-90 > > winbind cache time = 15 > > winbind use default domain = yes > > winbind enum users = yes > > winbind enum groups = yes > > encrypt passwords = yes > > log level = 9 > > > > [temp] > > path = /tmp > > read list = @users > > > > [docs] > > path = /var/tmp/samba-3.0.0 > > read list = @users > > > > I would appreciate any pointers as to further debugging I could do or > > possible problems as being able to use winbind to deal with samba > > authentication would make life a great deal easier. > > > > > > > > > > ** > > * > > This communication (including any attachments) contains confidential > information. If you are not the intended recipient and you have received > this communication in error, you should destroy it without copying, > disclosing or otherwise using its contents. Please notify the sender > immediately of the error. > > > > Internet communications are not necessarily secure and may be > > intercepted or changed after they are sent. Abbey National Treasury > > Services plc does not accept liability for any loss you may suffer as > > a result of interception or any liability for such changes. If you > > wish to confirm the origin or content of this communication, please > > contact the sender by using an alternative means of communication. > > > > This communication does not create or modify any contract and, unless > > otherwise stated, is not intended to be contractually binding. > > > > Abbey Natio
[Samba] re: cannot map ntgroup to ldap group
ok, cn=users group has an ldap entry, as you can see below...
# Entry 1: cn=users,ou=Group,dc=INTRANET
dn: cn=users,ou=Group,dc=INTRANET
cn: users
userPassword: {crypt}x
gidNumber: 539
objectClass: top
objectClass: posixGroup
objectClass: phpgwAccount
phpgwAccountStatus: A
phpgwAccountType: g
phpgwAccountExpires: -1
I can type net groupmap ntgroup="Domain Power Users" unixgroup=bin and it will work,
but it will not do it to unixgroup=users, but why?
I used phpldapadmin to do it manually, but it ends up only doing this
net groupmap list
Domain Power Users (S-1-5-21-4070452498-3149834983-2923667569-1201) -> 539
still not mapping it to the group, like the one down below does
Domain Admins (S-1-5-21-4070452498-3149834983-2923667569-512) -> ntadmin
here are the exported entries of both groups, so what is the problem?
# Entry 1: cn=ntadmin,ou=Group,dc=INTRANET
dn: cn=ntadmin,ou=Group,dc=INTRANET
objectClass: posixGroup
objectClass: sambaGroupMapping
cn: ntadmin
userPassword:
gidNumber: 504
sambaSID: S-1-5-21-4070452498-3149834983-2923667569-512
sambaGroupType: 2
displayName: Domain Admins
description: Local Unix group
# Entry 1: cn=users,ou=Group,dc=INTRANET
dn: cn=users,ou=Group,dc=INTRANET
cn: users
userPassword:
gidNumber: 539
sambaGroupType: 2
sambaSID: S-1-5-21-4070452498-3149834983-2923667569-1201
displayName: Domain Power Users
objectClass: posixGroup
objectClass: sambaGroupMapping
description: Local Unix Group
i seem to be so close to getting ldap working with samba:) users and all work, I just
need to get these mappings and i can switch for good over to ldap from smbpasswd.
___
No banners. No pop-ups. No kidding.
Introducing My Way - http://www.myway.com
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Client Software for Windows
Markus Feldman:
You may want to check your sender address because e-mail sent comes
back:
The following addresses had delivery problems:
<[EMAIL PROTECTED]>
Permanent Failure: 550_5.1.1_{mx014-rz3}_<[EMAIL PROTECTED]>..._User_is_unknown
Delivery last attempted at Tue, 27 Jan 2004 05:30:16 -
Reporting-MTA: dns; comcast.net
Arrival-Date: 27 Jan 2004 5:30:15 +
Final-Recipient: rfc822; <[EMAIL PROTECTED]>
Action: failed
Status: 5.0.0 550_5.1.1_{mx014-rz3}_<[EMAIL PROTECTED]>..._User_is_unknown
Diagnostic-Code: smtp; Permanent Failure: Other undefined Status
Last-Attempt-Date: Tue, 27 Jan 2004 05:30:16 -
Thanks
Tom
On Mon, 2004-01-26 at 18:50, Markus Feldmann wrote:
> Hallo,
>
> is there a Client Software for Windows that offers a possibility to
> take a different Username to mount Samba shares at the Startup of Windows,
> like the Netware Client for WIndows.
>
> For Example:
> In our Manufacture all Clients have got one User, this is "Administrator".
> But to mount a share from our Linux Server it should be a different User.
> Therefor the Worker shall only write a other Username in the Login-Window at
> Startup although the Workstation shall take the local Profil from the
> Administrator.
> This is like the Netware Client for Windows if you know this.
>
> The Reason for this is that every Worker may work on any Workstation he want
> to
> and we do not want to create 20 Profils on every Windows Client.
>
> mfg Markus F.
--
signature.asc
Description: This is a digitally signed message part
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Client Software for Windows
If your windows boxes are similar (almost same software on them) use a roaming profile and they can logon to any boxes with their own username and password and their profile is stored on the Linux (samba) box. There is no need to put any profile on the windows box. Tom On Mon, 2004-01-26 at 18:50, Markus Feldmann wrote: > Hallo, > > is there a Client Software for Windows that offers a possibility to > take a different Username to mount Samba shares at the Startup of Windows, > like the Netware Client for WIndows. > > For Example: > In our Manufacture all Clients have got one User, this is "Administrator". > But to mount a share from our Linux Server it should be a different User. > Therefor the Worker shall only write a other Username in the Login-Window at > Startup although the Workstation shall take the local Profil from the > Administrator. > This is like the Netware Client for Windows if you know this. > > The Reason for this is that every Worker may work on any Workstation he want > to > and we do not want to create 20 Profils on every Windows Client. > > mfg Markus F. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] re:ldap group mapping problems
well, they both have the same sid, for some bizarre reason.
net groupmap list -s /etc/samba/smb.ldap |grep "Admin"
Domain Admins (S-1-5-21-4070452498-3149834983-2923667569-512) -> 512
Administrators (S-1-5-21-4070452498-3149834983-2923667569-544) -> 544
Domain Admins (S-1-5-21-4070452498-3149834983-2923667569-512) -> ntadmin
and see, it has a posixgroup entry?
# LDIF Export for: cn=Domain Power Users,ou=Group,dc=INTRANET
# Generated by phpLDAPadmin on January 26, 2004 11:19 pm
# Server: LROL LDAP Server (127.0.0.1)
# Search Scope: base
# Total entries: 1
# Entry 1: cn=Domain Power Users,ou=Group,dc=INTRANET
dn: cn=Domain Power Users,ou=Group,dc=INTRANET
objectClass: posixGroup
gidNumber: 513
cn: Domain Power Users
which I am trying to map to this
# Entry 1: cn=users,ou=Group,dc=INTRANET
dn: cn=users,ou=Group,dc=INTRANET
cn: users
userPassword: {crypt}x
gidNumber: 539
objectClass: top
objectClass: posixGroup
objectClass: phpgwAccount
phpgwAccountStatus: A
phpgwAccountType: g
phpgwAccountExpires: -1
so users in "users" will have, obviously, Domain Power User status on NT machines(this
is the way I had it setup with smbpasswd
--- On Mon 01/26, Gerald (Jerry) Carter < [EMAIL PROTECTED] > wrote:
From: Gerald (Jerry) Carter [mailto: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Date: Mon, 26 Jan 2004 20:17:28 -0600 (CST)
Subject: Re: [Samba] net: ../../../libraries/liblber/decode.c...
-BEGIN PGP SIGNED MESSAGE-Hash: SHA1On Mon, 26 Jan 2004, John H.
wrote:> i thought i had, but apparently not, so i did that and this is what
i> have now(as you can see, there are two entries)>> net groupmap list -s
/etc/samba/smb.ldap> Power Users (S-1-5-21-4070452498-3149834983-2923667569-547)
-> 547> is that ok?As long as you remember that different SIDs ==
different groups from aWindows client perspective.> I wanted to add Domain
Power users, and did this...>>> net groupmap add ntgroup="Domain Power
Users" \> unixgroup=users \>
sid=S-1-5-21-4070452498-3149834983-2923667569-1201 \> -s
/etc/samba/smb.ldap>> adding entry for group Domain Power Users
failed!If you don't have a posixGroup entry in you LDAP Directory, then
the add will fail. We don't support mapping an LDAP entry to a local UNIX
group. It all has to be in the directory service.<
br>cheers, jerry-BEGIN PGP SIGNATURE-Version:
GnuPG v1.2.0 (GNU/Linux)Comment: For info see
http://quantumlab.net/pine_privacy_guard/iD8DBQFAFco9IR7qMdg1EfYRApDBAJ9oX0mUUIUx8IJoiSpksenkavdxkgCfRxxG9Aed+P2m4WeKhrPPLgS3qYc==Wu3d-END
PGP SIGNATURE-
___
No banners. No pop-ups. No kidding.
Introducing My Way - http://www.myway.com
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: Bug#219197: PANIC: internal error
At 02:41 PM 01/26/2004 -0800, Mike Fedyk wrote: >I ran the same 3.0.1-2-debug1 under valgrind to get this output. > >I only ran it for a short period of time because samba is giving access >denied errors that it doesn't when not being traced by valgrind. It's >probably some interaction with nss-ldap, and I see some references to it in >the traces also. Though, there are some errors that don't mention ldap... > >Jan 26 14:20:00 fileserver samba-valgrind: ==19297== Conditional jump or >move depends on uninitialised value(s) So let's send this to the list twice, just so those of us on slow connections get to enjoy your 111K email *twice*. Can we attempt being a little more considerate? Not everyone has a broadband connection. Post your errors on a web server somewhere and send a link. Terry -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: Sgjbykwfdzuikstdo
Thankyou for your story idea. Your email has been sent and your story idea will be considered by the appropriate person at A Current Affair. The program will contact you if it wishes to pursue the issue. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] weird NT error codes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, 24 Jan 2004, Andrew Bartlett wrote: > Various changes to our NTLMSSP support, used to authenticate us to the > server. This was actually an schannel bug in smbd (worked in winbindd). It has been fixed in 3.0.2rc1 (verified by several different posters). cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQFAFdanIR7qMdg1EfYRAvlTAJ9cIk//4sDB+fq0rGtsC06LLu4vaQCfchII 0M1tjmYgQemSacFSFg4VA/U= =/Rv/ -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] AU www.samba.org mirror
All, Are my eyes deceiving me, or is the Australian mirror site (http://samba.mirror.aarnet.edu.au/samba/samba.html) linked-to from www.samba.org, out of date? The main page has the release of Samba-3.0.0 RC3, dated Sep 8 2003, as the first news item. Regards Peter * The information contained in this e-mail message and any accompanying files is or may be confidential. If you are not the intended recipient, any use, dissemination, reliance, forwarding, printing or copying of this e-mail or any attached files is unauthorised. This e-mail is subject to copyright. No part of it should be reproduced, adapted or communicated without the written consent of the copyright owner. If you have received this e-mail in error, please advise the sender immediately by return e-mail, or telephone and delete all copies. Fairfax does not guarantee the accuracy or completeness of any information contained in this e-mail or attached files. Internet communications are not secure, therefore Fairfax does not accept legal responsibility for the contents of this message or attached files. * -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba Winbind and LDAP backend
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 23 Jan 2004, Ganguly, Sapan wrote: > One thing has changed since I installed 3.0.2rc1, before I could do the > following - > > id -a windowuser > > And I would get a list of all the windows groups that windows user is a > member of, but now it just hangs. Can you run truss and see where the command is hanging? Also maybe running winbindd a level 10 to see what's goigng on. Make sure you mail me directly so we can get this resolved for 3.0.2. Thanks. - -- cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQFAFdXeIR7qMdg1EfYRAiqQAKCrfWOviqBm/jC8HpGsB7/0cc4XpgCdGt5A iLWZffhjcp4gQLsqt5NqYc0= =uvQA -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Serious bug in Samba 3.0.2pre1 !!!
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 23 Jan 2004, Alex de Vaal wrote: > I actually read the WHATSNEW of 3.0.2pre1, but it wasn't that obvious > for me that I had to disable "winbind use default domain = yes" in my > configuration. My samba setup was working with 3.0.0-2 and the only > thing I did was upgrading to 3.0.2pre1 and not changing my smb.conf > file. Right. However, the REALM\user format was a bug IMO and so fixing it was fixing a bug. I'm sorry that your working smb.conf make use of the behavior. But it is better to fix it now. > After your e-mail I changed "winbind use default domain = yes" to > "winbind use default domain = no" and I upgraded my machine again to > 3.0.2pre1 and now it is working. The official statement is that in 'winbind use default domain' only applies to pam_winbind. You should always specifiy the fully qualified user name in smb.conf for things like 'valid users'. And the format of the winbind user or group should make use of the short form of the domain. > However, I see still in /var/log/samba/.log "Username > (null) is invalid on this system" appear, when I "net use" two mappings > to my samba machine (one to the "grp" and one to the "pub" share) via > the Wk3 login script. Subjoined the output of the log file when this > workstation gets the 2 mappings to my samba shares: > > [2004/01/23 15:34:26, 1] smbd/sesssetup.c:reply_spnego_kerberos(248) > Username (null) is invalid on this system This should be fixed in 3.0.2rc1. > Last question; around which week is the final 3.0.2 release expected? > (Just curious, no other strings attached. ;) Probably first of February. - -- cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQFAFdC1IR7qMdg1EfYRAmmTAKCWMXs+jmnByBNgUkgCOmjTY8PKGACgrMQ/ GA4cpWCyefieB+4CaNcGtEQ= =I9Kb -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] net: ../../../libraries/liblber/decode.c...
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 26 Jan 2004, John H. wrote: > i thought i had, but apparently not, so i did that and this is what i > have now(as you can see, there are two entries) > > net groupmap list -s /etc/samba/smb.ldap > Power Users (S-1-5-21-4070452498-3149834983-2923667569-547) -> 547 > is that ok? As long as you remember that different SIDs == different groups from a Windows client perspective. > I wanted to add Domain Power users, and did this... > > > net groupmap add ntgroup="Domain Power Users" \ > unixgroup=users \ > sid=S-1-5-21-4070452498-3149834983-2923667569-1201 \ > -s /etc/samba/smb.ldap > > adding entry for group Domain Power Users failed! If you don't have a posixGroup entry in you LDAP Directory, then the add will fail. We don't support mapping an LDAP entry to a local UNIX group. It all has to be in the directory service. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQFAFco9IR7qMdg1EfYRApDBAJ9oX0mUUIUx8IJoiSpksenkavdxkgCfRxxG 9Aed+P2m4WeKhrPPLgS3qYc= =Wu3d -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Client Software for Windows
Hallo, is there a Client Software for Windows that offers a possibility to take a different Username to mount Samba shares at the Startup of Windows, like the Netware Client for WIndows. For Example: In our Manufacture all Clients have got one User, this is "Administrator". But to mount a share from our Linux Server it should be a different User. Therefor the Worker shall only write a other Username in the Login-Window at Startup although the Workstation shall take the local Profil from the Administrator. This is like the Netware Client for Windows if you know this. The Reason for this is that every Worker may work on any Workstation he want to and we do not want to create 20 Profils on every Windows Client. mfg Markus F. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba & Windows 2000
Dear Sirs, I am running Samba 2.28 on a Sun/Solaris 9 Server. I have configured Samba to act as a PDC. I manually added the machine names in the Samba-users password file. I can connect with Windows NT 4.0 workstations into the Samba domain, but when attempting to connect with Windows 2000, it keeps asking for user and password information to add the workstation into the domain. If I just map a drive with the Windows 2000 - everything works fine. How can I configure Samba to either respond to the 2000 add-to-domain request or have the 2000 workstation stop asking to add the pc to the domain and act like NT4.0. Thanks David Hairston CIS Department Florida A & M University [EMAIL PROTECTED] (850)599-3222 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] problems with group mappings with ldap
the weirdness continues net groupmap modify ntgroup="Domain Admins" unixgroup="ntadmin" NT Group Domain Admins doesn't exist in mapping DB --- On Mon 01/26, John H. < [EMAIL PROTECTED] > wrote: From: John H. [mailto: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Date: Mon, 26 Jan 2004 17:40:49 -0500 (EST) Subject: Re: [Samba] net: ../../../libraries/liblber/decode.c:644: ber_scanf: Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed. i thought i had, but apparently not, so i did that and this is what i have now(as you can see, there are two entries)net groupmap list -s /etc/samba/smb.ldapDomain Admins (S-1-5-21-4070452498-3149834983-2923667569-512) -> 512Domain Guests (S-1-5-21-4070452498-3149834983-2923667569-514) -> 514Administrators (S-1-5-21-4070452498-3149834983-2923667569-544) -> 544Guests (S-1-5-21-4070452498-3149834983-2923667569-546) -> 546Power Users (S-1-5-21-4070452498-3149834983-2923667569-547) -> 547Account Operators (S-1-5-21-4070452498-3149834983-2923667569-548) -> 548Server Operators (S-1-5-21-4070452498-3149834983-2923667569-549) -> 549Print Operators (S-1-5-21-4070452498-3149834983-2923667569-550) -> 550Backup Operators (S-1-5-21-4070452498-3149834983-2923667569-551) -> 551Replicator (S-1-5-21-4070452498-3149834983-2923667569-552) -> 552Domain Computers (S-1-5-21-4070452498-3149834983-2923667569-553) -> 553Domain Admins (S- 1-5-21-4070452498-3149834983-2923667569-512) -> ntadminis that ok?I wanted to add Domain Power users, and did this... net groupmap add ntgroup="Domain Power Users" unixgroup=users sid=S-1-5-21-4070452498-3149834983-2923667569-1201 -s /etc/samba/smb.ldapadding entry for group Domain Power Users failed!debugging says...(do i need to add it another way?)[2004/01/26 16:40:21, 5] passdb/pdb_interface.c:make_pdb_methods_name(431) Attempting to find an passdb backend to match ldapsam:ldap://127.0.0.1 (ldapsam)[2004/01/26 16:40:21, 5] passdb/pdb_interface.c:make_pdb_methods_name(452) Found pdb backend ldapsam[2004/01/26 16:40:21, 2] lib/smbldap.c:smbldap_search_domain_info(1295) Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=LAMP))][2004/01/26 16:40:21, 2] lib/smbldap.c:smbldap_search_suffix(1066) smbldap_search_suffix: searching for:[(&(objectClass=sambaDomain)(sambaDomainName=LA MP))][2004/01/26 16:40:21, 10] lib/smbldap.c:smbldap_open_connection(527) smbldap_open_connection: ldap://127.0.0.1[2004/01/26 16:40:21, 2] lib/smbldap.c:smbldap_open_connection(623) smbldap_open_connection: connection opened[2004/01/26 16:40:21, 10] lib/smbldap.c:smbldap_connect_system(750) ldap_connect_system: Binding to ldap server ldap://127.0.0.1 as "cn=Manager,dc=INTRANET"[2004/01/26 16:40:21, 3] lib/smbldap.c:smbldap_connect_system(785) ldap_connect_system: succesful connection to the LDAP server[2004/01/26 16:40:21, 4] lib/smbldap.c:smbldap_open(836) The LDAP server is succesful connected[2004/01/26 16:40:21, 5] passdb/pdb_interface.c:make_pdb_methods_name(455) pdb backend ldapsam:ldap://127.0.0.1 has a valid init[2004/01/26 16:40:21, 5] passdb/pdb_interface.c:make_pdb_methods_name(431) Attempting to find an passdb backend to match guest (guest)[2004/01/26 16:40:21, 5] passdb/pdb_interface.c:make_pdb_ methods_name(452) Found pdb backend guest[2004/01/26 16:40:21, 5] passdb/pdb_interface.c:make_pdb_methods_name(455) pdb backend guest has a valid init[2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))][2004/01/26 16:40:21, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_getgroup: Did not find group[2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))][2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))][2004/01/26 16:40:21, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_getgroup: Did not find group[2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_g roup(1597) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))][2004/01/26 16:40:21, 2] pas sdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))][2004/01/26 16:40:21, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_getgroup: Did not find group[2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))][2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))][2004/01/26 16:40:21, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_ge
[Samba] problems with samba 2.2.7 installed on Tru64 with OS 5.1
Hi, I have installed samba (v.2.7) on a Tru64 server (OS 5.1) and the file transfer is about 6 time slower that on another server with OS 4.0 and using samba 2.2.1a. I have checked all network possible issues (the swith port are on both servers configured for 100M/Full duplex and showing no errors to suggest a network issue). I did run some fpt test and found no problem; the transfer is quite fast and similar with the ftp transfer range on the other servers. It seems the network performance issue are occurring only when utilising Samba. Does anyone know if there is any problem with samba 2.2.7 installed on Tru64 (5.1)? Shall I install another samba version? If this is the case can anyone, please, advise which version is best to install? Thanks and regards, Dona Mihut HP, Managed Services, Asia Pacific -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] A few issues with samba & cups
We have a linux/samba/netatalk print server as our organization's primary print server with roughly 120 printers currently installed and about 100 more to go. I followed the CUPS documentation to the letter, as you did, and had unending trouble with bad output from windows clients. I tried dozens of ppds from many different sources all with little success, and very unreliable printing across the board. After months of trouble and a Helpdesk that was about to lynch me, I arrived at a solution: raw queues. In this scenario, do not rely on cupsaddsmb to take your ppd and package it up for the windows clients. Instead set up raw queues with no ppd, and then set up Samba to run the Add Printer Wizard from a remote client. This is probably the best place to start: http://www.linuxprinting.org/kpfeifle/SambaPrintHOWTO/ Look at 11th draft. Once set up this way, you will set up raw CUPS queues and then add drivers from a remote Windows client through Samba (you can even plug scripts into the APW to take care of adding a CUPS printer). You can add drivers for other OSes as you normally would on a Windows print server, change settings, etc. Nothing will be greyed out to printer admins. We have had very little trouble from a print quality standpoint since making the switch. If I had taken the server in this direction 8 months ago, I would have avoided a lot of pain. In fact, even thinking about someone else going through that is painful:) Following this method will make your server function identically to a Windows print server. -- Jeff Hardy Systems Administrator SUNY Potsdam [EMAIL PROTECTED] On Mon, 2004-01-26 at 17:57, Daniel Kasak wrote: > Hi all. > > I have Samba-3.0.1 sharing 2 printers via the 'share all printers' > feature - the printers are an HP 4500 colour laser, and a Ricoh Aficio > AP3200 ( accepting jobs like a network HP does ). > > I followed the instructions on the CUPS website for sharing printers > with the CUPS windows driver, using their 'cupsaddsmb' script, which > basically takes your existing ppd file, and adds a couple of dlls ( the > cups driver bit ) and chucks them in the printer$ share for Windows > clients to download when they connect. > > This all appeared to work flawlessly. I can right-click in the shared > printers in the network neighbourhood and click 'connect' and the > printer driver is downloaded. > > The first issue ( which is probably more of a CUPS issue than a Samba > issue ) is that the margins are wrong. The margins are perfect via > Linux. Margin settings are taken from the foomatic-generated ppd file, > and I've checked them against the manufacturer-issued ones. I've also > checked the Windows clients, and they are in fact using the same ppd > file that gets downloaded upon connecting. So something is going wrong > somewhere, and the left-hand margin is too big on both printers, and the > top margin is too big on the HP 4500. If anyone know the the problem is, > I'd be oh-so-grateful to hear from you :) > > The next issue is that I can't update the printer config now that it's > set up. If I log into a Windows machine as root, samba will let me > upload new drivers ( manufactured-issed ones to replace the CUPS Windows > drivers ) to the printer$ share via the 'advanced' tab of the printer > config dialog, when I click on 'apply' to select the uploaded driver, I > get an error: > > 'Printer settings could not be saved. Access is denied'. > > The drivers are being uploaded to the printer$ share, and I can select > them for use in a single print 'session' and everything works OK, but I > can't make them the default drivers! > > One strange thing is that while I'm continually pressing on the 'apply' > button, there is no logging being generated in /var/log/samba. So this > looks like a permissions problem on the Windows client??? At any rate, > it is preventing me from sharing the printers via samba, so if anyone > knows what this issue is caused by, I'd also be very grateful to hear > from you. > > Thanks! > > Dan > > smb.conf: > > # > #=== Global Settings > = > [global] > dns proxy = no > load printers = yes > netbios name = screamer > printing = cups > server string = Samba Server %v > socket options = TCP_NODELAY > password server = NUS_AUST_NT > workgroup = NUSAUS > debug level = 1 > bind interfaces only = true > interfaces = 10.146.0.254/255.255.0.0 > null passwords = yes > encrypt passwords = yes > security = domain > preferred master = no > max log size = 50 > use client driver = yes > > [install] > writable = yes > printable = no > path = /mnt/stuff/smb_shares/install > force directory mode = 777 > force group = nobody > force create mode = 777 > comment = Installation Stuff > create mode = 777 > public = yes > directory mode = 777 > > [h
[Samba] Mail Delivery System
-- Virus Warning Message Found virus WORM_MIMAIL.R in file message.bat The file is deleted. - -- Virus Warning Message message.bat is removed from here because it contains a virus. --- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] [MailServer Notification]To Sender file blocking settings matched and action taken.
ScanMail for Microsoft Exchange has blocked an attachment. Sender = [EMAIL PROTECTED] Recipient(s) = Hudson, Neal R [ITS] Subject = Error Scanning time = 01/26/2004 17:13:04 Action on file blocking: The attachment readme.zip matches the file blocking settings. ScanMail has Deleted it. Warning to Sender: Action taken by attachment blocking. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 3.0.2rc1 - PANIC: smb_xmalloc: malloc fail.
On Mon, Jan 26, 2004 at 04:51:26PM -0600, Eric Brueggmann wrote: > [2004/01/26 16:30:48, 0] lib/util.c:smb_xmalloc(2055) > smb_xmalloc() failed to allocate 3221213488 bytes > [2004/01/26 16:30:48, 0] lib/util.c:smb_panic(1400) > PANIC: smb_xmalloc: malloc fail. > > [2004/01/26 16:30:48, 0] lib/util.c:smb_panic(1408) > BACKTRACE: 16 stack frames: >#0 /opt/samba/sbin/smbd(smb_panic+0x181) [0x8189811] >#1 /opt/samba/sbin/smbd(smb_xmalloc+0x83) [0x818ad27] >#2 /opt/samba/sbin/smbd(smb_xmemdup+0x11) [0x818ad44] >#3 /opt/samba/sbin/smbd(data_blob+0x4e) [0x81873d3] >#4 /opt/samba/sbin/smbd [0x811fa10] >#5 /opt/samba/sbin/smbd(open_rpc_pipe_p+0x2c2) [0x811f4db] >#6 /opt/samba/sbin/smbd [0x809270c] >#7 /opt/samba/sbin/smbd [0x80927cd] >#8 /opt/samba/sbin/smbd(reply_ntcreate_and_X+0x112) [0x8092985] >#9 /opt/samba/sbin/smbd [0x80bbfcc] >#10 /opt/samba/sbin/smbd [0x80bc056] >#11 /opt/samba/sbin/smbd(process_smb+0x1b9) [0x80bc351] >#12 /opt/samba/sbin/smbd(smbd_process+0x153) [0x80bcdac] >#13 /opt/samba/sbin/smbd(main+0x6ec) [0x81e2e73] >#14 /lib/tls/libc.so.6(__libc_start_main+0xf8) [0xb7250748] >#15 /opt/samba/sbin/smbd(chroot+0x31) [0x8077131] Can you compile with debug symbols please so we can see where in the code the oversized malloc is being requested ? Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.2 and Windows 2003 ADS.
Hi.
I have installed samba 3.0.2 in my redhat 7.3, and Kerberos 1.2.4
I can make my Linux act as ADS Domain Membership whit out any problem,
When I made this command:
/usr/local/samba/bin/net ads join "Computers" -U%
I get this message that tell me that everything is ok.
Using short domain name -- DOMAIN2003
Joined 'PROTON' to realm 'DOMAIN2003.COM'
I also have another PC with windows 2000, which is joined too, to my
Windows 2003 Server. From my Linux I can connect with out any problem to
this machine using "smbclient" and with no password. But when I try to
connect form Windows 2000 to my Linux using this command: "net use *
\\server\share ", it asks me for a password,
and in the samba log I see this:
[2004/01/26 17:41:57, 1] smbd/sesssetup.c:reply_spnego_kerberos(173)
Failed to verify incoming ticket!
What is missing?? What am I doing wrong???
In the HOW-to say that to probe this kind of configuration I have to use
the "net" command form Windows, and if it doesn't work I have to use
"klist tickets", when I run that command I get this:
[EMAIL PROTECTED] root]# klist tickets
klist: No credentials cache found (ticket cache FILE:tickets)
Wich ticket is missing?? Or how do I have to add a ticket???
My krb5.com looks like this:
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
ticket_lifetime = 24000
default_realm = DOMAIN2003.COM
dns_lookup_realm = false
dns_lookup_kdc = false
default_tkt_enctypes = DES-CBC-MD5
default_tgs_enctypes = DES-CBC-MD5
[realms]
DOMAIN2003.COM = {
kdc = server2003.domain2003.com:88
admin_server = server2003.domain2003.com:749
default_domain = domain2003.com
}
[domain_realm]
.domain2003.com = DOMAIN2003.COM
comain2003.com = DOMAIN2003.COM
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
And my smb.conf like this:
[global]
workgroup = domain2003
netbios name = proton
server string = Inetserver
domain master = no
local master = yes
preferred master = yes
max connections = 0
interfaces = 192.168.1.0/255.255.255.0
name resolve order = bcast wins hosts
socket options = TCP_NODELAY
security = ADS
realm = domain2003.com
encrypt passwords = yes
update encrypted = yes
unix password sync = yes
printing = lprng
printcap name = /etc/printcap
load printers = yes
dns proxy = yes
allow trusted domains = yes
wins support = no
password server = server2003
winbind cache time = 10
[homes]
comment = Home Directories
writable = yes
browseable = no
valid users = %U
[netlogon]
comment = Logon scripts
path = /home/netlogon
read only = yes
write list = @users
[Profiles]
comment = Profiles directory
path = /home/profiles
read only = no
create mask = 0600
directory mask = 0700
[install]
public = yes
writeable = yes
comment = Instaladores
path = /home/samba/install
force directory mode = 0777
Thanks in advance..
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] A few issues with samba & cups
Hi all. I have Samba-3.0.1 sharing 2 printers via the 'share all printers' feature - the printers are an HP 4500 colour laser, and a Ricoh Aficio AP3200 ( accepting jobs like a network HP does ). I followed the instructions on the CUPS website for sharing printers with the CUPS windows driver, using their 'cupsaddsmb' script, which basically takes your existing ppd file, and adds a couple of dlls ( the cups driver bit ) and chucks them in the printer$ share for Windows clients to download when they connect. This all appeared to work flawlessly. I can right-click in the shared printers in the network neighbourhood and click 'connect' and the printer driver is downloaded. The first issue ( which is probably more of a CUPS issue than a Samba issue ) is that the margins are wrong. The margins are perfect via Linux. Margin settings are taken from the foomatic-generated ppd file, and I've checked them against the manufacturer-issued ones. I've also checked the Windows clients, and they are in fact using the same ppd file that gets downloaded upon connecting. So something is going wrong somewhere, and the left-hand margin is too big on both printers, and the top margin is too big on the HP 4500. If anyone know the the problem is, I'd be oh-so-grateful to hear from you :) The next issue is that I can't update the printer config now that it's set up. If I log into a Windows machine as root, samba will let me upload new drivers ( manufactured-issed ones to replace the CUPS Windows drivers ) to the printer$ share via the 'advanced' tab of the printer config dialog, when I click on 'apply' to select the uploaded driver, I get an error: 'Printer settings could not be saved. Access is denied'. The drivers are being uploaded to the printer$ share, and I can select them for use in a single print 'session' and everything works OK, but I can't make them the default drivers! One strange thing is that while I'm continually pressing on the 'apply' button, there is no logging being generated in /var/log/samba. So this looks like a permissions problem on the Windows client??? At any rate, it is preventing me from sharing the printers via samba, so if anyone knows what this issue is caused by, I'd also be very grateful to hear from you. Thanks! Dan smb.conf: # #=== Global Settings = [global] dns proxy = no load printers = yes netbios name = screamer printing = cups server string = Samba Server %v socket options = TCP_NODELAY password server = NUS_AUST_NT workgroup = NUSAUS debug level = 1 bind interfaces only = true interfaces = 10.146.0.254/255.255.0.0 null passwords = yes encrypt passwords = yes security = domain preferred master = no max log size = 50 use client driver = yes [install] writable = yes printable = no path = /mnt/stuff/smb_shares/install force directory mode = 777 force group = nobody force create mode = 777 comment = Installation Stuff create mode = 777 public = yes directory mode = 777 [htdocs] path = /var/www/localhost/htdocs writable = yes printable = no public = yes [printers] comment = All Printers path = /var/spool/samba browseable = no public = yes guest ok = yes writeable = no printable = yes printer admin = root [print$] browseable = yes comment = Printer Drivers writeable = yes write list = root path = /etc/samba/drivers -- Daniel Kasak IT Developer NUS Consulting Group Level 5, 77 Pacific Highway North Sydney, NSW, Australia 2060 T: (+61) 2 9922-7676 / F: (+61) 2 9922 7989 email: [EMAIL PROTECTED] website: http://www.nusconsulting.com.au -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 3.0.2rc1 - PANIC: smb_xmalloc: malloc fail.
I'm not sure if this is a known issue or not. # uname -a Linux 2.4.21-9.ELsmp #1 SMP Thu Jan 8 16:54:23 EST 2004 i686 athlon i386 GNU/Linux # cat /etc/redhat-release Red Hat Enterprise Linux WS release 3 (Taroon Update 1) # vmstat 5 procs memory swap io system cpu r b swpd free buff cache si sobibo incs us sy id wa 0 0 56 18936 125016 184650800 0 4 5518 0 0 39 0 0 0 56 18936 125016 184650800 0 6 10418 0 0 100 0 0 0 56 18936 125016 184650800 0 0 10220 0 0 100 0 [2004/01/26 16:30:48, 0] lib/util.c:smb_xmalloc(2055) smb_xmalloc() failed to allocate 3221213488 bytes [2004/01/26 16:30:48, 0] lib/util.c:smb_panic(1400) PANIC: smb_xmalloc: malloc fail. [2004/01/26 16:30:48, 0] lib/util.c:smb_panic(1408) BACKTRACE: 16 stack frames: #0 /opt/samba/sbin/smbd(smb_panic+0x181) [0x8189811] #1 /opt/samba/sbin/smbd(smb_xmalloc+0x83) [0x818ad27] #2 /opt/samba/sbin/smbd(smb_xmemdup+0x11) [0x818ad44] #3 /opt/samba/sbin/smbd(data_blob+0x4e) [0x81873d3] #4 /opt/samba/sbin/smbd [0x811fa10] #5 /opt/samba/sbin/smbd(open_rpc_pipe_p+0x2c2) [0x811f4db] #6 /opt/samba/sbin/smbd [0x809270c] #7 /opt/samba/sbin/smbd [0x80927cd] #8 /opt/samba/sbin/smbd(reply_ntcreate_and_X+0x112) [0x8092985] #9 /opt/samba/sbin/smbd [0x80bbfcc] #10 /opt/samba/sbin/smbd [0x80bc056] #11 /opt/samba/sbin/smbd(process_smb+0x1b9) [0x80bc351] #12 /opt/samba/sbin/smbd(smbd_process+0x153) [0x80bcdac] #13 /opt/samba/sbin/smbd(main+0x6ec) [0x81e2e73] #14 /lib/tls/libc.so.6(__libc_start_main+0xf8) [0xb7250748] #15 /opt/samba/sbin/smbd(chroot+0x31) [0x8077131] -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba and Terminal Server Whitepaper
Sorry about the Terminal Server Whitepaper "attachment fiasco". HP will host both the Samba and the HP CIFS Server versions at www.docs.hp.com on January 30th. I'll post the actual url here. The versions are identical except for the nomenclature (hope I spelled that right). One of the list members will host it too - probably sooner. He will send out an announcement. Eric Roseme Hewlett-Packard Tim Potter wrote: On Sat, Jan 24, 2004 at 12:40:00PM -0800, Eric Roseme wrote: Attached is a 500KB read-only .doc file with a Samba and Terminal Server whitepaper. I have tried to hit every known issue and all available workarounds. If anyone has comments or suggestions, let me know. JT has it, so it should end up in the next How-To. Sorry about the file format, but the .pdf was 2.5MB, which I thought was too big to post. Whoops - the attachment was stripped by mailman. Eric, can you post a link to the document? 700KB (base64) is a little bit on the large side for the list. Tim. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] net: ../../../libraries/liblber/decode.c:644: ber_scanf: Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed.
i thought i had, but apparently not, so i did that and this is what i have now(as you can see, there are two entries) net groupmap list -s /etc/samba/smb.ldap Domain Admins (S-1-5-21-4070452498-3149834983-2923667569-512) -> 512 Domain Guests (S-1-5-21-4070452498-3149834983-2923667569-514) -> 514 Administrators (S-1-5-21-4070452498-3149834983-2923667569-544) -> 544 Guests (S-1-5-21-4070452498-3149834983-2923667569-546) -> 546 Power Users (S-1-5-21-4070452498-3149834983-2923667569-547) -> 547 Account Operators (S-1-5-21-4070452498-3149834983-2923667569-548) -> 548 Server Operators (S-1-5-21-4070452498-3149834983-2923667569-549) -> 549 Print Operators (S-1-5-21-4070452498-3149834983-2923667569-550) -> 550 Backup Operators (S-1-5-21-4070452498-3149834983-2923667569-551) -> 551 Replicator (S-1-5-21-4070452498-3149834983-2923667569-552) -> 552 Domain Computers (S-1-5-21-4070452498-3149834983-2923667569-553) -> 553 Domain Admins (S-1-5-21-4070452498-3149834983-2923667569-512) -> ntadmin is that ok? I wanted to add Domain Power users, and did this... net groupmap add ntgroup="Domain Power Users" unixgroup=users sid=S-1-5-21-4070452498-3149834983-2923667569-1201 -s /etc/samba/smb.ldap adding entry for group Domain Power Users failed! debugging says...(do i need to add it another way?) [2004/01/26 16:40:21, 5] passdb/pdb_interface.c:make_pdb_methods_name(431) Attempting to find an passdb backend to match ldapsam:ldap://127.0.0.1 (ldapsam) [2004/01/26 16:40:21, 5] passdb/pdb_interface.c:make_pdb_methods_name(452) Found pdb backend ldapsam [2004/01/26 16:40:21, 2] lib/smbldap.c:smbldap_search_domain_info(1295) Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=LAMP))] [2004/01/26 16:40:21, 2] lib/smbldap.c:smbldap_search_suffix(1066) smbldap_search_suffix: searching for:[(&(objectClass=sambaDomain)(sambaDomainName=LAMP))] [2004/01/26 16:40:21, 10] lib/smbldap.c:smbldap_open_connection(527) smbldap_open_connection: ldap://127.0.0.1 [2004/01/26 16:40:21, 2] lib/smbldap.c:smbldap_open_connection(623) smbldap_open_connection: connection opened [2004/01/26 16:40:21, 10] lib/smbldap.c:smbldap_connect_system(750) ldap_connect_system: Binding to ldap server ldap://127.0.0.1 as "cn=Manager,dc=INTRANET" [2004/01/26 16:40:21, 3] lib/smbldap.c:smbldap_connect_system(785) ldap_connect_system: succesful connection to the LDAP server [2004/01/26 16:40:21, 4] lib/smbldap.c:smbldap_open(836) The LDAP server is succesful connected [2004/01/26 16:40:21, 5] passdb/pdb_interface.c:make_pdb_methods_name(455) pdb backend ldapsam:ldap://127.0.0.1 has a valid init [2004/01/26 16:40:21, 5] passdb/pdb_interface.c:make_pdb_methods_name(431) Attempting to find an passdb backend to match guest (guest) [2004/01/26 16:40:21, 5] passdb/pdb_interface.c:make_pdb_methods_name(452) Found pdb backend guest [2004/01/26 16:40:21, 5] passdb/pdb_interface.c:make_pdb_methods_name(455) pdb backend guest has a valid init [2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))] [2004/01/26 16:40:21, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_getgroup: Did not find group [2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))] [2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))] [2004/01/26 16:40:21, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_getgroup: Did not find group [2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))] [2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))] [2004/01/26 16:40:21, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_getgroup: Did not find group [2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))] [2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))] [2004/01/26 16:40:21, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_getgroup: Did not find group [2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))] [2004/01/26 16:40:21, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))] [2004/01/26 16:40:21, 4] passdb/pdb_ldap.c:ldapsam_get
Re: [Samba] net: ../../../libraries/liblber/decode.c:644: ber_scanf: Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John H. wrote: | net-3.2 groupmap modify ntgroup="Domain Admins" unixgroup="ntadmin" | -s /etc/samba/smb.ldap | ldapsam_update_group_mapping_entry: failed to | modify group 504 error: attribute 'sambaSID' not | allowed (Object class violation) | Could not update group database Do you already have a group mapping in LDAP ? If not, use 'net groupmap add' instead of modify. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFAFZRlIR7qMdg1EfYRAkeOAJ9mDl2xJxO9JQ44xrtJQHDINth6lgCcCenf KcE/o0YF616z7BDWUM0QmNQ= =3Uun -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba tuning for Linux?
We encountered a stability issue last week on one of 2.2.8 servers running on RedHat 7.1 (2.4.19-13 kernel with SGI XFS patches). It appears we exceeded the max files and kernel setting, which resulted in having more than 300 zombie smbd processes that we could not kill without a reboot. Increasing the value of 'file-max' in /proc/sys/fs from the default of 8192 to 32768 seems to have cured the problem for now. But I'd like to know if there are some guidelines for tuning samba and linux for stability and performance. I've applied most of the tips for Samba I think, but am not certain about the linux config. How many of you are running Samba 2.2.8 on Linux with 300+ concurrent users? What kinds of changes have you made to improve stability? Thanks. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Shawn Wright, I.T. Manager Shawnigan Lake School http://www.sls.bc.ca [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba wife Foxpro Database
Hi List... I am hope my english is not so bad and you onderstand my. on a smal network at my custumer ther use a foxpro database. The bigerst database is 700 MB and all Databases use 2.5 GB space. This moment is the database on a w2kserver an weri slow to print a project. The user most wait 2 min. to print a custumer project out. my question Is Posibile to boost the foxpro database wif samba ? and howto configure for best Performace to runing foxpro databases. wath for a os and wath for a file format i am most use? (OS=Mandrike,Redhat,Freebsd...) ext2,ext3,Reiserfs,)? Danks for any help Andy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba and Window XP write performance
On Mon, 2004-01-26 at 16:41, Gustavo Rincon wrote: > did some testing using samba-3.0.0 as a server and two identical clients > one Running W2K and other running Win XP pro. > If I write a big file using the W2K client, I'm getting about 25 Mbytes/sec > but if I run the same testing using the Win XP Pro, this > client only is able to get 12.5 Mbytes/sec. (The Server, clients are using > 1000 Gbits NICs) > > There is a problem between XP and samba? You could have just answered my Questions. And therefore I would have responded to that as well. Here are some of the relevant messages: http://lists.samba.org/archive/samba/2003-December/076229.html http://lists.samba.org/archive/samba/2003-December/077030.html I believe you might want to do your own searching instead assuming someone will do it for you. -- [EMAIL PROTECTED] REMEMBER ED CURRY! http://www.iwethey.org/ed_curry signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] intermittent problem printing - cups+samba+ldap
A problem has come up in our computer labs. We use one account for a given lab, except in the main lab where students have individual accounts. In either case, printing is only intermittently successful. We use a "net use lpt1 \\server\printer" command in a batch file run at login to connect the printer. The command completes successfully. The CUPS status page for the printer reports either "idle, accepting jobs" or "ready to print" When attempting to print, an error popup comes up: "There was an error found when printing the document "foo" to ltp1:. Do you want to cancel or retry?" Windows Print Manager does not show a document queued, though the tooltip for the print manager icon in system tray shows "one document queued" until cancellation. The network traffic shows a workstation sending what ethereal calls a "Open Print File Request" and getting an netbios-ssn > (source ephemeral port #) ACK from the server, then the server sends an "Open Print File Response, Error: STATUS_OBJECT_NAME_NOT_FOUND" or "STATUS_ACCESS_DENIED" The former is more common by a factor of 3. There does not seem to be a pattern as far as which goes first. Googling on 'STATUS_OBJECT_NAME_NOT_FOUND' brings up some (apparently) unrelated hits. Environment: currently patched Win2k/sp4 clients. The server has: cups-1.1.14-15.4 samba-2.2.8a openldap-2.0.27-2.7.3 Cups is configured to allow MaxJobs 500 Increasing MaxClients from 500 to 800 did not clear the problem. This was all working a few weeks ago. Restarting the samba, cups, and ldap doesn't clear the problem. Reindexed ldap directory, without fixing the problem. The server is not heavily burdened, and there is plenty of free disk space. The server manages 35 printers. Creating a second printer object (for the same printer ip address) does not work either. It may be that not all accounts are affected; most are, and all new ones appear to be. It's hard to pin down the general area of the fault because of the intermittent nature of successful print jobs. I think it's not account related because sometimes a given account can successfully print. Just now something cleared the logjam and everyone can print. But the problem will undoubtably recurr. _ Are you a Techie? Get Your Free Tech Email Address Now! Visit http://www.TechEmail.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and Window XP write performance
did some testing using samba-3.0.0 as a server and two identical clients one Running W2K and other running Win XP pro. If I write a big file using the W2K client, I'm getting about 25 Mbytes/sec but if I run the same testing using the Win XP Pro, this client only is able to get 12.5 Mbytes/sec. (The Server, clients are using 1000 Mbits/sec NICs) There is a problem between XP and samba? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] PDC/BDC Questions
Software: OS: Redhat 9 Samba Ver: Samba 3.0.0 (Plus excel writelock patch, waiting for 3.0.2!) OpenLDAP Ver: 2.0.27-8 Just a quick question about PDC / BDC interaction, my plan is to distribute Samba (with slave ldap backend) BDCs to remote facilities, as well as have one on each network segment in the hopes of avoiding unnecessary nmb broadcast traffic. My question is this: Will the PDC / BDC(s), acting as master browsers for their segments, exchange netbios information (i.e. netbios names, browsing info, etc.) via nmb? Or do they exchange this information via tcp? Or at all for that matter? Also as a complete sidenote, what I think would be a nifty feature: (This would only be useful to those running an ldap backend (possibly mysql?) When setting an account to disabled, have an option to set the loginShell attribute to something, such as /sbin/nologin (Should be configurable of course). Should be a fairly trivial thing.. just altering another attribute, if my C foo wasn't so weak I might attempt to add this feature myself. Just a possible suggestion :) As always, big kudos to the Samba Team, thanks for your time folks. -- Cy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and Window XP write performance
did some testing using samba-3.0.0 as a server and two identical clients one Running W2K and other running Win XP pro. If I write a big file using the W2K client, I'm getting about 25 Mbytes/sec but if I run the same testing using the Win XP Pro, this client only is able to get 12.5 Mbytes/sec. (The Server, clients are using 1000 Gbits NICs) There is a problem between XP and samba? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] net: ../../../libraries/liblber/decode.c:644: ber_scanf: Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed.
ok, i downloaded just net-3.2 and i get this(now, i'm still using the smbpasswd smb.conf right now, because people are working on it) net-3.2 groupmap modify ntgroup="Domain Admins" unixgroup="ntadmin" -s /etc/samba/smb.ldap [2004/01/26 15:27:54, 0] passdb/pdb_ldap.c:ldapsam_update_group_mapping_entry(2039) ldapsam_update_group_mapping_entry: failed to modify group 504 error: attribute 'sambaSID' not allowed (Object class violation) Could not update group database --- On Mon 01/26, Gerald (Jerry) Carter < [EMAIL PROTECTED] > wrote: From: Gerald (Jerry) Carter [mailto: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Date: Mon, 26 Jan 2004 12:37:50 -0600 Subject: Re: [Samba] net: ../../../libraries/liblber/decode.c:644: ber_scanf: Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed. -BEGIN PGP SIGNED MESSAGE-Hash: SHA1John H. wrote:| net groupmap modify ntgroup="Domain Admins" unixgroup=504||| net: ../../../libraries/liblber/decode.c:644: ber_scanf:| Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed.|| I was told this may be specific to ldap setup| with samba 3.0.0, but is fixed in later versions of samba.|| however, in 3.0.1, there is a far worse bug that makes| machines only available some of the time(i was told| this might be fixed in 3.0.2).|| I would just like to know if there is any way to get| around this problem without upgrading right now?You might want to try the 'net' command from 3.0.2rc1.cheers, jerry~ --~ Hewlett-Packard- http://www.hp.com~ SAMBA Team -- http://www.samba.org~ GnuPG Key http://www.plainjoe.org/gpg_public.asc~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)-BEGIN PGP SIGNATURE-Version: GnuPG v1.2.1 (GNU/Linux)Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.orgiD8DBQFAFV5+IR7qMdg1EfYRAg6iAJ0T6Zbk64p6wGiDe2fObYjDn9IqlwCgniQmFmyUyYHCbZX+hTT7mss1/0k==eqwX-END PGP SIGNATURE- ___ No banners. No pop-ups. No kidding. Introducing My Way - http://www.myway.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] added new printer in cups, need to restart samba
On Mon, Jan 26, 2004 at 08:36:41PM +0100, Bjoern JACKE wrote: > this is a known bugmissing feature of Samba 2.x and also 3.x. I think > someone was starting to work on it but it was more difficult than > expected. At the moment it is still not implemented and you have to > restart Samba to get it to know all new printers. Thanks, I'll stick with sending smbd a HUP signal for now, seems to work. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbclient problems and authentication problems
I have installed samba 3.0 and am following the Samba HOWTO... I am at the steps 2.3 and 2.4 to check the install with the smbclient commands, and I get: smbclient -L myhostname "Connection to myhostname failed" All it says in the book is "You should see a llist of shares available on your server. If you do not, then something is incorrectly configured." This does not help me.What are the things that could be configured wrong for me to not get a successful smbclient command? I CAN NOT get the following command to work: smbclient //w2kdnsname/c$ -k "Connection to myhostname failed" I CAN NOT get the following command to work: smbclient //dns.name.of.myw2k.domain.controller/c$ -k "Connection to W2K.Domain.controller.dnsname failed" I CAN get the following command to work: smbclient //ipaddr.ofmy.w2k.server/c$ -k I am trying to get samba to authenticate with a W2K domain controller through kerberos5. I only have smbd and winbindd running.I want to use the DNS that my W2K machine controls. I can do a "kinit" and "net ads join" successfully (a klist verifies this). The wbinfo commands from LINUX show the users and groups that are defined on my W2K box.I can not setup a samba share point from my W2K box. The various logs in /var/log/samba/..are pretty full (using logging level 5), and I could use some advice for what to look for. Any advice that anyone can provide, would be a huge help. thanks, Dean Dean Obry Technical Services Lead Georgia-Pacific Corporation email: [EMAIL PROTECTED] phone: 920-438-2662 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 2.6.x kernels and Red Hat samba-3.0.2-1rc1 "validation failed" errors
Please CC me if you respond to this message -- I am not subscribe to this mailing list. I am having trouble accessing auto-mounted Samba filesystems over my company's VPN from home with kernel 2.6.2-rc1-mm3. This worked fine with 2.4.22-ac4, but with 2.6.2-rc1-mm3, for some (but not all) files, I get this error over and over again in my logs: Jan 26 16:03:03 jik kernel: smb_file_read: wwwroot/scmlib.inc validation failed, error=4294966784 Any suggestions? Thanks, Jonathan Kamens -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba and Window XP write performance
On Mon, 2004-01-26 at 15:28, Gustavo Rincon wrote: > I did some testing using samba-3.0.0 as a server and two identical clients > one Running W2K and other running Win XP pro. > If I write a big file using the W2K client, I'm getting about 25 Mbytes/sec > but if I run the same testing using the Win XP Pro, this > client only is able to get 12.5 Mbytes/sec. > > There is a problem between XP and samba? What speed Network interface do each of the clients have? 100Mbits/sec Ethernet will Theoretically get you ~11MBytes/sec due to the 4/5 encoding and 125MHz signaling rate. 10Mbits/sec Will theoretically get you 1.4MBytes/sec due to the 20MHz signaling rate with no encoding. This assumes you are have zero Collisons during the throughput. Personally, unless you have 1000Mbits/sec Ethernet(Gig), W2K is lying to you. -- [EMAIL PROTECTED] REMEMBER ED CURRY! http://www.iwethey.org/ed_curry signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba 2.2.8a + Locking + Record not available
On Mon, 2004-01-26 at 22:54, shaf sum wrote: > --- Andrew Bartlett <[EMAIL PROTECTED]> wrote: > > On Mon, 2004-01-26 at 18:28, shaf sum wrote: > > > Hello everybody > > > > > > Since 1 week i saw at the client side displaying > > > "Record not available" when our client try to > > access > > > the FoxPro database found on the file server. It > > > happens every day in the morning before the users > > > start working. I need to restart the server and > > it > > > becomes normal. > > > > > > Could someone please tell how could i resolve it? > > Can > > > we solve it through Locking and how > > > > You might want to ensure you have oplocks turned off > > for your foxpro > > files. Best option to use is 'veto oplocks' on the > > foxpro file > > extensions. > > But how can i do that. I need to modify > /etc/samba/smb.conf and in the global section, i need > to add > > veto oplocks files = *.dbf, *.cdx, *.sel ??? If you had read the manpage you would have seen the example of how to construct the list. veto oplock files = /*.dbf/*.cdx/*.sel/ should do it. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and Window XP write performance
I did some testing using samba-3.0.0 as a server and two identical clients one Running W2K and other running Win XP pro. If I write a big file using the W2K client, I'm getting about 25 Mbytes/sec but if I run the same testing using the Win XP Pro, this client only is able to get 12.5 Mbytes/sec. There is a problem between XP and samba? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: ldap filter and man page [WAS Re: [Samba] My story installing Samba-LDAP PDC (it has a happy ending)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Beast wrote: | Sorry for asking, when will 3.0.2 released? I've plan to use | 3.0.2 on production and now I'm under tight schedule :-( Soon. We have to do an RC2 this week and then maybe 3.0.2 final next week. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFAFW5iIR7qMdg1EfYRAqRfAKDYjaERvQMHDHsHWU240GQOLNqYVACgpp1o 4V1sMi9WsmyDyEfOHZv9Uf4= =uCfm -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] added new printer in cups, need to restart samba
On 2004-01-26 at 17:01 -0200 Andreas sent off: samba-2.2.8 and cups-1.1.18, samba linked with cups. Whenever I add or remove a printer in cups, I need to restart samba otherwise it won't see the changes. Is this the way it is supposed to be or am I doing something wrong? this is a known bugmissing feature of Samba 2.x and also 3.x. I think someone was starting to work on it but it was more difficult than expected. At the moment it is still not implemented and you have to restart Samba to get it to know all new printers. Bjoern pgp0.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] added new printer in cups, need to restart samba
samba-2.2.8 and cups-1.1.18, samba linked with cups. Whenever I add or remove a printer in cups, I need to restart samba otherwise it won't see the changes. Is this the way it is supposed to be or am I doing something wrong? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Creating user home dirs elsewhere?
On Wed, 21 Jan 2004, Geoff wrote: > Hi - I'm using the mk_homedir.so module to create user directories using > samba 3.0.1 in a Windows 2000 PDC environment. The samba server is > acting as a domain member. I'm wondering if there is a way to specify > the location of the user's home directories other than under /home. I'd > really like the user directories to be created under /home/users. > If you're using Winbind (you don't say), just edit 'template homedi' (at least, that's what it is on 2.2.x, can't remember now if it has changed. pam_mkhomedir will just make the directory returned with 'getent passwd username'. Regards, Buchan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba und *.DBF Foxpro Datenbanken
Hello, andy, Montag, 26. Jänner 2004, 17:27 you wrote: a> Hi List... Du sagst es : List, nicht Liste. Poste englisch, dann erreichst Du mehr User. a> Nun meine Frage ist, lässt sich das ganze mit Samba auf einem linux Server a> Beschleunigen und wann mit welcher Version. Prinzipiell ist zu sagen, wenn Du neu mit Samba beginnst, nimmst Du die neueste Stable-Release, derzeit 3.0.1. a> Wie muss die smb.conf aussehen für die Optimierung für Datenbanken! a> Welches Dateisystem empfiehlt sich? Ext3, Ext2, Reiserfs a> Und welches OS sollte ich nehmen. Der beste Weg, das herauszufinden, ist wohl, auf einem beliebigen Rechner eine gängige Linux-Distribution aufzusetzen, darauf Samba zu kompilieren, und das Ganze einfach mal zu testen. Ist es schneller als die alte Methode, kann man immer noch tunen. fs: Wohl am besten ReiserFS. Aber poste nochmals auf Englisch, dann erwischst Du auch viel mehr Leute, die mit Foxpro auf Samba Erfahrung haben. -- best regards, Stefan G. Weichinger mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] net: ../../../libraries/liblber/decode.c:644: ber_scanf: Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John H. wrote: | net groupmap modify ntgroup="Domain Admins" unixgroup=504 | | | net: ../../../libraries/liblber/decode.c:644: ber_scanf: | Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed. | | I was told this may be specific to ldap setup | with samba 3.0.0, but is fixed in later versions of samba. | | however, in 3.0.1, there is a far worse bug that makes | machines only available some of the time(i was told | this might be fixed in 3.0.2). | | I would just like to know if there is any way to get | around this problem without upgrading right now? You might want to try the 'net' command from 3.0.2rc1. cheers, jerry ~ -- ~ Hewlett-Packard- http://www.hp.com ~ SAMBA Team -- http://www.samba.org ~ GnuPG Key http://www.plainjoe.org/gpg_public.asc ~ "If we're adding to the noise, turn off this song" --Switchfoot (2003) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFAFV5+IR7qMdg1EfYRAg6iAJ0T6Zbk64p6wGiDe2fObYjDn9IqlwCgniQm FmyUyYHCbZX+hTT7mss1/0k= =eqwX -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smbmount won't work connecting to W2K on Samba 3
On Tue, 20 Jan 2004, Jon Hardy wrote: > Anybody know why smbmount won't mount a Windows share on my (Fedora) > machine? Keep getting: > 27009: session setup failed: ERRDOS - ERRnoaccess (Access denied.) > SMB connection failed > > HOWEVER, using smbclient , I CAN connect to the share, so the problem is not > password encryption, access rights, etc. > > Any help greatly appreciated. it all worked fine with Samba 2.2 on Mandrake > 9.2. Beginning to regret moving to Fedora/ Samba 3. > Especially considering Mandrake 9.2 ships with samba-3.0.0 (parallel-installable with no pain - you an remove samba-client-2.2.8a* and samba3-client-3.0.0-2mdk binaries will be used for all client functions) and mount.cifs for both samba and samba3. Maybe your Windows 2000 server requires signing/sealing or has been upgraded to 2003, in which case you should try mount.cifs (since smbclient in 3.0.0 suppots it, but smbfs does not, this most likely your problem). But, then I don't know if Fedora ships a kernel with cifs, so you'll likely have to compile it yourself. Regards, Buchan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 2.2.3a + WinXP
Hello, Andreas, Montag, 26. Jänner 2004, 18:33 you wrote: AV> Habe Samba 2.2.3a unter HP-UX 10.20 laufen. AV> (letzte Version die ich für 10.20 finden konnte) AV> Bisher lief alles bestens. AV> Jetzt muß ich XP Prof einbinden. AV> Geht ja, aber bei mehreren Programmen (z.B. Office 2003) AV> stürzt das Programm beim Speichern ab. AV> Geht das grundsätzlich mit einer so alten Version nicht AV> oder gibt es einen Workaround? Bitte mache Dir bewußt, daß dies eine englischsprachige Liste ist, Du erreichst bei weitem mehr User (und Antworten), wenn Du auf englisch postest. Was heißt "letzte Version die ich für 10.20 finden konnte" ? Installierst Du aus Packages? 2.2.3a ist sehr alt, seither hat sich so einiges getan ... Besonders hat es damals noch kein Win/Office XP/03 gegeben. Versuche doch, eine aktuellere Release zu kompilieren. -- best regards, Stefan G. Weichinger mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] My god, it full of "CLOSE_WAITS"
Hello samba people. I am having a odd problem related to winbindd. When I leave it running overnight on a quiet (not silent however) server I find that it generates a large number of CLOSE_WAIT state connections. 84 on a fairly quiet system in the last 18 hours. I can't seem to find any command that directly affects the number of CLOSE_WAITS. Below is my netstat listing. Any ideas would be helpful. I looked around but could find no reference to this problem. I am running in SECURITY = ADS mode. Thank you everyone for help. --Tim Laurence Versions of Software Samaba 3.0.1 Winbind 3.0.1 823-mailsrv:/# netstat --ip -ap Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp0 0 mailsrv:8192*:* LISTEN 235/agent.be tcp0 0 *:imaps *:* LISTEN 176/inetd tcp0 0 *:pop3s *:* LISTEN 176/inetd tcp0 0 mailsrv:10024 *:* LISTEN 171/amavisd (master tcp0 0 mailsrv:10025 *:* LISTEN 31759/master tcp0 0 *:netbios-ssn *:* LISTEN 3882/smbd tcp0 0 *:pop3 *:* LISTEN 176/inetd tcp0 0 *:imap2 *:* LISTEN 176/inetd tcp0 0 *:ssh *:* LISTEN 199/sshd tcp0 0 *:smtp *:* LISTEN 31759/master tcp0 0 *:445 *:* LISTEN 3882/smbd tcp0288 mailsrv:ssh 128.135.240.109:57166 ESTABLISHED 1157/sshd tcp1 0 mailsrv:36222 duplicity.c.:ldap CLOSE_WAIT 32020/winbindd tcp0 0 mailsrv:36218 duplicity.c.:ldap ESTABLISHED 32019/winbindd tcp1 0 mailsrv:35636 audacity.subcity.l:ldap CLOSE_WAIT 32019/winbindd tcp0 0 mailsrv:36247 darkcity.c.u:ldap ESTABLISHED 32019/winbindd tcp0 0 mailsrv:36246 darkcity.c.u:ldap ESTABLISHED 32019/winbindd tcp0 0 mailsrv:35599 darkcity.c.u:ldap ESTABLISHED 32019/winbindd tcp0 0 mailsrv:35598 darkcity.c.u:ldap ESTABLISHED 32019/winbindd tcp1 0 mailsrv:35592 darkcity.c.u:ldap CLOSE_WAIT 32019/winbindd tcp1 0 mailsrv:35589 darkcity.c.u:ldap CLOSE_WAIT 32019/winbindd tcp1 0 mailsrv:35591 darkcity.c.u:ldap CLOSE_WAIT 32019/winbindd tcp1 0 mailsrv:35612 darkcity.c.u:ldap CLOSE_WAIT 32019/winbindd tcp0 0 mailsrv:35601 darkcity.c.u:ldap ESTABLISHED 32019/winbindd tcp1 0 mailsrv:35629 darkcity.c.u:ldap CLOSE_WAIT 32019/winbindd similar line to above one repeated 76 times tcp1 0 mailsrv:35778 darkcity.c.u:ldap CLOSE_WAIT 32019/winbindd tcp1 0 mailsrv:36219 audacity.subcity.l:ldap CLOSE_WAIT 32019/winbindd tcp0 0 mailsrv:19534 duplicity.c.:grfs TIME_WAIT - udp0 0 mailsrv:32768 mailsrv:ntp ESTABLISHED 234/ntpd udp0 0 mailsrv:netbios-ns *:* 3880/nmbd udp0 0 *:netbios-ns*:* 3880/nmbd udp0 0 mailsrv:netbios-dgm *:* 3880/nmbd udp0 0 *:netbios-dgm *:* 3880/nmbd udp0 0 mailsrv:ntp *:* 222/ntpd udp0 0 mailsrv:ntp *:* 222/ntpd udp0 0 *:ntp *:* 222/ntpd -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 2.2.3a + WinXP
Habe Samba 2.2.3a unter HP-UX 10.20 laufen. (letzte Version die ich für 10.20 finden konnte) Bisher lief alles bestens. Jetzt muß ich XP Prof einbinden. Geht ja, aber bei mehreren Programmen (z.B. Office 2003) stürzt das Programm beim Speichern ab. Geht das grundsätzlich mit einer so alten Version nicht oder gibt es einen Workaround? Danke Andi -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba and Terminal Server Whitepaper
On Sun, Jan 25, 2004 at 08:55:27PM +1100, Tim Potter wrote: > On Sat, Jan 24, 2004 at 12:40:00PM -0800, Eric Roseme wrote: > > > Attached is a 500KB read-only .doc file with a Samba and Terminal Server > > whitepaper. I have tried to hit every known issue and all available > > workarounds. If anyone has comments or suggestions, let me know. JT > > has it, so it should end up in the next How-To. Sorry about the file > > format, but the .pdf was 2.5MB, which I thought was too big to post. > > Whoops - the attachment was stripped by mailman. Eric, can you post a > link to the document? 700KB (base64) is a little bit on the large side > for the list. Either that or load it in OpenOffice (Eric, it's free, you really should look into it ! :-) and then save as an OpenOffice document. They are typically *much* smaller than .doc files, plus they have the benefits of being cross-platform over Windows/Linux/MacOSX. Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbind authentication infrequent failure
Hi, I am running a RH9.0 server, using samba 2.2.7a. I use winbind to authenticate pop3 clients (Courier IMAP through authpam, but I think that's irrelevant). Users are defined in a NT4 domain. Sometimes, I get a NT_STATUS_PIPE_NOT_AVAILABLE error from pam_winbind.so. This is not very frequent, but at about 1000 users (read: many authentication request) it becomes a problem. Could anyone help track this down? If any further info should be needed, I will be glad to give it. Thank you in advance, Peter This message was sent using IMP, the Internet Messaging Program. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba and Terminal Server Whitepaper
Eric, I'd be interested in reading this. I'll even offer space to host it at www.swfglug.org if you'd like. You can email it directly to me and I'll make it available via http for everyone. -- Bert Rapp North Trail RV Center p 239.693.8200 f 239.693.8115 Quoting Tim Potter <[EMAIL PROTECTED]>: > On Sat, Jan 24, 2004 at 12:40:00PM -0800, Eric Roseme wrote: > > > Attached is a 500KB read-only .doc file with a Samba and Terminal Server > > whitepaper. I have tried to hit every known issue and all available > > workarounds. If anyone has comments or suggestions, let me know. JT > > has it, so it should end up in the next How-To. Sorry about the file > > format, but the .pdf was 2.5MB, which I thought was too big to post. > > Whoops - the attachment was stripped by mailman. Eric, can you post a > link to the document? 700KB (base64) is a little bit on the large side > for the list. > > > Tim. > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 2.2.8a mount-dir vanishes if windows-permissions are one-person only
Hi all, I'm new to this list, so please apologize for any inconveniences =) I just tried out to mount a windows-share which has permissions in a domain with Active-Directory for only one specific user. all others are not permitted to read, write or do anything else. using the command mount -t smbfs -o username=john.doe //wowbagger/windows_share /mnt/shares gives me no error message, accessing the mount-dir cd /mnt/shares works ok, but now ls -la errors out with ls: shares: Permission denied also ls -la'ing /mnt does not show the shares directory anymore. Now when I change the Permissions for the windows-share back to world-accessable, everything works as normal. Is that a known bug? Greetz, and thanks jan -- Jan Schenk Projektkoordination Technik weltderwunder.de Welt der Wunder GmbH Rosenheimer Straße 145 f D-81671 München t: +49 (89) 45 25 46 26 f: +49 (89) 45 25 47 47 m: +49 (163) 77 18 758 e: [EMAIL PROTECTED] web: www.weltderwunder.de -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba und *.DBF Foxpro Datenbanken
Hi List... Hab da echt ein Grosses Fragezeichen. Eventuell könnt Ihr mir ein wenig unter die arme greifen, wäre echt super. Situation. Der Kunde arbeitet mit einer Foxpro Datenbank die rund 700 MB per Module Gross ist. Komplet etwa 2.5 GB Das ganze wird im Moment noch auf einer MSchrott Server 2000 via Freigabe bezogen. Das Programm wird ebenfalls aus der gleichen Freigabe gestartet. Wenn er nun eine Project abfrage ausführt so muss er rund 2 min. auf das Ergebnis warten. Nun meine Frage ist, lässt sich das ganze mit Samba auf einem linux Server Beschleunigen und wann mit welcher Version. Wie muss die smb.conf aussehen für die Optimierung für Datenbanken! Welches Dateisystem empfiehlt sich? Ext3, Ext2, Reiserfs Und welches OS sollte ich nehmen. Bin froh um jede Hilfe. Andy -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] 2.6.1 kernel and acl support for samba3
Lancsár Roland wrote: where I can set acl support in the menuconfig? "make O=/home/name/build/kernel menuconfig" In the filesystems menu, under the filesystems you intend to use. If you are using ext3, I believe there's no option, ACLs are always supported. If you are using XFS, it's a submenu under the XFS menu item to turn on ACL support. I don't believe ACLs are supported on any other Linux filesystems at the present time. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] public share problem
Hi ! I have installed samba 3.0.1 as PDC with ldap backend - lets say DOM1. The problem is that users from DOM2 can't access public share on server - lets say server1, that is in DOM1. Ofcourse in smb.conf i have in server config and in share part. samba-log from server1: [2004/01/26 17:07:30, 0, pid=17921, effective(0, 0), real(0, 0)] auth/auth_domain.c:domain_client_validate(189) domain_client_validate: unable to validate password for user gnu in domain DOM1 to Domain controller \\PDC. Error was NT_STATUS_WRONG_PASSWORD. ps. sorry for my poor english :-/ greetz gnu_is_not_unix Jeśli chcesz wiedzieć co się stało z pewnym ciałem, zobacz doskonałą komedię pt. "CIAŁO". Najbardziej oczekiwana polska produkcja na VIDEO i DVD już w sklepach. http://klik.wp.pl/?adr=http%3A%2F%2Ffilm.wp.pl%2Fp%2Ffilm.html%3Fid%3D2174&sid=100 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Solaris 9 compile errors, samba 3.0.2rc1
I've tried compiling samba 3.0.2rc1, 'gcc -v' gives me - Reading specs from /usr/local/lib/gcc-lib/sparc-sun-solaris2.9/3.3.2/specs Configured with: ../configure --with-as=/usr/ccs/bin/as --with-ld=/usr/ccs/bin/ld --disable-nls Thread model: posix gcc version 3.3.2 Here are a few bits from my config.log that I probably need help with, tell me if you need the whole thing - In file included from configure:5980: /usr/include/security/pam_modules.h:17: error: parse error before '*' token /usr/include/security/pam_modules.h:24: error: parse error before '*' token /usr/include/security/pam_modules.h:31: error: parse error before '*' token /usr/include/security/pam_modules.h:38: error: parse error before '*' token /usr/include/security/pam_modules.h:45: error: parse error before '*' token /usr/include/security/pam_modules.h:59: error: parse error before '*' token /usr/include/security/pam_modules.h:71: error: parse error before '*' token /usr/include/security/pam_modules.h:74: error: parse error before '*' token /usr/include/security/pam_modules.h:83: error: parse error before '*' token #include configure:5970: result: no configure:5974: checking security/pam_modules.h presence configure:5981: gcc -E -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 conftest.c configure:5987: $? = 0 configure:6005: result: yes configure:6016: WARNING: security/pam_modules.h: present but cannot be compiled configure:6018: WARNING: security/pam_modules.h: check for missing prerequisite headers? configure:6020: WARNING: security/pam_modules.h: proceeding with the preprocessor's result configure:6023: checking for security/pam_modules.h configure:6030: result: yes configure:5943: checking security/_pam_macros.h usability configure:5952: gcc -c -O -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 conftest.c >&5 configure:5980:34: security/_pam_macros.h: No such file or directory configure:5955: $? = 1 configure: failed program was: #line 5945 "configure" In file included from configure:6501: /usr/include/netinet/ip.h:61: error: field `ip_src' has incomplete type /usr/include/netinet/ip.h:61: error: field `ip_dst' has incomplete type /usr/include/netinet/ip.h:134: error: field `ipt_addr' has incomplete type configure:6476: $? = 1 configure: failed program was: #line 6466 "configure" configure:6618:17: nss.h: No such file or directory configure:6628: $? = 1 configure: failed program was: #line 6617 "configure" #include configure:6611: result: no configure:6615: checking ns_api.h presence configure:6622: gcc -E -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 conftest.c configure:6618:20: ns_api.h: No such file or directory configure:6628: $? = 1 configure: failed program was: #line 6617 "configure" #include "confdefs.h" #include configure:6646: result: no configure:6664: checking for ns_api.h configure:6671: result: no configure:6584: checking sys/security.h usability configure:6593: gcc -c -O -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 conftest.c >&5 configure:6621:26: sys/security.h: No such file or directory configure:6596: $? = 1 configure: failed program was: #line 6586 "configure" There are more but they are pretty similar to these. Can you help? Thanks, Sapan -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] 2.6.1 kernel and acl support for samba3
Hi all, where I can set acl support in the menuconfig? "make O=/home/name/build/kernel menuconfig" Thanks! Regards, Roland -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] xbox accessing samba shares
I've got a network running XP, 98SE, a Xbox and linux running Samba 2.2.8a (most of the time all together). in the windows neighbourhood, everything is fine, every one see each other and right shares. Here is my problem : I'm running XBMP on the Xbox, which is capable to access SBM shares to play video and music. But when I'm watching a video located on my linux box, the streaming stops (and the console crashes) after exactly 8 minutes. It's only the case with my linux box. My important samba settings are, IMO : security = share encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 and no passwd file (the line smb passwd file = /etc/samba/private/smbpasswd is commented) the log produces regularly this line (with loglevel 3): nmbd/nmbd_responserecordsdb.c:find_response_record(235) find_response_record: response packet id 23310 received with no matching record. what is the problem ? -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] winbind and Solaris 9 with AD
I wonder if that is my problem too? How do you force it all to compile at 32 bit? -Original Message- From: Unix Service (ANTS) [mailto:[EMAIL PROTECTED] Sent: 25 January 2004 17:43 To: '[EMAIL PROTECTED]' Subject: RE: [Samba] winbind and Solaris 9 with AD Hi have resolved the problem as to why getent and samba authentication via winbind were not working. It's really stupid - we were building 64 bit and then copying the 64 bit winbind nss lib into /usr/lib - doh!. So getent ( 32 bit ) would try and load a 64 bit winbind nss lib which obviously could not work , and it was failing silently. Recompiling 32 bit version of library has done the trick and getent works ok and users do not need unix accounts to access samba areas. Will post full build procedure tomorrow and am now trying to get the logging on to the Solaris 9 host using AD account details. Isn't working yet - have redirected all auth.debug to a file and am getting the following: Jan 22 22:02:18 ants725 pam_winbind[21561]: [ID 614614 auth.notice] user 'test7' granted acces Jan 22 22:02:18 ants725 login[21561]: [ID 468494 auth.crit] login account failure: No account present for user i.e. the pam authentication is working but then login doen't appear to be able to find the user's account. Anyway - will have a play and post back if I get any further. thanks to everyone who replied to my post - sorry it was such an idiotic problem in the end. tim *** This communication (including any attachments) contains confidential information. If you are not the intended recipient and you have received this communication in error, you should destroy it without copying, disclosing or otherwise using its contents. Please notify the sender immediately of the error. Internet communications are not necessarily secure and may be intercepted or changed after they are sent. Abbey National Treasury Services plc does not accept liability for any loss you may suffer as a result of interception or any liability for such changes. If you wish to confirm the origin or content of this communication, please contact the sender by using an alternative means of communication. This communication does not create or modify any contract and, unless otherwise stated, is not intended to be contractually binding. Abbey National Treasury Services plc. Registered Office: Abbey National House, 2 Triton Square, Regents Place, London NW1 3AN. Registered in England under Company Registration Number: 2338548. Regulated by the Financial Services Authority (FSA). *** -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] smbclient got signal 11
I am using Samba 2.0.6 to backup NT shares to my SunOS server using Amanda, however, I frequently get a lot of error messages. Here are some examples: ? code 0 opening remote file \\marh1\\User Work Area\\Daily Slides\\2003\\Briefcopy.ppt (\\marh1\\User Work Area\\Daily Slides\\2003\\) ? ERRDOS - ERRbadfid listing marh12User Work Area* ? ERRDOS - ERRbadfid opening remote file \\marh1\\User Work Area\\Daily Slides\\2003\\Feb 03.msg (\\marh1\\User Work Area\\Daily Slides\\2003\\) ? Expected SMBtrans2 response, got command 0x2d ? Error reading file \\marh1\\Application Data\\db query results\\natrep01_upgrade.log : ERRDOS - ERRbadpath ? Didn't get entire file. size=481, nread=0 ? code 0 listing \\marh1\\* ? Expected SMBtrans2 response, got command 0x2d ? ERRDOS - ERRbadfile listing \\marh10\\* ? Expected SMBtrans2 response, got command 0x2d ? ERRDOS - ERRnoaccess opening remote file \\marh12\\Application Data\\ (\\marh12\\Application Data\\) ? ERRDOS - ERRbadpath listing \\marh12\\Application Data\\backups\\* ? ERRDOS - ERRbadpath opening remote file \\marh12\\Application Data\\Book1.xls (\\marh12\\Application Data\\) ? Expected SMBtrans2 response, got command 0x04 ? code 0 listing \\marh11\\* sendbackup: error [/usr/local/samba/bin/smbclient got signal 11] Can anyone tell me if these errors are related, and how I can get rid of them. (Everytime I get these errors, my backup fails!) Thanks, Julian -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] win 2k3 / XP Pro to Samba 3.0.1 open failed, result=-512
I'm having some confusing problems transferring approximately 16GB, in about 541,000 individual files. What is happening is that I am starting with a blank destination directory on a gentoo system running samba 3.0.1, and pulling from one of two windows systems. The problems come in that each time I use rsync (version 2.5.7) over samba to keep the data on the gentoo system's side in sync with the data on either windows system, I get a different number for the file count. Since i use rsync --delete --ignore-errors, files which rsync does not think are on the windows side, are deleted on the linux side, no matter what. Which files these are changes every time. For instance below, Techboy is a Windows XP Professional system with all service packs and critical updates. linux2 is a gentoo system running kernel 2.6.1-rc2 , though I have seen these problems with 2.4.22 , 2.4.23 , 2.6.0, and 2.6.1-rc1. linux2 runs samba 3.0.1. I mount the share hosted on Techboy somewhere on linux2, and then I use rsync to sync it up, the desination being linux2. After the initial rsync. I then do three passes. Each of these passes is the exact same rsync command, but notice each pass comes up with a different file count. The files transferred usually consist of many files which were deleted on the previous pass, which it now thinks do exist. Techboy -> linux2 over samba 3.0.1, using rsync Pass 1: Number of files: 540586 Number of files transferred: 1134 Total file size: 14943865918 bytes Pass 2: Number of files: 541065 Number of files transferred: 951 Total file size: 14958832400 bytes Pass 3: Number of files: 540892 Number of files transferred: 505 Total file size: 14953961276 bytes And below, trying to single out either rsync or samba as the possible problem, I use cp -R , using an empty destination. It was then that I noticed the errors below. This is only a small segment of the errors, there were many more. Techboy -> linux2 over samba, using cp –R Pass 1: smb_open: Animals/Animals 06.jpg open failed, result=-512 smb_add_request: request [d3ce8e80, mid=5091] timed out! smb_add_request: request [d3ce8e80, mid=4797] timed out! smb_add_request: request [d3ce8e80, mid=14811] timed out! smb_add_request: request [d3ce8e80, mid=9571] timed out! smb_add_request: request [d3ce8d80, mid=1125] timed out! smb_add_request: request [d3ce8e80, mid=10389] timed out! smb_add_request: request [d3ce8e80, mid=51222] timed out! smb_add_request: request [d3ce8d80, mid=25088] timed out! The second windows machine is a 2000 system. I see the same problems trying the same actions, using either rsync or cp . The exact rsync command that I am using is this: rsync -a -v --delete --ignore-errors --stats --progress /mnt/samba/clipart/ /mnt/rsync-backups/clipart/ Any ideas? I'm very eager to help. -- Loose bits sink chips. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] group&usermapings dom member
Just need some input here.. got a PDC + BDC running on 302rc1 (everything fine here...) now i'm busy to make an application server running in the same domain.. so i did "SECURITY = DOMAIN" .. (ok here to) i rdist the linux users&groups over the network.. and have mysql as backend.. when i ask for the acl's on a file or directory, i get "\\server\username" & "\\server\groupmap" but why don't i get "\\domain\username" & \\domain\groupmap" ?? the domain-member application server doesn't use the domain name to map to only server name when i switch it to BDC it's fine again ?? gues i'm doing something wrong here.. who's got a clue ..!??! L8r Collen (MLHJ) -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] user granted access, but still no shell prompt
Hi all! Again (and still) trying to log (or ftp) to a samba 3.0.1 on Solaris 9 Have the following output. I have read samba Digest, Vol 13, Issue 43, msg 7 and 10, have /bin/sh as the template shell But still no result... PLS, help! SIncerely yours, Mike Output of syslog - samba debug below. Jan 26 19:10:21 as08-tmn winbindd[1954]: [ID 702911 daemon.debug] [2004/01/26 19:10:21, 5] nsswitch/winbindd_pam.c:winbindd_pam_auth(196) Jan 26 19:10:21 as08-tmn winbindd[1954]: [ID 702911 daemon.debug] Plain-text authentication for user tmn+DorofeevMS returned NT_STATUS_OK (PAM: 0) Jan 26 19:10:21 as08-tmn pam_winbind[3314]: [ID 614614 auth.notice] user 'tmn+DorofeevMS' granted acces Jan 26 19:10:21 as08-tmn winbindd[1954]: [ID 702911 daemon.debug] [2004/01/26 19:10:21, 5] nsswitch/winbindd.c:winbind_client_read(464) Jan 26 19:10:21 as08-tmn winbindd[1954]: [ID 702911 daemon.debug] read failed on sock 26, pid 3314: EOF Jan 26 19:10:21 as08-tmn winbindd[1954]: [ID 702911 daemon.info] [2004/01/26 19:10:21, 3] nsswitch/winbindd_user.c:winbindd_getpwnam(113) Jan 26 19:10:21 as08-tmn winbindd[1954]: [ID 702911 daemon.info] [ 3314]: getpwnam tmn+DorofeevMS Jan 26 19:10:21 as08-tmn winbindd[1954]: [ID 702911 daemon.info] [2004/01/26 19:10:21, 3] nsswitch/winbindd_rpc.c:name_to_sid(290) Jan 26 19:10:21 as08-tmn winbindd[1954]: [ID 702911 daemon.info] rpc: name_to_sid name=DorofeevMS Jan 26 19:10:21 as08-tmn winbindd[1954]: [ID 702911 daemon.info] [2004/01/26 19:10:21, 3] nsswitch/winbindd_rpc.c:name_to_sid(299) Jan 26 19:10:21 as08-tmn winbindd[1954]: [ID 702911 daemon.info] name_to_sid [rpc] DorofeevMS for domain TMN -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba winbind secondary group problem
> This problem went away for me in Samba 3.0.1. A workaround in 3.0.0 is > to set > > winbind use default domain = no > > in the smb.conf. This did in fact solve the group resolution problem on samba-3.0.0-14.3E. I have not tried 3.0.1 yet but will this week and will post the results. Thanks very much Mike! > This problem went away for me in Samba 3.0.1. A workaround in 3.0.0 is > to set > > winbind use default domain = no > > in the smb.conf. > > Mike > > [EMAIL PROTECTED] wrote: > > Hello all, > > > > I am having some serious problems getting winbind to recognize secondary group > memberships. I have a samba server version samba-3.0.0-14.3E running on RHES > v.3. > > This is running on a 2x Xeon 2.4 Ghz IBM Server with 2G Ram. nscd is not > running. > > See below for smb.conf. > > > > cat /proc/version: Linux version 2.4.21-9.ELsmp > ([EMAIL PROTECTED]) (gcc version 3.2.3 20030502 (Red Hat > Linux 3.2.3-26)) #1 SMP Thu Jan 8 17:08:56 EST 2004 > > > > I have joined the domain with: net rpc join -U administrator -r PDC > > I successfully joined the domain. passdb backend = smbpasswd. wbinfo -u shows > all the domain users and wbinfo -g shows all the domain groups. ls -l shows the > correct domain user/group ownerships. Users can access shares owned by them or > their PRIMARY domain group. But when they try to access a share owned by a > secondary group that they belong to, it is access denied. The only way I can > get a secondary group to resolve is by putting a local unix group in /etc/group > and giving it the same GID as the corresponding domain group, then adding the > users to the local unix group. > > > > I have a RedHat 9 box with the same configuration that works the way it's > supposed to - ie - honoring secondary group memberships from the domain(of > course it is samba version samba-2.2.7a-8.9.0). > > > > This is a very critical situation for us. Any help/suggestions would be > greatly appreciated. > > > > Below is a snip from the samba log file(shows 3 supplementary groups even > though this user belongs to about 20 groups). > > > > [2004/01/20 19:17:44, 5] auth/auth_util.c:debug_unix_user_token(505) > > UNIX token of user 10504 > > Primary group is 10013 and contains 3 supplementary groups > > Group[ 0]: 10013 > > Group[ 1]: 10013 > > Group[ 2]: 10029 > > > > #Begin smb.conf > > passdb backend = smbpasswd > > #winbind configuration--> > > winbind separator = + > > winbind use default domain = yes > > template shell = /bin/false > > template homedir = /netarray/shares/home/%U > > idmap uid = 1-2 > > idmap gid = 1-2 > > #end winbind configuration-> > >security = domain > >password server = PDC BDC > >password level = 8 > >username level = 8 > > > > [Shared] > > available = yes > > browseable = yes > > comment = > > path = /netarray/shares/Shared > > public = no > > writable = yes > > valid users = @"Domain Users" @"Domain Admins" @"Global ITS" @d_users > @d_admins @g_its > > invalid users = internet1 internet2 hrtest > > > > > > > > -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Setting printer properties with prnadmin.dll (W2k ResourceKit)
> Hi, > > we are trying to set printer properties with the prnadmin.dll from the > windows 2000 resource kit. > > The printers are shared by a samba 2.2.8a, spoolingsystem is Cups. We are > using the windows drivers to process the job, the queues are set as > raw-queues on cups. > > For some models[1] setting the properties via a dumped file works without > any > Problems. > > For some other printermodels[2] it doesn't work, the properties are not > saved > on the samba-server. If we set the propertiess once by hand the > script works > and samba is storing the properties from the dumped file correctly. > > Any ideas where to look at to get it work with every model? > > 1: Lexmark Optra S1855 and T614 > 2: HP Laserjet 4100 and HP Laserjet 4050 > > regards, > -- > Stefan Klein, Systems Engineer For printers in 2, can't you use CUPS built in drivers, and use the windows postscript drivers? It works here (samba 2.2.8 debian, cups 1.1.someting, HP laserjet 4000N, xinXP / win2k / 98) albeit not using the resource kit. HTH Chris -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Setting printer properties with prnadmin.dll (W2k Resource Kit)
Hi, we are trying to set printer properties with the prnadmin.dll from the windows 2000 resource kit. The printers are shared by a samba 2.2.8a, spoolingsystem is Cups. We are using the windows drivers to process the job, the queues are set as raw-queues on cups. For some models[1] setting the properties via a dumped file works without any Problems. For some other printermodels[2] it doesn't work, the properties are not saved on the samba-server. If we set the propertiess once by hand the script works and samba is storing the properties from the dumped file correctly. Any ideas where to look at to get it work with every model? 1: Lexmark Optra S1855 and T614 2: HP Laserjet 4100 and HP Laserjet 4050 regards, -- Stefan Klein, Systems Engineer MATERNA GmbH Information & Communications Theodor-Heuss-Str. 59, 61118 Bad Vilbel, Germany phone: +49 6101 806 0 | fax: +49 6101 806 590 mobile: +49 160 12 108 338 | [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Adding printers drivers problem
Hi , it worked for me either , thanks. I wonder if you noticed extremely slowness while opening the printer properties ( from a client ) thanks -Original Message- From: Chris Aitken [mailto:[EMAIL PROTECTED] Sent: Monday, January 26, 2004 1:18 PM To: Stefano Colombo; [EMAIL PROTECTED] Subject: RE: [Samba] Adding printers drivers problem > Hi , >I'm trying to add printers drivers to a Samba server 2.2.8a . with > the APW ( add printer wizard method ) . >So I set up the PRINT$ share and subfolder. >Connected to the samba server with a 2000 ( server ) client and > tried to add printers driver using the wizard but got the error . >"unable to instal intel ,win nt or 2000 driver, operation could not > be completed ." > >I've read and followed the HOW-TO by Vernooij but still unable to > add printers drivers > >Can anyone help me with it >Thanks Hi Stefano I have had this issue too. What worked for me: Once the printer has been added locally, go to printer properties (for relevent printer), Choose the advanced tab, then clck on new driver, and select the relevent driver. Once this is completed (click apply on main properties window), you can then goto the sharing tab, and add additional drivers (for win9x etc). Of course, YMMV. HTH, Chris -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba and Oracle directory
Hello ! Does anyone already configured samba 3 with Oracle directory ? Is it possible ? Does anyone has any link to an existing schema ? Thanks for any comment :) -- Jérôme -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Adding printers drivers problem
> Hi , >I'm trying to add printers drivers to a Samba server 2.2.8a . with the > APW ( add printer wizard method ) . >So I set up the PRINT$ share and subfolder. >Connected to the samba server with a 2000 ( server ) client > and tried to > add printers driver using the wizard but got the error . >"unable to instal intel ,win nt or 2000 driver, operation could not be > completed ." > >I've read and followed the HOW-TO by Vernooij but still unable to add > printers drivers > >Can anyone help me with it >Thanks Hi Stefano I have had this issue too. What worked for me: Once the printer has been added locally, go to printer properties (for relevent printer), Choose the advanced tab, then clck on new driver, and select the relevent driver. Once this is completed (click apply on main properties window), you can then goto the sharing tab, and add additional drivers (for win9x etc). Of course, YMMV. HTH, Chris -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Adding printers drivers problem
Hi , I'm trying to add printers drivers to a Samba server 2.2.8a . with the APW ( add printer wizard method ) . So I set up the PRINT$ share and subfolder. Connected to the samba server with a 2000 ( server ) client and tried to add printers driver using the wizard but got the error . "unable to instal intel ,win nt or 2000 driver, operation could not be completed ." I've read and followed the HOW-TO by Vernooij but still unable to add printers drivers Can anyone help me with it Thanks -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba 2.2.8a + Locking + Record not available
--- Andrew Bartlett <[EMAIL PROTECTED]> wrote: > On Mon, 2004-01-26 at 18:28, shaf sum wrote: > > Hello everybody > > > > Since 1 week i saw at the client side displaying > > "Record not available" when our client try to > access > > the FoxPro database found on the file server. It > > happens every day in the morning before the users > > start working. I need to restart the server and > it > > becomes normal. > > > > Could someone please tell how could i resolve it? > Can > > we solve it through Locking and how > > You might want to ensure you have oplocks turned off > for your foxpro > files. Best option to use is 'veto oplocks' on the > foxpro file > extensions. But how can i do that. I need to modify /etc/samba/smb.conf and in the global section, i need to add veto oplocks files = *.dbf, *.cdx, *.sel ??? Thanks A+ S. __ Do you Yahoo!? Yahoo! SiteBuilder - Free web site building tool. Try it! http://webhosting.yahoo.com/ps/sb/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] RE: net: ../../../libraries/liblber/decode.c:644: ber_scanf: Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed.
In addition, I cannot add any groups with net groupmap add for instance... net groupmap add ntgroup="Domain Power Users" unixgroup="users" sid=S-1-5-21-4070452498-3149834983-2923667569-513 type=d adding entry for group Domain Power Users failed! the same with adding Domain Users, regardless of having ssid there(obviously none of this happens with smbpasswd smb.conf) debugging says this... Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=LAMP))] [2004/01/26 04:59:45, 2] lib/smbldap.c:smbldap_search_suffix(1066) smbldap_search_suffix: searching for:[(&(objectClass=sambaDomain)(sambaDomainName=LAMP))] [2004/01/26 04:59:45, 10] lib/smbldap.c:smbldap_open_connection(527) smbldap_open_connection: ldap://127.0.0.1 [2004/01/26 04:59:45, 2] lib/smbldap.c:smbldap_open_connection(623) smbldap_open_connection: connection opened [2004/01/26 04:59:45, 10] lib/smbldap.c:smbldap_connect_system(750) ldap_connect_system: Binding to ldap server ldap://127.0.0.1 as "cn=Manager,dc=INTRANET" [2004/01/26 04:59:45, 3] lib/smbldap.c:smbldap_connect_system(785) ldap_connect_system: succesful connection to the LDAP server [2004/01/26 04:59:45, 4] lib/smbldap.c:smbldap_open(836) The LDAP server is succesful connected [2004/01/26 04:59:45, 5] passdb/pdb_interface.c:make_pdb_methods_name(455) pdb backend ldapsam:ldap://127.0.0.1 has a valid init [2004/01/26 04:59:45, 5] passdb/pdb_interface.c:make_pdb_methods_name(431) Attempting to find an passdb backend to match guest (guest) [2004/01/26 04:59:45, 5] passdb/pdb_interface.c:make_pdb_methods_name(452) Found pdb backend guest [2004/01/26 04:59:45, 5] passdb/pdb_interface.c:make_pdb_methods_name(455) pdb backend guest has a valid init [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))] [2004/01/26 04:59:45, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_getgroup: Did not find group [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))] [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))] [2004/01/26 04:59:45, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_getgroup: Did not find group [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))] [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))] [2004/01/26 04:59:45, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_getgroup: Did not find group [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))] [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))] [2004/01/26 04:59:45, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_getgroup: Did not find group [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))] [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))] [2004/01/26 04:59:45, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_getgroup: Did not find group [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))] [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))] [2004/01/26 04:59:45, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_getgroup: Did not find group [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))] [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))] [2004/01/26 04:59:45, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1742) ldapsam_getgroup: Did not find group [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))] [2004/01/26 04:59:45, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1597) ldapsam_search_one_group: searching for:[(&(obje
[Samba] Trust clarification ...
Greetings ... If I setup a trust between my Samba 3.0.2rc1 domain and a Win2K3 AD domain, plus I enable kerbros which points to the Win2K3 server, would that let users in using my unix id? Because if I browse my Samba server from the Win2K3 server and access a share, I see that my Samba smbstatus reports the local unix user id. Thanks Mailed Lee -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Domain + Workgroup with same name: problem?
Hello everybody! I finally managed to set up a Samba 3.0.1 PDC that ran perfectly in the test-environment. Problems arose, when I installed it in a real bureau network. On a prepared w2k client that was already a domain member one could log on to the domain with the administrator's account, but trying to add other w2k clients failed with error msgs like: "Domain controller not found." That was strange, because the PDC was obviously there and the Administrator was already logged in and in the test environment adding a machine worked without any problems. After several hours search I found out, that there existed some (hidden in a back room.. :-\) XP Home clients that were members of a workgroup with the same name as the domain. They were already running when I introduced the Samba PDC into the network. When I switched them off and restarted Samba the PDC could be found sometimes but sometimes not. After messing around with what I took to be cached data on the Samba Server refering to WINS aso. I took the radical way and reinstalled Samba with the same configs but with a different domain name. That solved the problem for once. But it leaves a general problem: It looks as if you can render a PDC unusable if you introduce a machine into its network, that is in a workgoup of the same name as the domain. So my question is: How do I configure the Samba PDC that clients within the same network know who is the master of the universe and who is just an impostor? Especially the PDC itself should not get confused about this! The relevant entries (I think) in my smb.conf are: domain master = Yes domain logons = Yes preferred master = Yes wins support = Yes os leve = 64 greetings Alexander -- --- agoeres _at_ lieblinx.net tel.: +49 (0)30 / 61 20 26 87 fax: +49 (0)30 / 61 20 26 89 --- lieblinxNET we do software a Marwood & Thiele GbR --- reichenberger straße 125 10999 Berlin http://lieblinx.net --- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Remote Citrix Auth Pass-Through ...
Greetings ... Thanks again for your responce ... it currently feels like I am banding my head against a M$ Wall ... Now if we use winbind, we can't setup the Linux servers as PDC. This is incorrect. Winbind runs perfectly fine against Samba 3.0. No, what I mean, if you enable "domain logons = yes", getent passwd does not return any users from the AD system, which means I can't have a remote Samba Server acting as PDC to host the netlogon service ... That is a limitation of winbind, and with out the Samba servers running as PDC's I can't get the local workstations as the remote sites to process login scripts. Logon scripts for their own domain, or logon scripts for trusted domains? For the domain that is locale to the user ... Which would be a Samba server at a remote site ... I could give up on the idea of remote sites local workstations automaticly processing login scripts, because that is the only real thing I am looking for. I could manually add login scripts to all the workstations, or I could work out something with trusts. I have been trying setuping up a trust both ways between AD and Samba, but TS will not let any of my users login from Samba. How about you sort out your terminal-services issues first. I think you might be being bitten by generic Samba/TS interactions, and are just making your life more difficult by looking for the most complex solution. I am not sure that is the problem, for a test, I have been able to Join a Win2K3 TS system to my lovely Samba domain and everything works fine. No problem there. In a Samba domain, win2k TS clients need Samba 3.0.1 to store the right extra information. But it sounds like you don't want to run a Samba PDC, except for the fact that it would allow you to serve up a logon script. Can't AD do that as well, if not better? My real problem is a few $h!ty application which I have no control over. iScala, a finance system which uses M$SQL2K, tied very closley into AD. And then Citrix or maybe TS ... I am currently tring to create a trust between Samba and AD domain so that users in my Samba domain have access to AD resources, which currently means access to iScala. But I am still going to have to fine a way to get my remote Samba users to access Citrix via Pass-Through-Auth, but from what have seen, I might not have may options left. Thanks Mailed Lee -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] net: ../../../libraries/liblber/decode.c:644: ber_scanf: Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed.
net groupmap modify ntgroup="Domain Admins" unixgroup=504 net: ../../../libraries/liblber/decode.c:644: ber_scanf: Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed. I was told this may be specific to ldap setup with samba 3.0.0, but is fixed in later versions of samba. however, in 3.0.1, there is a far worse bug that makes machines only available some of the time(i was told this might be fixed in 3.0.2). I would just like to know if there is any way to get around this problem without upgrading right now? ___ No banners. No pop-ups. No kidding. Introducing My Way - http://www.myway.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Strange problems with profiles
Hi I use 2 samba servers (3.0.2rc1). One as PDC the other as BDC. Both are using ldap (sambaSamAccount) as backend. If I set profile path only in smb.conf every user gets an error message when loading a profile: Wrong path syntax. The clients did a connection to the server. If I set sambaProfilePath Attribute to the same value as profile path in smb.conf for a user this user is able to log in and load the profile most times. Most times it work bit not everytime. Path and settings for the profile share are still the same. I have this problem since 3.0.0 with different servers at different locations. Maybe I'm using wrong permission. Here's the relevant part of my smb.conf. Regards Tilo os level = 200 local master = yes bind interfaces only = true security = user encrypt passwords = yes null passwords = yes min password length = 0 domain logons = yes preferred master = yes domain master = yes logon script = %I.bat logon drive = h: logon home = "\\server\%U" logon path = "\\server\profile" time server = yes dead time = 15 kernel oplocks = yes mangle case = yes case sensitive = no default case = lower preserve case = yes short preserve case = yes name resolve order = wins bcast host lmhosts printing = cups load printers = yes username map = /etc/samba/smbusers nt acl support = yes log level = 1 max log size = 10 use sendfile = no large readwrite = yes socket options = TCP_NODELAY SO_KEEPALIVE SO_SNDBUF=8192 SO_RCVBUF=8192 utmp = yes passdb backend = ldapsam:ldap://localhost guest algorithmic rid base = 1000 printing = cups printcap name = cups load printers = yes unix charset = ISO-8859-15 unicode = yes display charset = UTF8 dos charset = ISO-8859-15 unix extensions = yes ldap admin dn = uid=wilma2,dc=my-domain ldap suffix = dc=my-domain ldap machine suffix = ou=machines ldap group suffix = ou=groups ldap idmap suffix = ldap user suffix= ou=people ldap passwd sync = yes idmap gid = 3-4 idmap uid = 3-4 [netlogon] comment = The domain logon service veto files = // path = /samba/netlogon create mode = 0600 directory mode = 0700 public = no writeable = no browseable = no root preexec = /samba/netlogon/findgroup %I %u %L root postexec = /etc/samba/quota_warn.sh %U %m oplocks = no level2 oplocks = no use sendfile = no [profile] comment = Hier wird das Benutzerprofil gespeichert path = /home/%g/%u/profile writeable = yes browseable = no create mask = 0711 directory mask = 0711 dos filemode = no force security mode = 00 hide files = /desktop.ini/Desktop.ini/ map system = Yes map hidden = Yes profile acls = yes -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] after switching to ldap, cannot net groupmap stuff-FIXED
ok, had to remove quotes from ldap suffix = "dc=INTRANET" thanks! --- On Mon 01/26, Andrew Bartlett < [EMAIL PROTECTED] > wrote: From: Andrew Bartlett [mailto: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Date: Mon, 26 Jan 2004 19:23:25 +1100 Subject: Re: [Samba] after switching to ldap, cannot net groupmap stuff On Mon, 2004-01-26 at 18:48, John H. wrote:> ok, i switched to ldap and my users can login and what not, but i cannot use net groupmap for groups anymore. everything else seems to work ok? if i cannot map groups like this(for instance, unix users group to Domain Power Users) anymore, how do i do it?> > If i do net groupmap list, I get> > net groupmap list> [2004/01/26 01:46:44, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2048)> ldapsam_setsamgrent: LDAP search failed: Invalid DN syntaxWhat is in your smb.conf for ldap settings?Andrew Bartlett-- Andrew Bartlett [EMAIL PROTECTED]Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED]Student Network Administrator, Hawker College [EMAIL PROTECTED]http://samba.org http://build.samba.org http://hawkerc.netAttachment: signature.asc (0.19KB) ___ No banners. No pop-ups. No kidding. Introducing My Way - http://www.myway.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] after switching to ldap, cannot net groupmap stuff
Le Mon, Jan 26, 2004 at 03:28:29AM -0500, John H. a ecrit: > ldap suffix = "dc=INTRANET" You must have ldap suffix = dc=INTRANET -- Jérôme -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] after switching to ldap, cannot net groupmap stuff
btw, i tried removing dc=INTRANET from user,group, and machine suffix, same error --- On Mon 01/26, John H. < [EMAIL PROTECTED] > wrote: From: John H. [mailto: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Date: Mon, 26 Jan 2004 03:28:29 -0500 (EST) Subject: Re: [Samba] after switching to ldap, cannot net groupmap stuff #ldappassdb backend = ldapsam:ldap://127.0.0.1ldap suffix = "dc=INTRANET"ldap machine suffix = ou=People,dc=INTRANETldap passwd sync = yesldap user suffix = ou=People,dc=INTRANETldap group suffix = ou=Group,dc=INTRANETldap admin dn = "cn=Manager,dc=INTRANET"ldap ssl = noidmap backend = ldapsam:ldapsam://127.0.0.1passwd chat debug = Yespasswd program =/usr/local/sbin/smbldap-passwd -o %upasswd chat = *new*password* %n\n *new*password:* %n\ *successfully*socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192add machine script = /usr/local/sbin/smbldap-useradd -w %madd user script = /usr/local/sbin/smbldap-useradd -a %udelete user script = /usr/local/sbin/smbldap-userdel %uadd group script = /usr/local/sbin/smbldap-groupadd %gdelete group script = /usr/local/sbin/smb ldap-groupdel %gadd user to group script = /usr/local/sbin/smbldap-groupmod -m %u %gdelete user from group script = /usr/local/sbin/smbldap-groupmod -x %u $set primary group script = /usr/local/sbin/smbldap-usermod -G %g %u --- On Mon 01/26, Andrew Bartlett < [EMAIL PROTECTED] > wrote:From: Andrew Bartlett [mailto: [EMAIL PROTECTED]To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]Date: Mon, 26 Jan 2004 19:23:25 +1100Subject: Re: [Samba] after switching to ldap, cannot net groupmap stuffOn Mon, 2004-01-26 at 18:48, John H. wrote:> ok, i switched to ldap and my users can login and what not, but i cannot use net groupmap for groups anymore. everything else seems to work ok? if i cannot map groups like this(for instance, unix users group to Domain Power Users) anymore, how do i do it?> > If i do net groupmap list, I get> > net groupmap list> [2004/01/26 01:46:44, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2048)> ldapsam_setsamgrent: LDAP search failed: Invalid DN syntaxWhat is in your smb.conf for ldap settings?Andrew Bartlett-- Andrew Bartlett [EMAIL PROTECTED]Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED]Student Network Administrator, Hawker College [EMAIL PROTECTED]http://samba.org http://build.samba.org http://hawkerc.netAttachment: signature.asc (0.19KB)___No banners. No pop-ups. No kidding.Introducing My Way - http://www.myway.com-- To unsubscribe from this list go to the following URL and read theinstructions: http://lists.samba.org/mailman/listinfo/samba ___ No banners. No pop-ups. No kidding. Introducing My Way - http://www.myway.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] re-post [ machine group and pwdump.exe
Anyone dare to explain? For #2 I'm not using rpc vampire because it can't migrate hash password. Hi, 1. I want to migrate NT to Samba 3 domain without needing to rejoin all machine (using same domain name and SID). just curious, machine account should belong to what group sid? does it matter if belong to any value? 2. I just examine output of pwdump, some of member domain or even NT BDC is has "*" in password field which means this account was disabled. I've verified that machine is still valid member domain/bdc. it can browse network and do some administrative task. Any explanation? --beast -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] after switching to ldap, cannot net groupmap stuff
#ldap passdb backend = ldapsam:ldap://127.0.0.1 ldap suffix = "dc=INTRANET" ldap machine suffix = ou=People,dc=INTRANET ldap passwd sync = yes ldap user suffix = ou=People,dc=INTRANET ldap group suffix = ou=Group,dc=INTRANET ldap admin dn = "cn=Manager,dc=INTRANET" ldap ssl = no idmap backend = ldapsam:ldapsam://127.0.0.1 passwd chat debug = Yes passwd program =/usr/local/sbin/smbldap-passwd -o %u passwd chat = *new*password* %n\n *new*password:* %n\ *successfully* socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 add machine script = /usr/local/sbin/smbldap-useradd -w %m add user script = /usr/local/sbin/smbldap-useradd -a %u delete user script = /usr/local/sbin/smbldap-userdel %u add group script = /usr/local/sbin/smbldap-groupadd %g delete group script = /usr/local/sbin/smbldap-groupdel %g add user to group script = /usr/local/sbin/smbldap-groupmod -m %u %g delete user from group script = /usr/local/sbin/smbldap-groupmod -x %u $ set primary group script = /usr/local/sbin/smbldap-usermod -G %g %u --- On Mon 01/26, Andrew Bartlett < [EMAIL PROTECTED] > wrote: From: Andrew Bartlett [mailto: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Date: Mon, 26 Jan 2004 19:23:25 +1100 Subject: Re: [Samba] after switching to ldap, cannot net groupmap stuff On Mon, 2004-01-26 at 18:48, John H. wrote:> ok, i switched to ldap and my users can login and what not, but i cannot use net groupmap for groups anymore. everything else seems to work ok? if i cannot map groups like this(for instance, unix users group to Domain Power Users) anymore, how do i do it?> > If i do net groupmap list, I get> > net groupmap list> [2004/01/26 01:46:44, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2048)> ldapsam_setsamgrent: LDAP search failed: Invalid DN syntaxWhat is in your smb.conf for ldap settings?Andrew Bartlett-- Andrew Bartlett [EMAIL PROTECTED]Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED]Student Network Administrator, Hawker College [EMAIL PROTECTED]http://samba.org http://build.samba.org http://hawkerc.netAttachment: signature.asc (0.19KB) ___ No banners. No pop-ups. No kidding. Introducing My Way - http://www.myway.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] after switching to ldap, cannot net groupmap stuff
On Mon, 2004-01-26 at 18:48, John H. wrote: > ok, i switched to ldap and my users can login and what not, but i cannot use net > groupmap for groups anymore. everything else seems to work ok? if i cannot map > groups like this(for instance, unix users group to Domain Power Users) anymore, how > do i do it? > > If i do net groupmap list, I get > > net groupmap list > [2004/01/26 01:46:44, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2048) > ldapsam_setsamgrent: LDAP search failed: Invalid DN syntax What is in your smb.conf for ldap settings? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] samba 2.2.8a + Locking + Record not available
On Mon, 2004-01-26 at 18:28, shaf sum wrote: > Hello everybody > > Since 1 week i saw at the client side displaying > "Record not available" when our client try to access > the FoxPro database found on the file server. It > happens every day in the morning before the users > start working. I need to restart the server and it > becomes normal. > > Could someone please tell how could i resolve it? Can > we solve it through Locking and how You might want to ensure you have oplocks turned off for your foxpro files. Best option to use is 'veto oplocks' on the foxpro file extensions. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3 + Exchange 5.5 SP4
On Mon, 2004-01-26 at 19:04, GUENIER, Laurent wrote: > We want to migrate our Novell 4.11 server to a Redhat Enterprise Server 3.0 > with Samba 3 and Openldap. > > Our configuration is the following : > > - 1 Windows NT 4.0 server with Exchange 5.5 SP4 as PDC > - 1 Windows NT 4.0 server as BDC > - 1 Novell 4.11 server as file/print server > > We want to change the Novell server by a linux server (RH EL 3) and put it > as the PDC with Openldap. > The 2 Windows NT 4.0 servers will be BDC's. > We want to have a single account base for the domain with Openldap. > > Is it possible to do that , or is there a better way ?? It is not possible to have an NT4 BDC at this stage (and it's not something we are likely to be able to support soon). Did you intend to keep the Exchange server? Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3 + Exchange 5.5 SP4
We want to migrate our Novell 4.11 server to a Redhat Enterprise Server 3.0 with Samba 3 and Openldap. Our configuration is the following : - 1 Windows NT 4.0 server with Exchange 5.5 SP4 as PDC - 1 Windows NT 4.0 server as BDC - 1 Novell 4.11 server as file/print server We want to change the Novell server by a linux server (RH EL 3) and put it as the PDC with Openldap. The 2 Windows NT 4.0 servers will be BDC's. We want to have a single account base for the domain with Openldap. Is it possible to do that , or is there a better way ?? Thanks. GUENIER Laurent Responsable Informatique Corona Medical SAS Tél : 02 47 88 58 94 Fax : 02 47 88 59 30 [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] after switching to ldap, cannot net groupmap stuff
ok, i switched to ldap and my users can login and what not, but i cannot use net groupmap for groups anymore. everything else seems to work ok? if i cannot map groups like this(for instance, unix users group to Domain Power Users) anymore, how do i do it? If i do net groupmap list, I get net groupmap list [2004/01/26 01:46:44, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2048) ldapsam_setsamgrent: LDAP search failed: Invalid DN syntax [2004/01/26 01:46:44, 0] passdb/pdb_ldap.c:ldapsam_enum_group_mapping(2113) ldapsam_enum_group_mapping: Unable to open passdb if i try to add a group and map, i get the following [2004/01/26 01:37:17, 0] passdb/pdb_ldap.c:ldapsam_search_one_group(1612) ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invali d DN syntax)ldapsam_search_one_gr +> oup: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_search_one_group: Problem during the LDAP search: LDAP error: invalid DN (Invalid DN syntax)ldapsam_s earch_one_group: Problem during t +> adding entry for group Domain Power Users failed! ___ No banners. No pop-ups. No kidding. Introducing My Way - http://www.myway.com -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] samba 2.2.8a + Locking + Record not available
Hello everybody Since 1 week i saw at the client side displaying "Record not available" when our client try to access the FoxPro database found on the file server. It happens every day in the morning before the users start working. I need to restart the server and it becomes normal. Could someone please tell how could i resolve it? Can we solve it through Locking and how Thanks A+ __ Do you Yahoo!? Yahoo! SiteBuilder - Free web site building tool. Try it! http://webhosting.yahoo.com/ps/sb/ -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
